$ rpki-client -vvf rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft File: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft (raw, json) Hash identifier: sre4Q74NqZmT57r69laZffvWxgaFynKTsJBzhbXspls= Subject key identifier: 43:17:8D:9C:F4:0B:3A:27:CF:5B:B0:E9:60:DB:24:C0:68:44:E3:64 Authority key identifier: EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B Certificate issuer: /CN=A9151258/serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Certificate serial: 34DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft Manifest number: 34DB Signing time: Sun 02 Nov 2025 15:13:07 +0000 Manifest this update: Sun 02 Nov 2025 15:13:07 +0000 Manifest next update: Sun 09 Nov 2025 15:13:07 +0000 Files and hashes: 1: 7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl (hash: uin8kLQULV+uEJbND5xkR1IhbKMWUK9pgpadhm48d10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13531 (0x34db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151258, serialNumber=EC4E079354B64E0547EB9F4055524B442FB3D43B Validity Not Before: Nov 2 15:13:07 2025 GMT Not After : Nov 9 15:13:07 2025 GMT Subject: CN=69077503-35bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:07:45:84:e2:9d:9e:f6:80:81:dc:93:4c: bc:1d:fb:7c:4b:78:2b:ff:4b:eb:ef:dd:b6:03:99: 60:3e:42:5b:ad:09:38:09:be:a9:ff:7b:7d:a5:2c: 5e:28:19:5f:74:ac:09:e3:22:ed:ac:30:e4:3d:c6: 89:39:14:69:f6:00:99:98:c4:8f:92:b7:f0:f9:fd: c5:cd:ff:24:23:1b:68:22:a7:03:2c:68:55:51:2a: c8:10:e2:78:4d:21:c9:26:24:86:e7:3b:ff:e3:fb: 2a:df:7c:cb:9c:d2:4c:1d:08:9b:60:b4:a3:58:68: e6:34:42:d4:31:eb:d5:9a:89:9f:2f:da:e7:45:bb: 29:b1:00:6e:12:41:7e:c2:5c:ac:92:1e:c5:7d:5a: a9:8a:c1:05:3f:a4:42:4e:50:7b:f4:8e:0c:a2:ab: b9:43:9b:fa:41:d4:c8:01:54:73:79:57:f6:b3:bd: 05:12:ba:bb:38:bf:23:b2:da:f4:6e:46:11:8f:bf: 92:ae:30:da:a1:ff:6c:3f:33:5f:85:c1:a1:07:4c: 99:e9:3a:a6:a1:59:42:87:67:9b:c1:21:d6:41:99: 73:c5:31:cd:e5:29:9c:30:83:f2:0b:65:d0:49:9a: 1c:b1:bf:72:10:40:8b:42:57:07:ce:18:73:15:81: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:17:8D:9C:F4:0B:3A:27:CF:5B:B0:E9:60:DB:24:C0:68:44:E3:64 X509v3 Authority Key Identifier: keyid:EC:4E:07:93:54:B6:4E:05:47:EB:9F:40:55:52:4B:44:2F:B3:D4:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151258/C848CE641DA611E286D91D9E08B02CD2/7E4Hk1S2TgVH659AVVJLRC-z1Ds.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:29:28:57:71:22:ff:e9:98:68:79:c8:d1:4c:57:e3:70:7d: c1:42:66:a7:49:80:f2:95:03:2c:00:fb:b5:45:71:77:18:50: 1c:76:1b:86:25:bd:63:ab:07:a2:4f:2d:61:c9:88:26:fe:e4: 80:6a:38:75:19:8c:03:a3:26:70:6e:a3:77:70:58:53:2c:d6: e9:2f:ff:68:6d:f0:86:6f:d2:55:65:5f:20:23:7c:0e:f4:8c: a0:f7:d6:3b:f7:78:ba:1e:b1:73:a1:dc:02:68:be:14:9f:a1: 4f:46:3d:fb:c1:f6:98:48:2e:e3:00:73:91:f6:db:eb:97:ce: 6f:2c:9a:ac:8e:70:9a:7e:08:ef:0b:df:49:94:99:5e:cc:9a: 1e:f1:25:54:a1:9b:05:28:dd:0a:89:fe:1c:e4:53:c9:b6:be: cd:7f:55:3c:82:f9:76:e3:7d:03:4d:17:a1:0c:7f:b8:d6:74: aa:33:d8:c0:ca:53:08:c5:e7:78:2a:93:d7:e7:80:0f:9a:78: b3:3d:d4:0e:6b:cf:c7:0f:2a:f2:22:c1:d9:d8:24:78:e4:b9: a8:7a:22:bc:1b:95:62:51:d6:f1:9a:b5:1c:4a:1c:59:de:65: 6e:3a:41:85:aa:25:40:1f:26:87:f5:2d:16:d1:6d:a9:33:73: ef:7b:32:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEyNTgxMTAvBgNVBAUTKEVDNEUwNzkzNTRCNjRFMDU0N0VCOUY0MDU1NTI0QjQ0 MkZCM0Q0M0IwHhcNMjUxMTAyMTUxMzA3WhcNMjUxMTA5MTUxMzA3WjAYMRYwFAYD VQQDEw02OTA3NzUwMy0zNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNQHRYTinZ72gIHck0y8Hft8S3gr/0vr7922A5lgPkJbrQk4Cb6p/3t9pSxe KBlfdKwJ4yLtrDDkPcaJORRp9gCZmMSPkrfw+f3Fzf8kIxtoIqcDLGhVUSrIEOJ4 TSHJJiSG5zv/4/sq33zLnNJMHQibYLSjWGjmNELUMevVmomfL9rnRbspsQBuEkF+ wlyskh7FfVqpisEFP6RCTlB79I4Moqu5Q5v6QdTIAVRzeVf2s70FErq7OL8jstr0 bkYRj7+SrjDaof9sPzNfhcGhB0yZ6TqmoVlCh2ebwSHWQZlzxTHN5SmcMIPyC2XQ SZocsb9yEECLQlcHzhhzFYHR6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMXjZz0 Czonz1uw6WDbJMBoRONkMB8GA1UdIwQYMBaAFOxOB5NUtk4FR+ufQFVSS0Qvs9Q7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTI1OC9DODQ4Q0U2NDFE QTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRnVkg2NTlBVlZKTFJDLXox RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFNEhrMVMyVGdWSDY1OUFWVkpMUkMtejFEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTI1OC9DODQ4Q0U2NDFEQTYxMUUyODZEOTFEOUUwOEIwMkNEMi83RTRIazFTMlRn Vkg2NTlBVlZKTFJDLXoxRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKShXcSL/6ZhoecjRTFfjcH3BQmanSYDylQMsAPu1RXF3GFAcdhuG Jb1jqweiTy1hyYgm/uSAajh1GYwDoyZwbqN3cFhTLNbpL/9obfCGb9JVZV8gI3wO 9Iyg99Y793i6HrFzodwCaL4Un6FPRj37wfaYSC7jAHOR9tvrl85vLJqsjnCafgjv C99JlJlezJoe8SVUoZsFKN0Kif4c5FPJtr7Nf1U8gvl2430DTRehDH+41nSqM9jA ylMIxed4KpPX54APmnizPdQOa8/HDyryIsHZ2CR45LmoeiK8G5ViUdbxmrUcShxZ 3mVuOkGFqiVAHyaH9S0W0W2pM3PvezKx -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:43 2025 by rpki-client