$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: h/Aazgi134Hgapw4ie/Zrhhy1LCP5oe+7JiRfmPnXgo= Subject key identifier: D3:B6:81:41:DE:32:62:32:4A:91:94:9F:23:89:DE:15:3E:75:68:0A Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 129F Signing time: Wed 02 Apr 2025 18:04:18 +0000 Manifest this update: Wed 02 Apr 2025 18:04:17 +0000 Manifest next update: Wed 09 Apr 2025 18:04:17 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: cU+eKo6aLX1TFMJ+A3WrGo4jZqzELQ3hncH4fjg+zMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 18:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542 Validity Not Before: Apr 2 18:04:17 2025 GMT Not After : Apr 9 18:04:17 2025 GMT Subject: CN=67ed7c21-409c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e4:ab:d4:54:e5:fe:69:f9:04:62:86:79:24: fb:c5:32:ca:35:21:92:f6:17:18:4e:b0:99:88:d3: 5c:bc:52:68:4a:4d:c6:35:12:55:c2:45:ae:02:eb: 5e:79:bf:8a:a1:b1:ff:c8:ae:ab:9a:de:fe:4f:98: c1:59:2a:e3:66:d1:f3:e6:50:46:9b:05:a6:be:72: d8:a9:ee:d3:2e:ec:9a:61:bb:78:9c:02:10:45:4a: 1c:7f:a1:c0:3b:2b:8c:ab:dc:ac:ba:15:56:83:73: 65:c6:b6:29:17:dc:71:71:8c:5e:68:00:2a:51:8c: 1b:57:16:6b:36:5d:65:fd:ad:a6:8f:90:51:de:86: fd:55:fd:73:af:e3:11:d3:d7:0a:80:15:7d:cf:21: e5:ba:8a:46:ed:77:40:6e:55:d5:e7:2f:06:5d:ae: f2:01:83:af:41:2a:1d:9b:ea:1d:52:13:d7:3d:52: d1:e4:25:38:81:05:2b:0c:b5:e5:c3:43:91:f6:57: f8:67:8d:42:21:29:5e:7f:fe:ae:3f:f0:28:08:b4: 2d:f5:78:28:a5:71:b3:c5:0f:ca:ad:64:c9:7a:f9: 2d:43:90:44:be:8f:0a:60:54:f5:58:5e:f0:51:66: 7f:40:c0:ca:4d:55:d7:35:eb:56:5a:7e:2a:2b:4f: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B6:81:41:DE:32:62:32:4A:91:94:9F:23:89:DE:15:3E:75:68:0A X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9c:8a:9f:97:7d:b9:bc:1c:32:15:94:fe:28:30:4c:5d:cb: 5f:b9:78:f4:94:ba:a6:27:b5:0e:fb:47:41:4a:d0:d8:b6:40: 53:31:74:22:ee:e0:a9:9e:de:d7:16:e8:43:38:56:72:85:4a: de:56:70:1e:30:8d:93:84:99:c0:c2:07:fc:78:19:d0:a9:2c: ef:d2:de:94:84:c0:97:fe:66:fe:43:fe:55:b4:07:76:43:39: 30:0f:22:30:85:51:66:c8:c8:39:75:20:f9:7a:dd:d6:4a:c6: da:81:94:70:57:c3:5e:aa:b3:0e:8d:08:73:89:a3:e9:1f:60: 80:21:13:ff:80:e7:97:89:46:65:d7:42:d0:71:38:ce:01:46: 4a:71:79:19:29:e9:63:64:c2:5b:5d:83:e9:ec:1b:ee:97:2d: c2:d3:78:fa:cd:54:d9:90:ea:0b:0b:14:d0:18:0f:e8:dd:78: 99:cb:25:53:2a:31:7b:b1:96:35:dc:ec:c1:b1:31:85:f8:c4: d2:02:52:ca:b4:63:db:4a:ca:73:a8:c8:3e:af:70:39:16:0e: bb:ab:6d:58:cf:6e:21:4c:d0:0e:90:19:b7:be:2f:b4:b0:87: 81:15:b2:38:3b:45:8a:99:de:15:96:92:c2:b0:5b:28:28:09: b3:08:ae:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjUwNDAyMTgwNDE3WhcNMjUwNDA5MTgwNDE3WjAYMRYwFAYD VQQDEw02N2VkN2MyMS00MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+Sr1FTl/mn5BGKGeST7xTLKNSGS9hcYTrCZiNNcvFJoSk3GNRJVwkWuAute eb+KobH/yK6rmt7+T5jBWSrjZtHz5lBGmwWmvnLYqe7TLuyaYbt4nAIQRUocf6HA OyuMq9ysuhVWg3NlxrYpF9xxcYxeaAAqUYwbVxZrNl1l/a2mj5BR3ob9Vf1zr+MR 09cKgBV9zyHluopG7XdAblXV5y8GXa7yAYOvQSodm+odUhPXPVLR5CU4gQUrDLXl w0OR9lf4Z41CISlef/6uP/AoCLQt9XgopXGzxQ/KrWTJevktQ5BEvo8KYFT1WF7w UWZ/QMDKTVXXNetWWn4qK090BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNO2gUHe MmIySpGUnyOJ3hU+dWgKMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBonIqfl325vBwyFZT+KDBMXctfuXj0lLqmJ7UO+0dBStDYtkBTMXQi 7uCpnt7XFuhDOFZyhUreVnAeMI2ThJnAwgf8eBnQqSzv0t6UhMCX/mb+Q/5VtAd2 QzkwDyIwhVFmyMg5dSD5et3WSsbagZRwV8NeqrMOjQhziaPpH2CAIRP/gOeXiUZl 10LQcTjOAUZKcXkZKeljZMJbXYPp7Bvuly3C03j6zVTZkOoLCxTQGA/o3XiZyyVT KjF7sZY13OzBsTGF+MTSAlLKtGPbSspzqMg+r3A5Fg67q21Yz24hTNAOkBm3vi+0 sIeBFbI4O0WKmd4VlpLCsFsoKAmzCK4S -----END CERTIFICATE-----Generated at Fri Apr 4 18:34:01 2025 by rpki-client