$ rpki-client -vvvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: sxLjwAnUhWeYQNwHrkzOU3oxVGOperyKisAP5f/5Ffc= Subject key identifier: DC:DA:5B:88:00:02:D5:08:C4:3C:83:97:7E:75:32:EF:E7:50:32:15 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0DB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D5F Signing time: Tue 08 Sep 2026 18:16:34 +0000 Manifest this update: Tue 08 Sep 2026 18:16:33 +0000 Manifest next update: Tue 15 Sep 2026 18:16:33 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: I7XIA0VwRcAbfgdypnS3LZPQodS8Mi4OgRUXPnPz34Y=) 2: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 3: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 4: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 5: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 6: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 8: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 9: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Sep 2026 18:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3512 (0xdb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Sep 8 18:16:33 2026 GMT Not After : Sep 15 18:16:33 2026 GMT Subject: CN=6aa05102-b438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:b0:11:0f:07:08:29:ce:35:cb:31:74:ae: 86:74:19:37:df:8e:c7:dc:09:5a:bd:7b:6c:70:b5: fc:49:6c:fb:88:31:bc:03:3d:43:46:38:18:ba:77: 6c:be:f9:13:85:08:2b:11:13:15:60:88:ad:30:c7: ed:bf:5e:07:04:e8:41:f3:d4:94:83:81:c9:d1:7d: 5b:ef:dd:44:bc:71:57:79:97:da:04:a2:d1:a1:f0: 30:83:0a:6a:1f:13:f8:d8:ee:c4:6a:ce:58:2e:c7: 1b:13:6e:fd:58:49:08:65:a0:b3:63:ba:67:15:14: 94:a8:49:53:2a:eb:7e:5f:14:b6:ea:d4:78:03:93: d8:67:ca:ed:15:78:64:f0:36:cf:83:46:d9:c2:99: 31:70:a5:2a:84:56:5c:b8:a6:48:a0:46:43:9e:4f: 9e:90:02:a7:32:3d:e6:04:5b:f4:27:1a:56:14:a3: 78:92:92:db:2e:ec:cb:9d:59:8f:b1:d0:e3:ce:ac: f4:b0:38:c3:cc:fa:a7:7c:68:f9:41:01:7f:f7:14: 47:97:e7:ff:e6:7f:fb:2f:c7:3e:02:e6:19:54:62: 1e:11:b9:7c:f1:ec:fc:4e:a1:17:dc:de:3f:86:63: 7a:7e:ba:34:f3:28:65:7d:17:09:6f:81:9c:d9:f6: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DA:5B:88:00:02:D5:08:C4:3C:83:97:7E:75:32:EF:E7:50:32:15 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:dd:93:84:c0:72:96:75:d1:8a:5e:9d:90:a5:7b:3f:6e: ea:db:8e:7e:21:3b:ee:a1:60:86:69:e5:37:31:d2:ee:8a:40: 45:b8:9e:9d:d7:12:55:35:fa:10:dc:db:7f:df:05:a5:3a:fd: e7:0b:f6:ba:00:90:98:4c:3d:5a:42:21:58:cf:cb:93:d2:ac: 35:a4:9b:0e:71:26:93:ed:4c:0a:cd:36:88:7e:6a:61:d4:08: 91:99:6e:2d:1b:8b:89:32:98:74:61:31:33:27:8a:2c:e4:76: 64:51:39:35:b4:e8:f8:8a:81:91:a2:06:4c:93:cd:f7:66:2f: cf:5a:50:8d:e1:f3:7e:c8:ad:13:11:63:25:6b:06:da:70:8f: e6:0f:ae:e8:0d:57:e6:49:77:4f:33:8e:7f:a1:cc:8f:1c:6f: 43:41:ae:59:a3:04:61:98:50:ea:56:ea:61:43:92:63:8e:cd: 29:cd:c3:ff:5d:16:8d:1c:54:fb:e0:7b:ca:0d:de:43:b4:55: 79:db:79:82:ef:2b:39:15:0a:d1:23:ca:2d:60:ed:a2:cb:fa: 52:69:02:87:b9:27:f6:01:3a:07:9f:88:c9:fc:4f:c1:b0:9e: cb:24:ef:cd:8c:96:98:42:23:24:58:78:9b:e8:48:d5:5d:f7: c9:a2:1a:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwOTA4MTgxNjMzWhcNMjYwOTE1MTgxNjMzWjAYMRYwFAYD VQQDEw02YWEwNTEwMi1iNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9OwEQ8HCCnONcsxdK6GdBk3347H3AlavXtscLX8SWz7iDG8Az1DRjgYunds vvkThQgrERMVYIitMMftv14HBOhB89SUg4HJ0X1b791EvHFXeZfaBKLRofAwgwpq HxP42O7Eas5YLscbE279WEkIZaCzY7pnFRSUqElTKut+XxS26tR4A5PYZ8rtFXhk 8DbPg0bZwpkxcKUqhFZcuKZIoEZDnk+ekAKnMj3mBFv0JxpWFKN4kpLbLuzLnVmP sdDjzqz0sDjDzPqnfGj5QQF/9xRHl+f/5n/7L8c+AuYZVGIeEbl88ez8TqEX3N4/ hmN6fro08yhlfRcJb4Gc2fZrZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzaW4gA AtUIxDyDl351Mu/nUDIVMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2Hdk4TAcpZ10YpenZClez9u6tuOfiE77qFghmnlNzHS7opARbiendcSVTX6 ENzbf98FpTr95wv2ugCQmEw9WkIhWM/Lk9KsNaSbDnEmk+1MCs02iH5qYdQIkZlu LRuLiTKYdGExMyeKLOR2ZFE5NbTo+IqBkaIGTJPN92Yvz1pQjeHzfsitExFjJWsG 2nCP5g+u6A1X5kl3TzOOf6HMjxxvQ0GuWaMEYZhQ6lbqYUOSY47NKc3D/10WjRxU ++B7yg3eQ7RVedt5gu8rORUK0SPKLWDtosv6UmkCh7kn9gE6B5+IyfxPwbCeyyTv zYyWmEIjJFh4m+hI1V33yaIaWQ== -----END CERTIFICATE-----Generated at Thu Sep 10 08:46:10 2026 by rpki-client