$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: LytC0axmtr7j5qAcLR1I52tLLenDuYugxv8pbR+6gXA= Subject key identifier: 97:6C:A9:3B:64:D2:79:51:48:C2:6A:C3:FB:CB:6F:61:31:63:57:93 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D67 Signing time: Thu 24 Sep 2026 18:08:13 +0000 Manifest this update: Thu 24 Sep 2026 18:08:13 +0000 Manifest next update: Thu 01 Oct 2026 18:08:13 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: 5tYO6ns8De6oGjjHcTkVQOoQmvUCVZtEHnKPpYOqSrg=) 2: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 4: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 5: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 6: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 7: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 8: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Sep 24 18:08:13 2026 GMT Not After : Oct 1 18:08:13 2026 GMT Subject: CN=6ab5670d-871e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:15:03:14:14:c5:c4:7d:30:b8:3f:af:b0: c6:9f:e1:09:58:b9:42:f3:27:81:52:47:e6:cc:6a: e2:9b:fd:33:06:db:cc:38:f9:45:32:ca:77:08:dd: 74:98:57:ac:27:6a:59:12:1a:53:35:f7:54:c2:c1: b0:a5:d8:39:6b:fa:12:a2:a6:95:dc:1e:44:53:35: 56:0f:ad:2b:31:95:23:73:5d:60:dc:02:f4:31:47: 92:ef:d8:07:28:11:e6:91:33:4f:35:4e:cd:0f:29: 28:d5:25:5b:9e:e4:b4:ef:fa:3f:68:c7:3c:3f:e3: 7a:93:75:d5:ec:ab:b5:c3:e5:59:d9:8e:47:a5:be: 8f:3c:46:1e:b8:2a:0d:67:ae:f5:16:11:34:07:fc: 84:b3:ef:92:33:dc:b1:b3:29:79:c1:c1:67:9e:56: 0f:b3:5c:08:1b:c2:53:af:e4:7d:7c:a2:e9:a2:35: 95:68:5e:aa:ef:b9:11:18:82:0e:87:63:c5:a9:91: 2e:16:58:3c:f0:fe:a7:bd:d2:19:6a:38:da:c9:18: 0f:b4:d8:5d:12:73:1c:69:0d:ab:d7:5a:fc:52:3f: f3:c5:cd:71:d8:6e:c5:dd:c4:10:bc:c0:4c:23:77: 42:8d:a7:68:80:14:05:0c:51:52:33:62:0a:44:02: bd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6C:A9:3B:64:D2:79:51:48:C2:6A:C3:FB:CB:6F:61:31:63:57:93 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:48:90:b9:cd:66:a2:0d:1c:54:0a:41:58:c3:ea:c7:fe:b4: c8:67:45:d4:c3:22:c0:2d:02:fe:88:b0:a3:d5:3a:9d:f9:c8: 07:da:c3:01:2a:c5:72:7b:d5:08:aa:af:dd:f0:24:5e:9e:f4: fb:f2:b6:6c:95:a0:f0:1a:aa:dc:d5:d2:c6:a4:b7:da:d2:c2: c5:0c:38:c6:86:1d:8f:9d:7e:f3:44:10:9e:76:f7:7a:e6:40: 33:6a:0b:46:a1:b3:bc:06:6e:e3:18:9f:00:56:e0:5a:fc:7f: cc:0e:21:35:6a:dd:35:1c:dd:51:35:66:f4:8b:d2:ae:a3:2f: 82:ac:06:c5:43:b9:88:87:b1:d3:5f:e8:f7:ce:2c:38:86:e3: 65:92:7f:bb:f2:18:fb:fb:8a:71:45:b4:49:0c:9c:f1:b3:ea: 0c:7d:ba:bb:e6:0d:3c:7d:91:7d:cb:92:c7:9a:69:61:ee:9b: 66:0d:f3:61:30:7f:8e:64:54:63:48:ea:b0:fc:92:ec:56:52: 8d:7c:7f:55:1f:ab:8a:0b:b1:d0:a0:bb:96:a0:57:c6:05:2b: c5:bd:60:b6:b2:ae:eb:78:d1:4f:98:fa:26:f8:f0:a2:5f:ab: b3:08:45:5d:f1:37:63:e0:b2:6b:af:35:05:1c:86:ed:dc:a2: 21:e3:1c:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwOTI0MTgwODEzWhcNMjYxMDAxMTgwODEzWjAYMRYwFAYD VQQDEw02YWI1NjcwZC04NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAss4VAxQUxcR9MLg/r7DGn+EJWLlC8yeBUkfmzGrim/0zBtvMOPlFMsp3CN10 mFesJ2pZEhpTNfdUwsGwpdg5a/oSoqaV3B5EUzVWD60rMZUjc11g3AL0MUeS79gH KBHmkTNPNU7NDyko1SVbnuS07/o/aMc8P+N6k3XV7Ku1w+VZ2Y5Hpb6PPEYeuCoN Z671FhE0B/yEs++SM9yxsyl5wcFnnlYPs1wIG8JTr+R9fKLpojWVaF6q77kRGIIO h2PFqZEuFlg88P6nvdIZajjayRgPtNhdEnMcaQ2r11r8Uj/zxc1x2G7F3cQQvMBM I3dCjadogBQFDFFSM2IKRAK9BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJdsqTtk 0nlRSMJqw/vLb2ExY1eTMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALUiQuc1mog0cVApBWMPqx/60yGdF1MMiwC0C/oiwo9U6nfnIB9rDASrFcnvV CKqv3fAkXp70+/K2bJWg8Bqq3NXSxqS32tLCxQw4xoYdj51+80QQnnb3euZAM2oL RqGzvAZu4xifAFbgWvx/zA4hNWrdNRzdUTVm9IvSrqMvgqwGxUO5iIex01/o984s OIbjZZJ/u/IY+/uKcUW0SQyc8bPqDH26u+YNPH2RfcuSx5ppYe6bZg3zYTB/jmRU Y0jqsPyS7FZSjXx/VR+rigux0KC7lqBXxgUrxb1gtrKu63jRT5j6Jvjwol+rswhF XfE3Y+Cya681BRyG7dyiIeMcfA== -----END CERTIFICATE-----Generated at Sat Sep 26 03:13:27 2026 by rpki-client