$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: cuFcuN2TGdoJtmalHc5LEeRX1W8KkRC1nXRlTcY2zd0= Subject key identifier: AC:AC:DA:D2:71:07:BF:CD:8A:B3:3E:5D:16:6F:AB:BC:F5:81:25:F4 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0627 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 060D Signing time: Fri 02 Oct 2026 23:10:36 +0000 Manifest this update: Fri 02 Oct 2026 23:10:35 +0000 Manifest next update: Fri 09 Oct 2026 23:10:35 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: JP5+sK+7Chk4ylIPwYUl3CTGEjy5BjpcqWUTltZgBRI=) 2: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: BEQydmSPM6NpP2VFyIGDTzWNt5dBPjQ05Sy2Ep3ty1Y=) 3: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: CKO5Hc2zwRmtfp+VI6gZQ7oHkW148unU7KWSCzimqOQ=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: GpcirUxFNDgOCvfv98bIfM13cs2RLLwYzoAIDg7bed4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1575 (0x627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Oct 2 23:10:35 2026 GMT Not After : Oct 9 23:10:35 2026 GMT Subject: CN=6ac039eb-9412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:90:bf:74:eb:3e:99:f0:fb:9e:5b:ba:cc: e6:04:78:1f:d9:0f:f6:dd:a5:b3:65:d8:76:a8:ee: ce:62:12:78:eb:94:68:b0:3c:d7:1d:3c:b5:3e:4e: 4b:a3:7e:9a:30:27:40:5d:10:9f:90:55:ad:2b:32: c7:a6:63:57:03:5d:d3:28:83:ee:ca:1f:20:4e:83: 9f:2c:e8:ef:b7:2b:f0:a4:f9:c3:c1:60:56:2b:1d: d6:11:bd:ef:a4:fd:e2:5b:fa:d9:06:00:96:f0:9a: 89:ff:0c:55:74:01:1d:21:36:7a:62:49:30:67:a9: 69:00:ee:94:61:cd:de:15:bd:8a:c0:09:7d:a3:ff: 04:fa:7d:16:40:a1:d4:27:e2:78:b4:bb:87:a0:d6: 5e:92:ae:6e:29:e2:5c:88:e5:ab:61:ed:7c:7c:5b: 19:7a:13:ad:a6:b2:59:4a:8b:6f:7f:96:4d:58:e7: b9:8b:e0:3a:89:16:53:11:1d:b4:7d:12:77:2e:34: ee:1e:73:b2:b7:f2:a3:93:3f:9d:25:15:f4:a5:27: 49:a4:02:82:59:08:1f:25:7c:d8:fb:c3:85:05:82: f9:99:0a:28:71:96:af:52:2f:30:f7:8a:1f:ab:79: 89:2c:b9:52:d7:c0:6f:64:a1:15:4b:35:3d:21:d8: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AC:DA:D2:71:07:BF:CD:8A:B3:3E:5D:16:6F:AB:BC:F5:81:25:F4 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:42:9f:39:56:d7:b8:0d:65:de:7e:f2:cd:09:76:f1:dd:42: c5:59:6f:88:9d:83:8e:66:25:ae:71:91:df:61:00:d8:ed:04: 88:94:42:59:81:e8:ab:ce:e8:12:b2:40:ba:af:12:38:8b:e2: 4a:5d:0b:a8:1a:08:b5:d7:eb:f2:5e:bc:f7:b9:f7:c7:ae:96: 1b:49:4b:7a:77:66:b4:97:9e:04:29:49:9d:fc:21:0c:4b:14: 04:34:cf:03:52:07:d8:ca:f7:20:09:95:00:e4:74:a8:11:97: 1d:e7:06:f0:a2:87:0f:43:5c:04:15:f3:d9:11:6b:1e:b1:c7: b0:c6:88:74:90:2d:3b:66:81:71:06:af:5e:3b:d7:5f:eb:f6: 37:b9:67:1e:c2:df:d5:f9:73:5c:b1:27:4c:1e:8b:f0:da:4d: a9:f1:98:f4:19:87:5f:66:71:24:03:e8:40:fe:4e:a8:55:9a: 10:7f:16:c5:d7:5e:c3:a2:da:09:93:f7:26:7c:2c:f2:b2:4e: 87:2b:aa:ed:1a:e4:8b:ee:36:54:f0:86:07:28:bd:ad:34:e5: 1c:d4:5b:2d:6b:e2:cd:6d:c4:2d:1f:43:c7:48:37:12:c1:14: 25:41:9c:5b:3b:cf:8c:14:b9:10:7d:72:30:7a:52:33:d9:e8: 5f:f6:73:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYxMDAyMjMxMDM1WhcNMjYxMDA5MjMxMDM1WjAYMRYwFAYD VQQDEw02YWMwMzllYi05NDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOuQv3TrPpnw+55buszmBHgf2Q/23aWzZdh2qO7OYhJ465RosDzXHTy1Pk5L o36aMCdAXRCfkFWtKzLHpmNXA13TKIPuyh8gToOfLOjvtyvwpPnDwWBWKx3WEb3v pP3iW/rZBgCW8JqJ/wxVdAEdITZ6YkkwZ6lpAO6UYc3eFb2KwAl9o/8E+n0WQKHU J+J4tLuHoNZekq5uKeJciOWrYe18fFsZehOtprJZSotvf5ZNWOe5i+A6iRZTER20 fRJ3LjTuHnOyt/Kjkz+dJRX0pSdJpAKCWQgfJXzY+8OFBYL5mQoocZavUi8w94of q3mJLLlS18BvZKEVSzU9Idg5JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKys2tJx B7/NirM+XRZvq7z1gSX0MB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIkKfOVbXuA1l3n7yzQl28d1CxVlviJ2DjmYlrnGR32EA2O0EiJRCWYHoq87o ErJAuq8SOIviSl0LqBoItdfr8l6897n3x66WG0lLendmtJeeBClJnfwhDEsUBDTP A1IH2Mr3IAmVAOR0qBGXHecG8KKHD0NcBBXz2RFrHrHHsMaIdJAtO2aBcQavXjvX X+v2N7lnHsLf1flzXLEnTB6L8NpNqfGY9BmHX2ZxJAPoQP5OqFWaEH8Wxddew6La CZP3Jnws8rJOhyuq7Rrki+42VPCGByi9rTTlHNRbLWvizW3ELR9Dx0g3EsEUJUGc WzvPjBS5EH1yMHpSM9noX/ZzBw== -----END CERTIFICATE-----Generated at Sun Oct 4 18:31:48 2026 by rpki-client