$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: OxTR3pu1d9AiHQotSKmRG2thSFNafjOYb2km8MEPKAA= Subject key identifier: 07:5B:61:B3:C8:B3:50:45:CD:92:BE:D8:08:6C:C2:DC:12:DF:F8:0F Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0DC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D68 Signing time: Sat 26 Sep 2026 18:14:40 +0000 Manifest this update: Sat 26 Sep 2026 18:14:40 +0000 Manifest next update: Sat 03 Oct 2026 18:14:40 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: 1iAB3Fso1d3wkFM6WHJ0Gh/JU1yt30bddB1GfO/LGPo=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 3: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 5: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 8: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3521 (0xdc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Sep 26 18:14:40 2026 GMT Not After : Oct 3 18:14:40 2026 GMT Subject: CN=6ab80b90-2b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:3d:38:46:9f:cf:a6:81:cc:e5:ed:61:2e: 71:03:27:b7:29:16:86:d1:20:c9:63:6d:a8:9e:9a: 2e:99:f7:9f:cd:b7:b4:37:a0:1d:b1:b9:8a:db:f0: 4b:a3:e1:d7:b8:f1:35:32:99:4a:ed:14:0e:32:bf: bb:a0:7c:e3:73:b0:f9:90:9a:b8:1a:97:43:f8:41: 07:9a:aa:44:11:df:57:9f:3a:47:7a:42:c6:ed:84: c4:21:eb:5e:f7:d0:c2:dc:3d:a3:1c:45:b8:03:e7: dd:7e:7d:d7:c0:6f:54:90:8c:c4:6c:57:6b:5f:8f: 3b:ff:88:67:87:04:37:80:a5:98:b2:a1:e0:ed:4a: 43:de:b2:a7:f7:88:33:ad:7a:0f:ee:7f:82:0a:b5: de:4b:eb:bf:fd:9f:9f:89:a1:c2:8e:46:27:39:a9: 8d:dd:58:54:e1:d7:83:21:56:4a:ee:cf:7b:18:2e: e2:e4:1c:7b:06:90:48:af:dd:df:3f:c3:55:e4:b7: 28:3c:68:23:20:dd:0a:74:e0:6a:5e:1d:5b:d2:95: 86:76:51:f1:18:23:1e:36:81:6d:6e:df:62:af:20: e9:92:4c:18:09:d0:0d:04:d0:40:7f:d8:a0:18:08: e0:53:b9:3a:00:6c:6c:3d:99:13:3f:70:0d:b3:ef: 6d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5B:61:B3:C8:B3:50:45:CD:92:BE:D8:08:6C:C2:DC:12:DF:F8:0F X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:fb:c7:2a:e9:26:d4:d7:98:8f:ae:c3:57:fd:7d:3d:32:70: 9d:ef:50:10:91:a7:6f:13:07:96:13:99:de:38:ff:37:f8:c6: 3f:cb:13:00:00:84:6d:c1:1a:ab:05:84:36:a9:11:f1:b9:db: 23:cf:73:e0:13:2e:c4:be:99:61:c1:2a:0c:de:19:e8:c2:e0: cc:2a:43:ca:7c:25:bc:78:7a:46:99:14:61:e9:10:8a:33:c9: 89:bb:45:74:96:a9:0d:b3:1b:69:5b:a5:ab:dd:94:75:7c:9b: 30:d4:e6:0f:d3:34:c5:94:82:de:d5:5d:5b:f3:90:47:95:5d: 40:2e:a1:9a:71:9a:03:d0:b6:fe:ee:f4:75:e2:db:5c:3b:07: b8:1a:3a:b3:0c:34:11:ce:00:52:ea:f6:16:79:b4:e7:f9:04: ee:14:fd:92:ee:20:51:89:e7:70:4e:bc:10:b3:15:3a:ee:79: 4e:23:ba:a5:0d:a5:ae:51:b8:5a:2c:ef:d4:a5:01:32:1e:13: 57:30:bd:82:97:e8:8a:2e:76:7b:f7:03:48:e4:13:39:e5:b3: 13:90:b5:67:59:8c:80:4e:54:e4:b6:32:f8:a3:a7:be:a8:42: c4:ff:e9:a4:86:4a:87:27:a8:70:90:ee:83:48:7e:6d:c1:2a: 40:e4:7a:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwOTI2MTgxNDQwWhcNMjYxMDAzMTgxNDQwWjAYMRYwFAYD VQQDEw02YWI4MGI5MC0yYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFw9OEafz6aBzOXtYS5xAye3KRaG0SDJY22onpoumfefzbe0N6AdsbmK2/BL o+HXuPE1MplK7RQOMr+7oHzjc7D5kJq4GpdD+EEHmqpEEd9XnzpHekLG7YTEIete 99DC3D2jHEW4A+fdfn3XwG9UkIzEbFdrX487/4hnhwQ3gKWYsqHg7UpD3rKn94gz rXoP7n+CCrXeS+u//Z+fiaHCjkYnOamN3VhU4deDIVZK7s97GC7i5Bx7BpBIr93f P8NV5LcoPGgjIN0KdOBqXh1b0pWGdlHxGCMeNoFtbt9iryDpkkwYCdANBNBAf9ig GAjgU7k6AGxsPZkTP3ANs+9tMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdbYbPI s1BFzZK+2AhswtwS3/gPMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo/vHKukm1NeYj67DV/19PTJwne9QEJGnbxMHlhOZ3jj/N/jGP8sTAACEbcEa qwWENqkR8bnbI89z4BMuxL6ZYcEqDN4Z6MLgzCpDynwlvHh6RpkUYekQijPJibtF dJapDbMbaVulq92UdXybMNTmD9M0xZSC3tVdW/OQR5VdQC6hmnGaA9C2/u70deLb XDsHuBo6sww0Ec4AUur2Fnm05/kE7hT9ku4gUYnncE68ELMVOu55TiO6pQ2lrlG4 Wizv1KUBMh4TVzC9gpfoii52e/cDSOQTOeWzE5C1Z1mMgE5U5LYy+KOnvqhCxP/p pIZKhyeocJDug0h+bcEqQOR6FQ== -----END CERTIFICATE-----Generated at Mon Sep 28 03:24:18 2026 by rpki-client