$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: uxaKQ9xrBIn4/o08IDMv4/Lr5TbwfRZepRHlwax4lR4= Subject key identifier: 92:1B:53:AE:2A:C9:BE:8E:24:D5:C9:0A:C0:B8:5C:2B:2D:E9:1D:7B Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 0534 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 0526 Signing time: Fri 18 Jul 2025 23:54:44 +0000 Manifest this update: Fri 18 Jul 2025 23:54:43 +0000 Manifest next update: Fri 25 Jul 2025 23:54:43 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: LU9ACdX06Az30gCNyWIak6GAlB8Rq5PijHkClHiPksg=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1332 (0x534) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: Jul 18 23:54:43 2025 GMT Not After : Jul 25 23:54:43 2025 GMT Subject: CN=687adec3-f443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:e8:b1:82:58:16:f3:bb:a9:80:31:e8:72: 7a:bc:45:f7:ab:bf:9c:87:8e:3b:9b:28:80:e8:5b: c9:28:d6:85:5f:29:47:1f:3d:eb:38:d3:c0:8c:09: dd:b2:07:c2:a3:8c:8d:ac:01:0d:72:d9:b4:96:ad: 93:c9:ff:51:0d:e0:93:46:6e:cd:03:9c:97:87:bf: 35:33:b3:d0:48:2b:75:01:db:05:33:f5:c9:0a:7d: fc:61:3c:2e:b5:5f:4e:c1:5b:25:50:75:44:d0:b6: 90:40:21:fc:30:20:91:3a:26:48:04:a6:89:a0:1e: dd:d0:3a:92:f2:5f:22:7e:0e:89:91:b3:60:4f:09: 64:3a:20:aa:c5:bf:6a:7c:7d:64:bf:6d:98:4d:28: 85:4e:bc:0b:45:3a:9f:61:3e:c6:f2:fb:6d:55:e4: 0c:02:25:07:61:74:e1:56:d4:5c:60:b0:27:ce:5f: d0:0a:01:35:cf:1a:ec:47:87:49:bb:03:4d:b6:1d: 85:3f:01:17:e2:ca:c8:80:c6:b8:ff:d7:1a:8f:3b: 76:e1:58:31:b2:d8:8a:fa:72:f9:37:19:e8:dc:64: 05:bf:13:68:23:55:3d:fd:02:2f:6b:7d:1f:48:c2: cb:17:1d:8b:ac:f5:cb:d7:f2:6c:bc:c7:06:ab:a2: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:53:AE:2A:C9:BE:8E:24:D5:C9:0A:C0:B8:5C:2B:2D:E9:1D:7B X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:f1:d5:89:97:bc:61:73:c1:95:90:c7:3f:b6:93:64:5f:84: 30:b1:87:42:e3:c8:06:fb:51:6d:34:2f:a9:07:f8:8a:a5:31: 1c:b3:8f:88:f6:38:36:ad:f7:22:5f:3f:af:e4:4f:0d:d0:d2: 54:f3:25:1c:6c:9d:55:6a:a9:fb:46:96:8b:1a:db:32:4c:35: cb:85:f3:71:90:77:b3:f0:9b:47:b4:42:d4:27:87:df:40:f9: a0:87:0d:88:4f:c4:5d:30:2a:7b:f9:02:88:cd:7b:6b:dd:51: 87:7c:2f:a9:a9:ca:00:59:c2:46:38:57:60:42:f6:bd:9e:f2: 4a:d1:32:4b:7d:ff:39:49:94:1d:54:58:8f:46:76:e4:d7:4e: 86:dd:7b:14:46:81:9c:4d:a1:2f:c5:9b:40:9e:0d:4d:18:34: f8:e6:c5:3e:d3:43:56:4e:43:38:14:91:85:10:70:04:b1:d2: ab:51:73:79:99:11:ce:0d:29:7c:c1:a6:eb:87:7d:29:ca:b3: 01:6d:f8:86:21:22:cc:bc:44:a1:2b:57:91:c2:10:ff:02:be: 31:ef:5f:77:34:3c:ca:2a:e0:4d:b8:81:e5:3a:d9:0d:84:35: 5f:14:8e:93:9e:ed:18:51:9e:b3:66:01:a6:a0:14:20:94:eb: 3d:a7:df:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwNzE4MjM1NDQzWhcNMjUwNzI1MjM1NDQzWjAYMRYwFAYD VQQDEw02ODdhZGVjMy1mNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2P/osYJYFvO7qYAx6HJ6vEX3q7+ch447myiA6FvJKNaFXylHHz3rONPAjAnd sgfCo4yNrAENctm0lq2Tyf9RDeCTRm7NA5yXh781M7PQSCt1AdsFM/XJCn38YTwu tV9OwVslUHVE0LaQQCH8MCCROiZIBKaJoB7d0DqS8l8ifg6JkbNgTwlkOiCqxb9q fH1kv22YTSiFTrwLRTqfYT7G8vttVeQMAiUHYXThVtRcYLAnzl/QCgE1zxrsR4dJ uwNNth2FPwEX4srIgMa4/9cajzt24VgxstiK+nL5Nxno3GQFvxNoI1U9/QIva30f SMLLFx2LrPXL1/JsvMcGq6KH/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJIbU64q yb6OJNXJCsC4XCst6R17MB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo8dWJl7xhc8GVkMc/tpNkX4QwsYdC48gG+1FtNC+pB/iKpTEcs4+I 9jg2rfciXz+v5E8N0NJU8yUcbJ1Vaqn7RpaLGtsyTDXLhfNxkHez8JtHtELUJ4ff QPmghw2IT8RdMCp7+QKIzXtr3VGHfC+pqcoAWcJGOFdgQva9nvJK0TJLff85SZQd VFiPRnbk106G3XsURoGcTaEvxZtAng1NGDT45sU+00NWTkM4FJGFEHAEsdKrUXN5 mRHODSl8wabrh30pyrMBbfiGISLMvEShK1eRwhD/Ar4x7193NDzKKuBNuIHlOtkN hDVfFI6Tnu0YUZ6zZgGmoBQglOs9p99t -----END CERTIFICATE-----Generated at Sun Jul 20 07:36:25 2025 by rpki-client