$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: 0k0cegKjGrvmjVsSsrqrZCtEgg6fYnqWIq1ll9/6Buc= Subject key identifier: 91:A6:3F:FC:42:C2:F1:56:91:61:E8:CD:01:D6:5A:CF:62:55:C8:EC Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 05B5 Signing time: Thu 16 Apr 2026 23:02:48 +0000 Manifest this update: Thu 16 Apr 2026 23:02:48 +0000 Manifest next update: Thu 23 Apr 2026 23:02:48 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: jxkMf6J4bO9ge4bze1IhXZbUj9MHH4mGprO9s4+nUKk=) 2: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=) 3: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A=) 4: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Apr 16 23:02:48 2026 GMT Not After : Apr 23 23:02:48 2026 GMT Subject: CN=69e16a98-a5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:70:14:4e:50:ed:4d:93:5d:de:2c:57:89: 86:44:8e:1c:bc:96:5f:53:e5:0e:b2:fa:23:a6:be: 07:b4:0f:f2:29:a8:ba:31:23:f6:b9:86:aa:20:52: b4:c5:1f:cb:a6:8a:4a:a8:c8:2b:d3:e3:22:fc:27: c2:07:8c:6d:6f:0b:4c:41:a7:2d:5f:3f:d7:81:3b: 6d:86:45:b0:cc:36:4e:b1:8e:38:5c:95:62:a0:74: be:2e:b3:87:4f:57:a3:12:3a:3b:26:d0:db:d0:05: 19:76:44:60:be:34:67:22:09:ba:53:13:c4:54:98: 71:6b:16:7c:30:32:98:ae:e6:d0:b8:9a:c1:10:70: ae:bc:3a:57:01:86:6b:70:3b:d2:62:43:c1:51:19: 4a:e3:0e:fb:7b:86:bc:5d:dd:be:05:01:62:53:f8: 78:76:6a:ea:4a:46:4c:22:cf:66:86:73:83:30:fc: 2b:fd:77:13:3a:b9:07:6b:49:1b:1a:ea:57:91:00: e7:62:44:f3:17:2c:15:78:47:e8:71:08:29:4b:35: 79:35:56:c2:46:d5:68:dc:e0:64:8d:f5:84:75:44: a7:7b:2c:94:eb:dc:c8:55:9b:20:f6:37:a5:97:cc: 60:9e:b8:74:fa:41:39:e4:98:53:38:f1:97:3b:09: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:3F:FC:42:C2:F1:56:91:61:E8:CD:01:D6:5A:CF:62:55:C8:EC X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0e:96:4f:81:0c:a5:94:9c:17:3c:6f:2e:3b:c5:13:cd:0e: 29:cd:08:00:99:90:5e:6c:5e:b9:38:4b:50:45:85:97:4d:63: 34:e7:b7:94:bd:5c:d3:75:1a:be:2a:6d:10:f8:d8:94:ad:75: 4d:0e:a3:06:83:48:66:6e:85:f9:83:2d:1e:9c:e6:14:3c:4f: 58:c6:3c:3d:8b:f2:42:8b:ab:4b:56:7d:6c:9a:6d:90:73:dd: eb:df:55:e0:59:f8:51:1c:f5:8c:a7:4b:66:0d:ab:4c:ac:f1: 1c:a9:19:22:99:44:36:c2:82:a0:de:88:71:72:ed:ef:64:97: 5a:c1:48:78:0f:43:c4:a1:1a:3f:4b:ad:8b:bf:26:68:1e:af: 11:b5:33:91:3a:fd:7c:91:22:e1:8a:3c:f7:11:8f:d6:1a:c4: 25:8c:e8:2c:4b:35:d5:f9:a9:8b:ff:fb:24:c5:c2:58:20:f4: ee:d9:1a:df:58:c8:ad:3d:83:01:38:cc:92:85:c7:a1:22:a0: 21:19:11:87:59:f0:da:a2:8f:7c:f3:c1:bc:8a:bc:fe:1a:e7: b4:9d:66:d4:7e:05:53:13:bb:6e:a4:65:28:d7:32:f6:3c:1b: 0b:c5:c1:21:d2:55:58:63:e6:33:38:95:03:4d:53:eb:36:47: ac:d4:9c:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYwNDE2MjMwMjQ4WhcNMjYwNDIzMjMwMjQ4WjAYMRYwFAYD VQQDEw02OWUxNmE5OC1hNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+pwFE5Q7U2TXd4sV4mGRI4cvJZfU+UOsvojpr4HtA/yKai6MSP2uYaqIFK0 xR/LpopKqMgr0+Mi/CfCB4xtbwtMQactXz/XgTtthkWwzDZOsY44XJVioHS+LrOH T1ejEjo7JtDb0AUZdkRgvjRnIgm6UxPEVJhxaxZ8MDKYrubQuJrBEHCuvDpXAYZr cDvSYkPBURlK4w77e4a8Xd2+BQFiU/h4dmrqSkZMIs9mhnODMPwr/XcTOrkHa0kb GupXkQDnYkTzFywVeEfocQgpSzV5NVbCRtVo3OBkjfWEdUSneyyU69zIVZsg9jel l8xgnrh0+kE55JhTOPGXOwle+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGmP/xC wvFWkWHozQHWWs9iVcjsMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJQ6WT4EMpZScFzxvLjvFE80OKc0IAJmQXmxeuThLUEWFl01jNOe3lL1c03Ua viptEPjYlK11TQ6jBoNIZm6F+YMtHpzmFDxPWMY8PYvyQourS1Z9bJptkHPd699V 4Fn4URz1jKdLZg2rTKzxHKkZIplENsKCoN6IcXLt72SXWsFIeA9DxKEaP0uti78m aB6vEbUzkTr9fJEi4Yo89xGP1hrEJYzoLEs11fmpi//7JMXCWCD07tka31jIrT2D ATjMkoXHoSKgIRkRh1nw2qKPfPPBvIq8/hrntJ1m1H4FUxO7bqRlKNcy9jwbC8XB IdJVWGPmMziVA01T6zZHrNScOQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:58:04 2026 by rpki-client