$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: lh3+HUA3peUoEqcqByi7zTUTF7XLGEYLcg1Tdsi1LDM= Subject key identifier: 1F:B6:71:3C:30:48:C1:74:27:88:D7:19:5C:C7:41:B8:31:A3:FD:16 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0C6F Signing time: Fri 22 Aug 2025 18:34:00 +0000 Manifest this update: Fri 22 Aug 2025 18:34:00 +0000 Manifest next update: Fri 29 Aug 2025 18:34:00 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: WDfWEi9oIEACSbcLkXMOwCxsiFk+2oY3N7hfBksAqGg=) 2: A473C9A008F311EE98719810C4F9AE02.roa (hash: I+dyDrUC3DvMgCPW4jStqejUHX8a7vo0aXHEIsgKIwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Aug 22 18:34:00 2025 GMT Not After : Aug 29 18:34:00 2025 GMT Subject: CN=68a8b818-040e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3e:a9:b3:76:ee:9a:c3:79:73:20:57:7c:a8: a8:8b:8d:8b:97:a8:a8:de:f2:c4:62:d1:da:3f:89: 54:6a:19:94:3b:9b:3d:4f:e6:2b:6e:63:27:8b:93: e9:94:bf:12:dc:51:dc:86:d1:2f:58:44:69:2b:88: 9d:3a:50:bf:98:2f:3e:aa:b5:74:0a:ca:80:7a:cc: 7e:80:ca:9c:fc:b7:f6:7f:63:92:c1:be:ef:65:c5: d8:a5:93:2e:0e:64:db:db:61:a8:f4:04:62:67:84: e1:d8:e6:a9:01:5c:bc:d8:90:d4:e0:4b:77:fa:40: e9:90:09:62:c0:aa:87:96:d9:a4:03:e0:37:b4:26: 4b:49:63:e8:41:75:43:62:ad:8c:25:3c:29:9c:09: b7:a5:3e:3f:e0:42:32:7f:a3:7a:68:70:34:18:53: 30:95:01:78:8b:92:10:c4:f3:2a:74:8b:82:4a:41: 99:0d:e9:c1:c2:95:e7:94:49:6f:c2:2e:3b:d8:ef: a9:32:01:24:2f:13:46:50:1a:ab:84:13:22:41:cf: 01:6e:27:3f:83:3a:54:45:ce:80:6e:f5:e7:47:2e: 0f:6f:9f:89:c2:06:a0:a2:a7:e1:c7:50:02:09:fe: 6d:fa:c5:c5:fa:52:85:f1:21:26:df:aa:5c:bc:f2: 3d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B6:71:3C:30:48:C1:74:27:88:D7:19:5C:C7:41:B8:31:A3:FD:16 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:14:e1:9e:86:9f:ee:13:3c:f8:78:f7:13:fc:3d:04:19:c5: fa:cd:35:36:e9:21:3b:60:f2:02:94:db:37:89:d1:d5:ad:83: 91:ac:f4:0a:f1:db:e0:07:02:53:9e:f5:bd:4d:5d:09:86:ba: 74:6d:d8:a4:9a:0a:4b:65:04:6f:d4:00:9b:03:16:49:04:b5: ab:60:b9:80:04:4d:c5:34:a5:06:29:ec:bd:51:4e:95:83:5a: f9:68:22:2d:41:5a:37:4a:ce:69:2c:01:94:36:f6:6e:37:eb: 74:e4:67:1a:9c:f3:7b:56:07:a9:60:d3:80:ed:a0:a2:b2:64: 55:4e:2f:f8:a9:9a:7f:7e:f3:22:49:b7:ee:10:de:36:84:29: 25:97:f6:dc:4a:85:36:cb:13:9c:05:c3:f7:f0:d8:a5:d1:48: 58:51:12:4c:7d:e0:94:dd:2e:b7:c9:83:e2:87:96:e2:1c:b0: 7b:34:50:0c:f8:85:5a:70:03:49:7d:ce:ce:7b:7e:5d:cf:17: 41:4d:91:36:42:8b:a0:84:d4:0f:ff:5a:5a:6d:6c:38:4b:4b: 86:3b:8c:00:bf:c7:34:13:c3:6c:8e:f7:aa:ea:80:3b:2c:3c: 57:d6:c0:7a:7c:a1:fc:2e:da:3c:5e:00:2d:54:82:36:45:66: 25:95:e8:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjUwODIyMTgzNDAwWhcNMjUwODI5MTgzNDAwWjAYMRYwFAYD VQQDEw02OGE4YjgxOC0wNDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8z6ps3bumsN5cyBXfKioi42Ll6io3vLEYtHaP4lUahmUO5s9T+YrbmMni5Pp lL8S3FHchtEvWERpK4idOlC/mC8+qrV0CsqAesx+gMqc/Lf2f2OSwb7vZcXYpZMu DmTb22Go9ARiZ4Th2OapAVy82JDU4Et3+kDpkAliwKqHltmkA+A3tCZLSWPoQXVD Yq2MJTwpnAm3pT4/4EIyf6N6aHA0GFMwlQF4i5IQxPMqdIuCSkGZDenBwpXnlElv wi472O+pMgEkLxNGUBqrhBMiQc8Bbic/gzpURc6AbvXnRy4Pb5+Jwgagoqfhx1AC Cf5t+sXF+lKF8SEm36pcvPI93QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+2cTww SMF0J4jXGVzHQbgxo/0WMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKFOGehp/uEzz4ePcT/D0EGcX6zTU26SE7YPIClNs3idHVrYORrPQK 8dvgBwJTnvW9TV0Jhrp0bdikmgpLZQRv1ACbAxZJBLWrYLmABE3FNKUGKey9UU6V g1r5aCItQVo3Ss5pLAGUNvZuN+t05GcanPN7VgepYNOA7aCismRVTi/4qZp/fvMi SbfuEN42hCkll/bcSoU2yxOcBcP38Nil0UhYURJMfeCU3S63yYPih5biHLB7NFAM +IVacANJfc7Oe35dzxdBTZE2QoughNQP/1pabWw4S0uGO4wAv8c0E8Nsjveq6oA7 LDxX1sB6fKH8Lto8XgAtVII2RWYllejx -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:48 2025 by rpki-client