$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: f/RflUH6WmCA7IpolYbj1glnlxcb6iQiqVQjsbmBoBo= Subject key identifier: 49:27:2C:63:36:82:FF:72:22:0E:C0:6A:1E:1F:B3:3B:DA:C9:F8:83 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0D3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0D27 Signing time: Tue 28 Jul 2026 18:23:51 +0000 Manifest this update: Tue 28 Jul 2026 18:23:51 +0000 Manifest next update: Tue 04 Aug 2026 18:23:51 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: u4j4f7OvmmhNxbcRX56/qjEnPEoJl2iaVwUZF6aygus=) 2: CD3E621E12F511F180FA8278113D8C67.roa (hash: HiYaFULG330NEjSyB7vQtymlRctIKK1KJBuLZlff9pU=) 3: 96AE931812F511F1BA310F6D113D8C67.roa (hash: cXOeiMyk2P1h/V1+QkWeGss+P0oU/Wj1wZhDnilOemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3386 (0xd3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Jul 28 18:23:51 2026 GMT Not After : Aug 4 18:23:51 2026 GMT Subject: CN=6a68f3b7-62f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3e:2d:44:5c:4c:a7:1f:fe:a6:c1:70:40:fa: 6d:8e:2f:40:d5:87:fe:63:7e:3b:56:9b:da:26:09: e3:f9:50:68:40:e4:c5:56:9a:96:60:de:4c:26:4c: 66:57:de:03:de:3a:e1:0b:8b:b4:ba:a2:f9:5f:48: 0f:08:be:88:08:0b:9c:46:52:91:7d:0a:c8:9c:91: 4b:4a:ff:fa:da:29:7c:14:fa:cb:ec:23:c2:01:37: 7f:a9:7e:c1:21:73:89:c8:88:e5:1b:e4:fe:14:09: 5e:e3:60:85:b5:ed:19:8c:01:ed:35:e7:d3:c7:68: 25:e7:46:2c:e6:50:bc:15:d8:a3:89:e9:a3:6c:f9: 50:08:fe:f2:3a:a5:1b:5b:e2:88:9a:95:75:d2:41: e1:cb:34:af:c6:06:54:4d:d9:52:12:c9:8e:f2:27: 2f:b2:18:07:9e:1e:3d:57:66:d8:f8:61:1c:b6:f8: c3:0e:e7:5f:c1:bb:89:c7:3a:0b:e1:20:b6:f3:77: 6d:13:e8:a4:f7:38:c6:7c:89:44:75:fe:7e:75:11: 51:3a:4b:cf:c6:4d:42:cc:d1:5f:fd:0d:d9:56:64: 26:ef:a6:ae:a3:a3:65:32:df:d5:87:8c:f2:02:8a: fe:2e:34:41:c3:72:15:2f:a1:c4:3a:78:c5:3f:21: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:27:2C:63:36:82:FF:72:22:0E:C0:6A:1E:1F:B3:3B:DA:C9:F8:83 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:e1:f8:d0:7d:a7:9b:ff:c4:5d:f8:98:91:24:6d:75:ce:6c: b6:02:b2:36:b2:ac:bb:24:ec:fe:ee:ea:65:59:1f:e8:21:c5: e2:96:c3:a0:2a:ca:e5:56:5b:66:4b:ac:d3:c6:2b:7d:cd:b2: 3a:a2:25:ed:68:ed:4b:ff:a7:70:80:72:ec:9e:07:16:0c:e8: d7:0c:ae:53:9d:46:78:e4:0d:72:f2:da:4b:63:18:44:0f:d6: c2:17:95:d6:4d:92:e2:de:5f:6f:c9:a8:01:1c:85:ad:0c:50: 23:af:b5:c3:cc:0d:ab:74:3e:1d:c6:7c:c4:ee:c6:4f:5c:49: b5:c0:a1:22:e2:7a:8a:14:df:03:29:a8:b6:92:7a:68:e3:64: 98:9c:3a:8e:00:74:df:e9:0f:30:d2:54:4f:a1:0e:60:04:21: 8c:97:19:a9:6c:7e:02:5b:37:e4:7c:55:d6:8d:1e:b3:e4:c3: b8:e1:08:fd:13:12:f2:c9:7c:de:41:1e:f7:99:71:62:d6:86: 48:30:37:fb:ae:e5:2e:66:9b:38:19:34:db:29:34:e3:91:1c: c1:f6:d9:e9:8f:9b:d7:27:9e:36:f5:6b:4f:14:1b:a9:19:9a: 14:b5:39:7b:34:dd:d1:93:f5:78:ec:c2:00:ad:1f:11:68:bb: 10:4d:30:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjYwNzI4MTgyMzUxWhcNMjYwODA0MTgyMzUxWjAYMRYwFAYD VQQDEw02YTY4ZjNiNy02MmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0D4tRFxMpx/+psFwQPptji9A1Yf+Y347VpvaJgnj+VBoQOTFVpqWYN5MJkxm V94D3jrhC4u0uqL5X0gPCL6ICAucRlKRfQrInJFLSv/62il8FPrL7CPCATd/qX7B IXOJyIjlG+T+FAle42CFte0ZjAHtNefTx2gl50Ys5lC8FdijiemjbPlQCP7yOqUb W+KImpV10kHhyzSvxgZUTdlSEsmO8icvshgHnh49V2bY+GEctvjDDudfwbuJxzoL 4SC283dtE+ik9zjGfIlEdf5+dRFROkvPxk1CzNFf/Q3ZVmQm76auo6NlMt/Vh4zy Aor+LjRBw3IVL6HEOnjFPyFCRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEknLGM2 gv9yIg7Aah4fszvayfiDMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJOH40H2nm//EXfiYkSRtdc5stgKyNrKsuyTs/u7qZVkf6CHF4pbDoCrK5VZb Zkus08Yrfc2yOqIl7WjtS/+ncIBy7J4HFgzo1wyuU51GeOQNcvLaS2MYRA/WwheV 1k2S4t5fb8moARyFrQxQI6+1w8wNq3Q+HcZ8xO7GT1xJtcChIuJ6ihTfAymotpJ6 aONkmJw6jgB03+kPMNJUT6EOYAQhjJcZqWx+Als35HxV1o0es+TDuOEI/RMS8sl8 3kEe95lxYtaGSDA3+67lLmabOBk02yk045EcwfbZ6Y+b1yeeNvVrTxQbqRmaFLU5 ezTd0ZP1eOzCAK0fEWi7EE0whw== -----END CERTIFICATE-----Generated at Wed Jul 29 04:17:47 2026 by rpki-client