$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: Sl7Zg74VvjVn8CFASz0D6OZ3dScnPIDcIWt1QBnnxv0= Subject key identifier: 68:90:70:81:80:4C:80:0F:7E:A2:BF:FA:63:29:1F:7C:48:3F:49:82 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0D36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0D23 Signing time: Mon 20 Jul 2026 18:30:21 +0000 Manifest this update: Mon 20 Jul 2026 18:30:21 +0000 Manifest next update: Mon 27 Jul 2026 18:30:21 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: Vy607kHfEF7FWMjhBPgXyG1ApjP6ffcLXtUbmvgGLlI=) 2: 96AE931812F511F1BA310F6D113D8C67.roa (hash: cXOeiMyk2P1h/V1+QkWeGss+P0oU/Wj1wZhDnilOemo=) 3: CD3E621E12F511F180FA8278113D8C67.roa (hash: HiYaFULG330NEjSyB7vQtymlRctIKK1KJBuLZlff9pU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3382 (0xd36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Jul 20 18:30:21 2026 GMT Not After : Jul 27 18:30:21 2026 GMT Subject: CN=6a5e693d-1b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:17:07:be:c9:9c:0a:61:0f:9b:8b:ce:19: 65:2f:3d:00:46:43:7d:8a:b4:e9:c6:d0:76:20:bd: ad:55:00:51:9c:57:b1:e6:db:06:19:79:79:d7:b8: f1:5f:ca:df:22:bc:69:63:77:a9:55:de:35:ec:82: 74:0a:06:d1:33:f5:b4:88:8e:e8:3b:21:f4:6e:7d: ba:61:26:8a:24:1b:57:e4:4e:fd:34:c0:14:8a:b8: 48:7c:14:31:da:dc:e3:66:b5:6b:fd:c2:a6:64:3c: 7b:72:07:b1:49:1a:c3:08:2b:02:66:e0:31:00:4f: 5a:9e:3c:f6:47:2c:d4:35:19:79:3e:54:f6:2d:d4: 05:a5:b7:74:29:23:a9:e6:ba:8c:36:90:f1:7f:36: 2e:bc:99:cf:1d:4a:70:55:c9:2f:e5:33:34:6a:ff: 21:fb:5f:a7:92:d6:eb:3e:8d:70:39:ef:10:21:2a: a9:1c:d4:f9:4b:f2:8a:11:b5:a3:4b:91:c6:f8:7b: 50:5c:91:0c:30:80:1d:90:6b:cf:99:ff:77:94:e9: b6:d4:cc:0e:43:a5:8a:db:93:dd:50:b7:b2:82:7a: 61:46:56:dc:db:97:1e:09:38:3f:cb:5a:6f:7f:0d: ef:75:8b:bd:34:a5:a8:7d:3b:b9:71:63:1b:57:4e: c8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:90:70:81:80:4C:80:0F:7E:A2:BF:FA:63:29:1F:7C:48:3F:49:82 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c0:b0:b1:86:a2:0d:0c:c9:b3:7d:da:b5:c4:bc:29:5d:3b: 53:9a:9f:2c:3f:de:86:27:6d:85:d0:78:0c:51:71:63:c3:da: e5:b1:0a:32:be:cf:55:db:13:84:0b:7b:83:eb:8f:6d:e3:b8: 03:95:52:4a:0a:fe:ea:cc:b9:40:42:e6:13:a8:7c:5b:c5:db: be:27:4f:f1:02:ba:7d:02:97:b2:ac:36:b2:61:3a:07:4e:d6: 6a:ed:66:03:e1:0d:85:ab:7c:11:d0:55:27:ec:96:95:94:30: fa:2c:85:2f:0e:9f:3b:d0:66:90:c2:29:67:df:28:2a:1c:61: 2b:1a:5e:10:a6:f8:42:8a:0a:91:e2:13:1e:67:73:e7:bd:1b: 2b:1a:4a:d7:4c:7b:ea:9b:47:c9:be:ff:23:29:45:f7:f9:b5: e1:d5:04:2d:20:06:a4:72:01:63:ba:3a:31:17:e0:dd:24:8a: 2f:2e:7a:0d:e2:31:19:4b:7e:26:dd:5b:0d:30:06:49:18:2a: 7d:24:b7:90:c5:44:fd:b3:49:48:61:ae:a9:ed:73:47:d1:38: f6:eb:e6:3b:0d:33:71:ca:8d:c0:05:ae:9f:fa:29:f1:b8:d7: a5:ec:39:57:84:45:1b:99:23:e3:20:98:dc:3f:30:7d:df:67: 1a:15:97:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjYwNzIwMTgzMDIxWhcNMjYwNzI3MTgzMDIxWjAYMRYwFAYD VQQDEw02YTVlNjkzZC0xYjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsAXB77JnAphD5uLzhllLz0ARkN9irTpxtB2IL2tVQBRnFex5tsGGXl517jx X8rfIrxpY3epVd417IJ0CgbRM/W0iI7oOyH0bn26YSaKJBtX5E79NMAUirhIfBQx 2tzjZrVr/cKmZDx7cgexSRrDCCsCZuAxAE9anjz2RyzUNRl5PlT2LdQFpbd0KSOp 5rqMNpDxfzYuvJnPHUpwVckv5TM0av8h+1+nktbrPo1wOe8QISqpHNT5S/KKEbWj S5HG+HtQXJEMMIAdkGvPmf93lOm21MwOQ6WK25PdULeygnphRlbc25ceCTg/y1pv fw3vdYu9NKWofTu5cWMbV07IjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGiQcIGA TIAPfqK/+mMpH3xIP0mCMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIMCwsYaiDQzJs33atcS8KV07U5qfLD/ehidthdB4DFFxY8Pa5bEKMr7PVdsT hAt7g+uPbeO4A5VSSgr+6sy5QELmE6h8W8XbvidP8QK6fQKXsqw2smE6B07Wau1m A+ENhat8EdBVJ+yWlZQw+iyFLw6fO9BmkMIpZ98oKhxhKxpeEKb4QooKkeITHmdz 570bKxpK10x76ptHyb7/IylF9/m14dUELSAGpHIBY7o6MRfg3SSKLy56DeIxGUt+ Jt1bDTAGSRgqfSS3kMVE/bNJSGGuqe1zR9E49uvmOw0zccqNwAWun/op8bjXpew5 V4RFG5kj4yCY3D8wfd9nGhWXEg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:38:37 2026 by rpki-client