$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: VRsYmF47z6aTXpjrzbfUbrcpE8tG/cKMSIC/k1EGU3c= Subject key identifier: BD:7A:4A:EB:49:2D:C9:60:3A:95:BB:9D:92:0F:6C:31:EA:30:D0:13 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D65 Signing time: Sun 20 Sep 2026 18:08:52 +0000 Manifest this update: Sun 20 Sep 2026 18:08:51 +0000 Manifest next update: Sun 27 Sep 2026 18:08:51 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: j8iyaaQnR/UMgP696l0jzCJzvDgLiDloSwJo8dgG7kg=) 2: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 3: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 4: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 5: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 6: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 7: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 8: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 9: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Sep 20 18:08:51 2026 GMT Not After : Sep 27 18:08:51 2026 GMT Subject: CN=6ab02134-7571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:de:83:bc:1e:d9:a1:38:0d:a6:70:a1:78: ea:e9:2f:aa:f8:42:6b:80:6c:2f:d0:3e:78:96:b6: da:ce:d2:f0:43:a6:f5:35:fb:88:55:4d:a3:69:ad: b4:17:19:a8:49:a5:c7:68:09:a5:c9:63:1d:25:bd: 5e:ff:e2:75:ad:a1:6b:ff:6b:c0:e2:0e:77:d5:89: b6:5f:55:7d:f7:93:04:87:ff:38:9a:37:ba:01:5c: 72:82:bf:f7:42:7f:9a:70:9a:ea:23:c2:94:96:c2: 28:d7:eb:54:fb:0c:da:b9:79:91:50:db:e7:81:77: 4f:ef:87:f3:4b:a2:d1:70:fb:f3:97:ad:2f:6c:ca: 9e:86:89:1b:24:2e:3d:9f:c8:74:28:b6:63:05:c3: 7a:74:7a:0b:e7:a0:52:b5:38:8d:c7:d2:b1:f3:1d: 93:04:eb:71:9c:ee:8e:e7:ee:6e:14:eb:3a:d6:7a: ed:93:8f:ab:fc:72:f1:ea:f5:0d:82:b5:ee:64:9a: f2:83:0a:42:5e:77:5a:ed:48:86:af:aa:15:a4:02: 12:25:06:f5:5c:7b:15:58:d9:47:ad:97:2c:e5:19: ec:89:f0:7e:9a:11:25:3a:7e:d5:8d:1a:bc:69:17: ad:14:76:83:ba:e8:ce:28:df:a0:92:14:4b:ff:d9: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:7A:4A:EB:49:2D:C9:60:3A:95:BB:9D:92:0F:6C:31:EA:30:D0:13 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:d4:18:95:38:f3:fb:e2:67:32:06:27:ab:b8:e6:0e:28:58: e5:01:b7:de:9d:73:6c:b4:a4:c5:ca:f0:ee:88:3e:c6:33:dd: ea:9a:f1:52:4b:21:68:33:c0:5c:03:42:8b:35:b5:f0:e3:4d: ab:ec:f1:0e:fd:a1:37:70:b8:10:35:76:d7:29:9c:5d:3c:d1: 5c:2c:18:06:33:2f:3f:c8:14:17:cb:00:32:58:ac:dd:ae:49: a0:41:05:58:4f:2e:ef:67:e5:9c:a9:bd:4d:8b:72:32:1b:8b: 40:d4:fc:c6:a4:83:ab:d3:24:a0:79:6b:7e:1d:56:81:70:a1: 08:91:03:35:38:e0:86:33:6a:78:c1:a5:18:eb:22:7a:24:5e: ba:e5:24:42:33:24:17:d2:f3:36:aa:08:d5:32:e2:d3:c6:80: a8:92:2e:3d:fd:7d:07:0e:7d:a0:f7:7f:78:13:35:3b:01:76: b3:3a:5d:5e:41:90:6b:fc:13:25:01:34:2c:2b:2b:c1:6d:cc: af:be:2e:1c:27:7d:bc:d1:d0:1f:5f:79:3f:43:67:a4:4c:b2: bb:e9:4f:fa:d7:75:0b:a3:d9:57:24:ec:13:86:aa:28:97:10: 43:65:0e:cd:2a:2f:24:41:e9:ab:da:aa:84:53:eb:f8:07:21: fa:bb:b3:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwOTIwMTgwODUxWhcNMjYwOTI3MTgwODUxWjAYMRYwFAYD VQQDEw02YWIwMjEzNC03NTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJreg7we2aE4DaZwoXjq6S+q+EJrgGwv0D54lrbaztLwQ6b1NfuIVU2jaa20 FxmoSaXHaAmlyWMdJb1e/+J1raFr/2vA4g531Ym2X1V995MEh/84mje6AVxygr/3 Qn+acJrqI8KUlsIo1+tU+wzauXmRUNvngXdP74fzS6LRcPvzl60vbMqehokbJC49 n8h0KLZjBcN6dHoL56BStTiNx9Kx8x2TBOtxnO6O5+5uFOs61nrtk4+r/HLx6vUN grXuZJrygwpCXnda7UiGr6oVpAISJQb1XHsVWNlHrZcs5RnsifB+mhElOn7VjRq8 aRetFHaDuujOKN+gkhRL/9lxWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL16SutJ LclgOpW7nZIPbDHqMNATMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc9QYlTjz++JnMgYnq7jmDihY5QG33p1zbLSkxcrw7og+xjPd6prxUkshaDPA XANCizW18ONNq+zxDv2hN3C4EDV21ymcXTzRXCwYBjMvP8gUF8sAMlis3a5JoEEF WE8u72flnKm9TYtyMhuLQNT8xqSDq9MkoHlrfh1WgXChCJEDNTjghjNqeMGlGOsi eiReuuUkQjMkF9LzNqoI1TLi08aAqJIuPf19Bw59oPd/eBM1OwF2szpdXkGQa/wT JQE0LCsrwW3Mr74uHCd9vNHQH195P0NnpEyyu+lP+td1C6PZVyTsE4aqKJcQQ2UO zSovJEHpq9qqhFPr+Ach+ruzVg== -----END CERTIFICATE-----Generated at Tue Sep 22 13:23:59 2026 by rpki-client