$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: mA4V589crduptT3p8cZ1twJ2M09aGKRXki06L2O5G+s= Subject key identifier: 5F:EE:6A:FF:DA:6B:3D:2F:1E:5C:9F:1C:57:48:F0:E0:E4:BF:1B:35 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0DD0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D77 Signing time: Mon 26 Oct 2026 18:10:10 +0000 Manifest this update: Mon 26 Oct 2026 18:10:09 +0000 Manifest next update: Mon 02 Nov 2026 18:10:09 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: vr63ZJHGCyEZoeb69ZMHblcp2OZY7MjTEzLMkiwDCqg=) 2: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 3: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 4: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 5: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 7: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 8: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 9: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3536 (0xdd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Oct 26 18:10:09 2026 GMT Not After : Nov 2 18:10:09 2026 GMT Subject: CN=6adf9781-48ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:d3:9b:04:d6:07:06:71:2b:7a:5a:b4:d9: b7:a5:fd:74:69:0e:b8:08:5b:14:41:e9:34:3c:09: e2:12:fc:20:55:52:f3:c7:69:74:10:95:62:69:de: 56:00:15:9e:66:7d:c9:37:d3:29:81:68:ae:66:27: d6:da:5a:79:38:46:61:53:12:1b:0a:6e:84:5a:d5: 10:77:e2:1c:35:b3:d1:4c:f5:f7:b2:cd:d5:4a:62: 2f:fd:4e:63:e2:22:15:17:54:69:e8:68:2a:ff:51: f5:c0:c3:62:ba:44:f7:0b:45:cb:09:d7:38:19:75: 19:b8:b2:63:1e:77:c3:63:e0:4b:16:5d:66:6e:2f: 5c:2b:32:12:00:de:5c:40:eb:10:d5:75:b3:6e:e2: 22:98:8b:42:c4:bb:bd:c4:e5:aa:59:7e:c2:ea:24: a8:4c:9e:6b:35:ab:4d:51:99:97:8d:94:3d:63:eb: 0b:26:79:0d:6a:30:bb:37:ac:43:c1:00:08:99:28: c1:b7:54:f9:10:dd:96:39:ad:1e:21:91:bb:69:aa: 3f:8a:83:ce:17:91:00:c6:0a:30:10:c8:21:ba:fd: 37:fb:de:af:84:7d:f8:2b:d0:d1:04:c3:46:a4:73: cd:e9:dd:97:00:c6:36:dd:a2:23:5b:d6:18:83:e1: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:6A:FF:DA:6B:3D:2F:1E:5C:9F:1C:57:48:F0:E0:E4:BF:1B:35 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:aa:8a:c4:c1:4c:fe:13:a0:40:fa:1b:22:bd:4d:67:9d:45: 99:10:10:00:da:cc:4c:79:53:08:cd:35:47:ca:5b:fe:54:dc: 62:1d:ae:65:54:7c:4b:2e:98:42:a3:4b:fb:5e:76:91:6d:dc: 88:87:cd:0c:ca:1b:b1:cc:62:21:14:7b:d0:2d:f1:67:c2:21: 90:58:26:c5:67:b9:b3:ed:32:dd:f9:b1:a3:e8:97:a6:32:da: 7e:d8:69:75:fe:5e:68:4c:4e:f1:79:b0:6f:7f:01:34:cc:a5: b7:fc:91:fd:83:2a:04:66:47:13:bb:bb:d8:7b:18:5c:9b:19: 6f:51:ab:a9:d1:99:6d:86:02:92:5b:36:b2:62:35:fc:4b:a4: be:df:ee:36:e1:09:d9:40:77:98:8c:be:0b:11:f4:7b:84:e3: df:6f:43:f6:c6:8f:7a:59:89:86:82:82:0f:96:4a:7f:f3:b6: e1:e7:60:a2:82:d7:8c:3c:b0:30:c7:de:28:d7:d7:59:97:06: 79:ba:73:39:80:cb:a6:fe:c3:b5:1a:11:73:d6:f5:c1:49:f7: 66:70:aa:a4:c5:30:d1:8b:a1:82:eb:ee:77:94:d0:b1:01:55: b6:da:c1:b2:34:c8:ed:fa:f0:92:ec:06:80:7e:73:e9:9d:39: ca:c9:ef:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYxMDI2MTgxMDA5WhcNMjYxMTAyMTgxMDA5WjAYMRYwFAYD VQQDEw02YWRmOTc4MS00OGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDfTmwTWBwZxK3patNm3pf10aQ64CFsUQek0PAniEvwgVVLzx2l0EJViad5W ABWeZn3JN9MpgWiuZifW2lp5OEZhUxIbCm6EWtUQd+IcNbPRTPX3ss3VSmIv/U5j 4iIVF1Rp6Ggq/1H1wMNiukT3C0XLCdc4GXUZuLJjHnfDY+BLFl1mbi9cKzISAN5c QOsQ1XWzbuIimItCxLu9xOWqWX7C6iSoTJ5rNatNUZmXjZQ9Y+sLJnkNajC7N6xD wQAImSjBt1T5EN2WOa0eIZG7aao/ioPOF5EAxgowEMghuv03+96vhH34K9DRBMNG pHPN6d2XAMY23aIjW9YYg+FzyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF/uav/a az0vHlyfHFdI8ODkvxs1MB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACKqKxMFM/hOgQPobIr1NZ51FmRAQANrMTHlTCM01R8pb/lTcYh2uZVR8Sy6Y QqNL+152kW3ciIfNDMobscxiIRR70C3xZ8IhkFgmxWe5s+0y3fmxo+iXpjLafthp df5eaExO8Xmwb38BNMylt/yR/YMqBGZHE7u72HsYXJsZb1GrqdGZbYYCkls2smI1 /Eukvt/uNuEJ2UB3mIy+CxH0e4Tj329D9saPelmJhoKCD5ZKf/O24edgooLXjDyw MMfeKNfXWZcGebpzOYDLpv7DtRoRc9b1wUn3ZnCqpMUw0Yuhguvud5TQsQFVttrB sjTI7frwkuwGgH5z6Z05ysnvVQ== -----END CERTIFICATE-----Generated at Tue Oct 27 06:08:56 2026 by rpki-client