$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: wZWHhtpp0PGBCfrRf315ZC6OC8LmEs1qhpBUzjFZO0w= Subject key identifier: BF:31:48:8E:1D:33:1B:A5:EB:2A:BD:16:F6:E6:12:34:83:DC:3E:A2 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 0531 Signing time: Fri 08 Aug 2025 23:59:08 +0000 Manifest this update: Fri 08 Aug 2025 23:59:08 +0000 Manifest next update: Fri 15 Aug 2025 23:59:07 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: fOKHDaKCN/wdiuTxynhKTEQWflxRicXpC6IX35yAkIw=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Aug 8 23:59:08 2025 GMT Not After : Aug 15 23:59:07 2025 GMT Subject: CN=68968f4c-3883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:05:99:d2:21:7d:27:fb:77:39:eb:e0:4c:45: f9:ed:56:d6:7e:b8:8d:17:1f:3b:62:b9:d3:3f:26: 07:9a:dc:c8:84:eb:c0:c6:08:91:f7:33:ef:2c:33: 1d:1b:60:55:ec:f0:32:39:7c:18:ca:ee:0d:dc:01: 01:cc:93:80:f2:91:ef:f0:d0:be:49:91:28:4d:d1: ad:93:c2:9c:b8:6e:ba:30:81:82:71:d8:8f:75:33: c7:47:cd:f2:af:65:9a:cd:b8:68:ae:79:78:35:67: 15:35:61:c9:56:5a:3e:f9:17:69:9f:1b:b6:37:aa: 6e:de:d8:4d:a1:56:83:82:d3:ba:f1:d1:ad:d9:c4: 42:de:73:13:94:f3:9e:1b:ce:6b:3a:77:3c:3d:4b: be:74:44:93:d6:11:5a:2d:3c:95:eb:d7:8d:d5:65: aa:30:41:07:9a:d9:07:52:44:65:db:e6:18:3a:d8: 1e:66:43:05:d4:34:e3:5c:56:c8:bc:fa:25:9e:38: 50:10:19:d3:2e:02:2e:d1:3e:66:c3:9e:3b:97:ab: 06:23:5a:44:cc:6a:af:4c:84:18:ae:be:99:ce:20: 2d:a4:49:b9:da:41:e2:49:20:38:48:5c:b4:e0:0e: 7f:af:c2:b9:6a:23:0c:3d:b3:fe:74:19:68:12:9b: 40:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:31:48:8E:1D:33:1B:A5:EB:2A:BD:16:F6:E6:12:34:83:DC:3E:A2 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1f:40:5a:c4:df:f7:07:03:e2:d4:b6:b3:49:a5:6d:32:d9: aa:5e:b9:7b:02:46:4b:c7:2d:37:d6:16:e1:ae:cf:ed:25:5f: 38:1c:eb:a2:29:86:bb:71:c1:11:49:ad:45:8c:23:e9:3f:6d: b7:e5:2c:60:c3:32:0c:45:5d:7d:5f:c4:b5:7f:e2:6e:36:d5: 8d:96:bf:9c:9a:f7:4c:79:ef:90:3b:28:b0:c9:40:55:66:0e: 17:55:d3:c3:2d:3f:95:9e:62:64:fe:66:e4:e9:79:55:71:34: ed:20:ce:1e:75:7d:12:7c:93:aa:40:b5:70:85:a0:62:57:d5: 0b:90:b8:32:7d:c5:50:ea:b7:74:3d:c3:26:96:f3:6c:9c:35: b6:19:f5:de:29:98:88:db:72:5c:25:3b:70:6d:67:12:ee:b2: c1:93:84:cd:5e:85:b8:58:70:b5:c4:05:3e:01:ef:eb:ee:18: b9:3b:d4:4c:1e:fd:e1:83:24:ef:3c:89:98:ea:13:30:bd:f3: 87:c4:ca:11:d8:3f:19:39:3a:9b:81:40:5d:bf:40:3a:69:42: 23:5f:b6:e9:b7:73:06:ff:14:e4:50:d8:10:ea:64:94:15:0e: eb:cc:52:d9:56:4a:c7:c0:4e:3e:7f:d1:8d:59:e8:20:2c:ba: f4:a6:35:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwODA4MjM1OTA4WhcNMjUwODE1MjM1OTA3WjAYMRYwFAYD VQQDEw02ODk2OGY0Yy0zODgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtAWZ0iF9J/t3OevgTEX57VbWfriNFx87YrnTPyYHmtzIhOvAxgiR9zPvLDMd G2BV7PAyOXwYyu4N3AEBzJOA8pHv8NC+SZEoTdGtk8KcuG66MIGCcdiPdTPHR83y r2Wazbhornl4NWcVNWHJVlo++Rdpnxu2N6pu3thNoVaDgtO68dGt2cRC3nMTlPOe G85rOnc8PUu+dEST1hFaLTyV69eN1WWqMEEHmtkHUkRl2+YYOtgeZkMF1DTjXFbI vPolnjhQEBnTLgIu0T5mw547l6sGI1pEzGqvTIQYrr6ZziAtpEm52kHiSSA4SFy0 4A5/r8K5aiMMPbP+dBloEptA1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8xSI4d Mxul6yq9FvbmEjSD3D6iMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbH0BaxN/3BwPi1LazSaVtMtmqXrl7AkZLxy031hbhrs/tJV84HOui KYa7ccERSa1FjCPpP2235SxgwzIMRV19X8S1f+JuNtWNlr+cmvdMee+QOyiwyUBV Zg4XVdPDLT+VnmJk/mbk6XlVcTTtIM4edX0SfJOqQLVwhaBiV9ULkLgyfcVQ6rd0 PcMmlvNsnDW2GfXeKZiI23JcJTtwbWcS7rLBk4TNXoW4WHC1xAU+Ae/r7hi5O9RM Hv3hgyTvPImY6hMwvfOHxMoR2D8ZOTqbgUBdv0A6aUIjX7bpt3MG/xTkUNgQ6mSU FQ7rzFLZVkrHwE4+f9GNWeggLLr0pjUt -----END CERTIFICATE-----Generated at Sat Aug 9 05:48:08 2025 by rpki-client