$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: E9gkusy/k02KVq3Y+lZZN2GCNtPs/UD7jHkqyVHUde4= Subject key identifier: B1:08:11:03:07:F4:8A:61:6D:72:3B:7E:FA:6C:5C:D5:AC:4E:94:EC Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 050A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 04FC Signing time: Thu 24 Apr 2025 23:27:54 +0000 Manifest this update: Thu 24 Apr 2025 23:27:54 +0000 Manifest next update: Thu 01 May 2025 23:27:54 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: Hy6wjTH2VLIHYbbFnzSO8+0KEjMA3gLi0Gdk6ucxMjE=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1290 (0x50a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Apr 24 23:27:54 2025 GMT Not After : May 1 23:27:54 2025 GMT Subject: CN=680ac8fa-e3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:33:e9:a6:01:c6:ee:ca:8c:41:97:07:e0: b3:e0:53:11:22:42:27:7e:97:e9:14:54:c5:da:27: 28:21:94:10:af:ec:1a:d9:31:33:f8:f2:75:3b:55: f9:9c:c8:f9:39:cf:be:e6:8a:c2:f8:ef:03:1f:59: 98:c7:6d:51:f3:3a:48:59:56:35:ed:11:87:24:27: 6c:2e:2d:4a:f8:45:e3:b2:ef:4d:fe:90:e2:d6:86: 24:d2:78:a8:90:fb:0c:70:7d:3e:71:55:c0:09:fd: 63:12:2a:53:ed:71:bb:c4:49:8a:ed:82:b1:53:01: 76:19:b6:c9:d9:93:53:c0:5e:77:e3:f2:d0:03:ae: df:7e:e5:ea:f0:d5:0c:26:47:fb:f6:a5:33:a4:72: d1:49:f6:07:1b:dd:07:07:db:aa:ee:8c:81:ae:d6: 35:8c:02:64:12:83:fc:37:91:09:18:68:b5:fd:64: 77:6b:14:05:96:5c:35:50:31:c9:5a:94:fd:a9:d1: 05:b7:59:63:d3:8a:7a:a8:e7:22:e7:2b:b1:52:92: 06:26:d8:e7:0b:fa:fa:95:6b:96:97:3c:fa:6f:93: a6:e2:00:07:b3:a4:8d:01:9f:02:89:ac:df:08:60: ec:3d:ab:61:83:83:7a:dc:f0:02:f3:a4:22:f2:2c: 65:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:08:11:03:07:F4:8A:61:6D:72:3B:7E:FA:6C:5C:D5:AC:4E:94:EC X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0c:e5:60:8a:f1:86:34:b1:67:fc:3a:be:4a:3e:99:28:4f: 58:3d:96:9b:80:ed:7b:95:a5:92:cc:2c:d8:82:70:76:d3:54: 5a:87:96:76:f5:44:cd:20:9c:b8:94:2c:02:5a:2a:ad:d8:df: b0:a6:37:10:ed:fb:07:0b:7c:f6:9f:dd:87:be:ec:5a:30:93: 95:cb:1e:29:4a:9e:9c:ba:b5:e4:d7:4a:e9:2b:e2:e4:78:2d: b4:d9:ec:fd:e1:cc:df:92:10:56:0e:9f:5d:94:3b:1e:de:20: 72:c4:e3:c0:d6:03:6f:ff:b6:cb:9b:a0:92:67:92:cb:60:dd: d7:5b:f6:cb:78:10:c8:a6:64:42:ef:81:01:96:25:17:63:30: b1:00:e3:b8:9a:65:39:cb:89:40:f0:12:e0:31:78:41:55:75: 4f:2d:f1:c0:62:de:c0:89:48:06:d1:bf:32:bb:04:f7:d2:1f: c2:2d:69:67:40:99:c4:ec:d0:e1:3c:80:51:49:dc:0c:5d:48: 95:55:00:4d:e4:64:8d:6f:4e:f3:ec:fa:2e:d4:7d:da:33:d9: 22:cf:d3:a9:54:ec:cf:1c:ae:0d:9a:32:79:e0:81:ae:b1:bd: 56:ee:18:53:ea:09:cd:69:9e:47:20:e7:57:0c:72:26:87:91: c5:17:c1:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwNDI0MjMyNzU0WhcNMjUwNTAxMjMyNzU0WjAYMRYwFAYD VQQDEw02ODBhYzhmYS1lM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+4z6aYBxu7KjEGXB+Cz4FMRIkInfpfpFFTF2icoIZQQr+wa2TEz+PJ1O1X5 nMj5Oc++5orC+O8DH1mYx21R8zpIWVY17RGHJCdsLi1K+EXjsu9N/pDi1oYk0nio kPsMcH0+cVXACf1jEipT7XG7xEmK7YKxUwF2GbbJ2ZNTwF534/LQA67ffuXq8NUM Jkf79qUzpHLRSfYHG90HB9uq7oyBrtY1jAJkEoP8N5EJGGi1/WR3axQFllw1UDHJ WpT9qdEFt1lj04p6qOci5yuxUpIGJtjnC/r6lWuWlzz6b5Om4gAHs6SNAZ8Ciazf CGDsPathg4N63PAC86Qi8ixllwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLEIEQMH 9IphbXI7fvpsXNWsTpTsMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+DOVgivGGNLFn/Dq+Sj6ZKE9YPZabgO17laWSzCzYgnB201Rah5Z2 9UTNIJy4lCwCWiqt2N+wpjcQ7fsHC3z2n92HvuxaMJOVyx4pSp6curXk10rpK+Lk eC202ez94czfkhBWDp9dlDse3iByxOPA1gNv/7bLm6CSZ5LLYN3XW/bLeBDIpmRC 74EBliUXYzCxAOO4mmU5y4lA8BLgMXhBVXVPLfHAYt7AiUgG0b8yuwT30h/CLWln QJnE7NDhPIBRSdwMXUiVVQBN5GSNb07z7Pou1H3aM9kiz9OpVOzPHK4NmjJ54IGu sb1W7hhT6gnNaZ5HIOdXDHImh5HFF8E8 -----END CERTIFICATE-----Generated at Sat Apr 26 13:41:33 2025 by rpki-client