$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: iUl8UXU517zCsluu+ogiGe4F+tZYs1/YsGvRMt/dM2c= Subject key identifier: 4D:A7:FE:B4:D7:FB:A1:CA:C5:8A:42:65:39:3D:E2:0D:7C:EB:62:5E Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 05AF Signing time: Sat 04 Apr 2026 22:56:10 +0000 Manifest this update: Sat 04 Apr 2026 22:56:09 +0000 Manifest next update: Sat 11 Apr 2026 22:56:09 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: 97+SPse9OwILo+Hg/F7s7yYTjzZloXva+2/2+PW6oOU=) 2: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=) 4: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Apr 4 22:56:09 2026 GMT Not After : Apr 11 22:56:09 2026 GMT Subject: CN=69d19709-25df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a4:08:d4:98:b6:f6:16:8a:00:7b:14:9a:38: fc:cc:fc:0d:cf:8a:d5:e6:ab:e6:04:89:a8:2e:60: 72:78:b4:04:3e:23:bd:db:27:86:89:8f:2a:eb:1f: df:d2:f5:71:bf:30:4a:25:00:3a:60:37:07:7e:83: d4:68:35:5d:83:9d:3c:42:cc:73:70:29:23:1e:2f: 08:2e:da:a9:76:7f:44:db:5b:05:f3:cd:2d:21:5e: 7a:e3:36:b3:8e:61:fe:69:6c:7e:90:0e:f4:dd:83: 27:84:b6:44:87:a2:18:f6:42:3a:75:85:d9:2e:cc: 94:14:a2:07:69:47:1a:34:d0:9f:26:76:b8:d7:fc: d8:36:4a:7b:1f:a1:3a:17:c0:83:8b:56:f9:8d:5e: 9b:e3:53:6e:38:17:34:0f:d7:dd:b2:bd:27:52:7c: 77:43:f4:45:bf:fe:e3:e2:51:7c:7f:02:a3:c3:7f: 37:93:8a:26:35:17:ca:53:4a:18:60:00:d8:ae:4c: b3:41:33:92:6e:a7:ec:2b:23:bc:86:de:61:55:c3: 9b:f8:6a:64:1f:e6:d0:09:8e:50:21:5e:81:bb:41: 0e:3a:5f:af:9f:c6:fe:0c:fa:2f:23:70:30:71:83: 4f:0f:10:49:05:82:49:95:43:27:40:1b:81:38:b9: 22:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A7:FE:B4:D7:FB:A1:CA:C5:8A:42:65:39:3D:E2:0D:7C:EB:62:5E X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e3:1a:41:85:35:29:3e:c5:ff:54:a6:1c:84:13:cd:54:c6: b8:ca:0d:d1:f1:45:28:c6:d4:a1:67:26:8e:11:21:ee:80:1a: 0b:b2:3a:fd:5e:7f:70:6e:80:2c:ca:dd:ed:ed:c3:9e:51:82: 63:b4:41:cc:08:77:b1:60:b1:5a:e1:22:92:ca:ad:dc:59:c5: 7d:51:6a:90:8b:8b:d2:65:a2:62:69:2e:db:a5:de:5f:34:e3: 61:65:c7:2d:64:8b:3a:7f:dc:21:60:9f:bc:f7:7d:f1:e3:97: ab:75:f6:97:a1:3a:48:83:85:4a:45:53:9a:43:27:e4:11:bf: 1a:96:01:81:04:4c:57:35:ed:6c:a1:8f:bd:a6:b2:1e:50:75: 72:84:86:e6:1c:27:88:19:61:fd:4e:69:f7:0f:2f:ac:09:f3: d2:b5:c0:bb:15:dc:4b:1d:30:3e:2e:b1:e9:78:42:72:13:00: f3:21:5d:f6:e5:e7:ee:2d:98:8c:1a:fa:6d:08:95:fe:96:fb: 37:e4:87:1c:d1:86:83:91:38:87:b2:fd:fa:01:f6:14:cd:62: 41:c5:0d:6d:46:ac:3b:a5:2e:00:a6:a0:f3:8c:c3:f2:39:ef: 5b:8d:0e:4b:b4:12:3a:02:ac:5d:dc:07:52:18:00:0a:80:c3: be:b0:c1:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjYwNDA0MjI1NjA5WhcNMjYwNDExMjI1NjA5WjAYMRYwFAYD VQQDEw02OWQxOTcwOS0yNWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6QI1Ji29haKAHsUmjj8zPwNz4rV5qvmBImoLmByeLQEPiO92yeGiY8q6x/f 0vVxvzBKJQA6YDcHfoPUaDVdg508QsxzcCkjHi8ILtqpdn9E21sF880tIV564zaz jmH+aWx+kA703YMnhLZEh6IY9kI6dYXZLsyUFKIHaUcaNNCfJna41/zYNkp7H6E6 F8CDi1b5jV6b41NuOBc0D9fdsr0nUnx3Q/RFv/7j4lF8fwKjw383k4omNRfKU0oY YADYrkyzQTOSbqfsKyO8ht5hVcOb+GpkH+bQCY5QIV6Bu0EOOl+vn8b+DPovI3Aw cYNPDxBJBYJJlUMnQBuBOLkiOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2n/rTX +6HKxYpCZTk94g1862JeMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeeMaQYU1KT7F/1SmHIQTzVTGuMoN0fFFKMbUoWcmjhEh7oAaC7I6/V5/cG6A LMrd7e3DnlGCY7RBzAh3sWCxWuEiksqt3FnFfVFqkIuL0mWiYmku26XeXzTjYWXH LWSLOn/cIWCfvPd98eOXq3X2l6E6SIOFSkVTmkMn5BG/GpYBgQRMVzXtbKGPvaay HlB1coSG5hwniBlh/U5p9w8vrAnz0rXAuxXcSx0wPi6x6XhCchMA8yFd9uXn7i2Y jBr6bQiV/pb7N+SHHNGGg5E4h7L9+gH2FM1iQcUNbUasO6UuAKag84zD8jnvW40O S7QSOgKsXdwHUhgACoDDvrDBBQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:45 2026 by rpki-client