$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: PQqND7DsYMa8Yjecy/yQWkzXBYMsozGyJaCe+CV81Ww= Subject key identifier: A9:CB:1E:21:71:E3:A8:46:46:A1:A6:B4:34:D3:F9:5F:A1:3B:12:D5 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0C60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0C55 Signing time: Wed 02 Jul 2025 18:42:27 +0000 Manifest this update: Wed 02 Jul 2025 18:42:27 +0000 Manifest next update: Wed 09 Jul 2025 18:42:27 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: gQJwGX8hC0s9NWhoMQAY3biCV6ex2O/r/ulw/fH0Ak4=) 2: A473C9A008F311EE98719810C4F9AE02.roa (hash: I+dyDrUC3DvMgCPW4jStqejUHX8a7vo0aXHEIsgKIwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:42:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3168 (0xc60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Jul 2 18:42:27 2025 GMT Not After : Jul 9 18:42:27 2025 GMT Subject: CN=68657d93-41c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:f6:95:7a:79:f4:b6:91:72:d6:31:cd:ae: aa:64:c8:94:27:42:d7:bc:5e:48:ba:aa:73:03:83: 44:9d:64:78:bf:16:9f:6c:fc:cd:7d:66:8a:9a:c9: da:4a:bb:b4:40:ab:ad:24:0e:76:f6:87:2e:ab:e0: 50:26:64:0d:d8:52:9a:9a:d9:d4:54:dd:0e:aa:3d: 0c:e2:3e:38:97:78:05:af:b5:87:eb:66:47:a1:db: b7:07:23:bb:d6:ea:c3:55:73:ad:ea:17:22:8d:f8: 4d:4a:34:2b:19:bf:da:0c:73:96:87:e3:25:28:6b: 0c:35:e9:6c:15:68:f2:c3:95:9c:ee:2d:54:0a:92: fb:84:33:f3:66:14:60:86:c3:5a:a6:73:3c:95:e0: 23:8e:54:ff:1f:2d:9e:35:c7:e7:b9:f5:06:6a:c4: e2:55:14:d1:7f:0f:56:c3:98:75:d5:e1:06:96:d6: 8c:12:72:3b:eb:0c:1b:5f:a2:ca:97:bc:49:69:b9: 97:42:d7:e9:57:6e:f6:f3:cc:32:bb:6a:e6:6f:ce: f7:1f:29:94:8b:9c:4a:4d:26:59:2b:23:ec:57:41: 09:79:fa:e2:c3:15:d6:fc:da:6b:ec:22:ba:da:5a: 55:98:74:4b:69:48:d9:b8:72:62:bc:05:17:29:08: 60:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CB:1E:21:71:E3:A8:46:46:A1:A6:B4:34:D3:F9:5F:A1:3B:12:D5 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:96:46:ec:75:eb:1f:81:e5:ad:0b:28:72:c9:8b:dc:0b:eb: dd:5d:58:4d:d9:25:65:e4:c1:ae:23:a5:30:f3:47:e4:4f:9e: 97:19:d0:b7:fe:d8:89:80:bc:71:3d:9e:8b:a6:ad:34:cf:f8: 87:64:61:33:b6:89:46:70:16:d1:78:f3:2e:db:53:e7:fc:59: 2d:fa:ae:62:cc:ef:f2:17:5c:26:70:04:71:02:2d:f6:d3:12: 43:ef:c9:c2:99:5a:b3:7b:c2:5d:97:a8:c3:37:78:fd:00:ca: b0:0e:23:af:18:91:3b:03:f4:bc:ea:88:f1:80:70:7b:0b:43: a0:74:56:8f:7e:c8:af:b8:a4:bf:77:6e:8c:aa:6c:61:96:90: 58:22:e2:b0:44:3c:a8:3a:91:16:19:76:1f:ca:e6:1d:39:37: 8a:f8:e0:c5:9c:f6:30:a9:8c:72:53:77:7f:76:e1:5b:ec:3a: 8f:43:a5:2f:ff:3c:6c:ae:6d:8d:18:69:04:80:e3:63:54:89: 38:6e:d5:bd:f6:af:f9:af:1d:45:18:01:5d:c5:d6:46:08:fc: 2a:b0:ed:f3:9a:75:e4:c5:5b:b8:f9:2a:c9:cc:de:22:64:37: 81:d6:6b:a9:29:00:18:e6:e3:39:53:1d:e5:2e:0e:f3:f3:ab: 0a:62:b7:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjUwNzAyMTg0MjI3WhcNMjUwNzA5MTg0MjI3WjAYMRYwFAYD VQQDEw02ODY1N2Q5My00MWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmPD2lXp59LaRctYxza6qZMiUJ0LXvF5IuqpzA4NEnWR4vxafbPzNfWaKmsna Sru0QKutJA529ocuq+BQJmQN2FKamtnUVN0Oqj0M4j44l3gFr7WH62ZHodu3ByO7 1urDVXOt6hcijfhNSjQrGb/aDHOWh+MlKGsMNelsFWjyw5Wc7i1UCpL7hDPzZhRg hsNapnM8leAjjlT/Hy2eNcfnufUGasTiVRTRfw9Ww5h11eEGltaMEnI76wwbX6LK l7xJabmXQtfpV27288wyu2rmb873HymUi5xKTSZZKyPsV0EJefriwxXW/Npr7CK6 2lpVmHRLaUjZuHJivAUXKQhg4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnLHiFx 46hGRqGmtDTT+V+hOxLVMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFlkbsdesfgeWtCyhyyYvcC+vdXVhN2SVl5MGuI6Uw80fkT56XGdC3 /tiJgLxxPZ6Lpq00z/iHZGEztolGcBbRePMu21Pn/Fkt+q5izO/yF1wmcARxAi32 0xJD78nCmVqze8Jdl6jDN3j9AMqwDiOvGJE7A/S86ojxgHB7C0OgdFaPfsivuKS/ d26MqmxhlpBYIuKwRDyoOpEWGXYfyuYdOTeK+ODFnPYwqYxyU3d/duFb7DqPQ6Uv /zxsrm2NGGkEgONjVIk4btW99q/5rx1FGAFdxdZGCPwqsO3zmnXkxVu4+SrJzN4i ZDeB1mupKQAY5uM5Ux3lLg7z86sKYrfB -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:06 2025 by rpki-client