$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: YjQURQC07ZuJfLYGiyDCBxkskdfD3QhWDx2GupKh550= Subject key identifier: E9:DB:C0:67:9A:5B:87:E6:52:88:72:DE:36:26:1D:80:79:1B:3C:13 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 348B Signing time: Fri 30 May 2025 15:18:18 +0000 Manifest this update: Fri 30 May 2025 15:18:18 +0000 Manifest next update: Fri 06 Jun 2025 15:18:18 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: CXy0OshMRjg0+0GPaSW/S6w8inJYOo8y8R4EgBym6gI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: May 30 15:18:18 2025 GMT Not After : Jun 6 15:18:18 2025 GMT Subject: CN=6839cc3a-3f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:07:4d:f6:57:44:9b:79:57:83:cb:10:9a: 40:f4:75:1b:89:43:3f:7f:d9:f9:ed:39:65:a5:f8: 28:de:f1:65:f7:e8:26:d9:81:0c:94:92:33:d3:1e: f3:58:83:58:c6:20:1c:31:f0:ea:08:73:06:25:79: a1:9e:60:ff:9d:6f:d4:c2:5a:01:bd:92:c4:a9:a0: 0d:5e:a8:f2:53:0e:e9:e8:42:e8:94:bc:54:9a:e2: a3:af:b6:d6:51:f4:37:f2:a6:e0:60:ae:f1:87:02: 17:b0:66:1b:89:ef:1d:ad:f9:4c:b3:1b:c2:ac:30: b6:bb:1f:d8:44:98:90:e5:4b:65:e5:89:3f:74:73: 00:22:6f:c9:c3:47:9f:7e:f9:47:31:cc:14:26:b7: d4:c3:1d:79:aa:19:d1:18:af:31:14:d4:8d:59:52: 2a:4e:9f:6e:9d:15:e7:0a:69:72:2f:a9:30:93:9a: 1c:18:2e:64:7d:16:ba:d1:02:03:30:e2:df:6f:89: 30:92:c5:60:36:25:f3:0a:f7:a2:ab:22:e5:10:3f: 34:77:93:71:bf:e5:63:e4:e1:24:cb:d5:15:c2:f6: 5c:86:6a:d6:71:13:87:2d:24:66:42:e1:8f:0b:ef: a7:55:ef:88:b3:fc:32:cd:08:3a:c1:df:a4:01:fd: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DB:C0:67:9A:5B:87:E6:52:88:72:DE:36:26:1D:80:79:1B:3C:13 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f3:24:b3:a3:a0:f4:cf:d8:86:18:a5:25:60:53:50:30:2d: 57:b7:89:db:1d:9f:19:c1:d4:1b:7b:69:1a:c8:95:13:6a:a4: ac:23:d4:a2:0b:07:57:29:72:34:c6:51:5c:a4:da:5b:be:35: f8:20:5f:35:b5:ec:3c:c8:c6:1c:05:c7:d7:01:fa:f0:41:e5: 63:60:aa:44:56:78:fa:6b:27:4e:30:dc:5d:1e:6b:d9:78:da: d8:ac:ff:6a:d7:8a:06:48:23:87:c3:3f:be:eb:9e:7e:59:e5: e1:7f:ec:7d:80:f5:e0:36:0a:50:91:a0:34:cc:2b:18:fd:a2: a5:70:70:27:18:46:af:a8:a6:63:58:9f:c1:e5:14:83:8c:c9: 4a:29:df:c5:66:e1:f1:b5:34:c7:d8:f9:a4:cf:16:6c:64:11: 79:ec:27:de:56:a3:6c:20:6b:1f:32:98:e6:e9:f4:33:b5:6c: fa:5d:2a:9c:43:03:45:fe:d6:fd:6e:1f:a3:9e:51:56:fa:d9: bd:46:ba:7b:e4:ce:5f:36:ae:12:79:39:d4:fc:de:7a:27:08: 6c:8c:57:25:43:96:94:60:02:a3:32:e9:4e:e8:7f:17:0b:47: 22:2d:20:fd:b9:04:7e:b1:ce:5f:62:81:52:ef:82:02:ef:ac: 64:4f:d7:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUwNTMwMTUxODE4WhcNMjUwNjA2MTUxODE4WjAYMRYwFAYD VQQDEw02ODM5Y2MzYS0zZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC4HTfZXRJt5V4PLEJpA9HUbiUM/f9n57Tllpfgo3vFl9+gm2YEMlJIz0x7z WINYxiAcMfDqCHMGJXmhnmD/nW/UwloBvZLEqaANXqjyUw7p6ELolLxUmuKjr7bW UfQ38qbgYK7xhwIXsGYbie8drflMsxvCrDC2ux/YRJiQ5Utl5Yk/dHMAIm/Jw0ef fvlHMcwUJrfUwx15qhnRGK8xFNSNWVIqTp9unRXnCmlyL6kwk5ocGC5kfRa60QID MOLfb4kwksVgNiXzCveiqyLlED80d5Nxv+Vj5OEky9UVwvZchmrWcROHLSRmQuGP C++nVe+Is/wyzQg6wd+kAf3qFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnbwGea W4fmUohy3jYmHYB5GzwTMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM8ySzo6D0z9iGGKUlYFNQMC1Xt4nbHZ8ZwdQbe2kayJUTaqSsI9Si CwdXKXI0xlFcpNpbvjX4IF81tew8yMYcBcfXAfrwQeVjYKpEVnj6aydOMNxdHmvZ eNrYrP9q14oGSCOHwz++655+WeXhf+x9gPXgNgpQkaA0zCsY/aKlcHAnGEavqKZj WJ/B5RSDjMlKKd/FZuHxtTTH2PmkzxZsZBF57CfeVqNsIGsfMpjm6fQztWz6XSqc QwNF/tb9bh+jnlFW+tm9Rrp75M5fNq4SeTnU/N56JwhsjFclQ5aUYAKjMulO6H8X C0ciLSD9uQR+sc5fYoFS74IC76xkT9e4 -----END CERTIFICATE-----Generated at Sat May 31 16:30:34 2025 by rpki-client