$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: cujFlXxpbvOBJfKyp3XcY/JvU+Yj41KVqvVLzIC5XBg= Subject key identifier: B0:AC:64:5E:40:CB:F4:29:E3:00:56:E4:3A:B0:7A:92:C9:AB:0C:C3 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0DA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D48 Signing time: Sun 26 Jul 2026 18:30:47 +0000 Manifest this update: Sun 26 Jul 2026 18:30:46 +0000 Manifest next update: Sun 02 Aug 2026 18:30:46 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: UIHFJoXtE9Me0BZKsGlf0wMX25IwjuR/zOVRGFFsfpg=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 3: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 4: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 5: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 6: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 7: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 8: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 9: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3489 (0xda1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Jul 26 18:30:46 2026 GMT Not After : Aug 2 18:30:46 2026 GMT Subject: CN=6a665256-2f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:c7:da:93:7b:6f:c1:a2:6e:67:fa:99:58: 24:b8:f6:c5:9d:3c:f7:8f:c0:53:29:45:52:5f:1c: 26:ae:b1:1c:06:fe:12:48:88:af:15:ea:37:af:f9: ae:cf:0b:ed:b4:cd:c7:64:51:4d:dd:48:51:2c:8f: 33:57:75:12:c4:ce:8d:34:98:6e:35:d2:1d:db:a9: 08:74:2f:c7:ed:4e:8d:82:3d:0c:2f:62:da:82:a5: d8:15:df:a5:43:af:23:41:62:84:16:5c:d3:09:8b: df:d6:70:b7:c4:8c:da:aa:b9:a7:8c:e8:2f:1b:9b: 06:0e:fc:0d:89:a2:2a:9c:72:17:a8:c0:3f:ca:59: 20:72:89:a5:07:1f:af:77:aa:ea:d0:de:59:57:85: 87:cb:4f:14:99:b2:7e:1b:30:22:af:68:73:d0:c9: f7:39:f1:a0:77:92:6d:9e:72:83:cc:ff:70:c0:67: 70:9a:7e:88:56:62:3d:71:1d:2e:a7:51:30:6e:3e: 4f:67:b0:fe:ac:cb:af:8a:28:8c:31:35:97:1f:b7: b7:a1:9d:3b:60:47:f3:56:e2:ed:a3:c2:a7:b8:bb: b3:01:a3:9d:13:dc:0d:60:db:40:40:6f:e0:33:eb: a5:c4:af:2d:15:0e:92:6a:da:41:9c:8d:a3:36:4e: a7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AC:64:5E:40:CB:F4:29:E3:00:56:E4:3A:B0:7A:92:C9:AB:0C:C3 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:35:23:31:2a:2c:e7:88:15:9d:ef:1e:94:f0:14:fb:2b:ba: b0:ca:0e:46:8b:43:29:95:40:47:df:f2:9a:b9:db:fb:7b:e6: e2:f5:aa:e1:48:dc:47:0b:06:82:f9:32:d6:2d:23:36:94:5e: 94:5c:fa:40:16:9b:39:d8:3b:0f:7a:b8:19:53:3c:23:80:a1: a5:b1:dc:10:ac:6b:70:df:9c:15:b1:5d:72:1b:9a:40:3a:d9: 81:cf:5c:d9:fa:0e:97:83:47:a7:c3:a0:c1:bd:5f:59:c5:f4: 0e:c8:bb:60:22:6b:3f:2a:15:53:4c:f3:99:ca:e3:f7:59:1a: 5b:64:cb:68:ca:bc:8a:bd:d1:d7:c2:53:c2:43:1c:f0:fa:6d: 72:de:b4:58:e3:98:a8:c7:97:1f:45:51:cb:39:a0:ed:df:1e: 15:cf:b0:44:d8:93:3c:c9:eb:15:ba:4e:bd:f4:73:04:d3:db: 21:b8:48:4a:62:59:8b:83:d0:a1:13:2a:bf:79:de:69:b0:6a: b9:88:a5:64:2c:5a:d3:70:f6:86:c4:09:ec:77:0d:ed:3c:81: c5:ba:95:b1:50:08:4e:07:0c:ab:7c:a0:7e:a7:bd:91:34:a9: 63:6e:d7:31:1a:c0:67:a5:ca:6b:87:1b:6a:64:8d:b2:03:ad: 31:9d:70:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwNzI2MTgzMDQ2WhcNMjYwODAyMTgzMDQ2WjAYMRYwFAYD VQQDEw02YTY2NTI1Ni0yZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBHH2pN7b8Gibmf6mVgkuPbFnTz3j8BTKUVSXxwmrrEcBv4SSIivFeo3r/mu zwvttM3HZFFN3UhRLI8zV3USxM6NNJhuNdId26kIdC/H7U6Ngj0ML2LagqXYFd+l Q68jQWKEFlzTCYvf1nC3xIzaqrmnjOgvG5sGDvwNiaIqnHIXqMA/ylkgcomlBx+v d6rq0N5ZV4WHy08UmbJ+GzAir2hz0Mn3OfGgd5JtnnKDzP9wwGdwmn6IVmI9cR0u p1Ewbj5PZ7D+rMuviiiMMTWXH7e3oZ07YEfzVuLto8KnuLuzAaOdE9wNYNtAQG/g M+ulxK8tFQ6SatpBnI2jNk6nnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLCsZF5A y/Qp4wBW5DqwepLJqwzDMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTUjMSos54gVne8elPAU+yu6sMoORotDKZVAR9/ymrnb+3vm4vWq4UjcRwsG gvky1i0jNpRelFz6QBabOdg7D3q4GVM8I4ChpbHcEKxrcN+cFbFdchuaQDrZgc9c 2foOl4NHp8Ogwb1fWcX0Dsi7YCJrPyoVU0zzmcrj91kaW2TLaMq8ir3R18JTwkMc 8Pptct60WOOYqMeXH0VRyzmg7d8eFc+wRNiTPMnrFbpOvfRzBNPbIbhISmJZi4PQ oRMqv3neabBquYilZCxa03D2hsQJ7HcN7TyBxbqVsVAITgcMq3ygfqe9kTSpY27X MRrAZ6XKa4cbamSNsgOtMZ1wWw== -----END CERTIFICATE-----Generated at Mon Jul 27 04:15:30 2026 by rpki-client