
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
File: x7AAT_axhojBl7xLOfrBJdSfvPk.mft (raw, json)
Hash identifier: qquLxBqdEwDyXATnHb5nC/3HxpxOqIDPyD5uqP/AMBM=
Subject key identifier: BB:65:CB:8C:D4:5A:F5:61:94:FD:F0:28:8D:03:71:F7:63:58:77:BC
Authority key identifier: C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
Certificate issuer: /CN=A9174C15/serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Certificate serial: 05DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
Manifest number: 05C6
Signing time: Wed 20 May 2026 23:08:40 +0000
Manifest this update: Wed 20 May 2026 23:08:40 +0000
Manifest next update: Wed 27 May 2026 23:08:40 +0000
Files and hashes: 1: x7AAT_axhojBl7xLOfrBJdSfvPk.crl (hash: /gzzc/pcwMNREsDowUL4ta9Wriv+7A2wIggKqoAjAMU=)
2: CC5C527A0AA611EE84B0053DC4F9AE02.roa (hash: dobqjje96t2ByzCuxv07GsjoPcXnK+I6oVC5xcVUx1A=)
3: 778B08A40A4911EC8BC5AF5EC4F9AE02.roa (hash: vYjOUFbhsWomhdQCGDNjFRiRUNZnILccQOyVMSYu5mk=)
4: CD665F4E0AA611EE84B0053DC4F9AE02.roa (hash: RAri4R9i13T7tcPaRZBEdOQRsJoO98ROLRiMbR2yLR4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 27 May 2026 23:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1501 (0x5dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174C15, serialNumber=C7B0004FF6B18688C197BC4B39FAC125D49FBCF9
Validity
Not Before: May 20 23:08:40 2026 GMT
Not After : May 27 23:08:40 2026 GMT
Subject: CN=6a0e3ef8-3f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:e4:13:a8:5f:59:48:e9:70:d9:2f:71:3f:
3b:47:70:f4:69:29:97:26:fe:29:a2:94:4b:a8:ec:
b8:e3:3e:4b:ae:5a:c9:21:92:dd:5a:f1:59:78:50:
ff:65:38:bf:0f:8a:ad:33:7c:d3:a2:48:19:f7:96:
94:d2:e3:34:63:00:4f:b0:79:ed:24:43:1a:42:10:
03:d8:00:78:20:1f:0b:83:08:b3:0b:62:16:71:b2:
6d:ca:52:32:92:0d:83:12:13:db:45:d9:67:c6:ab:
f5:bb:db:f8:95:8a:a1:71:32:06:07:55:aa:2c:4f:
54:1e:f4:ab:91:b5:23:47:c2:34:f8:07:aa:76:a3:
e7:e0:01:aa:0d:af:2c:ff:a2:6d:d6:7e:28:9c:20:
ce:f0:1e:15:85:df:01:1c:0f:d8:e8:7b:e0:40:e6:
74:93:77:b6:94:bf:94:8c:7b:0d:f3:75:e0:0d:86:
dd:2c:37:f3:7d:af:3b:16:86:7d:db:b8:5d:50:a1:
2b:2a:f1:63:22:ff:e8:dc:ee:88:86:7c:03:ff:f3:
50:65:05:c7:a8:0b:a7:1f:fd:55:75:29:02:c1:26:
52:89:5b:dc:d2:dd:57:4b:cd:51:e7:35:c7:87:dd:
09:ec:8c:b4:36:a5:b2:d5:61:92:72:4c:79:94:76:
14:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:65:CB:8C:D4:5A:F5:61:94:FD:F0:28:8D:03:71:F7:63:58:77:BC
X509v3 Authority Key Identifier:
keyid:C7:B0:00:4F:F6:B1:86:88:C1:97:BC:4B:39:FA:C1:25:D4:9F:BC:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7AAT_axhojBl7xLOfrBJdSfvPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C15/AC9C6B500A4411EC94797E53C4F9AE02/x7AAT_axhojBl7xLOfrBJdSfvPk.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:75:1d:11:e6:18:17:8e:d7:ef:db:63:60:2d:26:8a:07:9f:
6c:cf:3d:e3:8d:19:60:5d:57:e4:5f:59:e8:2d:07:f7:18:a2:
1e:c8:d6:e2:dc:89:52:af:98:e1:a4:31:24:42:47:4e:cc:94:
70:9c:3d:87:99:e0:53:f4:bc:0b:db:59:28:58:ca:02:20:0b:
a1:42:1e:eb:61:46:b9:4c:85:0f:a9:1b:2e:c0:ae:e9:47:cd:
2c:ae:0f:7d:42:de:7b:da:d0:7b:cb:1b:65:32:09:95:82:c3:
9a:5e:ea:49:29:af:28:58:d8:86:28:32:60:39:d9:1d:a7:04:
af:d4:d8:20:92:87:22:4b:05:89:27:26:18:61:50:1b:c3:ea:
91:1f:e9:b2:59:fc:76:19:5c:bc:d5:e0:60:7c:9a:5b:9e:dd:
b2:47:0c:73:58:d4:fa:29:d0:fc:01:e6:76:af:b9:e9:33:2f:
3a:a5:c9:b4:2d:7c:a6:e3:25:33:6a:60:7f:04:d1:9e:fa:96:
8f:8c:7f:5a:20:2e:49:75:15:af:0e:eb:30:7f:f6:a4:44:a5:
fd:4c:7a:25:05:e6:8b:ac:c6:cc:20:32:62:3a:ce:98:1b:d8:
ae:e8:a6:a5:d8:bc:e9:bf:ef:2b:84:4f:35:c0:66:ea:9e:c2:
77:25:c7:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzRDMTUxMTAvBgNVBAUTKEM3QjAwMDRGRjZCMTg2ODhDMTk3QkM0QjM5RkFDMTI1
RDQ5RkJDRjkwHhcNMjYwNTIwMjMwODQwWhcNMjYwNTI3MjMwODQwWjAYMRYwFAYD
VQQDEw02YTBlM2VmOC0zZjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkSfkE6hfWUjpcNkvcT87R3D0aSmXJv4popRLqOy44z5LrlrJIZLdWvFZeFD/
ZTi/D4qtM3zTokgZ95aU0uM0YwBPsHntJEMaQhAD2AB4IB8LgwizC2IWcbJtylIy
kg2DEhPbRdlnxqv1u9v4lYqhcTIGB1WqLE9UHvSrkbUjR8I0+AeqdqPn4AGqDa8s
/6Jt1n4onCDO8B4Vhd8BHA/Y6HvgQOZ0k3e2lL+UjHsN83XgDYbdLDfzfa87FoZ9
27hdUKErKvFjIv/o3O6IhnwD//NQZQXHqAunH/1VdSkCwSZSiVvc0t1XS81R5zXH
h90J7Iy0NqWy1WGSckx5lHYUlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtly4zU
WvVhlP3wKI0DcfdjWHe8MB8GA1UdIwQYMBaAFMewAE/2sYaIwZe8Szn6wSXUn7z5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEMxNS9BQzlDNkI1MDBB
NDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhvakJsN3hMT2ZyQkpkU2Z2
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3g3QUFUX2F4aG9qQmw3eExPZnJCSmRTZnZQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NEMxNS9BQzlDNkI1MDBBNDQxMUVDOTQ3OTdFNTNDNEY5QUUwMi94N0FBVF9heGhv
akJsN3hMT2ZyQkpkU2Z2UGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADXUdEeYYF47X79tjYC0migefbM89440ZYF1X5F9Z6C0H9xiiHsjW4tyJUq+Y
4aQxJEJHTsyUcJw9h5ngU/S8C9tZKFjKAiALoUIe62FGuUyFD6kbLsCu6UfNLK4P
fULee9rQe8sbZTIJlYLDml7qSSmvKFjYhigyYDnZHacEr9TYIJKHIksFiScmGGFQ
G8PqkR/psln8dhlcvNXgYHyaW57dskcMc1jU+inQ/AHmdq+56TMvOqXJtC18puMl
M2pgfwTRnvqWj4x/WiAuSXUVrw7rMH/2pESl/Ux6JQXmi6zGzCAyYjrOmBvYruim
pdi86b/vK4RPNcBm6p7CdyXHqw==
-----END CERTIFICATE-----
Generated at Fri May 22 15:12:16 2026 by rpki-client