$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: hhcGa5d4E502F9CGXrxR/szPWl3AdXKajaHM0tADUw8= Subject key identifier: D5:44:73:E2:06:E5:5E:9B:3F:9A:C4:E5:F6:F1:1A:80:2F:83:A6:8A Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 34AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 34AE Signing time: Wed 06 Aug 2025 15:14:52 +0000 Manifest this update: Wed 06 Aug 2025 15:14:52 +0000 Manifest next update: Wed 13 Aug 2025 15:14:52 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: /RFx3BvKU0qj8l2YM6CyseerDVFaiBXJvJFFzPum6G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13486 (0x34ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Aug 6 15:14:52 2025 GMT Not After : Aug 13 15:14:52 2025 GMT Subject: CN=6893716c-d799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:e3:11:94:d9:e3:4a:6b:53:58:05:5b:be: d1:fe:86:d7:80:38:2a:94:16:90:86:ea:fc:47:2c: 5c:9f:45:4d:d2:4c:80:f6:cc:eb:f0:ce:51:1c:43: e0:af:79:4d:3c:7a:6e:38:c8:3b:bf:ff:b8:bb:4c: 28:6f:9f:12:3a:14:a7:57:da:d9:1b:b8:fe:ee:65: 66:9f:f7:5a:d2:5f:8c:cd:ab:f8:a1:21:88:50:28: a9:fa:b6:59:7b:f3:2d:57:1e:1c:32:28:c4:ac:e2: 49:5d:a7:6c:2a:4d:78:f2:3f:21:a8:00:83:58:b9: 04:26:3b:9b:b9:ac:fe:e5:e9:7c:c9:86:55:c5:54: 4a:13:a2:80:a9:f2:b4:bb:7e:70:c4:bf:ab:8c:af: d7:7e:b3:a9:d2:c1:32:a7:60:5e:34:72:93:1a:95: 00:f0:0c:9c:46:1d:ce:cd:59:18:02:ed:09:ca:c2: db:81:bd:0d:56:d4:03:4e:99:b9:a8:c0:00:ea:bb: 12:ba:c3:ec:8c:e9:b6:49:b9:8b:4f:c9:7f:b5:a5: a7:f7:38:18:45:8d:24:f5:ab:5c:6c:19:7e:77:ba: 88:c6:cd:08:e9:07:5b:92:18:6a:76:1d:96:23:b9: cb:e0:1a:69:2d:13:aa:be:a0:6f:64:c9:7e:75:87: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:44:73:E2:06:E5:5E:9B:3F:9A:C4:E5:F6:F1:1A:80:2F:83:A6:8A X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e6:7a:16:f4:6f:e8:81:58:47:d3:76:2b:0b:55:4c:60:ff: f5:92:d1:b9:4a:30:fd:fe:68:22:1e:0b:b5:36:de:94:aa:dd: 80:71:b5:f5:44:42:1b:9b:08:fd:04:12:33:99:7a:82:3e:4f: cc:0c:3a:89:d4:1b:8a:2f:55:d6:c7:5c:e2:25:34:96:f6:94: 39:0f:90:cf:83:c4:aa:86:4c:71:4c:dc:dd:af:81:44:f0:bf: a3:c7:fc:13:a9:d3:55:fa:d8:30:c9:cc:55:40:3d:bc:fd:33: 4d:56:62:e6:12:07:bc:0a:8e:b8:53:f9:0c:22:15:74:a7:ba: e6:74:b5:e9:50:c5:1e:84:1f:6b:31:03:f3:7d:42:9f:f9:d7: 95:78:42:08:b4:1d:30:75:ec:e0:e3:d5:19:f7:26:15:ea:90: 20:ef:02:05:34:60:fa:a8:a9:af:bc:a2:0d:67:d3:6e:f8:e3: 42:54:a8:6a:ef:dc:5a:d6:cd:66:ad:1d:de:d9:34:fa:d5:8a: f6:72:fd:0b:b9:bf:28:b9:39:03:f5:36:ff:0c:03:60:87:46: 96:3a:0a:fd:76:f9:43:e1:b4:ef:80:dd:01:df:02:c9:47:72: 26:f6:1e:a5:61:ff:0e:9a:60:04:53:a5:43:ad:24:b4:ef:db: 89:81:81:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUwODA2MTUxNDUyWhcNMjUwODEzMTUxNDUyWjAYMRYwFAYD VQQDEw02ODkzNzE2Yy1kNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cHjEZTZ40prU1gFW77R/obXgDgqlBaQhur8Ryxcn0VN0kyA9szr8M5RHEPg r3lNPHpuOMg7v/+4u0wob58SOhSnV9rZG7j+7mVmn/da0l+Mzav4oSGIUCip+rZZ e/MtVx4cMijErOJJXadsKk148j8hqACDWLkEJjubuaz+5el8yYZVxVRKE6KAqfK0 u35wxL+rjK/XfrOp0sEyp2BeNHKTGpUA8AycRh3OzVkYAu0JysLbgb0NVtQDTpm5 qMAA6rsSusPsjOm2SbmLT8l/taWn9zgYRY0k9atcbBl+d7qIxs0I6Qdbkhhqdh2W I7nL4BppLROqvqBvZMl+dYeHcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVEc+IG 5V6bP5rE5fbxGoAvg6aKMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx5noW9G/ogVhH03YrC1VMYP/1ktG5SjD9/mgiHgu1Nt6Uqt2AcbX1 REIbmwj9BBIzmXqCPk/MDDqJ1BuKL1XWx1ziJTSW9pQ5D5DPg8SqhkxxTNzdr4FE 8L+jx/wTqdNV+tgwycxVQD28/TNNVmLmEge8Co64U/kMIhV0p7rmdLXpUMUehB9r MQPzfUKf+deVeEIItB0wdezg49UZ9yYV6pAg7wIFNGD6qKmvvKINZ9Nu+ONCVKhq 79xa1s1mrR3e2TT61Yr2cv0Lub8ouTkD9Tb/DANgh0aWOgr9dvlD4bTvgN0B3wLJ R3Im9h6lYf8OmmAEU6VDrSS079uJgYER -----END CERTIFICATE-----Generated at Thu Aug 7 11:23:16 2025 by rpki-client