$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: 0ASAlT2mJXACBu8njyaQAfKojrYCGCODPPl4k/2Tiao= Subject key identifier: BC:F0:AE:1E:A1:B8:35:DF:99:39:95:E9:49:63:CF:7E:B1:2D:92:80 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 055F Signing time: Tue 04 Nov 2025 23:27:41 +0000 Manifest this update: Tue 04 Nov 2025 23:27:40 +0000 Manifest next update: Tue 11 Nov 2025 23:27:40 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: OWpeCoo2CVtLzb2P5WeG7xoFUoLvmE34Ugb+d2MR6WQ=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: Xe5R5MOlm4gwXbVja2Q4tYsbuWQrcSRJ+5R+3dF8PsM=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: EroGR2PKG0Syu1AnhKuuGY0KAjoG8CwxX6jbtNC3fQQ=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: JR+JLVhrBv19TVxeSOsCpkJTUKAD4jSPXjbCWZYYaDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:27:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Nov 4 23:27:40 2025 GMT Not After : Nov 11 23:27:40 2025 GMT Subject: CN=690a8bec-a186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:b0:ea:13:ed:36:87:6f:ca:87:47:e7:80: a2:4d:81:5c:58:07:e5:80:67:51:15:50:07:b7:46: 8b:4d:13:a9:1b:83:db:50:f1:c1:9e:a4:8b:fb:56: 38:56:ba:08:0c:8b:51:f4:7d:88:59:0a:67:70:0b: b2:48:6b:c0:1b:9b:cf:c7:c3:a4:b5:9e:69:fb:c6: 3f:82:46:39:0e:d6:f3:88:49:bb:76:1b:38:dd:5d: e6:e3:9d:26:a1:60:7f:ab:e3:c3:6d:5c:42:dc:1b: 6b:aa:50:58:d7:ed:7a:49:53:40:d5:fc:c6:95:69: 72:76:56:d7:ac:7d:df:0f:e5:26:47:a8:6e:d4:df: 75:a6:2b:a0:22:ad:30:59:3a:b5:66:e6:39:44:24: 36:13:4d:4a:dc:d5:ed:fb:b8:ba:b1:40:5b:92:86: 29:59:d7:90:6a:8b:c6:e4:73:c8:09:64:46:67:fe: a5:76:44:68:2c:60:b3:78:1b:36:5d:43:b8:83:a8: e2:61:21:3a:df:8f:3c:fc:ce:31:03:01:a4:08:29: db:64:fb:14:5d:b6:73:df:27:67:e1:6e:00:b9:ea: 5a:84:4a:2b:fd:9f:6a:80:21:12:36:aa:91:48:84: 5d:9b:7c:e4:8d:d5:c6:24:ff:09:5f:32:b8:8b:39: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F0:AE:1E:A1:B8:35:DF:99:39:95:E9:49:63:CF:7E:B1:2D:92:80 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:11:56:bc:ff:58:2b:4a:3f:55:8a:ab:4b:0e:e9:33:07:55: 9b:ed:45:47:f9:3c:90:ab:cd:9f:f1:fa:4f:bf:42:89:bf:dc: a0:ab:50:ad:2e:bd:5d:d0:63:77:d9:2d:70:3b:9d:f3:b7:12: 38:ff:19:74:3f:bb:44:ca:3d:0e:b7:fe:a2:5d:7c:8c:ca:7f: 69:d3:60:2a:12:98:d7:2d:2e:78:b5:00:a2:77:2b:d1:5d:26: 22:44:9b:35:ef:1c:ac:75:d7:07:19:e8:b5:2b:34:39:c4:9e: 6f:bc:df:ef:51:aa:21:7a:c8:1b:d4:c3:f8:8f:6a:4a:28:f0: 8f:b4:93:05:dd:5c:46:2c:07:20:f8:50:02:45:9a:0c:84:cf: 0e:fd:4c:f2:bd:8d:57:2a:9b:fe:68:a5:6a:43:70:9a:bf:32: 00:70:03:77:6d:1e:ac:f3:8b:1e:d9:52:eb:fc:da:e0:36:af: b5:9b:c3:c9:0a:48:9f:57:5a:d7:28:fa:c9:28:a4:79:b4:eb: aa:e4:cd:e8:35:58:5e:62:34:c7:d2:19:d1:2b:0d:78:71:c4: ac:aa:1b:a2:bd:5b:75:5b:8c:20:7b:08:36:b7:e4:67:38:f3: 26:0b:c7:1a:ad:4f:01:d8:05:f9:58:5c:5e:4e:60:da:8e:d0: 90:45:85:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUxMTA0MjMyNzQwWhcNMjUxMTExMjMyNzQwWjAYMRYwFAYD VQQDEw02OTBhOGJlYy1hMTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8Ww6hPtNodvyodH54CiTYFcWAflgGdRFVAHt0aLTROpG4PbUPHBnqSL+1Y4 VroIDItR9H2IWQpncAuySGvAG5vPx8OktZ5p+8Y/gkY5DtbziEm7dhs43V3m450m oWB/q+PDbVxC3BtrqlBY1+16SVNA1fzGlWlydlbXrH3fD+UmR6hu1N91piugIq0w WTq1ZuY5RCQ2E01K3NXt+7i6sUBbkoYpWdeQaovG5HPICWRGZ/6ldkRoLGCzeBs2 XUO4g6jiYSE63488/M4xAwGkCCnbZPsUXbZz3ydn4W4AuepahEor/Z9qgCESNqqR SIRdm3zkjdXGJP8JXzK4iznH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzwrh6h uDXfmTmV6Uljz36xLZKAMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/EVa8/1grSj9ViqtLDukzB1Wb7UVH+TyQq82f8fpPv0KJv9ygq1Ct Lr1d0GN32S1wO53ztxI4/xl0P7tEyj0Ot/6iXXyMyn9p02AqEpjXLS54tQCidyvR XSYiRJs17xysddcHGei1KzQ5xJ5vvN/vUaohesgb1MP4j2pKKPCPtJMF3VxGLAcg +FACRZoMhM8O/UzyvY1XKpv+aKVqQ3CavzIAcAN3bR6s84se2VLr/NrgNq+1m8PJ CkifV1rXKPrJKKR5tOuq5M3oNVheYjTH0hnRKw14ccSsqhuivVt1W4wgewg2t+Rn OPMmC8carU8B2AX5WFxeTmDajtCQRYWa -----END CERTIFICATE-----Generated at Wed Nov 5 13:46:44 2025 by rpki-client