$ rpki-client -vvf rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft File: 3oFz59KP6tHsOpLJdljacyhQk-U.mft (raw, json) Hash identifier: YQNZ2HxpqaJBTbf++4VEyrdUldshWVZtCw4kWey4mk8= Subject key identifier: 94:4F:64:13:76:9A:F4:AC:C1:14:64:91:1A:95:FE:BB:15:8C:E4:05 Authority key identifier: DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 Certificate issuer: /CN=A917C11A/serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Certificate serial: 07AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft Manifest number: 07A1 Signing time: Sun 26 Jul 2026 22:12:44 +0000 Manifest this update: Sun 26 Jul 2026 22:12:44 +0000 Manifest next update: Sun 02 Aug 2026 22:12:44 +0000 Files and hashes: 1: 3oFz59KP6tHsOpLJdljacyhQk-U.crl (hash: e0v6i+9Qlc1/QwBb5sgsTleNfYs/IesAQc9y2eDkyy8=) 2: 4002E4BA5A3B11EBA4020D68C4F9AE02.roa (hash: EqmRIjquU+tSmDMjC7w1ByfOqPCzO7OzMl+YIXKJh6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1962 (0x7aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C11A, serialNumber=DE8173E7D28FEAD1EC3A92C97658DA73285093E5 Validity Not Before: Jul 26 22:12:44 2026 GMT Not After : Aug 2 22:12:44 2026 GMT Subject: CN=6a66865c-ff89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:ae:70:18:8b:78:f2:21:41:a5:7a:f0:d0: d2:16:6f:d2:8a:08:6a:59:b5:70:57:e8:9b:bb:6c: 81:f1:95:b1:1e:8a:3a:b6:60:aa:48:16:0e:38:03: 7c:42:8d:af:e7:bf:92:86:80:80:18:23:45:6c:7e: 4e:fa:c8:c3:84:49:bb:41:6a:32:da:94:dd:4d:c3: f4:ff:52:25:94:fb:a8:a9:9f:27:59:29:e0:f9:1e: 33:7f:ff:10:5d:d4:8f:ef:bc:b4:54:c6:18:be:a4: 72:4c:16:e5:a1:6d:71:44:2b:27:00:c5:72:e7:91: c4:e3:92:5a:77:d2:fa:4f:22:bc:80:2a:42:b3:e5: f4:b2:42:75:89:c4:51:7b:08:69:2a:1a:25:c6:81: 2b:a3:26:03:b6:e2:b8:19:49:0c:8b:73:a7:b3:e0: 33:d8:0a:57:2f:84:a5:bd:0c:0d:96:0b:6d:da:05: 34:d4:41:17:91:50:60:1d:d0:5f:00:f3:bd:e9:9a: a3:9c:e5:08:5d:94:4e:d0:d3:f2:2c:2c:04:46:53: ab:1d:12:44:ec:d3:16:8b:45:16:f6:68:41:07:d3: 00:78:5c:cb:db:f7:4e:35:c1:4c:cb:da:f2:9a:b8: c3:6f:c8:3b:f4:5a:0a:42:3d:db:6a:6b:16:60:de: 1e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:64:13:76:9A:F4:AC:C1:14:64:91:1A:95:FE:BB:15:8C:E4:05 X509v3 Authority Key Identifier: keyid:DE:81:73:E7:D2:8F:EA:D1:EC:3A:92:C9:76:58:DA:73:28:50:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3oFz59KP6tHsOpLJdljacyhQk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C11A/C086EA985A3911EB8E59C266C4F9AE02/3oFz59KP6tHsOpLJdljacyhQk-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ce:32:0b:87:df:27:c5:4e:57:a2:d3:76:ce:15:64:f9:d1: 4b:e3:0a:09:e3:75:d0:9b:3b:f3:f4:f2:76:16:24:05:59:17: 13:e0:46:0e:1b:6c:c5:4e:38:56:3d:9e:f8:a9:60:27:69:15: 6f:62:12:de:40:ec:70:e3:e8:be:ee:d9:f8:cc:66:e0:0b:be: 1b:28:34:3d:57:18:26:a9:72:2a:59:3a:8c:d7:e4:fc:b5:5a: ef:0f:33:9c:bb:3c:ff:b1:57:08:82:da:c6:f1:54:ce:4c:64: da:f6:e2:17:1b:19:ac:fd:9a:18:85:ba:fd:e2:00:8d:ce:f2: 2a:f5:8b:6c:6c:ac:03:54:05:c2:40:11:1f:4c:79:4e:74:69: ce:a3:7c:7e:bd:62:41:ad:c0:9f:14:4f:72:04:2e:96:bf:3b: 89:8f:9e:0a:56:32:98:1f:dc:25:e4:ec:7a:52:b8:bf:2d:b1: 1d:fe:ea:bf:47:6b:19:25:81:f6:70:3a:db:68:ce:05:85:a2: fe:8d:5e:1f:83:57:60:10:6b:20:a6:cf:c6:95:a0:5d:a7:aa: 49:b8:51:98:fd:90:53:e6:ad:2f:cd:08:c6:38:26:c8:01:71: 26:0e:44:d6:d5:f8:20:e7:57:e7:df:7e:11:51:f7:1c:61:47: 83:05:f7:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxMUExMTAvBgNVBAUTKERFODE3M0U3RDI4RkVBRDFFQzNBOTJDOTc2NThEQTcz Mjg1MDkzRTUwHhcNMjYwNzI2MjIxMjQ0WhcNMjYwODAyMjIxMjQ0WjAYMRYwFAYD VQQDEw02YTY2ODY1Yy1mZjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXqucBiLePIhQaV68NDSFm/SighqWbVwV+ibu2yB8ZWxHoo6tmCqSBYOOAN8 Qo2v57+ShoCAGCNFbH5O+sjDhEm7QWoy2pTdTcP0/1IllPuoqZ8nWSng+R4zf/8Q XdSP77y0VMYYvqRyTBbloW1xRCsnAMVy55HE45Jad9L6TyK8gCpCs+X0skJ1icRR ewhpKholxoEroyYDtuK4GUkMi3Ons+Az2ApXL4SlvQwNlgtt2gU01EEXkVBgHdBf APO96ZqjnOUIXZRO0NPyLCwERlOrHRJE7NMWi0UW9mhBB9MAeFzL2/dONcFMy9ry mrjDb8g79FoKQj3bamsWYN4eoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJRPZBN2 mvSswRRkkRqV/rsVjOQFMB8GA1UdIwQYMBaAFN6Bc+fSj+rR7DqSyXZY2nMoUJPl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzExQS9DMDg2RUE5ODVB MzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0SHNPcExKZGxqYWN5aFFr LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNvRno1OUtQNnRIc09wTEpkbGphY3loUWstVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzExQS9DMDg2RUE5ODVBMzkxMUVCOEU1OUMyNjZDNEY5QUUwMi8zb0Z6NTlLUDZ0 SHNPcExKZGxqYWN5aFFrLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdM4yC4ffJ8VOV6LTds4VZPnRS+MKCeN10Js78/TydhYkBVkXE+BGDhtsxU44 Vj2e+KlgJ2kVb2IS3kDscOPovu7Z+Mxm4Au+Gyg0PVcYJqlyKlk6jNfk/LVa7w8z nLs8/7FXCILaxvFUzkxk2vbiFxsZrP2aGIW6/eIAjc7yKvWLbGysA1QFwkARH0x5 TnRpzqN8fr1iQa3AnxRPcgQulr87iY+eClYymB/cJeTselK4vy2xHf7qv0drGSWB 9nA622jOBYWi/o1eH4NXYBBrIKbPxpWgXaeqSbhRmP2QU+atL80IxjgmyAFxJg5E 1tX4IOdX599+EVH3HGFHgwX3YA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:23:44 2026 by rpki-client