$ rpki-client -vvf rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft File: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft (raw, json) Hash identifier: l29ltKr9POk6SgBh1HN1cF9jHL78Ed3/4NR4LASoLxM= Subject key identifier: E1:2A:A5:3F:34:5A:74:2F:D6:34:90:42:11:F0:82:F1:A3:67:A9:07 Authority key identifier: 48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 Certificate issuer: /CN=A9174EB5/serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Certificate serial: 0D5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft Manifest number: 0D03 Signing time: Thu 12 Mar 2026 18:05:20 +0000 Manifest this update: Thu 12 Mar 2026 18:05:20 +0000 Manifest next update: Thu 19 Mar 2026 18:05:20 +0000 Files and hashes: 1: SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl (hash: DEbS4Q8+YzZCQ257yRkitWS82UeZkkPrKcg8m6TkD2s=) 2: E0848D606F7611EDB491621FC4F9AE02.roa (hash: xiW1z5MnYSbZsJleNKbRUxhfgx/8JzW+eccLEQ4prS4=) 3: 0EF9BE4E276F11EEB328204AC4F9AE02.roa (hash: rJLxdr4XZ4oqpkH7S/LP6Q9L0HTP8eSINSv/SKNt+vc=) 4: E397AB78866F11EBA76EED3EC4F9AE02.roa (hash: 3Nv/ZHqsawJ0Jp2g16W+htBijpcWto8dbP6tcgAmIIk=) 5: 451C283AFE4911ED9352E438C4F9AE02.roa (hash: 0K2FVxGUCok0THMVBJfOUwq75tBpXjABY8rj5QwPc6w=) 6: 76BF7682061B11EAAD56521BC4F9AE02.roa (hash: mRpEBKmKyN90J4ooDi4lVCO6RHEBTfUlYtWenKg0wlw=) 7: 430342A4C02B11EA85244830C4F9AE02.roa (hash: YAO0UnDpIZbyVXdmfYYOuYA82NNvp7ggEwgpiP6F4Bk=) 8: CF257402276E11EEBE7B7B49C4F9AE02.roa (hash: qfOd2NsPmW/dThRfgUKaZ/2OAjQ7wZ+VSVJWExUQjSo=) 9: D47B21C24FFE11EAA0E4ED42C4F9AE02.roa (hash: 0sjZzbtNPaRKIT8BWTNvX39eUNvRnj582Bf5dTCbgrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3420 (0xd5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174EB5, serialNumber=48E99851C189FA921B86664E30BC57C20ED1A8C4 Validity Not Before: Mar 12 18:05:20 2026 GMT Not After : Mar 19 18:05:20 2026 GMT Subject: CN=69b30060-0592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:f1:6a:58:9e:fa:60:01:8d:23:e1:3f:39: 34:26:6b:b9:54:4f:01:b3:e1:32:0f:af:37:b6:ea: 79:73:7e:36:77:de:8d:99:7d:e6:e9:4f:4e:6f:de: 21:57:37:60:66:cf:8d:5a:83:36:4e:97:17:c3:fa: d1:15:62:00:d4:8a:00:8c:87:4a:b9:ce:a2:95:25: e6:ab:1e:30:11:66:71:25:1d:08:98:48:ed:7a:7e: de:70:f0:aa:94:88:33:db:b5:ff:ba:1d:4c:bf:8f: 3b:82:a5:aa:ae:3c:0e:86:38:9f:8d:80:59:04:b8: 38:22:48:58:9e:a5:5e:ce:5d:fd:ad:1b:48:f8:66: 2e:5a:f1:24:df:01:22:6c:4e:da:7c:3c:3d:d8:35: b7:2b:b3:cf:19:ef:59:4e:72:ea:23:74:1c:d0:8b: 69:ed:c7:b4:41:e4:37:7a:f8:3c:57:c1:64:e3:8d: 7d:05:01:3a:cf:71:86:85:24:91:e9:1a:bd:e9:0b: e0:ae:7d:74:b3:00:56:e7:b2:96:13:3d:f6:ac:db: a0:df:5e:8e:1f:4c:4e:76:b5:06:6b:be:d5:32:55: 50:7a:e5:65:de:ef:a2:84:dc:ed:ef:4e:32:13:a5: 1a:99:ac:f1:fd:18:21:15:06:30:23:ca:15:3b:eb: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2A:A5:3F:34:5A:74:2F:D6:34:90:42:11:F0:82:F1:A3:67:A9:07 X509v3 Authority Key Identifier: keyid:48:E9:98:51:C1:89:FA:92:1B:86:66:4E:30:BC:57:C2:0E:D1:A8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174EB5/AFEA29C2061911EA854A3516C4F9AE02/SOmYUcGJ-pIbhmZOMLxXwg7RqMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:a2:fd:42:db:d6:35:52:3a:b5:ad:3d:fd:a0:81:e5:4f:5e: 5d:89:5d:9c:b3:a0:7e:bf:df:e0:fe:9d:6c:96:6a:28:38:2d: b7:3c:bb:1a:bf:55:7e:5b:49:3f:c6:bd:4e:7e:da:4a:2b:9d: 4b:2c:b9:a6:73:33:62:5f:39:e2:c5:92:e1:d5:0e:a0:af:2f: d1:01:b1:23:5d:01:e6:e1:5d:25:d7:7c:58:ee:12:79:0b:83: 8a:67:aa:36:3f:34:cd:b5:09:a1:8e:45:3a:a8:ac:95:8a:8f: c4:c3:c6:13:10:00:f7:74:98:1b:8c:10:45:57:17:6c:0a:a7: 16:42:58:99:40:73:5c:be:43:11:30:7c:cf:76:aa:8c:cd:e5: c3:ba:11:a6:66:73:5c:ad:33:03:fa:1c:5c:0c:ca:d5:05:e5: 27:92:46:e7:06:a9:e0:da:34:2c:95:cf:d9:e6:1e:17:de:d3: db:a5:48:93:ba:fc:2e:c3:a1:b1:53:59:47:56:d7:1c:88:fa: 1b:4f:78:58:f5:87:ea:2d:aa:39:0a:29:96:fa:59:b5:c4:ef: 96:9e:04:a9:47:0c:7f:bb:de:c9:59:d2:ed:a7:e2:9e:0e:a8: f4:44:18:a5:72:f6:89:ab:a5:27:ea:fe:e9:46:35:13:1a:a2: 70:2c:01:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRFQjUxMTAvBgNVBAUTKDQ4RTk5ODUxQzE4OUZBOTIxQjg2NjY0RTMwQkM1N0My MEVEMUE4QzQwHhcNMjYwMzEyMTgwNTIwWhcNMjYwMzE5MTgwNTIwWjAYMRYwFAYD VQQDEw02OWIzMDA2MC0wNTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAHxalie+mABjSPhPzk0Jmu5VE8Bs+EyD683tup5c342d96NmX3m6U9Ob94h VzdgZs+NWoM2TpcXw/rRFWIA1IoAjIdKuc6ilSXmqx4wEWZxJR0ImEjten7ecPCq lIgz27X/uh1Mv487gqWqrjwOhjifjYBZBLg4IkhYnqVezl39rRtI+GYuWvEk3wEi bE7afDw92DW3K7PPGe9ZTnLqI3Qc0Itp7ce0QeQ3evg8V8Fk4419BQE6z3GGhSSR 6Rq96Qvgrn10swBW57KWEz32rNug316OH0xOdrUGa77VMlVQeuVl3u+ihNzt704y E6Uamazx/RghFQYwI8oVO+tA0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEqpT80 WnQv1jSQQhHwgvGjZ6kHMB8GA1UdIwQYMBaAFEjpmFHBifqSG4ZmTjC8V8IO0ajE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEVCNS9BRkVBMjlDMjA2 MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1wSWJobVpPTUx4WHdnN1Jx TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPbVlVY0dKLXBJYmhtWk9NTHhYd2c3UnFNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEVCNS9BRkVBMjlDMjA2MTkxMUVBODU0QTM1MTZDNEY5QUUwMi9TT21ZVWNHSi1w SWJobVpPTUx4WHdnN1JxTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApaL9QtvWNVI6ta09/aCB5U9eXYldnLOgfr/f4P6dbJZqKDgttzy7Gr9VfltJ P8a9Tn7aSiudSyy5pnMzYl854sWS4dUOoK8v0QGxI10B5uFdJdd8WO4SeQuDimeq Nj80zbUJoY5FOqislYqPxMPGExAA93SYG4wQRVcXbAqnFkJYmUBzXL5DETB8z3aq jM3lw7oRpmZzXK0zA/ocXAzK1QXlJ5JG5wap4No0LJXP2eYeF97T26VIk7r8LsOh sVNZR1bXHIj6G094WPWH6i2qOQoplvpZtcTvlp4EqUcMf7veyVnS7afing6o9EQY pXL2iaulJ+r+6UY1ExqicCwBYg== -----END CERTIFICATE-----Generated at Fri Mar 13 02:42:30 2026 by rpki-client