$ rpki-client -vvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: RNH6mw1pNkK5AEstynpkxg4FZ2gipXpBhE6dmR/Oj4w= Subject key identifier: D0:83:57:10:BE:C3:AA:9E:0D:FC:FF:2C:1F:EE:EE:E3:83:9D:64:A9 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0CE5 Signing time: Tue 24 Mar 2026 18:09:51 +0000 Manifest this update: Tue 24 Mar 2026 18:09:51 +0000 Manifest next update: Tue 31 Mar 2026 18:09:51 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: ddnviMhj52PfmUN2LiMOEBlG849CLq8wvNFTyHx4C24=) 2: 96AE931812F511F1BA310F6D113D8C67.roa (hash: jP+hpdy04kY0o4MqB2uI3RyQMFd46KIJgsKGChbWqFc=) 3: CD3E621E12F511F180FA8278113D8C67.roa (hash: kXxD2EMvx6LCGBFTx93ZGtgwkhNjqsacd4c8/3EVFYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3318 (0xcf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Mar 24 18:09:51 2026 GMT Not After : Mar 31 18:09:51 2026 GMT Subject: CN=69c2d36f-1cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:26:a1:34:f4:61:92:d9:08:20:07:94:a5:8f: 08:28:69:ce:09:e5:64:2a:1f:06:b9:58:ab:75:ab: 1f:64:da:a2:a6:db:70:97:62:f5:b1:6b:9d:91:9a: e0:5e:6f:34:f5:be:87:57:9a:c3:fb:55:a4:36:89: 74:f6:08:77:11:c1:2d:00:81:87:21:23:32:89:04: 80:5a:2d:32:72:67:8b:92:d1:6f:21:40:c7:f7:f0: 66:47:93:59:7a:ed:da:08:50:7e:ae:9a:b9:14:13: 33:1f:74:7d:09:9a:bb:f4:aa:a6:51:2c:44:7d:f1: dd:01:33:87:1e:1b:e0:64:ee:8f:41:f2:a0:96:02: e5:70:f0:6c:a4:81:72:d3:a6:24:fb:a0:fe:82:88: b8:a1:99:42:2d:51:42:f1:33:67:13:eb:ff:f7:08: 93:f4:1f:8a:f1:80:84:e1:ae:10:2b:d2:37:6a:e0: 3f:03:c9:27:f4:da:be:32:3a:a9:1b:97:4b:73:41: 8a:bf:c0:4b:24:38:3e:c3:25:bf:41:9e:97:cc:3e: 02:40:1d:b0:b6:5c:e3:9c:81:11:62:a9:d4:5e:89: bd:f7:52:1c:0d:e6:89:09:e4:ee:6b:c9:1c:9d:72: 96:c3:ad:25:8f:16:86:6c:91:41:8a:cd:2e:dd:ec: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:83:57:10:BE:C3:AA:9E:0D:FC:FF:2C:1F:EE:EE:E3:83:9D:64:A9 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d7:f0:be:63:20:ae:3e:2e:63:ec:08:73:34:6f:fe:0b:8f: 7b:fd:59:0c:0c:bc:5d:5d:70:24:db:13:00:07:55:8b:59:fc: 86:26:24:96:b7:a7:1d:40:37:ce:38:32:e6:45:d1:a5:de:13: a2:32:ad:76:da:71:5e:11:57:f0:5c:d0:2f:15:e4:54:84:a7: 9a:f7:20:4b:20:c1:fe:9e:6e:4c:81:b2:bf:b4:f7:e5:84:f4: ba:23:4e:1a:4b:42:28:60:9f:03:82:15:3f:02:2f:d2:ad:8b: 2b:2e:2a:c5:0c:d0:83:9f:c7:58:6f:3c:fa:e5:6e:55:b3:1d: 7b:d2:9e:3b:db:22:51:53:77:f8:e0:bc:6d:1a:f2:45:87:ba: 1b:7a:79:bd:de:e2:54:55:4a:a0:39:fd:d1:cc:25:73:b1:85: 38:79:8c:18:05:01:4e:53:bc:a3:d8:a4:ee:4c:88:e4:40:07: 06:d1:91:af:41:12:81:96:21:ac:fa:af:28:9a:f5:3b:16:28: c0:1b:11:20:c5:8f:55:7b:e5:64:26:36:f4:23:f5:b2:29:59: 2a:69:ca:63:8f:f9:38:ee:01:10:5e:ea:fa:60:1d:a3:e5:b6: 99:af:b6:94:11:84:54:4c:24:7f:ac:2b:d5:b8:00:b6:03:13: 8b:ce:b9:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjYwMzI0MTgwOTUxWhcNMjYwMzMxMTgwOTUxWjAYMRYwFAYD VQQDEw02OWMyZDM2Zi0xY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiahNPRhktkIIAeUpY8IKGnOCeVkKh8GuVirdasfZNqipttwl2L1sWudkZrg Xm809b6HV5rD+1WkNol09gh3EcEtAIGHISMyiQSAWi0ycmeLktFvIUDH9/BmR5NZ eu3aCFB+rpq5FBMzH3R9CZq79KqmUSxEffHdATOHHhvgZO6PQfKglgLlcPBspIFy 06Yk+6D+goi4oZlCLVFC8TNnE+v/9wiT9B+K8YCE4a4QK9I3auA/A8kn9Nq+Mjqp G5dLc0GKv8BLJDg+wyW/QZ6XzD4CQB2wtlzjnIERYqnUXom991IcDeaJCeTua8kc nXKWw60ljxaGbJFBis0u3eyt+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCDVxC+ w6qeDfz/LB/u7uODnWSpMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC9fwvmMgrj4uY+wIczRv/guPe/1ZDAy8XV1wJNsTAAdVi1n8hiYklrenHUA3 zjgy5kXRpd4TojKtdtpxXhFX8FzQLxXkVISnmvcgSyDB/p5uTIGyv7T35YT0uiNO GktCKGCfA4IVPwIv0q2LKy4qxQzQg5/HWG88+uVuVbMde9KeO9siUVN3+OC8bRry RYe6G3p5vd7iVFVKoDn90cwlc7GFOHmMGAUBTlO8o9ik7kyI5EAHBtGRr0ESgZYh rPqvKJr1OxYowBsRIMWPVXvlZCY29CP1silZKmnKY4/5OO4BEF7q+mAdo+W2ma+2 lBGEVEwkf6wr1bgAtgMTi8650Q== -----END CERTIFICATE-----Generated at Thu Mar 26 01:01:47 2026 by rpki-client