$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: euWsl+h8CoY3TBuPmwS1cAz0XAsAhY8yPxKJ4SZhfiE= Subject key identifier: AD:D7:7E:F0:CA:77:D0:49:41:97:47:3C:77:40:8C:25:83:1B:88:B3 Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 0609 Signing time: Thu 24 Sep 2026 22:45:50 +0000 Manifest this update: Thu 24 Sep 2026 22:45:50 +0000 Manifest next update: Thu 01 Oct 2026 22:45:50 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: 5ra0vN7mieURT7zWx/3lwDfzdnq3srn4Nps20nzOCIE=) 2: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: BEQydmSPM6NpP2VFyIGDTzWNt5dBPjQ05Sy2Ep3ty1Y=) 3: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: GpcirUxFNDgOCvfv98bIfM13cs2RLLwYzoAIDg7bed4=) 4: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: CKO5Hc2zwRmtfp+VI6gZQ7oHkW148unU7KWSCzimqOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 22:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Sep 24 22:45:50 2026 GMT Not After : Oct 1 22:45:50 2026 GMT Subject: CN=6ab5a81e-b2e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:09:34:1c:3e:1d:d3:a0:f4:2f:59:de:3d: 9a:f9:a5:88:42:e8:8a:50:67:b3:b0:b6:60:9c:5d: be:9e:00:d8:78:d4:5b:41:5b:54:c3:7e:78:41:32: a2:43:46:63:b9:3a:84:89:a0:e4:5a:51:cb:ea:44: da:f4:8e:f9:98:45:aa:ea:f9:a4:53:94:44:d8:02: 7b:ce:0f:35:f4:eb:ef:58:17:b1:07:c4:2c:1e:23: 90:7c:08:83:b0:98:66:28:6d:90:7f:04:8b:14:9b: 85:0d:c2:f9:34:2c:eb:4c:2c:05:95:1d:82:a4:a9: 38:bc:07:84:2c:0b:9f:a1:0d:ce:f0:fc:4a:d8:43: c5:fb:91:be:13:0c:65:25:c8:45:f6:5b:14:c6:40: cf:50:c2:7b:42:15:ec:a9:f0:52:c7:a0:01:48:4f: b7:04:d6:3e:ed:61:ff:d4:8c:97:a9:05:36:a0:d2: c6:0b:0e:8e:95:96:ea:f4:32:c6:12:88:af:7d:1d: 7c:16:54:16:1e:3f:fd:28:50:c1:1a:53:c0:85:2a: 01:c7:70:95:f9:d8:5e:c6:aa:b7:aa:4e:06:b7:81: d8:a0:b1:91:d2:5c:86:c6:7a:9b:3f:8a:2b:bf:0c: ca:0e:c7:19:c0:0e:26:ee:fc:74:33:02:51:4b:1d: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:7E:F0:CA:77:D0:49:41:97:47:3C:77:40:8C:25:83:1B:88:B3 X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:00:7f:1a:8b:ea:01:83:0c:75:1e:dc:9a:1a:d1:9d:8e:23: 4e:21:9c:9a:7a:3a:22:ea:f3:16:d5:f5:eb:88:07:bb:0a:d8: 3a:a9:ce:19:c7:ff:61:1b:3a:da:3a:38:b0:c1:39:6f:c1:47: b8:7f:fd:fb:7b:57:aa:2a:09:6e:3c:73:5c:8f:80:10:96:70: 7a:8e:dd:b4:19:43:68:70:57:b1:63:fb:82:30:f9:0c:fc:9d: e9:7e:8f:e9:52:8d:6a:7c:aa:93:84:d7:2f:f9:a0:0f:f1:e5: 7a:68:09:48:3b:45:ca:eb:30:44:aa:e8:97:93:dd:c6:b7:57: 25:fc:37:82:1c:17:72:45:a1:2d:2b:90:9a:a5:79:43:77:16: 6e:0c:db:68:66:8e:51:ee:7f:6e:50:af:15:75:6f:ca:ae:75: 2a:c6:63:41:b2:7c:1e:be:a5:ee:8f:93:50:d8:e8:ee:41:e5: 42:5d:47:15:e0:9d:08:54:f7:fe:36:59:f6:7e:de:a4:92:91: 5e:09:07:1c:5e:ea:7e:4b:a4:1e:97:47:92:1b:72:ae:6f:ca: 4c:4f:9b:2a:cb:cc:10:65:0e:f8:02:58:91:1f:0a:b5:f5:1a: 9e:98:de:dd:70:e3:cf:7a:0c:e3:62:05:fe:3c:53:c8:8c:b7: 1e:52:6d:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYwOTI0MjI0NTUwWhcNMjYxMDAxMjI0NTUwWjAYMRYwFAYD VQQDEw02YWI1YTgxZS1iMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8IJNBw+HdOg9C9Z3j2a+aWIQuiKUGezsLZgnF2+ngDYeNRbQVtUw354QTKi Q0ZjuTqEiaDkWlHL6kTa9I75mEWq6vmkU5RE2AJ7zg819OvvWBexB8QsHiOQfAiD sJhmKG2QfwSLFJuFDcL5NCzrTCwFlR2CpKk4vAeELAufoQ3O8PxK2EPF+5G+Ewxl JchF9lsUxkDPUMJ7QhXsqfBSx6ABSE+3BNY+7WH/1IyXqQU2oNLGCw6OlZbq9DLG EoivfR18FlQWHj/9KFDBGlPAhSoBx3CV+dhexqq3qk4Gt4HYoLGR0lyGxnqbP4or vwzKDscZwA4m7vx0MwJRSx1dNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3XfvDK d9BJQZdHPHdAjCWDG4izMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQB/GovqAYMMdR7cmhrRnY4jTiGcmno6IurzFtX164gHuwrYOqnOGcf/YRs6 2jo4sME5b8FHuH/9+3tXqioJbjxzXI+AEJZweo7dtBlDaHBXsWP7gjD5DPyd6X6P 6VKNanyqk4TXL/mgD/HlemgJSDtFyuswRKrol5PdxrdXJfw3ghwXckWhLSuQmqV5 Q3cWbgzbaGaOUe5/blCvFXVvyq51KsZjQbJ8Hr6l7o+TUNjo7kHlQl1HFeCdCFT3 /jZZ9n7epJKRXgkHHF7qfkukHpdHkhtyrm/KTE+bKsvMEGUO+AJYkR8KtfUanpje 3XDjz3oM42IF/jxTyIy3HlJtEA== -----END CERTIFICATE-----Generated at Sat Sep 26 05:32:29 2026 by rpki-client