$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: igH92Gg9nKzgM0HF5qyTscqddnPNGPDCutxWJz3WyTs= Subject key identifier: 30:9F:54:DC:AA:C5:AD:73:04:20:DD:5C:68:F9:8A:01:37:9D:13:03 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0D73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D1A Signing time: Sun 26 Apr 2026 18:11:07 +0000 Manifest this update: Sun 26 Apr 2026 18:11:06 +0000 Manifest next update: Sun 03 May 2026 18:11:06 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: h8h9oQTrRuFzYhiSqJaemtTMxV4OlV645DtBYh+T5rw=) 2: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 3: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) 4: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 5: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 6: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 7: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 8: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 9: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 18:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3443 (0xd73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Apr 26 18:11:06 2026 GMT Not After : May 3 18:11:06 2026 GMT Subject: CN=69ee553a-7707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:b2:6c:09:3d:7a:6e:8a:d9:1e:83:2c:a1: 3b:1a:82:e8:63:96:da:dc:ce:41:ef:b6:a8:62:01: 03:0a:46:18:01:a1:76:71:0a:c7:c0:ce:d8:51:b1: 79:4c:cd:30:db:7d:ce:23:22:17:5c:0d:a7:11:be: 77:e9:f0:05:e1:40:af:92:ad:3d:31:0e:93:8e:e2: d6:7e:1d:7a:9a:6f:56:fd:dc:7c:0c:cf:dd:89:11: c4:dd:c5:2a:c5:85:1a:c4:61:48:8e:ce:b2:35:71: 10:04:01:af:31:af:79:ce:0b:cf:49:29:6e:c3:15: bc:66:7f:60:12:a2:75:6a:1d:6e:a6:39:be:95:48: 90:51:7b:78:23:eb:80:87:82:7b:df:b2:1e:bc:db: c6:01:8b:90:09:37:45:2c:9d:c4:61:16:72:a6:e5: a8:5b:b7:2f:25:fc:0d:00:0c:54:b8:02:92:b1:52: 23:4f:72:ff:ff:59:9d:bf:e0:9e:48:50:ea:c7:0a: a6:65:5d:2c:3b:d4:81:db:76:9c:4f:b3:33:2e:65: d9:f1:ea:17:70:7c:cb:10:c7:e5:22:8d:99:01:c3: 6f:7e:34:45:73:73:13:a8:d0:07:05:a4:1b:88:ac: 55:dd:10:f8:3d:d2:74:18:a6:32:57:3b:a6:99:59: cf:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:9F:54:DC:AA:C5:AD:73:04:20:DD:5C:68:F9:8A:01:37:9D:13:03 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6b:7a:94:5e:c5:36:ef:6e:8d:80:f3:eb:24:15:21:dc:96: 13:96:aa:ac:66:00:51:eb:bc:34:02:1c:76:75:d5:e9:3d:5b: 50:e9:0d:41:8a:a0:4d:f8:99:5c:6c:b4:4f:c3:ba:a5:3e:69: 57:c5:c4:6c:4c:7d:d7:85:1d:89:5d:9a:c6:c8:bf:22:15:85: 7e:ed:f8:c6:01:90:86:58:44:77:72:53:28:85:3c:8d:ad:90: 28:cf:cb:7a:dd:83:ca:df:43:3a:ad:04:35:b2:30:01:34:a5: 89:ec:ba:07:9f:6d:00:80:0e:d6:28:68:14:fc:67:a4:41:bc: b6:c2:cd:44:d1:22:8f:02:d6:3e:39:c0:c4:40:6c:2c:b0:b2: c4:7a:25:89:fd:24:ed:ea:d7:ea:b8:a6:74:95:cf:5a:0e:4b: d9:63:c2:95:26:86:8a:38:ac:c8:4a:1d:a7:f3:c3:90:ae:59: 78:1d:77:79:0f:6a:f2:c9:6e:82:bc:2e:31:24:33:8a:79:55: f7:45:19:f1:1f:d2:21:9d:45:09:40:d7:28:74:c8:2a:9b:00: 92:36:55:78:44:e0:84:41:d2:56:d6:7a:ff:61:bc:e1:c9:5f: c4:a5:8b:4f:66:6d:58:d1:d7:10:83:3f:2f:e1:4e:5f:39:a4: c5:c2:53:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwNDI2MTgxMTA2WhcNMjYwNTAzMTgxMTA2WjAYMRYwFAYD VQQDEw02OWVlNTUzYS03NzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmyybAk9em6K2R6DLKE7GoLoY5ba3M5B77aoYgEDCkYYAaF2cQrHwM7YUbF5 TM0w233OIyIXXA2nEb536fAF4UCvkq09MQ6TjuLWfh16mm9W/dx8DM/diRHE3cUq xYUaxGFIjs6yNXEQBAGvMa95zgvPSSluwxW8Zn9gEqJ1ah1upjm+lUiQUXt4I+uA h4J737IevNvGAYuQCTdFLJ3EYRZypuWoW7cvJfwNAAxUuAKSsVIjT3L//1mdv+Ce SFDqxwqmZV0sO9SB23acT7MzLmXZ8eoXcHzLEMflIo2ZAcNvfjRFc3MTqNAHBaQb iKxV3RD4PdJ0GKYyVzummVnPuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCfVNyq xa1zBCDdXGj5igE3nRMDMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOWt6lF7FNu9ujYDz6yQVIdyWE5aqrGYAUeu8NAIcdnXV6T1bUOkNQYqgTfiZ XGy0T8O6pT5pV8XEbEx914UdiV2axsi/IhWFfu34xgGQhlhEd3JTKIU8ja2QKM/L et2Dyt9DOq0ENbIwATSliey6B59tAIAO1ihoFPxnpEG8tsLNRNEijwLWPjnAxEBs LLCyxHolif0k7erX6rimdJXPWg5L2WPClSaGijisyEodp/PDkK5ZeB13eQ9q8slu grwuMSQzinlV90UZ8R/SIZ1FCUDXKHTIKpsAkjZVeETghEHSVtZ6/2G84clfxKWL T2ZtWNHXEIM/L+FOXzmkxcJTAg== -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:49 2026 by rpki-client