$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: JYGzbb3gWmjYNi9GlaJ1UGASjR/dgkfFnm6tGh9b05I= Subject key identifier: CE:83:5C:DB:07:D0:83:A4:24:F8:03:8A:83:AE:7C:63:4D:AF:1F:77 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 34A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 34A5 Signing time: Sun 20 Jul 2025 15:14:20 +0000 Manifest this update: Sun 20 Jul 2025 15:14:19 +0000 Manifest next update: Sun 27 Jul 2025 15:14:19 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: 7c2CCzmJAYqyFAspoKT3/immh2P0sUD7U5gsnbeCFuU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13477 (0x34a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Jul 20 15:14:19 2025 GMT Not After : Jul 27 15:14:19 2025 GMT Subject: CN=687d07cb-b0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8f:3d:07:2b:0e:02:ed:8c:ed:02:57:c1:65: 86:00:af:b3:4b:03:5c:0f:03:46:7d:be:c4:da:11: 6f:ab:51:fa:c4:33:60:da:3a:15:38:24:08:a2:12: 0e:19:72:df:51:80:ef:3d:db:74:37:f7:c1:9b:e0: 64:63:67:a1:1d:4d:46:2d:99:80:44:c8:ca:13:1e: 1c:e0:00:9e:08:95:e6:15:52:c2:b9:39:32:f9:3f: ce:96:95:c2:5b:11:24:4d:c1:c4:72:55:57:af:44: d3:b8:86:08:4a:2e:d9:cb:43:b8:b1:55:38:f4:66: 9c:9a:2f:66:e9:24:b1:64:26:a8:1d:d4:a3:92:fc: 0a:07:4f:84:fe:67:d3:ae:1f:d6:30:2c:af:aa:06: 40:bd:a4:32:a7:25:93:0e:ea:2d:e8:45:9e:f7:d0: 26:8c:0a:03:bd:5f:85:d5:66:ff:9e:c5:4a:ac:9b: 9e:d5:5c:e9:be:c6:4a:b1:4f:78:2c:78:60:d1:33: 45:64:af:70:1d:1b:1a:09:b3:fd:72:ae:00:e9:95: ff:fd:4e:39:5a:88:a6:87:e8:31:70:72:10:49:ea: c4:99:03:d2:2c:7c:a5:da:65:cb:11:8b:cb:a6:f2: 38:64:fd:b0:fe:ff:48:fe:24:90:f2:a5:ef:d1:fa: 27:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:83:5C:DB:07:D0:83:A4:24:F8:03:8A:83:AE:7C:63:4D:AF:1F:77 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:c6:81:5f:e7:01:4c:84:48:71:41:30:a0:00:2b:4f:79:c7: 53:7c:20:47:d8:14:b2:6f:48:a5:a8:92:fc:51:db:95:af:5a: ac:31:f5:cb:6c:31:80:3a:83:23:c9:ad:c8:87:f3:44:73:7b: 13:01:e3:19:76:02:00:b4:8a:4b:ea:fb:d8:7e:e9:0e:56:0b: 01:48:b9:16:08:98:d8:a7:e3:92:8f:fc:d4:a9:57:e5:c9:c7: dc:e1:19:15:09:03:2d:e2:32:2d:9f:da:3c:1b:c7:1e:c6:b7: c3:34:7f:e0:81:bc:5f:43:95:d4:6c:d3:ea:51:8d:d7:e9:38: 27:5e:fc:65:09:9e:df:4d:6b:d9:a3:a0:35:70:db:be:7f:c7: 15:a9:dc:57:1b:6b:87:6b:4d:e0:13:f6:53:31:77:51:cf:6f: e2:f5:c5:22:ee:41:a1:e6:83:8e:22:8a:c6:16:bd:57:bd:86: 1c:73:b5:95:56:6f:3f:2a:60:ff:14:2d:1a:7d:6f:a5:ff:52: 39:01:68:49:f1:08:03:f3:e9:3c:bc:2b:de:de:48:06:db:8d: 39:c5:16:b5:49:eb:a5:ce:f0:6c:37:52:1f:fc:6a:90:67:ee: 58:c8:03:61:42:0f:5f:a4:b1:17:bc:65:9f:e2:11:76:f5:65: 9b:28:6b:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUwNzIwMTUxNDE5WhcNMjUwNzI3MTUxNDE5WjAYMRYwFAYD VQQDEw02ODdkMDdjYi1iMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqo89BysOAu2M7QJXwWWGAK+zSwNcDwNGfb7E2hFvq1H6xDNg2joVOCQIohIO GXLfUYDvPdt0N/fBm+BkY2ehHU1GLZmARMjKEx4c4ACeCJXmFVLCuTky+T/OlpXC WxEkTcHEclVXr0TTuIYISi7Zy0O4sVU49Gacmi9m6SSxZCaoHdSjkvwKB0+E/mfT rh/WMCyvqgZAvaQypyWTDuot6EWe99AmjAoDvV+F1Wb/nsVKrJue1VzpvsZKsU94 LHhg0TNFZK9wHRsaCbP9cq4A6ZX//U45Woimh+gxcHIQSerEmQPSLHyl2mXLEYvL pvI4ZP2w/v9I/iSQ8qXv0fon7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6DXNsH 0IOkJPgDioOufGNNrx93MB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWxoFf5wFMhEhxQTCgACtPecdTfCBH2BSyb0ilqJL8UduVr1qsMfXL bDGAOoMjya3Ih/NEc3sTAeMZdgIAtIpL6vvYfukOVgsBSLkWCJjYp+OSj/zUqVfl ycfc4RkVCQMt4jItn9o8G8cexrfDNH/ggbxfQ5XUbNPqUY3X6TgnXvxlCZ7fTWvZ o6A1cNu+f8cVqdxXG2uHa03gE/ZTMXdRz2/i9cUi7kGh5oOOIorGFr1XvYYcc7WV Vm8/KmD/FC0afW+l/1I5AWhJ8QgD8+k8vCve3kgG2405xRa1SeulzvBsN1If/GqQ Z+5YyANhQg9fpLEXvGWf4hF29WWbKGuN -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:00 2025 by rpki-client