$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: mVgnLx99zTZ/lEL1rI/zCR09zASr3vllJrXn/XmhqEo= Subject key identifier: 08:4F:A8:3E:DA:4B:BC:91:5D:A8:CA:4B:9B:D9:04:D1:39:8B:6C:6D Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0D9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D46 Signing time: Wed 22 Jul 2026 18:27:52 +0000 Manifest this update: Wed 22 Jul 2026 18:27:51 +0000 Manifest next update: Wed 29 Jul 2026 18:27:51 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: JbC61/TgArYl9QDGicccK7iDl1UDrijrTXPST1Ko4rg=) 2: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 5: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 6: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 7: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 8: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 9: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3487 (0xd9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Jul 22 18:27:51 2026 GMT Not After : Jul 29 18:27:51 2026 GMT Subject: CN=6a610ba8-475e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:46:b6:c7:a6:95:f0:84:75:67:05:c4:3a:92: 7a:f8:27:7e:c8:57:6c:3f:e0:89:4a:3b:b4:6f:65: bc:af:9d:55:76:ca:4f:7e:a7:14:97:19:0b:b3:bc: b8:76:23:96:e9:ef:d3:16:e2:2d:64:bb:eb:2c:cc: 71:ec:80:de:40:0b:a3:8d:1c:68:18:da:4a:8b:e1: af:7e:b4:48:3e:44:e0:0b:22:e0:41:63:c9:94:22: 01:c7:1e:cd:20:0c:02:78:53:25:4e:73:b6:49:ba: 1b:93:8a:61:36:e9:27:16:9f:9a:08:cb:5a:f5:b8: 39:fc:b1:a7:91:a8:b5:be:75:10:cb:7d:8b:f0:96: b9:99:6f:e1:44:d1:71:c2:cc:9f:05:0c:63:29:42: 14:81:1e:82:44:78:23:43:99:d5:66:be:a2:36:3b: 24:65:e3:81:49:02:7c:c9:e7:4d:33:ec:ba:6d:18: c8:b0:a8:f7:26:7a:4a:f1:ac:af:b4:bd:d6:a6:50: 69:48:b9:a3:5e:e1:98:55:67:bf:97:9b:d1:f7:c0: c8:bb:68:dc:26:ef:d3:5b:90:e6:69:26:94:56:93: 9b:34:dc:59:fe:92:32:b5:05:f5:1e:0d:91:33:98: 50:6d:35:90:28:70:e4:72:9b:6e:08:79:ec:32:1f: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:A8:3E:DA:4B:BC:91:5D:A8:CA:4B:9B:D9:04:D1:39:8B:6C:6D X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d3:3b:7b:2a:37:d4:1a:6e:b3:67:d4:83:7d:6e:37:b6:bf: 88:5f:4a:82:98:23:53:45:56:80:04:97:2f:51:c5:ea:7f:e4: 04:31:9e:ab:59:11:c9:c6:3b:41:52:ad:9c:f4:ae:68:25:b3: 6d:e6:3e:7d:9a:d6:0a:f3:5f:1c:df:d9:97:2d:59:93:81:5f: 9c:a2:01:28:40:18:d1:5c:cd:e4:bb:0a:16:5c:68:f5:bb:42: 6d:53:ef:7e:d0:e5:ac:f8:d1:75:fd:2c:f6:5c:07:6a:99:9e: d2:a3:2c:87:50:70:da:6b:ad:89:7c:b6:18:f3:f4:59:9b:43: c6:68:5d:3c:3b:a9:8c:09:3c:58:47:56:7f:5c:e4:d1:0b:2f: 0b:7d:c8:7c:14:19:d5:c7:68:fd:1b:33:91:19:11:e3:90:18: c3:57:a6:38:6c:7b:7e:59:44:8c:ae:e2:68:82:58:9a:06:01: 72:e8:e8:97:ad:09:16:94:cc:ae:e7:ef:5e:10:ef:46:ea:bc: e1:3e:a4:b9:6f:59:93:68:da:02:ac:e8:95:a8:1e:36:e1:1e: fa:5b:d2:0e:cd:f1:06:a9:42:2b:10:9b:9a:c2:80:56:72:05: 98:23:a3:b3:d5:0b:59:f4:6e:5e:ac:28:b3:eb:3d:64:89:52: ad:c8:20:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwNzIyMTgyNzUxWhcNMjYwNzI5MTgyNzUxWjAYMRYwFAYD VQQDEw02YTYxMGJhOC00NzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ea2x6aV8IR1ZwXEOpJ6+Cd+yFdsP+CJSju0b2W8r51VdspPfqcUlxkLs7y4 diOW6e/TFuItZLvrLMxx7IDeQAujjRxoGNpKi+GvfrRIPkTgCyLgQWPJlCIBxx7N IAwCeFMlTnO2Sbobk4phNuknFp+aCMta9bg5/LGnkai1vnUQy32L8Ja5mW/hRNFx wsyfBQxjKUIUgR6CRHgjQ5nVZr6iNjskZeOBSQJ8yedNM+y6bRjIsKj3JnpK8ayv tL3WplBpSLmjXuGYVWe/l5vR98DIu2jcJu/TW5DmaSaUVpObNNxZ/pIytQX1Hg2R M5hQbTWQKHDkcptuCHnsMh/AswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhPqD7a S7yRXajKS5vZBNE5i2xtMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATdM7eyo31Bpus2fUg31uN7a/iF9KgpgjU0VWgASXL1HF6n/kBDGeq1kRycY7 QVKtnPSuaCWzbeY+fZrWCvNfHN/Zly1Zk4FfnKIBKEAY0VzN5LsKFlxo9btCbVPv ftDlrPjRdf0s9lwHapme0qMsh1Bw2mutiXy2GPP0WZtDxmhdPDupjAk8WEdWf1zk 0QsvC33IfBQZ1cdo/RszkRkR45AYw1emOGx7fllEjK7iaIJYmgYBcujol60JFpTM rufvXhDvRuq84T6kuW9Zk2jaAqzolageNuEe+lvSDs3xBqlCKxCbmsKAVnIFmCOj s9ULWfRuXqwos+s9ZIlSrcgguA== -----END CERTIFICATE-----Generated at Fri Jul 24 03:22:21 2026 by rpki-client