$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: 19u0ZmlfRMSPBMz0wDjDSgODjtNfMSCDdjs2oW5OP/c= Subject key identifier: 56:50:23:EE:DC:A1:44:EA:0F:E8:ED:B8:02:27:D1:62:FB:88:A0:C3 Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 12F3 Signing time: Fri 30 May 2025 18:08:42 +0000 Manifest this update: Fri 30 May 2025 18:08:42 +0000 Manifest next update: Fri 06 Jun 2025 18:08:42 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: bDHEvnfpqavi/PHp7uX915exnq8DHA3CZdaEzA+k+JI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Validity Not Before: May 30 18:08:42 2025 GMT Not After : Jun 6 18:08:42 2025 GMT Subject: CN=6839f42a-a3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:03:94:40:0e:af:83:af:fe:76:4b:98:47:4d: 2f:3d:f2:01:ce:ea:c4:5a:1a:3f:93:b2:11:32:ba: 92:8e:23:f6:bc:e8:e3:32:b4:4b:3f:2f:a4:95:fe: 64:42:c7:d3:6d:5b:64:a0:6a:44:21:9a:a2:07:4a: 6b:c8:46:2b:9b:b7:db:e9:3b:be:54:79:e2:98:dc: 4c:4d:21:13:0a:7c:2f:78:33:58:f6:31:7b:9d:b1: 3e:28:f1:02:b8:a6:10:66:79:61:eb:92:89:50:ab: 90:a9:f9:9a:5d:ac:a3:dc:c1:25:f8:20:b4:95:ab: 50:9a:f9:23:e5:1e:a2:31:39:c8:9c:51:ff:a2:d2: 2a:f5:8f:3e:5b:92:8a:11:3c:a2:6c:97:61:61:27: 7c:ac:13:8b:6d:67:18:40:5c:84:d6:0b:86:35:d9: c9:42:78:c2:36:f0:61:19:1e:50:80:ba:f2:fd:b2: 96:5e:2c:da:17:83:95:f6:ee:e4:7b:7c:f6:40:73: 2e:ea:18:97:e4:68:48:2e:62:60:3a:73:80:54:54: 9c:a3:fa:ed:17:3a:89:90:32:ef:00:4a:de:94:ad: 8c:e8:d3:5a:d1:09:5b:44:fd:d0:03:0b:3f:28:24: 82:24:ef:b4:0c:87:fc:d1:f9:0f:38:8b:45:ba:4b: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:50:23:EE:DC:A1:44:EA:0F:E8:ED:B8:02:27:D1:62:FB:88:A0:C3 X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:78:36:50:80:a9:a8:2b:e4:ce:4a:3f:b8:15:b0:43:76:d8: 53:86:8a:92:3a:50:f9:f8:87:e0:1d:60:30:fe:36:de:cb:17: 10:8c:e7:a3:d1:e1:e9:c6:a6:17:53:47:92:5d:bf:31:aa:70: ef:37:a2:b2:2a:6e:5d:8f:48:d5:3f:00:99:67:da:4a:a0:b3: bf:99:a2:9a:4d:bd:65:c3:dd:95:75:5c:df:55:dc:1e:76:de: aa:d9:5f:9a:e7:a4:3d:e7:36:74:2e:94:75:a0:a2:2a:7c:4d: e2:84:5b:47:ce:ed:3a:6b:b5:59:46:dc:c4:bc:55:20:81:e1: fa:dc:9e:50:ab:bd:54:8f:9e:ef:2e:18:1a:3c:34:86:eb:2c: 4e:e8:a2:67:56:be:8b:ca:02:8b:31:74:21:0a:e3:51:a4:dc: 79:31:da:fa:58:f8:45:29:d5:82:e5:da:b1:50:8b:ac:80:f3: de:f3:fc:49:0a:6a:44:69:75:86:c3:da:87:51:46:f7:30:55: 1a:4c:cf:65:30:c6:51:5d:a6:6a:6a:c8:5f:8e:ba:38:21:39: 0d:7d:b1:91:eb:e6:ca:b4:65:ad:44:0f:cd:f7:ce:b4:cb:ca: cf:33:18:46:63:f7:3e:05:e3:58:28:ad:e3:25:97:6e:75:8f: ca:a0:70:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjUwNTMwMTgwODQyWhcNMjUwNjA2MTgwODQyWjAYMRYwFAYD VQQDEw02ODM5ZjQyYS1hM2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAOUQA6vg6/+dkuYR00vPfIBzurEWho/k7IRMrqSjiP2vOjjMrRLPy+klf5k QsfTbVtkoGpEIZqiB0pryEYrm7fb6Tu+VHnimNxMTSETCnwveDNY9jF7nbE+KPEC uKYQZnlh65KJUKuQqfmaXayj3MEl+CC0latQmvkj5R6iMTnInFH/otIq9Y8+W5KK ETyibJdhYSd8rBOLbWcYQFyE1guGNdnJQnjCNvBhGR5QgLry/bKWXizaF4OV9u7k e3z2QHMu6hiX5GhILmJgOnOAVFSco/rtFzqJkDLvAErelK2M6NNa0QlbRP3QAws/ KCSCJO+0DIf80fkPOItFuktU4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFZQI+7c oUTqD+jtuAIn0WL7iKDDMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0eDZQgKmoK+TOSj+4FbBDdthThoqSOlD5+IfgHWAw/jbeyxcQjOej 0eHpxqYXU0eSXb8xqnDvN6KyKm5dj0jVPwCZZ9pKoLO/maKaTb1lw92VdVzfVdwe dt6q2V+a56Q95zZ0LpR1oKIqfE3ihFtHzu06a7VZRtzEvFUggeH63J5Qq71Uj57v LhgaPDSG6yxO6KJnVr6LygKLMXQhCuNRpNx5Mdr6WPhFKdWC5dqxUIusgPPe8/xJ CmpEaXWGw9qHUUb3MFUaTM9lMMZRXaZqashfjro4ITkNfbGR6+bKtGWtRA/N9860 y8rPMxhGY/c+BeNYKK3jJZdudY/KoHD5 -----END CERTIFICATE-----Generated at Sat May 31 17:49:41 2025 by rpki-client