$ rpki-client -vvvf rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft File: SOkLc7Sfo6317JGlzNI9rTXTxI4.mft (raw, json) Hash identifier: JFpJEGvdw+eSkatDx5nE/RkJbOAr8oggIxmzXFozMg0= Subject key identifier: 63:DD:36:38:EC:20:D8:18:2E:6B:3C:9C:FB:3E:48:55:A1:65:99:89 Authority key identifier: 48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E Certificate issuer: /CN=A917D228/serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft Manifest number: 07D6 Signing time: Tue 22 Sep 2026 21:05:31 +0000 Manifest this update: Tue 22 Sep 2026 21:05:31 +0000 Manifest next update: Tue 29 Sep 2026 21:05:31 +0000 Files and hashes: 1: SOkLc7Sfo6317JGlzNI9rTXTxI4.crl (hash: oVlkcBDhYpxEf3G3GKhjV6p0iPbgCqd8NjpUO2VvO8Y=) 2: 8CFEF8EE50AE11EBB71FB743C4F9AE02.roa (hash: 0b0HxKXaBgsrMjbgtSVdcN+5q1xfdbTvPOaj8MWjzqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D228, serialNumber=48E90B73B49FA3ADF5EC91A5CCD23DAD35D3C48E Validity Not Before: Sep 22 21:05:31 2026 GMT Not After : Sep 29 21:05:31 2026 GMT Subject: CN=6ab2ed9b-eb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3b:a9:ce:f1:8f:a4:57:db:41:ff:f0:00:44: f0:66:88:7c:a0:5b:bf:79:88:21:a3:20:d3:99:08: 95:ce:35:56:2c:df:5c:b8:6d:65:c8:96:3d:44:d3: 4e:e7:c7:1a:e4:6e:e1:3e:5b:eb:9d:d4:ab:56:4f: 1c:92:e6:bf:0d:9d:16:24:96:82:54:05:7d:29:7f: ea:e0:dd:3f:2d:a4:49:51:cf:53:d2:eb:90:d0:63: d8:de:0e:ae:90:e6:4c:fa:81:69:b5:c1:d1:a7:8b: e6:97:0f:7c:a8:17:ac:19:91:b2:6c:82:dc:32:cd: 90:c2:cd:7b:96:f9:8e:36:b0:75:b1:45:e8:40:72: 70:18:41:60:fc:8c:12:f1:fe:02:b3:13:5e:96:23: b2:08:19:53:65:98:49:68:aa:93:47:3d:64:74:0f: 23:ea:0c:38:6a:c2:b8:0b:ad:bc:58:17:fe:12:aa: 81:c6:56:30:af:8f:83:07:f3:42:b7:4e:92:21:70: b9:88:d4:e2:86:7f:f3:92:f9:60:69:7b:22:f4:d1: 9e:22:cd:c5:e0:9f:a7:6a:54:32:ab:88:d8:63:7a: 4a:07:41:0b:8c:6d:3f:cf:cb:d4:6a:93:d8:91:98: e3:b4:be:fc:be:2c:82:c7:4f:37:b6:f8:a8:f3:38: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:DD:36:38:EC:20:D8:18:2E:6B:3C:9C:FB:3E:48:55:A1:65:99:89 X509v3 Authority Key Identifier: keyid:48:E9:0B:73:B4:9F:A3:AD:F5:EC:91:A5:CC:D2:3D:AD:35:D3:C4:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SOkLc7Sfo6317JGlzNI9rTXTxI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D228/6B4D2DA850AC11EBAF178E3EC4F9AE02/SOkLc7Sfo6317JGlzNI9rTXTxI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:77:ca:61:da:3d:4b:ae:3f:30:d9:2b:ac:17:b9:51:7b:cf: c5:ac:8b:e3:cc:68:92:3b:35:48:1c:62:42:08:38:c5:88:f1: 5d:54:20:4b:61:58:00:73:d5:61:a1:d3:3d:45:25:68:9d:1c: 69:22:f4:b8:37:ac:ef:8e:66:aa:89:57:2a:7c:b1:6a:b3:80: f5:33:04:03:45:24:7d:19:3e:a5:61:55:31:ed:ad:27:5c:95: b9:94:b5:14:a8:45:f6:03:cf:13:24:01:c4:28:95:97:b7:a9: 5f:45:e3:15:10:82:4a:9b:9c:00:6a:9b:34:76:6e:73:55:71: c5:85:ec:da:ed:2a:7f:9d:81:ca:18:d7:84:0f:b9:34:cb:89: b8:a3:64:38:c2:7c:88:7f:ae:5a:c1:fe:7f:2e:64:4e:cf:9a: fa:f5:66:97:5a:1d:09:a4:cf:7a:0a:3b:f9:2c:14:09:9d:d3: 06:03:b4:24:b9:a4:96:3b:bf:c3:d3:51:0c:58:20:cd:01:dd: 11:8f:14:d3:bc:8b:0a:29:1a:c3:30:04:a1:9e:4e:39:f3:27: af:66:6a:05:43:ba:94:05:e0:3e:5b:39:e9:ae:42:88:d3:72: 79:16:55:ea:c5:0c:e8:46:d9:42:c6:c6:76:92:4f:e8:c7:70: d2:4b:5d:a3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QyMjgxMTAvBgNVBAUTKDQ4RTkwQjczQjQ5RkEzQURGNUVDOTFBNUNDRDIzREFE MzVEM0M0OEUwHhcNMjYwOTIyMjEwNTMxWhcNMjYwOTI5MjEwNTMxWjAYMRYwFAYD VQQDEw02YWIyZWQ5Yi1lYjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDupzvGPpFfbQf/wAETwZoh8oFu/eYghoyDTmQiVzjVWLN9cuG1lyJY9RNNO 58ca5G7hPlvrndSrVk8ckua/DZ0WJJaCVAV9KX/q4N0/LaRJUc9T0uuQ0GPY3g6u kOZM+oFptcHRp4vmlw98qBesGZGybILcMs2Qws17lvmONrB1sUXoQHJwGEFg/IwS 8f4CsxNeliOyCBlTZZhJaKqTRz1kdA8j6gw4asK4C628WBf+EqqBxlYwr4+DB/NC t06SIXC5iNTihn/zkvlgaXsi9NGeIs3F4J+nalQyq4jYY3pKB0ELjG0/z8vUapPY kZjjtL78viyCx083tvio8zgS3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGPdNjjs INgYLms8nPs+SFWhZZmJMB8GA1UdIwQYMBaAFEjpC3O0n6Ot9eyRpczSPa0108SO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDIyOC82QjREMkRBODUw QUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82MzE3Skdsek5JOXJUWFR4 STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NPa0xjN1NmbzYzMTdKR2x6Tkk5clRYVHhJNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDIyOC82QjREMkRBODUwQUMxMUVCQUYxNzhFM0VDNEY5QUUwMi9TT2tMYzdTZm82 MzE3Skdsek5JOXJUWFR4STQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgXfKYdo9S64/MNkrrBe5UXvPxayL48xokjs1SBxiQgg4xYjxXVQgS2FYAHPV YaHTPUUlaJ0caSL0uDes745mqolXKnyxarOA9TMEA0UkfRk+pWFVMe2tJ1yVuZS1 FKhF9gPPEyQBxCiVl7epX0XjFRCCSpucAGqbNHZuc1VxxYXs2u0qf52ByhjXhA+5 NMuJuKNkOMJ8iH+uWsH+fy5kTs+a+vVml1odCaTPego7+SwUCZ3TBgO0JLmklju/ w9NRDFggzQHdEY8U07yLCikawzAEoZ5OOfMnr2ZqBUO6lAXgPls56a5CiNNyeRZV 6sUM6EbZQsbGdpJP6Mdw0ktdow== -----END CERTIFICATE-----Generated at Tue Sep 22 23:41:04 2026 by rpki-client