$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: wWgORF8QYJ1ElqobVUkM0NdUDaxbbSOpAchZd8jedyg= Subject key identifier: 4C:01:7F:F3:2A:26:F4:28:3E:88:6F:0C:F3:2C:BB:36:12:68:0C:9A Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 34B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 34B6 Signing time: Fri 22 Aug 2025 15:14:11 +0000 Manifest this update: Fri 22 Aug 2025 15:14:11 +0000 Manifest next update: Fri 29 Aug 2025 15:14:11 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: hbs4jxhPdRELl8IXf1rotY2Lofze3eRkyUFm01SxX2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:14:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13494 (0x34b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Aug 22 15:14:11 2025 GMT Not After : Aug 29 15:14:11 2025 GMT Subject: CN=68a88943-33f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:56:98:6c:14:fc:19:13:5a:47:d8:f7:fa:9e: de:23:68:b4:de:91:33:22:8d:2a:39:0a:0e:62:c3: d4:03:a6:01:e9:17:9b:73:a2:7b:19:73:8a:bd:9a: 7c:4d:6a:70:29:6a:13:f5:b0:c8:b0:93:70:5d:6e: a7:18:ab:64:cf:8c:a1:91:e9:0c:d1:61:33:74:15: 86:a2:78:46:4c:9f:48:15:8b:75:ba:ee:10:d1:c5: 1a:9f:cb:88:34:05:2c:2a:07:e8:69:fc:a9:82:e3: 6a:0c:6b:28:56:cd:fa:e7:b0:7b:0b:d1:56:ca:f7: 00:16:b0:40:d6:42:0d:b5:e2:2d:7e:d9:28:17:a5: a8:48:75:8e:bf:9b:2b:19:a2:9f:1a:af:b0:6f:96: 78:2c:54:cf:eb:08:1f:10:38:99:40:ba:db:ab:38: 84:3a:5f:db:ae:c3:98:07:ab:b1:fe:a2:72:66:25: bf:5b:68:64:f9:f5:c5:da:e0:93:ce:2b:df:c3:c8: 6d:8c:c2:96:68:1c:51:fd:69:cb:bf:8e:4c:91:f0: 5e:ef:88:e2:26:b1:19:e1:57:14:6f:f9:fd:20:0d: 9c:d0:1d:cb:7b:0f:7f:a3:83:a6:71:75:eb:02:68: 31:a1:2d:67:42:45:68:61:e0:6f:67:ba:37:6d:a1: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:01:7F:F3:2A:26:F4:28:3E:88:6F:0C:F3:2C:BB:36:12:68:0C:9A X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c2:60:0c:a0:7c:c0:51:2c:54:72:f9:f3:21:1c:dc:02:d8: 83:62:7d:5b:51:46:f9:51:7d:4c:fe:1d:4e:23:ee:1c:84:65: 41:af:33:57:e0:5e:28:5f:27:45:9a:2e:ca:ce:56:1c:26:d9: 32:68:ec:ca:4d:f6:81:06:1a:df:5d:e4:da:6f:ac:85:8d:fa: c7:db:dc:d0:99:d8:bb:be:04:f1:28:f9:6f:d0:d2:ee:5c:f1: d6:64:be:a4:f4:a8:c0:04:de:02:29:d3:db:b9:f5:e7:64:7d: c9:ac:3b:c0:c6:d0:ef:04:aa:f6:7f:51:fa:06:39:19:57:ea: e0:b9:a3:7e:8f:e6:8f:a4:f4:ae:35:d5:7f:7e:fe:8e:d4:55: df:a7:12:78:55:fc:bf:73:c7:11:9e:d3:63:da:74:3d:5c:4d: 74:3f:e7:6d:32:c5:12:2e:98:51:1e:af:8a:89:0a:69:06:a1: 22:21:4b:43:7b:46:a3:3a:6e:7a:10:82:11:c0:ef:06:86:61: 4d:84:81:ca:72:c9:c7:9b:bd:78:3c:8a:f9:6d:fc:f4:f0:7b: cd:98:1b:ce:c9:a5:3e:9c:52:88:ca:7d:cd:aa:3b:10:97:a7: c9:cf:51:47:82:4f:57:85:70:f3:21:0a:2b:ce:6b:bf:1e:a1: d9:58:1d:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUwODIyMTUxNDExWhcNMjUwODI5MTUxNDExWjAYMRYwFAYD VQQDEw02OGE4ODk0My0zM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FaYbBT8GRNaR9j3+p7eI2i03pEzIo0qOQoOYsPUA6YB6Rebc6J7GXOKvZp8 TWpwKWoT9bDIsJNwXW6nGKtkz4yhkekM0WEzdBWGonhGTJ9IFYt1uu4Q0cUan8uI NAUsKgfoafypguNqDGsoVs3657B7C9FWyvcAFrBA1kINteItftkoF6WoSHWOv5sr GaKfGq+wb5Z4LFTP6wgfEDiZQLrbqziEOl/brsOYB6ux/qJyZiW/W2hk+fXF2uCT zivfw8htjMKWaBxR/WnLv45MkfBe74jiJrEZ4VcUb/n9IA2c0B3Lew9/o4OmcXXr AmgxoS1nQkVoYeBvZ7o3baFT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwBf/Mq JvQoPohvDPMsuzYSaAyaMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/wmAMoHzAUSxUcvnzIRzcAtiDYn1bUUb5UX1M/h1OI+4chGVBrzNX 4F4oXydFmi7KzlYcJtkyaOzKTfaBBhrfXeTab6yFjfrH29zQmdi7vgTxKPlv0NLu XPHWZL6k9KjABN4CKdPbufXnZH3JrDvAxtDvBKr2f1H6BjkZV+rguaN+j+aPpPSu NdV/fv6O1FXfpxJ4Vfy/c8cRntNj2nQ9XE10P+dtMsUSLphRHq+KiQppBqEiIUtD e0ajOm56EIIRwO8GhmFNhIHKcsnHm714PIr5bfz08HvNmBvOyaU+nFKIyn3NqjsQ l6fJz1FHgk9XhXDzIQorzmu/HqHZWB16 -----END CERTIFICATE-----Generated at Sat Aug 23 13:41:04 2025 by rpki-client