$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: UVOxNVK+/zF+Cr3pt9uEwltOeDiGhZLAlVY+BMbMaf0= Subject key identifier: 69:93:AA:26:3B:44:5B:BF:5B:E3:82:C2:68:54:AA:8D:A3:59:0B:64 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0C97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0C8C Signing time: Sat 18 Oct 2025 19:09:25 +0000 Manifest this update: Sat 18 Oct 2025 19:09:25 +0000 Manifest next update: Sat 25 Oct 2025 19:09:25 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: EpiCiPMCRj+x20ziVSQTjQSzwO1DJGC1vcXzSI9UDM0=) 2: A473C9A008F311EE98719810C4F9AE02.roa (hash: I+dyDrUC3DvMgCPW4jStqejUHX8a7vo0aXHEIsgKIwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3223 (0xc97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Oct 18 19:09:25 2025 GMT Not After : Oct 25 19:09:25 2025 GMT Subject: CN=68f3e5e5-8cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e9:df:3a:ff:b9:e0:6c:bf:de:fd:37:78:bc: 3e:6f:fd:f0:23:2c:03:c7:c8:a4:36:7b:50:d7:f8: 36:0d:36:77:1a:17:3e:a4:bf:db:81:b4:b9:65:1c: cb:51:33:e1:83:66:54:0c:a2:fb:5b:1b:ab:51:53: e4:6a:87:4c:07:98:ba:2a:05:4f:ce:7c:67:d8:30: 8f:76:52:06:9b:13:03:6b:d5:bf:39:5f:06:e8:d4: 1b:86:95:51:10:1c:b7:b2:56:cc:1f:87:6c:fe:82: b5:ff:cd:74:53:ab:6c:b4:d0:ec:09:a8:fb:ef:04: e8:37:0a:77:c2:a7:9e:8f:3f:0d:85:16:da:7b:34: 3c:29:4b:81:e8:9e:cb:ca:2f:2d:be:07:1a:68:a5: 50:30:df:46:d7:cc:5e:c5:b0:47:09:4a:7e:f4:e4: a6:39:cd:bb:2e:b5:ab:c6:22:50:d5:5d:6c:c6:ad: 97:40:b8:7a:ce:05:bd:5f:bf:05:71:bb:ba:8d:00: 32:02:08:e9:d2:14:10:1f:f2:16:6f:de:83:4f:81: b4:bf:e3:95:20:1f:ba:97:2a:bf:2c:e5:9e:1e:b7: 42:0d:5b:32:15:0f:4b:9f:2b:75:7b:57:60:5c:52: bf:35:f3:ca:13:6d:5e:a2:b3:99:5b:90:22:1c:92: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:93:AA:26:3B:44:5B:BF:5B:E3:82:C2:68:54:AA:8D:A3:59:0B:64 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:6c:94:f1:20:62:89:11:b0:06:bf:34:c5:86:98:78:29:0d: 2c:d5:60:a5:39:fd:57:cf:ab:9c:f0:20:ca:3a:53:9a:69:54: 70:2a:4a:f8:16:dc:dd:7b:24:43:5c:a2:4e:69:72:10:79:63: c0:00:62:87:0e:a9:3e:c4:26:c6:30:cd:44:36:d6:60:24:87: e0:b3:98:09:92:6e:20:dd:ea:32:a3:8f:7d:79:a9:17:db:6e: 43:80:2b:1a:28:39:7f:50:66:c3:d7:d0:d4:a3:d7:bf:dc:d6: d2:37:68:6a:82:18:f5:18:6d:3f:c4:49:ce:09:da:de:70:1e: 45:4e:e0:36:81:94:8e:8b:9d:e2:50:19:97:d1:db:7e:af:37: 08:4a:29:1a:f7:2c:c3:40:8f:c9:64:31:02:38:84:56:67:06: bc:cc:50:4c:b5:47:41:46:00:fc:93:76:ad:fd:0a:ee:ec:f9: ce:86:0d:be:47:15:f5:d1:e9:9e:a6:df:b4:ae:06:30:dc:f0: 1c:86:44:5f:2a:1e:b4:68:91:44:cd:22:76:5b:5b:8a:ca:c4: 3f:2e:92:70:7e:8e:2b:3c:c1:44:64:43:93:00:bf:67:8c:f3: 49:2f:11:e5:de:33:6c:6a:ef:83:36:e7:13:50:86:78:d0:58: 2b:d6:a4:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjUxMDE4MTkwOTI1WhcNMjUxMDI1MTkwOTI1WjAYMRYwFAYD VQQDEw02OGYzZTVlNS04Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOnfOv+54Gy/3v03eLw+b/3wIywDx8ikNntQ1/g2DTZ3Ghc+pL/bgbS5ZRzL UTPhg2ZUDKL7WxurUVPkaodMB5i6KgVPznxn2DCPdlIGmxMDa9W/OV8G6NQbhpVR EBy3slbMH4ds/oK1/810U6tstNDsCaj77wToNwp3wqeejz8NhRbaezQ8KUuB6J7L yi8tvgcaaKVQMN9G18xexbBHCUp+9OSmOc27LrWrxiJQ1V1sxq2XQLh6zgW9X78F cbu6jQAyAgjp0hQQH/IWb96DT4G0v+OVIB+6lyq/LOWeHrdCDVsyFQ9Lnyt1e1dg XFK/NfPKE21eorOZW5AiHJKJCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmTqiY7 RFu/W+OCwmhUqo2jWQtkMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcbJTxIGKJEbAGvzTFhph4KQ0s1WClOf1Xz6uc8CDKOlOaaVRwKkr4 FtzdeyRDXKJOaXIQeWPAAGKHDqk+xCbGMM1ENtZgJIfgs5gJkm4g3eoyo499eakX 225DgCsaKDl/UGbD19DUo9e/3NbSN2hqghj1GG0/xEnOCdrecB5FTuA2gZSOi53i UBmX0dt+rzcISika9yzDQI/JZDECOIRWZwa8zFBMtUdBRgD8k3at/Qru7PnOhg2+ RxX10emept+0rgYw3PAchkRfKh60aJFEzSJ2W1uKysQ/LpJwfo4rPMFEZEOTAL9n jPNJLxHl3jNsau+DNucTUIZ40Fgr1qQH -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:18 2025 by rpki-client