$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: pUEGH7WJQ7Ua6T5pHyTvgv6HCHk9nPy6G4vnnIPzWUA= Subject key identifier: A3:71:E0:19:35:6C:BB:D5:D2:3E:EE:2E:25:6A:22:EF:3E:14:E4:6F Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 0514 Signing time: Thu 12 Jun 2025 23:12:44 +0000 Manifest this update: Thu 12 Jun 2025 23:12:44 +0000 Manifest next update: Thu 19 Jun 2025 23:12:44 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: Y1ecqI/vvuRjSsgdeNHOdT1Fy/3hfHpBw3f7u9e7dts=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Jun 12 23:12:44 2025 GMT Not After : Jun 19 23:12:44 2025 GMT Subject: CN=684b5eec-b9cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:65:da:28:9a:28:53:52:84:9e:fd:45:ee:74: c9:5d:39:28:d3:78:cf:67:9e:61:7c:45:94:30:c4: 99:e1:63:75:57:50:a9:11:b0:a7:2f:30:76:2a:79: c1:cb:dc:10:0d:42:7a:5b:75:b8:8a:72:a0:e2:da: 84:c5:05:e7:46:c9:fb:26:f3:8a:60:b9:40:c0:65: 49:68:40:5e:ab:ed:99:d3:7f:0a:32:c1:08:06:f2: a9:e8:f9:47:0d:dd:13:52:fe:37:af:24:12:33:1f: 18:b3:1c:ab:1d:57:b0:71:fc:28:6c:d4:d9:08:f3: 36:05:a6:f3:f5:c9:54:3e:7b:8f:3c:ae:ed:a4:fd: c2:d9:46:38:05:b2:2d:3d:2f:b5:96:76:3a:15:16: b2:98:f7:03:69:69:67:00:16:65:68:b2:19:70:90: 7b:9f:1b:d7:de:4a:69:48:c9:60:f0:a2:47:1d:53: bc:8d:1d:f1:89:71:6b:b5:cb:55:e3:52:5f:84:f9: e7:51:10:9e:e6:a3:fa:05:c4:f5:e3:e4:3f:12:86: 11:9b:af:80:bd:c1:7c:55:d3:72:5b:bb:a6:3a:f9: 76:54:bf:4c:9b:f4:97:5c:b7:8c:84:0e:11:43:1c: b6:2e:33:80:96:75:b4:1b:0c:41:85:b2:fd:83:91: 1c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:71:E0:19:35:6C:BB:D5:D2:3E:EE:2E:25:6A:22:EF:3E:14:E4:6F X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ea:1b:cd:0b:91:30:cb:1c:4c:6d:65:47:b9:1f:1c:1b:4f: fa:79:3d:1a:65:1d:33:71:4c:63:7d:70:c2:4b:ed:de:b4:71: ce:2d:c0:e2:4a:0f:d5:83:11:87:43:80:0a:1e:57:55:91:03: 40:32:11:af:e3:34:01:b6:e4:9a:d8:be:49:cd:5e:46:f8:90: b7:35:f0:27:d6:9a:08:c3:d6:a8:48:87:b5:61:bd:d9:cd:43: 06:13:cb:16:8a:ff:fc:17:dc:c6:ff:51:b8:a4:08:50:75:b8: 51:b5:97:a2:33:0a:23:0b:c0:23:6b:f2:a6:64:bc:63:f0:63: 6a:0b:9c:26:da:31:65:41:93:cd:35:7a:fb:f5:bb:79:0a:80: f7:fb:a4:f9:de:ae:5e:df:dd:3a:2a:37:d3:18:3d:17:05:cf: 64:35:24:a9:f6:49:db:7e:07:fe:36:7e:3d:73:7c:78:b8:a5: 2e:42:4d:ea:a4:06:aa:42:bf:38:d8:85:2c:ab:44:91:60:cd: 36:dc:84:c7:32:3a:8f:d8:12:07:19:ae:d2:7a:01:35:16:d6: e4:64:d4:91:da:56:09:d3:df:ab:87:50:46:2e:d3:f8:ca:df: c9:48:fd:11:9d:d5:dd:11:68:18:e4:59:66:f1:4a:40:4b:bf: 2a:a7:65:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwNjEyMjMxMjQ0WhcNMjUwNjE5MjMxMjQ0WjAYMRYwFAYD VQQDEw02ODRiNWVlYy1iOWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mXaKJooU1KEnv1F7nTJXTko03jPZ55hfEWUMMSZ4WN1V1CpEbCnLzB2KnnB y9wQDUJ6W3W4inKg4tqExQXnRsn7JvOKYLlAwGVJaEBeq+2Z038KMsEIBvKp6PlH Dd0TUv43ryQSMx8YsxyrHVewcfwobNTZCPM2Babz9clUPnuPPK7tpP3C2UY4BbIt PS+1lnY6FRaymPcDaWlnABZlaLIZcJB7nxvX3kppSMlg8KJHHVO8jR3xiXFrtctV 41JfhPnnURCe5qP6BcT14+Q/EoYRm6+AvcF8VdNyW7umOvl2VL9Mm/SXXLeMhA4R Qxy2LjOAlnW0GwxBhbL9g5Ec3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNx4Bk1 bLvV0j7uLiVqIu8+FORvMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP6hvNC5EwyxxMbWVHuR8cG0/6eT0aZR0zcUxjfXDCS+3etHHOLcDi Sg/VgxGHQ4AKHldVkQNAMhGv4zQBtuSa2L5JzV5G+JC3NfAn1poIw9aoSIe1Yb3Z zUMGE8sWiv/8F9zG/1G4pAhQdbhRtZeiMwojC8Aja/KmZLxj8GNqC5wm2jFlQZPN NXr79bt5CoD3+6T53q5e3906KjfTGD0XBc9kNSSp9knbfgf+Nn49c3x4uKUuQk3q pAaqQr842IUsq0SRYM023ITHMjqP2BIHGa7SegE1FtbkZNSR2lYJ09+rh1BGLtP4 yt/JSP0RndXdEWgY5Flm8UpAS78qp2XQ -----END CERTIFICATE-----Generated at Sat Jun 14 20:56:19 2025 by rpki-client