$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: Clfd1IS0SvTIRBq/9jxoERIlnd9hXzSwMrJ77eUx1OM= Subject key identifier: E1:A6:AA:FB:57:C0:D5:25:CE:36:36:2E:69:03:1A:F5:38:8C:6C:B3 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 34C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 34C4 Signing time: Thu 18 Sep 2025 15:15:54 +0000 Manifest this update: Thu 18 Sep 2025 15:15:53 +0000 Manifest next update: Thu 25 Sep 2025 15:15:53 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: AZDkX39CxQPNhtHuUlHpqA0eXEXulKkA74BLNOQT/7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13508 (0x34c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Sep 18 15:15:53 2025 GMT Not After : Sep 25 15:15:53 2025 GMT Subject: CN=68cc2229-25dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0a:e6:2f:4b:f3:ec:c0:fd:ed:90:d7:8b:3a: 8c:a7:8c:cb:64:1a:bc:af:f0:bc:ff:c5:d3:16:3a: 92:3b:91:37:e8:e1:17:a7:2f:2b:6a:82:3f:bd:3e: 31:6d:84:f3:91:f1:88:ef:f3:59:90:60:0a:89:5e: 44:bb:27:8b:23:2c:74:20:f4:01:bf:27:42:95:68: 19:0d:1f:ea:2d:90:79:31:47:da:45:72:d1:8e:91: 1b:c8:f8:17:cc:e2:9b:d6:8e:d5:fa:34:d2:e9:0a: 94:f0:78:67:12:09:cb:fc:23:7e:e6:18:54:9f:ee: 6d:1f:37:91:5c:b4:5d:21:f3:ea:88:56:b7:d6:a4: 8e:6a:4c:7e:a7:2e:97:33:c2:b5:96:93:95:ca:cd: ea:76:74:0f:e8:bf:38:aa:75:8d:91:de:79:e2:64: 8a:4d:d7:d1:36:7c:c7:e0:c6:08:69:5e:61:a7:7f: a6:e3:cf:be:98:8e:61:b5:a2:39:69:02:19:a6:ea: ff:93:ae:37:33:61:f8:09:60:60:a4:74:f2:e8:b4: 5f:cc:40:e9:61:d8:60:b9:42:5f:cf:82:c7:67:e5: f2:ec:61:6a:b2:f6:0e:c5:71:66:37:98:4d:c4:fc: fd:82:02:95:59:41:a9:0b:04:03:f6:df:8a:5c:2e: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A6:AA:FB:57:C0:D5:25:CE:36:36:2E:69:03:1A:F5:38:8C:6C:B3 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:50:3a:71:28:c3:73:be:77:8b:28:9c:1c:c5:02:ea:d0:2e: c1:d9:49:74:80:fe:98:32:3e:76:bd:62:09:2d:57:29:6e:a4: 9f:ac:bc:39:7a:50:73:02:55:f5:d8:2f:4b:e6:8d:26:52:de: 4b:d6:98:0f:2b:29:4c:9a:1f:99:d4:d1:8b:b8:8b:27:1f:18: 09:b5:fd:11:82:c8:af:cd:f5:47:d3:22:3f:2a:9b:a4:81:6d: 0e:f1:53:07:cb:05:c6:07:3e:7b:a4:71:95:3e:ba:cf:4f:fa: 75:e1:df:63:89:dd:2f:08:cd:67:d2:74:42:f8:8a:ec:50:36: 61:24:c3:39:9f:e9:9f:f5:21:8a:1f:2a:3c:d3:9d:3b:d5:5f: 6e:09:79:8f:5a:00:49:78:aa:7b:47:14:3a:c6:11:b0:a9:16: b2:6f:e4:74:1c:38:9b:2d:87:23:18:af:43:63:21:9c:b2:d6: 24:cf:15:ce:96:c9:68:b4:81:b9:81:fc:eb:d5:05:b8:0b:04: 7a:53:bc:73:67:e6:ce:8e:81:de:a6:12:1e:f3:eb:0e:a7:97: 0e:83:7c:e3:1b:85:6e:e7:81:68:6b:f7:c8:33:7e:d6:16:52: a5:84:cd:9d:be:5f:a7:0a:5a:05:ab:ae:b8:f8:66:9d:15:72: 4b:6d:20:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUwOTE4MTUxNTUzWhcNMjUwOTI1MTUxNTUzWjAYMRYwFAYD VQQDEw02OGNjMjIyOS0yNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQrmL0vz7MD97ZDXizqMp4zLZBq8r/C8/8XTFjqSO5E36OEXpy8raoI/vT4x bYTzkfGI7/NZkGAKiV5EuyeLIyx0IPQBvydClWgZDR/qLZB5MUfaRXLRjpEbyPgX zOKb1o7V+jTS6QqU8HhnEgnL/CN+5hhUn+5tHzeRXLRdIfPqiFa31qSOakx+py6X M8K1lpOVys3qdnQP6L84qnWNkd554mSKTdfRNnzH4MYIaV5hp3+m48++mI5htaI5 aQIZpur/k643M2H4CWBgpHTy6LRfzEDpYdhguUJfz4LHZ+Xy7GFqsvYOxXFmN5hN xPz9ggKVWUGpCwQD9t+KXC5OQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGmqvtX wNUlzjY2LmkDGvU4jGyzMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPUDpxKMNzvneLKJwcxQLq0C7B2Ul0gP6YMj52vWIJLVcpbqSfrLw5 elBzAlX12C9L5o0mUt5L1pgPKylMmh+Z1NGLuIsnHxgJtf0RgsivzfVH0yI/Kpuk gW0O8VMHywXGBz57pHGVPrrPT/p14d9jid0vCM1n0nRC+IrsUDZhJMM5n+mf9SGK Hyo805071V9uCXmPWgBJeKp7RxQ6xhGwqRayb+R0HDibLYcjGK9DYyGcstYkzxXO lslotIG5gfzr1QW4CwR6U7xzZ+bOjoHephIe8+sOp5cOg3zjG4Vu54Foa/fIM37W FlKlhM2dvl+nCloFq664+GadFXJLbSC5 -----END CERTIFICATE-----Generated at Fri Sep 19 17:00:59 2025 by rpki-client