$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: y8dtsbHE7wZMybexPT0JWmfKvuQg2maC29WWjLh4I7A= Subject key identifier: B9:46:58:1B:C3:2E:0A:57:59:97:9E:FF:96:E8:DC:1F:27:D9:17:61 Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 13EA Signing time: Tue 04 Nov 2025 17:58:47 +0000 Manifest this update: Tue 04 Nov 2025 17:58:47 +0000 Manifest next update: Tue 11 Nov 2025 17:58:47 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: pXnfHBis8KGIg5qXXVWvA/reqmwK3zC4gmmB4ZsOxjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Validity Not Before: Nov 4 17:58:47 2025 GMT Not After : Nov 11 17:58:47 2025 GMT Subject: CN=690a3ed7-decd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:46:84:8f:92:79:74:f7:21:59:eb:e4:57: 4e:71:16:30:57:54:79:30:e6:71:32:7f:6d:b2:33: 9a:eb:e1:f1:b6:45:c1:c5:32:c3:06:50:d6:9e:41: 9d:78:bb:0d:cc:01:cf:68:69:24:6b:30:05:2f:d7: 1f:c5:89:82:ad:88:2b:a2:73:58:4b:41:93:d5:4e: 1c:37:68:ee:ca:6a:70:b4:ed:29:ab:54:78:f1:9a: 8a:b7:f1:ba:0f:0d:4a:e2:b5:49:07:de:d7:28:c1: fb:ea:f4:5d:9f:99:88:a0:40:2b:fe:81:44:e1:0f: f4:a1:45:77:87:3d:ad:f1:4f:da:11:f8:05:06:ea: 61:6b:63:de:a9:cc:c2:fc:5e:90:0f:09:95:8e:7f: b4:e3:d8:7b:bd:bc:7e:36:62:fb:89:54:0b:fe:38: c5:cc:9a:b9:8d:8c:ea:6e:1a:d8:e7:99:40:ef:98: 6e:5e:29:f2:5e:cc:27:31:70:2e:ff:6d:95:45:c5: a8:51:5e:67:44:38:c3:9b:b8:c6:fd:ed:1b:a3:23: e6:cb:f8:8f:ee:92:42:c5:51:82:60:c0:c7:8f:8c: c0:32:b3:5c:ec:19:b3:f0:7e:20:a2:31:90:ed:c0: b6:bf:9f:21:f1:32:26:73:34:e0:d6:4c:f4:d6:8c: 04:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:46:58:1B:C3:2E:0A:57:59:97:9E:FF:96:E8:DC:1F:27:D9:17:61 X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:99:6a:30:a6:1b:7e:87:71:c6:af:e7:1b:28:52:96:38:a1: d3:1c:ce:2d:28:95:7e:7c:63:4d:6a:04:29:38:b9:51:bc:0d: f7:91:11:f9:a9:ae:26:0a:5f:79:26:76:95:2a:9c:6f:38:60: e7:24:93:be:9b:ea:93:96:96:8e:63:19:a4:1d:b2:69:33:9e: 66:f5:3d:a3:42:d1:76:1b:3c:46:57:c5:50:98:b2:44:7d:14: 94:16:bc:b9:15:6e:89:1e:1f:5c:80:68:72:6f:c6:d1:0c:88: 04:40:e1:1c:c9:cc:6d:41:df:4a:34:8b:87:26:d4:b4:d8:95: 42:5c:6d:69:f0:f3:10:21:94:6f:fb:be:05:ac:b2:55:a9:30: fb:1c:fb:07:d1:a5:c1:9b:c4:03:a0:6b:41:fe:3a:73:cc:79: 2b:fe:52:66:f9:05:a7:6d:0d:01:1d:46:0b:1e:cc:1b:51:67: 46:11:e7:e1:0f:08:de:bc:51:3b:15:d9:73:a7:b4:67:6d:24: 07:07:96:4d:e2:4b:9d:05:ef:ae:d1:0b:7b:eb:a1:76:01:15: e7:3d:11:f6:a2:4a:ff:27:9b:99:08:25:9f:00:4f:ae:a0:cd: d0:eb:23:34:58:fc:e7:6a:09:50:89:37:c0:84:45:67:b0:03: 5f:f7:61:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjUxMTA0MTc1ODQ3WhcNMjUxMTExMTc1ODQ3WjAYMRYwFAYD VQQDEw02OTBhM2VkNy1kZWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnulGhI+SeXT3IVnr5FdOcRYwV1R5MOZxMn9tsjOa6+HxtkXBxTLDBlDWnkGd eLsNzAHPaGkkazAFL9cfxYmCrYgronNYS0GT1U4cN2juympwtO0pq1R48ZqKt/G6 Dw1K4rVJB97XKMH76vRdn5mIoEAr/oFE4Q/0oUV3hz2t8U/aEfgFBupha2PeqczC /F6QDwmVjn+049h7vbx+NmL7iVQL/jjFzJq5jYzqbhrY55lA75huXinyXswnMXAu /22VRcWoUV5nRDjDm7jG/e0boyPmy/iP7pJCxVGCYMDHj4zAMrNc7Bmz8H4gojGQ 7cC2v58h8TImczTg1kz01owE/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlGWBvD LgpXWZee/5bo3B8n2RdhMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2mWowpht+h3HGr+cbKFKWOKHTHM4tKJV+fGNNagQpOLlRvA33kRH5 qa4mCl95JnaVKpxvOGDnJJO+m+qTlpaOYxmkHbJpM55m9T2jQtF2GzxGV8VQmLJE fRSUFry5FW6JHh9cgGhyb8bRDIgEQOEcycxtQd9KNIuHJtS02JVCXG1p8PMQIZRv +74FrLJVqTD7HPsH0aXBm8QDoGtB/jpzzHkr/lJm+QWnbQ0BHUYLHswbUWdGEefh DwjevFE7Fdlzp7RnbSQHB5ZN4kudBe+u0Qt766F2ARXnPRH2okr/J5uZCCWfAE+u oM3Q6yM0WPznaglQiTfAhEVnsANf92Fg -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:22 2025 by rpki-client