$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: lZgITt21tI/9JsrC5eGW3Fi//Yhj0yjYGJ47LPqgICI= Subject key identifier: CD:F4:AA:80:85:3E:64:C0:3D:A7:1F:93:59:61:44:97:F3:7A:C3:E6 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0CB6 Signing time: Fri 24 Oct 2025 18:56:50 +0000 Manifest this update: Fri 24 Oct 2025 18:56:49 +0000 Manifest next update: Fri 31 Oct 2025 18:56:49 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: mXnAU0sI/PlFoFraeubLP6lgN+NWna4+wg4KZqejUSk=) 2: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: ySE2YBsbAXt0k1PEdiGam1s5GhhHLonIBlG28ashrzw=) 3: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 9xj2eLyG/tdesiN53tFy07gS2PXLIBFRo+Pfj6Aj7f4=) 4: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: dJZrsN09jQhR1tV/MBGDtF9J2z2S5+/G8ySEaBQlIWI=) 5: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: 5k3lhIIOE5jK/yOHyIZ8i0wDdX2SrJVnqaK6Nl9SYpA=) 6: 430342A4C02B11EA85244830C4F9AE02.roa (hash: 0bKIGEsq8hLfPMAMaZjPiHvxpIZHU52fzssXfn7yiXU=) 7: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: DBPGuu5yRvDvP4FC/IjV2H3T+xTKFbXciVMjwanRb/4=) 8: E0848D606F7611EDB491621FC4F9AE02.roa (hash: /EuxmPPRYBaK5xLwAa5WDWDWOcYmzlBlj89Amjexk/E=) 9: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: DfS1XhJ0VY2l1Vl6FaTOWiiwrvVb4J6NRESIx8xEXkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 18:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Oct 24 18:56:49 2025 GMT Not After : Oct 31 18:56:49 2025 GMT Subject: CN=68fbcbf2-bf89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:e1:91:d2:76:93:2c:a6:a3:fa:d7:d8:82: dd:16:dc:8f:89:48:b1:8e:12:67:ae:41:21:33:18: d4:3d:29:57:78:f9:9b:34:24:f2:a1:84:40:b9:8d: a8:b5:76:ac:0d:8f:95:46:d9:eb:1a:3b:04:93:8a: 85:77:07:93:4f:60:4c:5d:43:9d:d1:1b:57:bd:08: eb:a0:1b:3d:d6:c4:29:b8:77:d8:59:b9:04:53:43: df:6b:73:ba:29:d0:df:c2:a6:8d:e5:8d:68:3f:13: ab:a3:2f:57:0d:68:a7:00:68:67:fa:85:33:9d:c5: fa:4a:c8:05:ce:60:dd:d3:02:dc:f0:05:94:48:b9: e9:78:0f:7c:d0:61:39:4f:24:0d:66:7c:12:a2:fb: 7a:36:30:8b:9d:4e:dd:67:40:1d:7e:26:c9:e5:45: e5:df:03:b8:93:b5:37:ee:57:62:4f:32:4d:f6:44: 18:9a:ce:88:99:de:01:04:fc:c7:17:cd:8c:21:25: 77:4d:d2:02:fb:a3:18:14:8e:be:be:a1:8b:91:f4: 49:ea:11:78:e8:d7:6d:92:04:6b:78:e9:71:17:d1: df:77:be:22:6d:4a:72:bf:22:ce:c2:37:c8:2f:c7: e5:d0:3b:71:0a:61:5d:34:e8:c0:80:c1:13:26:6a: de:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F4:AA:80:85:3E:64:C0:3D:A7:1F:93:59:61:44:97:F3:7A:C3:E6 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b3:97:be:bf:05:b2:73:53:d3:a3:5d:83:39:0b:37:93:f7: 08:34:f6:8d:80:6e:2d:44:da:00:5c:f4:95:c3:39:9b:8a:bd: 74:5e:e6:8b:2e:0e:c2:2a:c2:87:07:b6:45:70:d0:6a:b1:b0: f4:8b:0d:57:48:b8:c3:e5:d7:25:4c:7b:60:4e:44:c6:49:26: 6f:60:b4:fa:a3:1c:2e:82:b5:b1:fa:b7:ec:df:13:c8:ef:80: c6:17:84:8a:82:1e:1a:c2:1a:26:58:b6:0e:5c:18:5c:22:32: fb:37:8b:06:f6:e3:2c:eb:f1:08:34:ec:f5:69:13:98:f0:76: 2e:f2:51:2f:39:da:c0:34:f0:7e:81:72:d7:0c:dd:e9:95:ac: a2:8b:e1:05:30:2f:7a:24:08:4c:59:3c:a1:29:24:46:69:c5: ea:aa:5e:e8:b6:84:a9:32:13:b1:5b:da:c3:c0:f4:a5:a4:af: 2c:c7:8a:e1:1c:6f:00:1b:ba:51:ff:a7:20:e0:d8:28:87:63: 93:dc:cd:b6:5a:b4:d6:19:b4:7b:15:23:4e:46:36:de:c4:02: b7:7d:75:05:16:fe:6f:29:ec:aa:c0:99:84:07:fa:48:17:a2: 84:7c:77:e6:11:6b:e8:42:16:61:48:95:04:e7:60:1c:92:b2: 58:38:d5:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjUxMDI0MTg1NjQ5WhcNMjUxMDMxMTg1NjQ5WjAYMRYwFAYD VQQDEw02OGZiY2JmMi1iZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtLhkdJ2kyymo/rX2ILdFtyPiUixjhJnrkEhMxjUPSlXePmbNCTyoYRAuY2o tXasDY+VRtnrGjsEk4qFdweTT2BMXUOd0RtXvQjroBs91sQpuHfYWbkEU0Pfa3O6 KdDfwqaN5Y1oPxOroy9XDWinAGhn+oUzncX6SsgFzmDd0wLc8AWUSLnpeA980GE5 TyQNZnwSovt6NjCLnU7dZ0AdfibJ5UXl3wO4k7U37ldiTzJN9kQYms6Imd4BBPzH F82MISV3TdIC+6MYFI6+vqGLkfRJ6hF46NdtkgRreOlxF9Hfd74ibUpyvyLOwjfI L8fl0DtxCmFdNOjAgMETJmreEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM30qoCF PmTAPacfk1lhRJfzesPmMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBis5e+vwWyc1PTo12DOQs3k/cINPaNgG4tRNoAXPSVwzmbir10XuaL Lg7CKsKHB7ZFcNBqsbD0iw1XSLjD5dclTHtgTkTGSSZvYLT6oxwugrWx+rfs3xPI 74DGF4SKgh4awhomWLYOXBhcIjL7N4sG9uMs6/EINOz1aROY8HYu8lEvOdrANPB+ gXLXDN3playii+EFMC96JAhMWTyhKSRGacXqql7otoSpMhOxW9rDwPSlpK8sx4rh HG8AG7pR/6cg4Ngoh2OT3M22WrTWGbR7FSNORjbexAK3fXUFFv5vKeyqwJmEB/pI F6KEfHfmEWvoQhZhSJUE52AckrJYONWG -----END CERTIFICATE-----Generated at Sun Oct 26 09:35:40 2025 by rpki-client