$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json) Hash identifier: 5WLqYz63W+CbO+gWVitB684v0IneW+AgcqT331cbdUQ= Subject key identifier: 24:F7:7B:67:26:27:3B:9B:ED:BF:AD:00:3E:DA:49:1D:10:75:1C:9D Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Certificate serial: 051B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft Manifest number: 050D Signing time: Fri 30 May 2025 23:50:18 +0000 Manifest this update: Fri 30 May 2025 23:50:18 +0000 Manifest next update: Fri 06 Jun 2025 23:50:18 +0000 Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: LvxlfzF3qVUwfvKQJbkX5wDvrgx97FRTXArajAc9c+g=) 2: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: ZFVD/gWXM15jrbAvaaadW934NyuKqXgp7C1n9VDgd6M=) 3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: i3s18BaY3hcoxMjxy2QU6cAUMzbd78K/9/AXgiaYx9w=) 4: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: 2k3mmFRSm00PZ1eU/1nDOAndoGHlqgxcb+UsBjNPu14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1307 (0x51b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9 Validity Not Before: May 30 23:50:18 2025 GMT Not After : Jun 6 23:50:18 2025 GMT Subject: CN=683a443a-2f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:f8:11:89:5d:64:75:75:3b:02:3b:29:26:b7: dc:22:80:98:62:55:87:ff:c0:46:b6:ca:00:8c:91: 2a:41:1d:e9:99:49:bb:26:f1:6f:65:ff:d5:29:9c: 21:23:67:27:b9:35:79:34:b3:43:d3:84:e0:9b:fd: 5d:9f:be:f3:07:36:91:f1:b7:63:65:7d:53:c6:3f: 11:92:a5:60:fb:7f:dd:4b:32:5c:f8:c3:85:67:8e: e7:b9:94:f3:5a:0a:ef:01:65:c0:c2:08:84:45:a1: bb:ff:b2:d0:5b:3d:63:89:1e:d3:dc:8d:79:c6:f2: a4:13:5b:c6:b2:f4:66:9e:d3:3a:99:21:dd:28:4c: 0b:ac:25:86:67:2b:81:33:f8:89:ad:dd:68:ed:9c: a4:cd:54:73:1b:fb:54:af:6b:fd:b2:f5:d4:9b:e5: 1a:14:04:3f:5d:60:8b:fc:5f:c0:3c:9d:ac:b4:6d: a6:0b:eb:f3:d8:2c:2d:98:76:09:c9:9b:2e:4a:32: a2:b7:f1:d1:3a:99:28:cd:76:f6:89:b3:f4:e1:76: 34:16:89:d4:6d:a2:cb:30:61:f7:10:21:b5:8d:7d: f9:a2:5f:71:eb:db:aa:0e:28:38:82:d9:c4:69:72: 2e:cd:4c:61:c3:88:98:1a:0e:f9:35:f3:1b:c5:a2: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F7:7B:67:26:27:3B:9B:ED:BF:AD:00:3E:DA:49:1D:10:75:1C:9D X509v3 Authority Key Identifier: keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d2:46:42:51:d4:18:95:89:a4:05:42:da:1e:14:28:c4:a4: 67:f0:bf:b9:b6:5f:77:87:98:94:e2:24:1a:73:c7:c3:e5:73: 7c:02:15:8e:b7:e5:ed:52:b8:60:1a:8d:78:58:ae:92:8a:48: e7:26:8f:42:b2:11:29:fd:d3:4d:5b:da:f5:c3:34:d6:ad:f4: d6:ad:09:21:a9:10:6a:d2:3e:22:dc:1e:85:57:35:60:b4:47: 94:ab:dd:b8:de:96:a4:44:1d:34:92:cd:8a:87:04:f6:1a:b9: a3:0c:30:d2:e3:f9:4d:5b:bb:4e:84:bc:e1:8a:ba:7c:ea:64: 58:a0:56:f3:61:be:4d:58:9f:ea:6e:d8:fc:90:c4:36:a3:ce: 2c:35:95:7b:2a:4f:08:b8:1a:13:dd:bb:a0:69:0d:ec:96:f6: f1:49:72:98:6f:3a:82:bd:36:13:65:02:aa:62:b3:a3:ad:b4: 82:83:10:fe:d4:be:b7:f7:6e:fa:1b:6c:3f:3c:83:bd:ee:e7: ba:7d:6f:d1:f0:0d:a7:3b:ae:c7:85:fe:b5:83:e8:26:f7:e5: 6e:4e:7a:3f:2e:21:c2:c1:d3:8a:0c:c2:4f:e3:6d:d5:f3:f7: a6:fd:60:09:1e:5d:af:26:0c:8f:32:4c:01:31:c0:f5:cb:af: 41:55:e6:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1 RDQ5RkJDRjkwHhcNMjUwNTMwMjM1MDE4WhcNMjUwNjA2MjM1MDE4WjAYMRYwFAYD VQQDEw02ODNhNDQzYS0yZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6fgRiV1kdXU7AjspJrfcIoCYYlWH/8BGtsoAjJEqQR3pmUm7JvFvZf/VKZwh I2cnuTV5NLND04Tgm/1dn77zBzaR8bdjZX1Txj8RkqVg+3/dSzJc+MOFZ47nuZTz WgrvAWXAwgiERaG7/7LQWz1jiR7T3I15xvKkE1vGsvRmntM6mSHdKEwLrCWGZyuB M/iJrd1o7ZykzVRzG/tUr2v9svXUm+UaFAQ/XWCL/F/APJ2stG2mC+vz2CwtmHYJ yZsuSjKit/HROpkozXb2ibP04XY0FonUbaLLMGH3ECG1jX35ol9x69uqDig4gtnE aXIuzUxhw4iYGg75NfMbxaJ4AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT3e2cm Jzub7b+tAD7aSR0QdRydMB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK0kZCUdQYlYmkBULaHhQoxKRn8L+5tl93h5iU4iQac8fD5XN8AhWO t+XtUrhgGo14WK6SikjnJo9CshEp/dNNW9r1wzTWrfTWrQkhqRBq0j4i3B6FVzVg tEeUq9243pakRB00ks2KhwT2GrmjDDDS4/lNW7tOhLzhirp86mRYoFbzYb5NWJ/q btj8kMQ2o84sNZV7Kk8IuBoT3bugaQ3slvbxSXKYbzqCvTYTZQKqYrOjrbSCgxD+ 1L639276G2w/PIO97ue6fW/R8A2nO67Hhf61g+gm9+VuTno/LiHCwdOKDMJP423V 8/em/WAJHl2vJgyPMkwBMcD1y69BVeb/ -----END CERTIFICATE-----Generated at Sat May 31 16:57:49 2025 by rpki-client