$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: rdGUhtsxlRm4hHTKSHxUB/TqS7S/L+AMLaiyTSTQukM= Subject key identifier: 15:AC:E8:BC:1D:71:AD:5A:9E:D1:34:6B:51:E4:EF:8F:2F:63:B9:92 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 0538 Signing time: Fri 22 Aug 2025 23:41:52 +0000 Manifest this update: Fri 22 Aug 2025 23:41:52 +0000 Manifest next update: Fri 29 Aug 2025 23:41:52 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: DWzu4k82w5nLMUxFV6xRJEoTf1tqBo7SR3tZzRZCcsQ=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Aug 22 23:41:52 2025 GMT Not After : Aug 29 23:41:52 2025 GMT Subject: CN=68a90040-68c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:aa:9d:e9:a3:e9:68:a5:8d:fe:d6:8b:2d:9f: f2:21:09:09:da:a1:b9:09:a9:6b:cc:3e:9d:c4:73: 3d:40:d2:9d:84:df:99:b9:4d:7b:fd:c8:a2:55:62: e2:bb:82:b8:92:6b:64:54:8c:25:bb:1d:d7:04:a9: 28:66:6e:f8:cb:98:34:6d:db:6f:0a:77:e5:71:87: 0c:02:42:f3:1f:11:91:b3:f3:c4:4e:9c:27:e6:83: cb:ae:5a:45:ec:b3:a3:91:88:e9:1d:dd:e8:76:98: 9e:53:d8:d0:87:bf:c9:d2:f2:68:97:d8:91:dc:88: d9:c7:16:d8:52:b2:c5:b5:23:75:4b:6f:14:45:a9: 8c:4b:a8:a7:b8:80:2b:ed:bd:79:88:9f:b2:03:2e: 1a:d5:74:af:df:5f:a2:64:68:f4:64:74:0f:16:34: 9f:8a:ef:23:eb:2c:1d:a3:6d:74:4f:54:d7:94:ad: 34:36:bb:6f:8e:b9:f3:d2:1c:45:0b:6f:e4:5b:33: c5:77:db:7e:4e:a6:7e:72:c7:91:e0:ce:e6:24:84: 99:4c:6d:94:0e:de:5b:75:70:f8:e0:5e:14:d9:bc: d8:c1:80:ca:aa:5a:5a:8b:43:b4:a0:38:64:dd:a2: 80:ac:13:da:05:88:2c:fe:db:d9:a6:f8:4e:ff:57: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AC:E8:BC:1D:71:AD:5A:9E:D1:34:6B:51:E4:EF:8F:2F:63:B9:92 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:42:fd:99:fc:48:b9:aa:a4:e7:18:9d:4c:29:25:6b:55:af: 62:38:61:69:73:e4:c4:66:0d:5a:6b:2f:b6:33:83:13:88:a7: 2b:4d:01:54:2b:11:33:ab:fc:6d:a4:30:16:1f:e2:16:96:93: 23:bb:9c:3a:c0:bb:63:7f:8f:21:8d:ee:95:82:61:e5:7e:a1: 16:54:04:8c:dd:44:4d:e1:ca:c6:66:b3:02:34:d7:14:8e:23: 31:14:e0:54:8f:0d:fa:d5:44:bd:07:57:f9:ba:af:4f:79:0a: 48:31:ec:e8:12:27:43:4d:be:0e:e9:0b:57:49:d7:a2:8c:25: 68:e2:32:df:6b:d2:5a:38:a9:5b:23:91:b5:26:e9:8e:b1:e0: 48:4f:4b:d5:80:3e:86:20:14:aa:7f:52:4a:e2:8b:b5:8b:10: 6d:e4:05:3f:e2:de:6a:16:e6:78:60:a7:db:22:ed:3b:fd:4e: ac:db:f0:97:dc:5a:44:55:ef:4b:22:37:75:cf:29:c4:2d:51: a1:fe:89:e1:c4:20:40:15:bd:ae:69:60:04:c5:0b:46:46:40: b4:94:d3:a4:39:72:bd:90:39:43:d1:dc:20:0e:91:cc:16:82: 23:0f:10:eb:97:f6:50:cf:f5:d4:3b:12:c7:18:ec:32:d0:62: 4c:17:a7:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwODIyMjM0MTUyWhcNMjUwODI5MjM0MTUyWjAYMRYwFAYD VQQDEw02OGE5MDA0MC02OGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKqd6aPpaKWN/taLLZ/yIQkJ2qG5CalrzD6dxHM9QNKdhN+ZuU17/ciiVWLi u4K4kmtkVIwlux3XBKkoZm74y5g0bdtvCnflcYcMAkLzHxGRs/PETpwn5oPLrlpF 7LOjkYjpHd3odpieU9jQh7/J0vJol9iR3IjZxxbYUrLFtSN1S28URamMS6inuIAr 7b15iJ+yAy4a1XSv31+iZGj0ZHQPFjSfiu8j6ywdo210T1TXlK00Nrtvjrnz0hxF C2/kWzPFd9t+TqZ+cseR4M7mJISZTG2UDt5bdXD44F4U2bzYwYDKqlpai0O0oDhk 3aKArBPaBYgs/tvZpvhO/1f2TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWs6Lwd ca1antE0a1Hk748vY7mSMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRQv2Z/Ei5qqTnGJ1MKSVrVa9iOGFpc+TEZg1aay+2M4MTiKcrTQFU KxEzq/xtpDAWH+IWlpMju5w6wLtjf48hje6VgmHlfqEWVASM3URN4crGZrMCNNcU jiMxFOBUjw361US9B1f5uq9PeQpIMezoEidDTb4O6QtXSdeijCVo4jLfa9JaOKlb I5G1JumOseBIT0vVgD6GIBSqf1JK4ou1ixBt5AU/4t5qFuZ4YKfbIu07/U6s2/CX 3FpEVe9LIjd1zynELVGh/onhxCBAFb2uaWAExQtGRkC0lNOkOXK9kDlD0dwgDpHM FoIjDxDrl/ZQz/XUOxLHGOwy0GJMF6dq -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:45 2025 by rpki-client