$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json) Hash identifier: u83rcvFinoQEjQK35rDp7WU2uflmDv+HfraAgeZnm+Q= Subject key identifier: D1:FD:C5:57:96:04:F7:E0:57:B4:15:BE:FA:3C:DF:4F:C7:26:7D:12 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 286CFEC553A45559DD9CF0B6C5C091123AA02E68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft Manifest number: 018A Signing time: Tue 21 Jul 2026 18:11:19 +0000 Manifest this update: Tue 21 Jul 2026 18:06:19 +0000 Manifest next update: Wed 22 Jul 2026 20:45:19 +0000 Files and hashes: 1: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=) 2: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=) 3: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: 9FXIqtvqlI1b6k7H88FgG5bPVoeiPlgW3c8/gsoxMSo=) 4: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: qvrizdyB3ALMrbARZwczVLuvHzaWi8NrEfjQ5ghovl0=) 5: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6c:fe:c5:53:a4:55:59:dd:9c:f0:b6:c5:c0:91:12:3a:a0:2e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Jul 21 18:06:19 2026 GMT Not After : Jul 22 20:45:19 2026 GMT Subject: CN=D1FDC5579604F7E057B415BEFA3CDF4FC7267D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:95:7e:b9:5d:71:81:96:34:12:08:e9:1f: 4d:82:21:de:80:8c:22:58:c9:fd:18:96:41:61:0d: ec:29:62:3c:4c:5e:61:cf:a9:68:a7:0c:1c:e0:72: ee:e1:b7:2f:8b:f6:89:24:bf:65:6b:16:25:ef:c0: 0a:2c:d2:35:91:00:d1:b6:fc:da:88:9f:3e:66:06: 1b:1f:00:83:4b:5c:fd:8d:64:a7:c1:36:29:71:54: 4d:9f:d1:46:86:41:44:d2:36:cc:a9:56:7d:b5:1c: ed:6d:98:4d:14:de:07:0f:87:4c:31:90:4c:54:42: 0b:bb:ff:e7:88:e0:dc:3c:64:8d:d5:88:c1:42:9e: 4a:6d:f8:29:3e:0c:43:80:47:c2:1b:33:d2:55:b3: 0a:35:48:5d:f8:48:96:a5:96:5e:b7:d5:bf:83:73: c4:2b:12:b1:52:f5:b1:b9:2a:ae:e3:89:f3:b7:3c: e5:37:50:89:01:dc:29:70:cb:b7:59:ad:ba:56:4f: eb:b9:c3:8e:fe:09:e5:df:59:4f:50:e5:c2:46:ba: 6a:08:de:08:fc:5e:64:41:fa:67:f4:ed:cb:e5:d4: aa:f0:82:87:40:23:b6:17:b1:c1:67:be:b1:5e:05: 48:1d:d5:61:6f:2b:25:87:b1:3d:99:e4:29:55:a5: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:FD:C5:57:96:04:F7:E0:57:B4:15:BE:FA:3C:DF:4F:C7:26:7D:12 X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:70:9f:32:4c:f1:a3:0f:0a:c6:2c:e6:2d:26:21:56:5a:dd: a2:35:7e:f2:f0:48:89:87:b6:c1:90:48:71:d1:5c:96:3d:23: b6:71:d7:02:5b:df:e1:dd:3b:58:08:b9:9b:e7:19:13:ea:92: d0:1b:44:f6:a0:3b:dd:c5:aa:6e:0d:ae:89:53:f4:aa:fc:3a: 9b:67:3d:2b:d8:f6:19:72:8e:9c:cf:da:7e:a5:fb:5e:c0:ed: 32:ab:f6:b5:ec:81:83:c8:15:c0:bb:3d:89:13:17:6d:bc:8d: e7:42:4f:3f:8e:cd:e9:a0:bb:f7:ac:18:e8:4e:52:81:d9:14: af:22:d0:49:a4:b0:f7:17:86:fd:27:cf:9a:82:f9:77:f2:aa: b6:7b:13:ed:ee:4e:fd:2f:48:5e:97:34:bf:a3:21:11:1b:d3: df:f7:d2:7c:8d:60:c8:86:99:c9:e0:20:28:32:91:a1:a9:b7: 69:51:1b:28:51:10:4b:ed:f3:d4:e1:bf:91:4b:44:48:49:57: 87:06:61:9d:a1:cb:22:34:d4:fe:64:14:53:3b:d7:30:2b:a9: 4e:e6:91:3a:09:4f:20:31:28:5d:b7:af:06:ab:86:71:7a:63: ad:1a:5d:37:46:27:1c:56:85:73:57:6e:f4:12:d0:00:dd:d8: 4d:d1:a7:aa -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUKGz+xVOkVVndnPC2xcCREjqgLmgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDcyMTE4MDYxOVoX DTI2MDcyMjIwNDUxOVowMzExMC8GA1UEAxMoRDFGREM1NTc5NjA0RjdFMDU3QjQx NUJFRkEzQ0RGNEZDNzI2N0QxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/2lX65XXGBljQSCOkfTYIh3oCMIljJ/RiWQWEN7CliPExeYc+paKcMHOBy 7uG3L4v2iSS/ZWsWJe/ACizSNZEA0bb82oifPmYGGx8Ag0tc/Y1kp8E2KXFUTZ/R RoZBRNI2zKlWfbUc7W2YTRTeBw+HTDGQTFRCC7v/54jg3DxkjdWIwUKeSm34KT4M Q4BHwhsz0lWzCjVIXfhIlqWWXrfVv4NzxCsSsVL1sbkqruOJ87c85TdQiQHcKXDL t1mtulZP67nDjv4J5d9ZT1Dlwka6agjeCPxeZEH6Z/Tty+XUqvCCh0AjthexwWe+ sV4FSB3VYW8rJYexPZnkKVWlEBsCAwEAAaOCAhswggIXMB0GA1UdDgQWBBTR/cVX lgT34Fe0Fb76PN9PxyZ9EjAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAkXCfMkzxow8KxizmLSYhVlrdojV+8vBIiYe2wZBIcdFclj0j tnHXAlvf4d07WAi5m+cZE+qS0BtE9qA73cWqbg2uiVP0qvw6m2c9K9j2GXKOnM/a fqX7XsDtMqv2teyBg8gVwLs9iRMXbbyN50JPP47N6aC796wY6E5SgdkUryLQSaSw 9xeG/SfPmoL5d/KqtnsT7e5O/S9IXpc0v6MhERvT3/fSfI1gyIaZyeAgKDKRoam3 aVEbKFEQS+3z1OG/kUtESElXhwZhnaHLIjTU/mQUUzvXMCupTuaROglPIDEoXbev BquGcXpjrRpdN0YnHFaFc1du9BLQAN3YTdGnqg== -----END CERTIFICATE-----Generated at Tue Jul 21 23:13:06 2026 by rpki-client