$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: vbiICEUxshc6tFfEkNWcIIGkJpYercvf0OTr/w/LD8w= Subject key identifier: D2:EE:B8:4E:CD:FE:DF:16:CD:1B:2B:6D:37:A3:DE:E0:FE:5F:BA:54 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0D37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0D24 Signing time: Wed 22 Jul 2026 18:29:40 +0000 Manifest this update: Wed 22 Jul 2026 18:29:40 +0000 Manifest next update: Wed 29 Jul 2026 18:29:40 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: 0J4350IjZabR2JVIEhLn5Y1cw1FTmSmqUO0P2G9ijMI=) 2: 96AE931812F511F1BA310F6D113D8C67.roa (hash: cXOeiMyk2P1h/V1+QkWeGss+P0oU/Wj1wZhDnilOemo=) 3: CD3E621E12F511F180FA8278113D8C67.roa (hash: HiYaFULG330NEjSyB7vQtymlRctIKK1KJBuLZlff9pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3383 (0xd37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Jul 22 18:29:40 2026 GMT Not After : Jul 29 18:29:40 2026 GMT Subject: CN=6a610c14-6f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:45:45:ed:fd:c7:09:52:eb:fd:85:9c:f3: b9:d9:8e:c4:74:d5:b7:4e:c0:57:2a:cf:29:21:cf: 8b:1a:31:bb:b1:ae:95:62:59:79:20:f2:56:04:5b: 75:87:5a:ef:f7:ac:42:16:3d:75:bf:ec:cd:2e:8b: c3:63:e5:b1:82:b2:dd:43:bd:88:a3:19:b4:dd:2a: df:18:09:34:d7:ea:32:6d:9f:83:be:85:93:61:f5: e7:04:4b:33:ea:3b:25:64:62:79:ae:67:fd:74:a4: c8:60:f5:5b:fa:cd:a3:f0:39:bd:aa:dc:e0:97:5a: a0:a2:de:c1:2c:e3:f9:f3:91:c6:ee:f9:44:96:89: 5c:fc:00:13:66:32:e8:4c:2f:39:f7:2f:6c:f5:63: 6d:be:94:73:57:40:41:f8:7e:23:e5:0b:ab:c5:30: 1f:63:d7:89:4b:f8:30:e7:ca:bb:ff:ce:94:86:04: 05:63:b0:92:42:12:bb:88:28:0c:d1:35:5f:96:ea: d1:39:47:c6:6c:9e:7b:cd:e9:45:c7:9c:77:94:4f: 9c:63:59:fa:18:c9:20:34:0e:df:67:1d:d3:d9:7e: 98:5b:ff:97:1a:84:a3:b6:61:51:77:c5:85:85:bb: f1:03:73:49:c5:24:ff:1d:b9:ce:fd:3a:29:45:6b: e5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EE:B8:4E:CD:FE:DF:16:CD:1B:2B:6D:37:A3:DE:E0:FE:5F:BA:54 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ae:1e:55:fd:b5:25:69:ee:19:ef:23:5c:3a:db:07:ef:99: 5d:e1:94:7a:1a:09:a6:af:a5:c5:8f:23:e6:ff:d9:ba:9b:70: 22:19:0d:d6:8d:92:1e:76:ce:ca:12:a2:bd:56:bc:39:4a:0a: 4d:f3:89:c9:61:ef:51:c8:3a:3a:a8:6a:28:4f:76:b1:da:07: 19:2d:c8:8e:01:de:32:7e:4d:f3:b0:10:08:11:c4:6a:70:ee: 97:e5:dd:be:97:86:34:fb:10:3f:64:a3:76:22:f0:01:8a:e0: 02:67:a9:a9:bb:1b:80:22:26:6a:e9:b3:8f:1f:48:53:af:29: 16:59:1b:f5:22:8e:8a:9a:b7:4b:b4:2c:0f:13:ac:b4:95:fb: a3:d2:02:38:3f:32:fa:2c:16:f5:2f:88:0a:0b:16:ae:1e:59: 93:e1:c2:b8:bc:e3:16:04:b3:9d:83:ea:a5:e8:f6:70:4a:c8: e0:f7:a6:70:82:d4:e6:de:d9:11:d3:7c:e8:4f:cb:9c:ff:2b: 80:51:62:90:22:9f:e2:02:c5:4a:3c:c3:4b:3b:02:65:74:53: 9b:6c:03:67:2a:e0:97:f7:1e:bc:d2:55:8b:20:88:42:1e:27: ae:3a:14:71:a8:6b:e8:ce:86:e8:d3:46:b4:8b:39:c8:f1:a9: 22:02:f2:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjYwNzIyMTgyOTQwWhcNMjYwNzI5MTgyOTQwWjAYMRYwFAYD VQQDEw02YTYxMGMxNC02ZjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4hFRe39xwlS6/2FnPO52Y7EdNW3TsBXKs8pIc+LGjG7sa6VYll5IPJWBFt1 h1rv96xCFj11v+zNLovDY+WxgrLdQ72Ioxm03SrfGAk01+oybZ+DvoWTYfXnBEsz 6jslZGJ5rmf9dKTIYPVb+s2j8Dm9qtzgl1qgot7BLOP585HG7vlElolc/AATZjLo TC859y9s9WNtvpRzV0BB+H4j5QurxTAfY9eJS/gw58q7/86UhgQFY7CSQhK7iCgM 0TVflurROUfGbJ57zelFx5x3lE+cY1n6GMkgNA7fZx3T2X6YW/+XGoSjtmFRd8WF hbvxA3NJxST/HbnO/TopRWvlhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLuuE7N /t8WzRsrbTej3uD+X7pUMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbK4eVf21JWnuGe8jXDrbB++ZXeGUehoJpq+lxY8j5v/ZuptwIhkN1o2SHnbO yhKivVa8OUoKTfOJyWHvUcg6OqhqKE92sdoHGS3IjgHeMn5N87AQCBHEanDul+Xd vpeGNPsQP2SjdiLwAYrgAmepqbsbgCImaumzjx9IU68pFlkb9SKOipq3S7QsDxOs tJX7o9ICOD8y+iwW9S+ICgsWrh5Zk+HCuLzjFgSznYPqpej2cErI4PemcILU5t7Z EdN86E/LnP8rgFFikCKf4gLFSjzDSzsCZXRTm2wDZyrgl/cevNJViyCIQh4nrjoU cahr6M6G6NNGtIs5yPGpIgLyzg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:29:06 2026 by rpki-client