$ rpki-client -vvvf rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft File: soJ7F7cBD5OvHy1I48A3OFxkFxM.mft (raw, json) Hash identifier: QzpVwmw+P8p07V+BPn01XvFzTUGJRwPXRUkkQhc2s5g= Subject key identifier: F0:6C:6D:97:8E:7F:37:9E:D3:3D:AB:F0:CE:7C:FF:2A:06:5C:E7:81 Authority key identifier: B2:82:7B:17:B7:01:0F:93:AF:1F:2D:48:E3:C0:37:38:5C:64:17:13 Certificate issuer: /CN=A91927A0/serialNumber=B2827B17B7010F93AF1F2D48E3C037385C641713 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft Manifest number: 17 Signing time: Tue 03 Nov 2026 10:09:16 +0000 Manifest this update: Tue 03 Nov 2026 10:09:15 +0000 Manifest next update: Tue 10 Nov 2026 10:09:15 +0000 Files and hashes: 1: soJ7F7cBD5OvHy1I48A3OFxkFxM.crl (hash: Tc8CHr/9JkOrlNyAEXP4sN//Wzb3tABiJyHba+eZToA=) 2: DE46E22CB7C111F1832B5E195F11F970.roa (hash: rebc37ILLoiuFl9EqWNBC2c/17CX+P4pukcboRsSrqI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.crl rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 10:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91927A0, serialNumber=B2827B17B7010F93AF1F2D48E3C037385C641713 Validity Not Before: Nov 3 10:09:15 2026 GMT Not After : Nov 10 10:09:15 2026 GMT Subject: CN=6ae9b2cc-ec9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a1:45:20:06:78:7b:90:9c:a3:d1:e3:a2:11: 49:4c:dd:e2:5c:51:2d:d9:a4:bd:f9:ed:2e:8f:c9: 05:0d:07:50:aa:72:11:90:76:c6:64:6c:f1:8a:6c: 0e:06:bf:ea:a4:2c:a1:e9:8e:42:df:d9:a3:dd:7f: 5a:33:dd:f1:42:4e:92:66:e6:79:5c:0b:5a:10:a4: f7:bb:48:51:eb:b6:bc:2d:97:46:45:50:62:1d:90: 56:9a:02:87:fd:c8:b4:62:93:e5:ba:4e:33:52:92: 10:6b:6e:8e:33:bd:29:ab:3c:f7:8c:f0:69:c9:bb: d5:d2:31:98:2b:9d:76:7f:25:3f:24:37:8b:20:c7: 07:93:18:07:d5:73:64:d2:0d:9c:b5:f2:78:7c:5a: f9:9e:76:31:2c:51:44:d6:44:6f:ea:f1:3d:7b:d0: 72:3b:eb:7f:dd:d2:e2:f9:06:c3:c4:7a:08:ef:50: 72:a7:96:ee:c5:07:96:c6:0c:8d:1c:c3:79:d5:6e: 4c:d8:e7:df:43:b7:ab:db:79:6b:cf:f4:f1:c4:ae: 20:36:c2:80:5a:f1:81:d8:5a:95:3d:8c:82:f4:87: 0f:1c:30:2e:5c:f3:3b:7f:15:1c:53:56:72:76:99: 3b:bb:0b:ba:27:10:68:7b:1f:89:0a:26:75:b8:41: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6C:6D:97:8E:7F:37:9E:D3:3D:AB:F0:CE:7C:FF:2A:06:5C:E7:81 X509v3 Authority Key Identifier: keyid:B2:82:7B:17:B7:01:0F:93:AF:1F:2D:48:E3:C0:37:38:5C:64:17:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:26:f2:0d:7b:af:91:fa:b2:56:f5:f6:34:42:3d:e2:ff:28: 9c:ab:5f:06:e6:5e:7a:18:20:f0:43:0f:a4:70:48:3c:af:0a: 30:19:42:fb:85:6d:cf:66:8e:c5:2c:20:37:2a:b0:14:66:67: ca:75:81:1e:98:37:e7:42:73:4a:ee:8f:e8:19:10:40:51:ce: c7:f1:60:a4:e0:c4:5c:18:7d:38:68:0a:00:04:fc:e5:be:86: 1f:b4:60:b2:82:4b:d7:97:c7:b7:c1:33:90:b5:02:42:44:28: 6c:72:97:fa:fe:22:bc:19:79:bf:aa:cd:d5:01:c9:38:ee:64: 93:4a:a9:d2:b5:f8:67:e4:d6:77:8a:44:a0:93:96:55:b2:f2: f2:95:09:06:35:28:34:2b:59:b9:40:d1:c9:97:a8:20:7c:b4: 30:7f:45:df:c1:3a:e9:2d:f4:5b:24:9e:d1:54:93:64:2b:35: 8a:5c:d7:cc:9a:b1:4e:85:06:3b:02:46:8b:dd:32:56:5f:a8: 27:2e:cf:2b:21:7a:9e:cf:0b:df:05:16:8f:4d:55:53:26:c0: 7d:43:00:68:03:ee:fa:8d:dd:97:73:3a:42:30:7d:7e:44:eb: 7e:c8:c3:b3:f5:c3:69:3c:9e:a2:a9:59:8a:22:f1:26:8c:fa: 06:28:ea:0b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MjdBMDExMC8GA1UEBRMoQjI4MjdCMTdCNzAxMEY5M0FGMUYyRDQ4RTNDMDM3Mzg1 QzY0MTcxMzAeFw0yNjExMDMxMDA5MTVaFw0yNjExMTAxMDA5MTVaMBgxFjAUBgNV BAMTDTZhZTliMmNjLWVjOWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCMoUUgBnh7kJyj0eOiEUlM3eJcUS3ZpL357S6PyQUNB1CqchGQdsZkbPGKbA4G v+qkLKHpjkLf2aPdf1oz3fFCTpJm5nlcC1oQpPe7SFHrtrwtl0ZFUGIdkFaaAof9 yLRik+W6TjNSkhBrbo4zvSmrPPeM8GnJu9XSMZgrnXZ/JT8kN4sgxweTGAfVc2TS DZy18nh8WvmedjEsUUTWRG/q8T170HI763/d0uL5BsPEegjvUHKnlu7FB5bGDI0c w3nVbkzY599Dt6vbeWvP9PHEriA2woBa8YHYWpU9jIL0hw8cMC5c8zt/FRxTVnJ2 mTu7C7onEGh7H4kKJnW4QRj3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8Gxtl45/ N57TPavwznz/KgZc54EwHwYDVR0jBBgwFoAUsoJ7F7cBD5OvHy1I48A3OFxkFxMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyN0EwLzE4QTA5OEQ4QjdD MTExRjFCMEZGRDIwMjVGMTFGOTcwL3NvSjdGN2NCRDVPdkh5MUk0OEEzT0Z4a0Z4 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc29KN0Y3Y0JENU92SHkxSTQ4QTNPRnhrRnhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky N0EwLzE4QTA5OEQ4QjdDMTExRjFCMEZGRDIwMjVGMTFGOTcwL3NvSjdGN2NCRDVP dkh5MUk0OEEzT0Z4a0Z4TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBWJvINe6+R+rJW9fY0Qj3i/yicq18G5l56GCDwQw+kcEg8rwowGUL7hW3PZo7F LCA3KrAUZmfKdYEemDfnQnNK7o/oGRBAUc7H8WCk4MRcGH04aAoABPzlvoYftGCy gkvXl8e3wTOQtQJCRChscpf6/iK8GXm/qs3VAck47mSTSqnStfhn5NZ3ikSgk5ZV svLylQkGNSg0K1m5QNHJl6ggfLQwf0XfwTrpLfRbJJ7RVJNkKzWKXNfMmrFOhQY7 AkaL3TJWX6gnLs8rIXqezwvfBRaPTVVTJsB9QwBoA+76jd2XczpCMH1+ROt+yMOz 9cNpPJ6iqVmKIvEmjPoGKOoL -----END CERTIFICATE-----Generated at Thu Nov 5 05:19:59 2026 by rpki-client