$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft File: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft (raw, json) Hash identifier: dluOmleJXll4Z3Fpeei59gTTrsvJ0+GeTGY2wpBFf2I= Subject key identifier: 4B:23:87:B8:71:9C:2C:C7:04:50:8E:64:4D:C5:FE:56:44:07:FC:01 Authority key identifier: ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 Certificate issuer: /CN=A9180542/serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Certificate serial: 0D5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft Manifest number: 12C0 Signing time: Thu 24 Apr 2025 17:56:56 +0000 Manifest this update: Thu 24 Apr 2025 17:56:56 +0000 Manifest next update: Thu 01 May 2025 17:56:56 +0000 Files and hashes: 1: 7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl (hash: el6CR9G0LfyG6fDyWcJee9QcNfjhvhrYyEZtpZIiZvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3422 (0xd5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180542, serialNumber=ED8826B38F948BE9545B2524EB0A050E802A9B70 Validity Not Before: Apr 24 17:56:56 2025 GMT Not After : May 1 17:56:56 2025 GMT Subject: CN=680a7b68-9b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fa:c7:92:3c:20:59:d4:d9:ea:d6:79:64:56: 1a:a9:26:a1:44:da:55:8c:d3:9b:ef:e3:91:8a:d9: a9:2f:d1:a0:9b:90:ae:1d:9d:3b:8c:fc:39:ce:ea: 7c:32:77:38:39:7c:1e:4e:fa:56:0e:6f:eb:67:06: 5c:4f:94:ce:3a:8d:a2:0e:5d:14:2c:94:25:0c:07: cd:47:6c:bc:a0:e5:b3:58:e2:39:a3:78:77:6c:ac: 80:78:a3:6b:27:3f:22:46:b1:5d:a6:a1:2e:f0:5d: 92:3c:5f:48:d7:3a:c5:09:f3:20:64:ad:89:6b:cd: 5d:79:71:96:0c:ce:b6:61:e4:19:3c:2a:2d:d2:83: ea:e7:75:9b:c3:67:e8:a8:8c:59:68:28:7b:1a:25: ec:e0:d0:a5:08:16:9f:93:f1:58:58:1a:c5:66:22: a9:ed:1d:05:18:d5:ba:eb:04:08:48:1c:4a:c8:a9: c8:ec:ee:98:03:67:eb:f5:11:79:f0:e6:54:fd:6c: 50:2e:64:1f:23:35:c4:9a:4a:71:bd:ff:b2:60:28: 68:47:86:ee:c3:57:5f:26:30:ee:f0:ff:23:c7:68: 93:d4:f5:66:13:92:b1:ec:73:a0:c3:32:a2:0e:73: e4:0f:a2:7b:7e:ba:b5:38:12:7c:03:e7:74:27:72: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:23:87:B8:71:9C:2C:C7:04:50:8E:64:4D:C5:FE:56:44:07:FC:01 X509v3 Authority Key Identifier: keyid:ED:88:26:B3:8F:94:8B:E9:54:5B:25:24:EB:0A:05:0E:80:2A:9B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ygms4-Ui-lUWyUk6woFDoAqm3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/7Ygms4-Ui-lUWyUk6woFDoAqm3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:6a:96:02:f6:e9:a5:41:ec:d6:12:19:e2:e6:51:a8:5c:ce: ef:96:68:cd:93:83:e7:79:0a:59:6e:1f:21:bd:81:91:c2:34: cd:1f:c1:f1:d7:63:98:6d:3e:08:ee:40:05:1a:e9:93:db:05: a1:9b:71:62:05:97:9b:79:83:88:52:61:f3:36:31:90:9a:cc: b8:5e:c1:0a:9c:61:54:ee:8f:11:2a:fc:56:c9:a6:8d:02:ec: 55:85:35:d0:73:a4:6d:2a:00:06:4c:13:fa:db:38:6a:d5:36: f9:b4:68:9a:10:b5:b1:53:fc:34:a9:46:8d:dd:e1:b9:7e:21: 1f:f7:79:59:dc:d1:89:62:27:38:0e:bc:b1:bd:c9:96:a0:27: 48:0d:c2:74:bf:82:c1:fb:3e:4f:97:11:43:2d:49:23:53:5d: ad:5c:92:3e:8d:3d:e2:a2:55:59:18:85:3e:33:7d:66:e6:7a: 8e:3f:bb:ac:ff:9d:ec:d5:12:dc:07:f8:8b:10:70:48:9b:f5: 3d:f1:8c:7d:56:63:57:96:8e:9c:4e:2f:06:d0:7e:5e:1e:d0: aa:ae:6e:23:db:fa:b3:c4:cf:59:58:ad:40:5b:b4:42:f9:89: 6c:8f:9a:cc:5f:d3:32:ea:ed:36:df:4b:7c:39:d6:0f:26:2c: 9a:23:94:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NDIxMTAvBgNVBAUTKEVEODgyNkIzOEY5NDhCRTk1NDVCMjUyNEVCMEEwNTBF ODAyQTlCNzAwHhcNMjUwNDI0MTc1NjU2WhcNMjUwNTAxMTc1NjU2WjAYMRYwFAYD VQQDEw02ODBhN2I2OC05Yjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlfrHkjwgWdTZ6tZ5ZFYaqSahRNpVjNOb7+ORitmpL9Ggm5CuHZ07jPw5zup8 Mnc4OXweTvpWDm/rZwZcT5TOOo2iDl0ULJQlDAfNR2y8oOWzWOI5o3h3bKyAeKNr Jz8iRrFdpqEu8F2SPF9I1zrFCfMgZK2Ja81deXGWDM62YeQZPCot0oPq53Wbw2fo qIxZaCh7GiXs4NClCBafk/FYWBrFZiKp7R0FGNW66wQISBxKyKnI7O6YA2fr9RF5 8OZU/WxQLmQfIzXEmkpxvf+yYChoR4buw1dfJjDu8P8jx2iT1PVmE5Kx7HOgwzKi DnPkD6J7frq1OBJ8A+d0J3L3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEsjh7hx nCzHBFCOZE3F/lZEB/wBMB8GA1UdIwQYMBaAFO2IJrOPlIvpVFslJOsKBQ6AKptw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0Mi8wQTQ3OUM5MENB RTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWktbFVXeVVrNndvRkRvQXFt M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZZ21zNC1VaS1sVVd5VWs2d29GRG9BcW0zQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU0Mi8wQTQ3OUM5MENBRTkxMUU5QkJFOTIxODNDNEY5QUUwMi83WWdtczQtVWkt bFVXeVVrNndvRkRvQXFtM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwapYC9umlQezWEhni5lGoXM7vlmjNk4PneQpZbh8hvYGRwjTNH8Hx 12OYbT4I7kAFGumT2wWhm3FiBZebeYOIUmHzNjGQmsy4XsEKnGFU7o8RKvxWyaaN AuxVhTXQc6RtKgAGTBP62zhq1Tb5tGiaELWxU/w0qUaN3eG5fiEf93lZ3NGJYic4 DryxvcmWoCdIDcJ0v4LB+z5PlxFDLUkjU12tXJI+jT3iolVZGIU+M31m5nqOP7us /53s1RLcB/iLEHBIm/U98Yx9VmNXlo6cTi8G0H5eHtCqrm4j2/qzxM9ZWK1AW7RC +Ylsj5rMX9My6u0230t8OdYPJiyaI5Ql -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:43 2025 by rpki-client