$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: ZbxtrMB5LrP6FK82vcMJ6tbOu9AkNJQHRvVKsb2pPCo= Subject key identifier: 98:88:6F:D8:75:AF:A1:55:EA:71:F7:A7:A7:3F:35:83:3A:19:21:88 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 05C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 05A9 Signing time: Tue 24 Mar 2026 22:51:47 +0000 Manifest this update: Tue 24 Mar 2026 22:51:46 +0000 Manifest next update: Tue 31 Mar 2026 22:51:46 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: pbTCo1n5PJXTn86EWvkfl2RAikB608Sz9oiRYfEUMQA=) 2: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=) 4: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Mar 24 22:51:46 2026 GMT Not After : Mar 31 22:51:46 2026 GMT Subject: CN=69c31583-5ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b1:e7:28:39:60:ba:e0:c5:c7:69:77:56:ef: 35:0b:d8:30:35:a2:7b:4e:21:ca:1b:49:f9:b9:39: 6b:92:d4:5e:ec:f5:c0:1e:f0:c4:58:e7:c9:bb:fc: 3a:44:d5:dd:4e:cc:69:9e:ee:10:cf:df:87:d2:26: a1:3e:b5:f3:49:db:fd:31:c0:7c:c1:d4:18:9f:c6: b1:a8:00:8a:3a:ee:9c:a1:2e:67:00:8b:11:1f:e8: 9f:e7:5b:9f:ec:c6:cb:e4:a1:d9:d2:6e:9d:19:18: af:71:e8:8b:b5:a5:6a:49:79:7a:0a:b7:d0:3c:52: 56:b7:aa:53:73:60:fa:ff:e4:c2:55:81:d6:d1:d1: f6:77:ac:ea:22:5c:2a:46:03:25:fe:77:dc:23:6f: e5:9e:45:55:5c:aa:0c:8f:6f:db:5d:c6:2f:2e:f6: 4e:db:c0:12:38:e2:92:18:c2:fa:5f:0a:5c:ee:8a: 6c:2d:a2:c3:a0:4d:2e:72:4f:85:f0:d8:d7:77:b0: d4:53:a5:a2:02:f0:08:a6:a1:0c:f4:d8:46:91:b5: a2:ce:03:6a:d5:96:5b:1d:da:89:e9:7e:53:5f:86: bf:03:d6:dd:58:43:72:a6:c4:38:77:f8:11:da:d7: 04:df:9c:61:51:a1:3d:d3:27:06:cd:1c:3f:93:df: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:88:6F:D8:75:AF:A1:55:EA:71:F7:A7:A7:3F:35:83:3A:19:21:88 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8d:96:8c:36:67:78:04:d8:1d:4c:4e:83:4c:f4:50:54:34: 04:af:4d:ae:e4:6f:1b:7d:8d:4a:0c:72:59:ff:7b:1b:cf:56: da:98:65:15:b0:86:87:9f:82:43:d3:79:b5:af:74:31:79:f7: fb:1b:b6:9c:2c:01:b9:94:45:ca:b2:56:e2:4d:d7:43:bd:62: 4b:bf:be:fb:da:7b:43:95:5a:94:e2:53:8e:6e:fe:85:c9:77: 77:9f:0b:fa:62:0d:f0:55:a6:57:66:8f:43:2b:34:b4:cc:6c: 9c:df:68:a7:3e:33:87:63:0b:45:70:af:be:8e:30:24:68:95: 06:8d:b2:1d:ee:d1:c7:2c:d3:81:35:11:0c:ce:a3:4a:18:87: 27:18:0e:d9:23:04:18:84:4c:34:b4:5c:88:29:72:45:f6:6e: 9a:14:49:2a:d2:4b:34:5a:f6:64:74:0a:cd:85:7b:ce:2b:b7: 87:73:40:67:ff:03:cc:17:e5:a5:4b:a3:eb:52:84:e9:88:d9: 19:f2:03:76:25:0c:ba:b7:c7:b2:63:4e:94:26:73:d7:e3:15: 52:bc:4f:4e:1b:9b:19:00:e2:ca:2b:94:9d:c0:cf:51:16:f8: a3:c0:5e:bc:df:0e:8a:b8:84:e9:e5:a1:e7:5a:28:02:57:54: 55:24:6a:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYwMzI0MjI1MTQ2WhcNMjYwMzMxMjI1MTQ2WjAYMRYwFAYD VQQDEw02OWMzMTU4My01YWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi7HnKDlguuDFx2l3Vu81C9gwNaJ7TiHKG0n5uTlrktRe7PXAHvDEWOfJu/w6 RNXdTsxpnu4Qz9+H0iahPrXzSdv9McB8wdQYn8axqACKOu6coS5nAIsRH+if51uf 7MbL5KHZ0m6dGRivceiLtaVqSXl6CrfQPFJWt6pTc2D6/+TCVYHW0dH2d6zqIlwq RgMl/nfcI2/lnkVVXKoMj2/bXcYvLvZO28ASOOKSGML6Xwpc7opsLaLDoE0uck+F 8NjXd7DUU6WiAvAIpqEM9NhGkbWizgNq1ZZbHdqJ6X5TX4a/A9bdWENypsQ4d/gR 2tcE35xhUaE90ycGzRw/k9852QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJiIb9h1 r6FV6nH3p6c/NYM6GSGIMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABo2WjDZneATYHUxOg0z0UFQ0BK9NruRvG32NSgxyWf97G89W2phlFbCGh5+C Q9N5ta90MXn3+xu2nCwBuZRFyrJW4k3XQ71iS7+++9p7Q5ValOJTjm7+hcl3d58L +mIN8FWmV2aPQys0tMxsnN9opz4zh2MLRXCvvo4wJGiVBo2yHe7RxyzTgTURDM6j ShiHJxgO2SMEGIRMNLRciClyRfZumhRJKtJLNFr2ZHQKzYV7ziu3h3NAZ/8DzBfl pUuj61KE6YjZGfIDdiUMurfHsmNOlCZz1+MVUrxPThubGQDiyiuUncDPURb4o8Be vN8OiriE6eWh51ooAldUVSRqFA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:30:00 2026 by rpki-client