
$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json)
Hash identifier: Xcf1E6hkVLnGTy3KCNYT5pkzcYczJChpVhG/IDAIoDU=
Subject key identifier: 37:67:5C:5F:96:7D:59:F9:14:F6:6C:E9:D7:F7:91:14:4E:5B:82:8B
Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Certificate serial: 0D8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
Manifest number: 0D31
Signing time: Wed 10 Jun 2026 18:15:16 +0000
Manifest this update: Wed 10 Jun 2026 18:15:16 +0000
Manifest next update: Wed 17 Jun 2026 18:15:16 +0000
Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: tGXj278QlqBB0WeluR2NUakmqYy9+sEZBtmRj6SCB+o=)
2: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=)
3: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=)
4: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=)
5: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=)
6: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=)
7: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=)
8: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=)
9: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 18:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3466 (0xd8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4
Validity
Not Before: Jun 10 18:15:16 2026 GMT
Not After : Jun 17 18:15:16 2026 GMT
Subject: CN=6a29a9b4-8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:10:ac:b7:51:6a:5b:a8:95:5e:2a:b8:c7:
66:fc:0c:95:21:02:d8:ce:24:dd:2e:39:b4:c4:f5:
98:b1:14:97:c3:b7:ae:5c:6d:9c:7b:69:df:1b:a3:
35:9e:70:da:83:ea:8d:f8:67:c8:59:4f:2e:4e:b3:
5e:1e:a1:63:a7:3e:3d:97:4c:55:fe:a7:38:95:b8:
8f:9e:27:5b:df:4b:ad:d2:1a:f9:90:35:31:43:d6:
5e:9d:49:5a:5b:b5:06:6b:ae:06:af:50:a0:27:d9:
62:00:58:b9:3c:6b:50:f3:4a:12:a2:1f:a3:07:3a:
49:a4:29:04:23:2f:41:84:b9:9f:22:04:82:a1:b1:
c6:ea:a1:87:45:4f:f9:15:2a:7e:b0:a1:66:53:a0:
e5:3b:17:16:de:1e:2b:90:24:61:bd:0d:7d:91:81:
46:0e:9d:c3:b9:96:56:e6:52:af:97:3f:db:8b:09:
50:12:c5:16:ab:5c:83:9c:5f:bc:69:40:69:ee:b0:
5a:6d:ef:be:80:2a:9b:07:7b:e9:74:04:67:b9:41:
b0:df:9b:4b:0a:c8:48:fc:bd:76:e5:ef:a8:b4:5a:
03:71:3e:37:b4:96:62:e2:69:95:5b:16:62:a2:68:
cf:71:c5:51:35:13:d4:84:e2:84:42:9f:99:fb:71:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:5C:5F:96:7D:59:F9:14:F6:6C:E9:D7:F7:91:14:4E:5B:82:8B
X509v3 Authority Key Identifier:
keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:98:de:a2:fe:bd:fc:3f:8c:49:ed:9b:cb:39:c1:79:d5:97:
71:40:cc:32:6b:b3:64:71:6c:ed:99:cb:d6:e9:1b:12:2b:7b:
11:05:83:a8:81:ec:47:dc:91:fb:24:6d:58:5f:e7:29:ff:b8:
b1:3d:71:ab:47:c5:4a:f5:0a:66:b6:e0:e8:18:4b:4e:a1:46:
da:75:84:af:a1:cd:90:46:20:74:94:e4:0e:b3:9b:c3:94:2e:
0d:42:c3:f4:ae:56:39:7d:69:80:c2:1d:82:2d:a6:4e:bb:0b:
56:ef:75:31:77:d4:8e:a6:c4:6a:82:03:a5:10:d5:92:60:2a:
18:11:f7:5a:cc:66:08:d7:de:2a:36:cf:af:ab:ee:cc:63:d0:
25:81:52:1f:80:d7:31:49:ab:92:36:f9:09:0a:1f:5e:05:b4:
e5:84:67:43:79:ee:a4:24:06:6a:78:89:d3:2a:56:c7:63:aa:
6b:85:f6:b5:16:5b:6e:b2:5e:0d:43:f7:e0:c2:66:d6:46:14:
a1:2a:a3:e5:9f:dd:5a:a7:ca:d8:29:26:41:c1:fc:b3:5b:60:
9f:5d:a3:fe:5d:e3:01:21:4d:19:f0:b2:58:8b:ab:39:ce:50:
90:a3:8d:93:a5:12:71:cc:5d:38:aa:00:c3:33:e0:f1:89:8f:
84:2f:c5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:09 2026 by rpki-client