$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: nQAvcS1Ku1jvtvJd2hB13DJ8TPt78x5my0yHKg5XDt8= Subject key identifier: C7:03:36:F8:52:1A:F4:1E:C0:DF:1F:A2:47:19:E0:9B:0C:85:28:BD Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 12DE Signing time: Wed 14 May 2025 18:06:20 +0000 Manifest this update: Wed 14 May 2025 18:06:19 +0000 Manifest next update: Wed 21 May 2025 18:06:19 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: CjsIuaZ69mTWT1/pPmrnX91cpUKhax+1bWabSN3JQGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Validity Not Before: May 14 18:06:19 2025 GMT Not After : May 21 18:06:19 2025 GMT Subject: CN=6824db9c-dad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:fb:e9:19:92:b7:41:23:19:89:cc:70:a2: 71:c2:3c:5c:5a:5c:b4:71:a4:26:1a:c9:3d:8b:b9: f6:42:03:fd:1a:2b:3a:72:56:03:01:0b:08:0c:96: 02:ed:4f:ad:2e:b3:1c:a2:d8:39:ad:46:58:72:01: 2c:eb:fd:f5:5f:b2:71:f0:ab:17:7d:fd:91:c3:98: 00:1f:85:02:26:ba:43:a7:a8:e3:36:38:92:82:3c: 41:b2:54:e0:28:4c:b9:65:8c:44:f8:7c:a7:f4:6e: d1:2d:25:c0:f4:23:3a:6d:d3:06:1c:59:3a:a3:50: 9c:d3:5e:7f:bb:9d:11:d1:66:33:c5:6b:7a:4e:b1: 31:59:18:a3:a3:21:00:2e:48:f4:c3:69:0e:6c:ab: b1:07:d4:8f:5d:9a:8a:52:a9:dc:a3:3e:6a:30:6b: 66:fd:03:a5:c1:c6:d8:b7:7f:2e:19:75:99:c0:72: c7:c2:11:3b:8c:ed:52:d1:a4:e7:28:3e:ad:cd:df: 0c:99:44:89:68:20:0d:66:99:39:a5:f0:a1:dd:d2: e5:6c:88:33:78:16:5d:48:c0:ce:38:6f:33:19:2c: ac:32:bd:c7:d8:32:fa:57:15:24:9d:0a:dd:94:67: 87:ab:e8:22:e5:14:b4:a8:a0:f5:6c:ef:84:2b:21: 97:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:03:36:F8:52:1A:F4:1E:C0:DF:1F:A2:47:19:E0:9B:0C:85:28:BD X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b7:a7:3e:81:5e:86:c8:0f:3c:25:ba:72:34:78:66:2e:71: c8:e6:cb:2a:18:03:03:11:62:12:93:1e:68:52:56:f6:7d:46: b3:cb:02:dc:27:4f:68:f7:25:ed:96:76:59:41:95:ec:cd:81: 73:ce:5e:5c:a9:8c:b7:f6:ea:bb:0f:d2:df:02:8e:10:11:3c: 19:9e:54:82:c9:c3:c4:2c:6f:35:1a:12:ee:50:62:8e:0b:47: 41:92:76:47:84:8c:40:77:8f:01:7f:5c:ff:17:f6:be:cc:24: 78:c4:a9:8a:56:fa:a7:d7:ba:a0:28:ee:fc:2b:2a:16:5c:0f: b9:56:f6:ab:b9:ed:68:38:16:24:ee:98:d0:cb:d0:c4:e9:fc: 5c:3f:e9:33:9b:0c:13:83:0b:a8:17:92:a6:02:13:97:84:15: 7f:14:9d:83:f4:65:ee:f0:3a:82:77:00:7d:85:f8:23:27:3e: 43:e7:d7:41:07:7d:23:b2:bf:22:87:1f:80:14:d0:a9:ac:d8: 8a:33:d4:b0:f9:ea:e7:5d:e6:b4:f7:7d:ba:19:6e:ce:0a:b0: cc:a6:3f:67:68:82:48:13:6e:0b:2b:67:8f:89:25:d1:0b:89: 1b:63:6f:45:62:ec:83:18:a4:58:1a:38:88:42:33:6d:73:8c: 2b:bc:2c:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjUwNTE0MTgwNjE5WhcNMjUwNTIxMTgwNjE5WjAYMRYwFAYD VQQDEw02ODI0ZGI5Yy1kYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tH76RmSt0EjGYnMcKJxwjxcWly0caQmGsk9i7n2QgP9Gis6clYDAQsIDJYC 7U+tLrMcotg5rUZYcgEs6/31X7Jx8KsXff2Rw5gAH4UCJrpDp6jjNjiSgjxBslTg KEy5ZYxE+Hyn9G7RLSXA9CM6bdMGHFk6o1Cc015/u50R0WYzxWt6TrExWRijoyEA Lkj0w2kObKuxB9SPXZqKUqncoz5qMGtm/QOlwcbYt38uGXWZwHLHwhE7jO1S0aTn KD6tzd8MmUSJaCANZpk5pfCh3dLlbIgzeBZdSMDOOG8zGSysMr3H2DL6VxUknQrd lGeHq+gi5RS0qKD1bO+EKyGXBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcDNvhS GvQewN8fokcZ4JsMhSi9MB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKt6c+gV6GyA88JbpyNHhmLnHI5ssqGAMDEWISkx5oUlb2fUazywLc J09o9yXtlnZZQZXszYFzzl5cqYy39uq7D9LfAo4QETwZnlSCycPELG81GhLuUGKO C0dBknZHhIxAd48Bf1z/F/a+zCR4xKmKVvqn17qgKO78KyoWXA+5Vvarue1oOBYk 7pjQy9DE6fxcP+kzmwwTgwuoF5KmAhOXhBV/FJ2D9GXu8DqCdwB9hfgjJz5D59dB B30jsr8ihx+AFNCprNiKM9Sw+ernXea09326GW7OCrDMpj9naIJIE24LK2ePiSXR C4kbY29FYuyDGKRYGjiIQjNtc4wrvCw+ -----END CERTIFICATE-----Generated at Fri May 16 19:11:08 2025 by rpki-client