$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: IjLA0jLBbjZ2TAOlDd/VLM++7FRFAnln6r67jfG/NN0= Subject key identifier: 85:A0:68:B3:C0:9A:D4:6E:63:9D:08:D3:93:1B:24:1D:4E:93:CC:F6 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0C9E Signing time: Sat 06 Sep 2025 18:32:48 +0000 Manifest this update: Sat 06 Sep 2025 18:32:48 +0000 Manifest next update: Sat 13 Sep 2025 18:32:48 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: edzLCWBKgBQ6PvRkDaE7vYDG5EKEo90ywAGNsguBYdg=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 9xj2eLyG/tdesiN53tFy07gS2PXLIBFRo+Pfj6Aj7f4=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: dJZrsN09jQhR1tV/MBGDtF9J2z2S5+/G8ySEaBQlIWI=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: 5k3lhIIOE5jK/yOHyIZ8i0wDdX2SrJVnqaK6Nl9SYpA=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0bKIGEsq8hLfPMAMaZjPiHvxpIZHU52fzssXfn7yiXU=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: DBPGuu5yRvDvP4FC/IjV2H3T+xTKFbXciVMjwanRb/4=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /EuxmPPRYBaK5xLwAa5WDWDWOcYmzlBlj89Amjexk/E=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: DfS1XhJ0VY2l1Vl6FaTOWiiwrvVb4J6NRESIx8xEXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Sep 6 18:32:48 2025 GMT Not After : Sep 13 18:32:48 2025 GMT Subject: CN=68bc7e50-1768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0b:d2:83:23:93:30:8c:c8:95:7a:6f:7c:c3: 41:11:32:be:08:5d:2d:5f:6e:4e:f6:54:65:94:f0: 83:d5:c8:91:5f:93:00:fe:9b:da:c8:81:9e:21:1c: cf:b8:98:7a:9a:27:17:29:f9:1a:6a:b3:d5:5f:3b: 93:e4:0c:8c:47:11:f0:8c:19:a5:e5:08:fe:7c:2b: 58:d8:3e:5c:b6:5c:9d:f9:a2:a8:e6:97:fa:b8:1d: af:66:f7:36:16:c4:10:39:bf:1e:0b:d2:6a:24:15: a4:bf:ae:2e:af:9c:77:34:5e:25:0d:2e:fd:8f:7b: dc:3f:f2:fe:8b:6e:55:bd:dd:5b:be:89:81:51:fb: 63:9a:e8:a3:3c:6e:5c:c1:ba:a7:50:1c:7b:2e:30: 2a:de:50:39:40:01:fc:84:f7:3a:18:85:6e:e5:fc: e6:0e:78:67:20:cb:14:e0:4a:9e:40:d5:50:36:86: 0b:8d:52:e5:b2:29:5e:0f:0a:99:5c:25:e8:73:c9: bc:97:50:7d:e2:ca:ad:25:ec:0c:b1:13:92:0a:d8: ca:5d:fe:72:2d:02:02:e3:8e:f1:53:30:b5:b1:b6: cd:9a:98:ae:f2:2b:ff:99:47:04:3d:0a:24:1d:ec: 2b:ba:5a:0a:05:88:8b:8b:9e:23:93:6b:f5:b0:a2: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A0:68:B3:C0:9A:D4:6E:63:9D:08:D3:93:1B:24:1D:4E:93:CC:F6 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:99:9d:9d:b1:e6:5e:c6:c5:41:ff:c1:04:37:e0:3f:36:c2: 72:aa:d4:ba:84:67:65:92:b7:b5:79:0d:5f:0c:e4:a8:f2:ea: 34:75:d5:af:1a:4f:0d:6b:b6:ae:2e:a1:67:5e:2d:6e:e8:cb: d6:e0:ce:0f:75:95:de:94:a3:a2:75:8e:7d:48:89:df:6c:dc: aa:03:8a:09:71:9e:ec:b4:54:22:1a:43:27:d8:0d:e1:81:07: 6e:2a:6a:41:5d:da:f9:ae:bd:13:e3:5a:9f:99:8f:c3:1a:27: bc:b7:10:9f:15:dd:99:9e:c7:f2:fa:86:8c:4c:b0:90:0b:52: c9:2b:d1:8f:16:c0:c7:d5:fa:2a:bc:3a:9c:33:87:40:85:8b: 74:91:f3:ad:d4:c0:4e:1e:1a:b6:2f:97:6a:25:bf:13:77:9d: a0:99:94:3e:d4:a4:67:aa:03:9f:b0:36:bb:88:c5:f7:62:6a: 22:20:3c:32:13:3a:4d:1a:b6:f8:1a:89:b1:71:3f:26:0e:08: 5b:17:58:dd:18:4a:14:55:0f:e3:6b:aa:a7:9f:b7:c8:bb:6b: 58:5e:10:27:ae:ea:16:ee:62:f4:10:30:f3:da:b4:52:29:1d: 88:a8:3e:02:f2:11:a6:bd:9c:c7:d1:96:98:f6:d5:e8:3d:b4: f4:ba:1a:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUwOTA2MTgzMjQ4WhcNMjUwOTEzMTgzMjQ4WjAYMRYwFAYD VQQDEw02OGJjN2U1MC0xNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gvSgyOTMIzIlXpvfMNBETK+CF0tX25O9lRllPCD1ciRX5MA/pvayIGeIRzP uJh6micXKfkaarPVXzuT5AyMRxHwjBml5Qj+fCtY2D5ctlyd+aKo5pf6uB2vZvc2 FsQQOb8eC9JqJBWkv64ur5x3NF4lDS79j3vcP/L+i25Vvd1bvomBUftjmuijPG5c wbqnUBx7LjAq3lA5QAH8hPc6GIVu5fzmDnhnIMsU4EqeQNVQNoYLjVLlsileDwqZ XCXoc8m8l1B94sqtJewMsROSCtjKXf5yLQIC447xUzC1sbbNmpiu8iv/mUcEPQok HewruloKBYiLi54jk2v1sKJA0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWgaLPA mtRuY50I05MbJB1Ok8z2MB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAumZ2dseZexsVB/8EEN+A/NsJyqtS6hGdlkre1eQ1fDOSo8uo0ddWv Gk8Na7auLqFnXi1u6MvW4M4PdZXelKOidY59SInfbNyqA4oJcZ7stFQiGkMn2A3h gQduKmpBXdr5rr0T41qfmY/DGie8txCfFd2Znsfy+oaMTLCQC1LJK9GPFsDH1foq vDqcM4dAhYt0kfOt1MBOHhq2L5dqJb8Td52gmZQ+1KRnqgOfsDa7iMX3YmoiIDwy EzpNGrb4GomxcT8mDghbF1jdGEoUVQ/ja6qnn7fIu2tYXhAnruoW7mL0EDDz2rRS KR2IqD4C8hGmvZzH0ZaY9tXoPbT0uhpV -----END CERTIFICATE-----Generated at Mon Sep 8 03:58:16 2025 by rpki-client