$ rpki-client -vvvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft File: SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json) Hash identifier: 369vTqiIX6qq2/0qdgmVczpyn7/uxFcrHmI0F91bQrw= Subject key identifier: E9:D0:21:84:61:64:91:4B:E0:F6:9C:6B:62:A1:B9:9A:E1:48:10:6A Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft Manifest number: 04DE Signing time: Fri 11 Sep 2026 00:20:24 +0000 Manifest this update: Fri 11 Sep 2026 00:20:23 +0000 Manifest next update: Fri 18 Sep 2026 00:20:23 +0000 Files and hashes: 1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: BY6FbmbJPzS/QnW7qFSjDqIY04++3YskrxNnlyFMHfE=) 2: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: jKcbK4IEw6IX5DBWAj2PfbXbqhFpVe65Ce73aszMZHQ=) 3: 14671BD890A311F19EA46D796F11F970.roa (hash: LRK4uCWmqWpWw3Xm3dXQgxGRrJCrM0VZNsAVYzL7FS4=) 4: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: 92wRIZw680AyP/v/OZd/w9DgRsgSI6ONdeqJ58u9NjE=) 5: 39D293CC61A311F184335DAE8747A888.roa (hash: jedw50TUWq7AyJ3VTKcKZQQqP8Wlj4F5zK+M/tpfaYU=) 6: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: g3/xtOL31AkLVTBnIUdXCHbVSuqpwrEw296Y7D5oHRk=) 7: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: oFCRKJ2F0EfbbPkmQz5K49dGmf/1cMbEIIfSRomsCOA=) 8: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: 6mq5bZQGJ64qqRG9rU+13rtax05sI2Ele52oI5PPSIM=) 9: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: 6BPjWf3PRrYbjxHXmcTYFTcq9mEbXJz5EDwd+WrDRUk=) 10: 48421E1E61A311F1AD9134E08747A888.roa (hash: 0L5T+62/+LuV8AB9j6gcu/g9GsKvWn9orUiZH54FdP4=) 11: EE88C2F6580711F09A56942DC4F9AE02.roa (hash: W828W0l0bTgnpTlS9/sHF0lVKlK0jtphre/w8R0LrXg=) 12: 1465D252621C11F0AAE4E551C4F9AE02.roa (hash: GfVyeK1u4sYQdScjmEZa/TgSrlbpkVV/b2NL/9s4N4g=) 13: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: FoSzwvvgDPOGghYrGRoNT/3F/hsXOUjc7S8nBc84FDI=) 14: F87B578CB5E611F08C07425AC4F9AE02.roa (hash: Xv/wQAgGQuRKdOuR7b3JljTxpd1z5U1GoeLFF2m7jXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D Validity Not Before: Sep 11 00:20:23 2026 GMT Not After : Sep 18 00:20:23 2026 GMT Subject: CN=6aa34948-396c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:23:13:7f:21:d0:9e:d1:8b:ec:3e:b1:bf:c6: 58:f8:43:4f:9b:22:73:3c:ec:d1:72:be:c6:58:51: 2a:34:4b:dd:e7:e6:bf:60:8e:ea:fd:34:d2:6b:3a: 62:27:c3:9c:79:24:d9:0c:55:fa:73:f6:ee:b0:95: b4:10:b3:1a:dd:10:86:7a:78:56:e8:1f:63:06:c3: a1:e5:a1:e2:1f:fc:ce:0e:a6:eb:23:5c:d7:a8:30: 96:12:46:0b:ca:48:4f:e3:00:60:48:e2:2f:fd:65: ef:60:97:eb:f7:89:a2:23:25:c3:95:08:c0:6d:11: 1f:c1:98:b7:e6:62:4b:b7:dd:a2:2f:f3:37:ac:99: 2e:bc:e7:55:2a:1a:88:23:77:c9:c8:9f:4e:f0:69: 59:88:cd:6e:b1:cc:06:77:06:d0:df:76:41:91:94: 14:41:44:f9:3b:9e:c6:45:8a:a0:a2:41:fb:c6:8a: 11:9b:ab:ae:05:00:70:0c:c2:52:15:ea:3c:f2:79: 75:9a:86:49:54:59:a8:e8:1a:63:fc:38:99:af:d7: 67:19:4c:ee:f6:66:57:87:ba:a9:9f:5b:e0:e9:e4: 0e:54:a1:6b:31:a0:02:f6:02:2b:4c:14:ed:bb:fe: 01:12:af:2f:82:21:42:36:8e:4e:9b:05:06:79:ae: 26:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D0:21:84:61:64:91:4B:E0:F6:9C:6B:62:A1:B9:9A:E1:48:10:6A X509v3 Authority Key Identifier: keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:a2:0a:ab:9d:e3:af:5f:84:70:e6:39:6c:b4:96:10:45:40: a3:93:f2:be:16:10:db:22:39:4d:48:e2:e6:09:78:9c:ca:98: 96:55:58:49:56:0c:80:20:eb:1a:58:c4:a8:9f:ef:5a:3c:d2: 42:ec:20:fd:e5:8d:80:4c:14:5e:9b:c5:ca:cc:23:17:6a:8c: d7:2e:48:14:07:51:57:c2:c7:98:65:62:de:35:4a:83:38:ec: a3:a9:f6:20:0e:20:4c:1b:26:c7:f9:81:22:37:fe:76:7b:12: b9:18:06:89:66:12:88:c9:58:22:72:dd:d9:fa:df:fa:12:ad: d9:c4:4b:cf:e9:62:20:de:73:79:f7:02:fd:8f:25:6a:2a:58: 27:bd:2c:be:db:d0:68:ec:be:f2:80:ea:ba:c1:0b:61:b6:87: 93:de:02:29:79:bf:b9:1c:9e:c3:7b:11:14:cb:1d:a6:4a:6e: e9:b4:54:da:bb:65:f2:93:5f:bb:9d:37:11:6e:fa:e1:75:ad: 42:c1:e5:0d:ff:c4:d8:31:38:34:a9:76:5a:4f:d2:d9:71:20: 00:95:85:2f:1c:b8:b9:da:af:3e:16:8f:fc:9a:8a:2e:33:7e: 74:7d:c8:9e:57:7c:b0:65:37:9a:1d:aa:57:d4:08:c3:53:1f: ae:38:43:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF RDk4NDY0OUQwHhcNMjYwOTExMDAyMDIzWhcNMjYwOTE4MDAyMDIzWjAYMRYwFAYD VQQDEw02YWEzNDk0OC0zOTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SMTfyHQntGL7D6xv8ZY+ENPmyJzPOzRcr7GWFEqNEvd5+a/YI7q/TTSazpi J8OceSTZDFX6c/busJW0ELMa3RCGenhW6B9jBsOh5aHiH/zODqbrI1zXqDCWEkYL ykhP4wBgSOIv/WXvYJfr94miIyXDlQjAbREfwZi35mJLt92iL/M3rJkuvOdVKhqI I3fJyJ9O8GlZiM1uscwGdwbQ33ZBkZQUQUT5O57GRYqgokH7xooRm6uuBQBwDMJS Feo88nl1moZJVFmo6Bpj/DiZr9dnGUzu9mZXh7qpn1vg6eQOVKFrMaAC9gIrTBTt u/4BEq8vgiFCNo5OmwUGea4mlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOnQIYRh ZJFL4Paca2KhuZrhSBBqMB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPKIKq53jr1+EcOY5bLSWEEVAo5PyvhYQ2yI5TUji5gl4nMqYllVYSVYMgCDr GljEqJ/vWjzSQuwg/eWNgEwUXpvFyswjF2qM1y5IFAdRV8LHmGVi3jVKgzjso6n2 IA4gTBsmx/mBIjf+dnsSuRgGiWYSiMlYInLd2frf+hKt2cRLz+liIN5zefcC/Y8l aipYJ70svtvQaOy+8oDqusELYbaHk94CKXm/uRyew3sRFMsdpkpu6bRU2rtl8pNf u503EW764XWtQsHlDf/E2DE4NKl2Wk/S2XEgAJWFLxy4udqvPhaP/JqKLjN+dH3I nld8sGU3mh2qV9QIw1MfrjhDtg== -----END CERTIFICATE-----Generated at Fri Sep 11 21:52:12 2026 by rpki-client