$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: fWeMcLL1k6yQ7sz4Pa2mqt9h0uTpuHEpsk4TSbvapDs= Subject key identifier: 3A:8F:8D:84:B8:05:14:CD:08:12:3E:51:4A:AD:97:51:B8:14:CF:E2 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 352D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 352D Signing time: Sat 04 Apr 2026 15:09:16 +0000 Manifest this update: Sat 04 Apr 2026 15:09:15 +0000 Manifest next update: Sat 11 Apr 2026 15:09:15 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: qbQA1tJxGYC33k4Ffo2ofvHLdzG3yioXbGcrJUR96KY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13613 (0x352d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Apr 4 15:09:15 2026 GMT Not After : Apr 11 15:09:15 2026 GMT Subject: CN=69d1299c-d7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:e8:48:f5:03:45:9a:bf:38:52:96:b9:53: f4:0a:38:2d:0b:da:84:7a:4c:5b:01:be:58:7a:96: d5:36:be:a8:46:ce:64:cd:07:38:79:94:4d:43:16: be:e5:c3:df:63:27:53:ae:87:b7:23:d4:e7:a1:6f: 5e:7d:e1:47:c0:87:f7:86:68:28:25:b7:6a:33:ae: 26:22:0f:43:a3:f2:fd:57:5a:96:f7:63:e7:e5:cb: cf:ea:89:a5:be:ef:99:cd:55:86:21:3e:e6:2f:08: b4:f5:5b:a9:10:f7:81:7f:8f:25:70:c0:9b:b8:7e: 19:20:61:1c:93:c1:e9:c7:ea:2a:c9:f4:6d:d1:84: 9a:16:85:f5:4b:25:e3:85:08:af:eb:0e:9d:ea:d5: 8b:29:c7:79:29:e2:a2:40:97:cd:2d:1a:5a:c0:19: 5e:79:a1:60:85:3c:f2:dd:52:67:cd:b2:5f:cb:30: d0:d5:46:7b:d2:71:12:6a:b9:0c:4c:df:01:75:48: 94:a2:8a:1d:26:b8:f0:82:a8:31:3b:84:18:f6:e3: f4:6b:3d:fd:d7:1d:10:99:56:bb:1c:ad:c8:6a:bc: 0c:da:da:37:cf:01:fe:77:2e:6e:7f:bf:74:15:39: 17:a0:d0:1d:91:a7:56:1d:79:a8:14:64:d4:60:35: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8F:8D:84:B8:05:14:CD:08:12:3E:51:4A:AD:97:51:B8:14:CF:E2 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a7:38:01:30:49:c4:92:ca:fe:5b:a6:13:e0:8e:92:73:4d: f2:c1:83:db:a2:46:b0:9c:5b:da:a3:43:cc:7e:59:63:10:a2: c3:7b:67:4c:6e:87:99:72:cf:c4:8a:c5:62:31:05:5f:36:ac: 3e:18:08:04:e1:c1:da:a8:be:a8:c0:99:d9:61:bf:5d:a0:86: 98:85:b4:90:97:c0:36:c3:5c:5f:e8:0c:be:eb:13:b6:ab:08: 85:cb:ee:75:bb:99:3f:2c:2d:a4:3b:33:b9:17:f4:27:ef:b3: a5:c0:1c:9d:7c:31:f2:36:8c:9a:5a:7a:3f:24:f4:ca:b4:a1: 7f:16:d7:ed:db:5b:cf:08:e5:e9:76:fb:70:7a:0b:23:4b:0a: a8:94:ef:94:90:13:e3:34:14:25:fb:70:68:92:1c:28:98:1f: f7:90:6d:f0:2b:47:56:eb:1d:a0:ca:e7:ce:25:e7:8c:17:23: f6:61:af:30:2d:59:70:be:ad:5e:61:af:9b:ba:2f:42:f3:0c: 9a:c1:a9:98:03:e3:48:b5:ad:74:c5:36:ff:c2:1c:48:1e:3d: f2:0a:9c:de:67:91:0f:58:e8:e0:19:da:b8:e0:b7:db:33:bc: 86:f7:58:63:02:6e:49:e9:33:d9:66:0c:6a:f1:78:81:72:54: c5:a7:dc:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjYwNDA0MTUwOTE1WhcNMjYwNDExMTUwOTE1WjAYMRYwFAYD VQQDEw02OWQxMjk5Yy1kN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYToSPUDRZq/OFKWuVP0CjgtC9qEekxbAb5YepbVNr6oRs5kzQc4eZRNQxa+ 5cPfYydTroe3I9TnoW9efeFHwIf3hmgoJbdqM64mIg9Do/L9V1qW92Pn5cvP6oml vu+ZzVWGIT7mLwi09VupEPeBf48lcMCbuH4ZIGEck8Hpx+oqyfRt0YSaFoX1SyXj hQiv6w6d6tWLKcd5KeKiQJfNLRpawBleeaFghTzy3VJnzbJfyzDQ1UZ70nESarkM TN8BdUiUooodJrjwgqgxO4QY9uP0az391x0QmVa7HK3IarwM2to3zwH+dy5uf790 FTkXoNAdkadWHXmoFGTUYDVpBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqPjYS4 BRTNCBI+UUqtl1G4FM/iMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI6c4ATBJxJLK/lumE+COknNN8sGD26JGsJxb2qNDzH5ZYxCiw3tnTG6HmXLP xIrFYjEFXzasPhgIBOHB2qi+qMCZ2WG/XaCGmIW0kJfANsNcX+gMvusTtqsIhcvu dbuZPywtpDszuRf0J++zpcAcnXwx8jaMmlp6PyT0yrShfxbX7dtbzwjl6Xb7cHoL I0sKqJTvlJAT4zQUJftwaJIcKJgf95Bt8CtHVusdoMrnziXnjBcj9mGvMC1ZcL6t XmGvm7ovQvMMmsGpmAPjSLWtdMU2/8IcSB498gqc3meRD1jo4BnauOC32zO8hvdY YwJuSekz2WYMavF4gXJUxafcJA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:02 2026 by rpki-client