$ rpki-client -vvvf rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft File: g3GOntShsiknnjylVdRNbh_KjMU.mft (raw, json) Hash identifier: PmKMmB1JBXqtxlYjb9q+qqmM91DqaD0kMpMR/Yxgcv8= Subject key identifier: D7:1F:2D:0B:63:84:53:3C:AF:EC:94:C6:6B:D6:77:DC:2B:63:02:14 Authority key identifier: 83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 Certificate issuer: /CN=A917A17B/serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft Manifest number: 0D55 Signing time: Mon 26 Oct 2026 18:11:49 +0000 Manifest this update: Mon 26 Oct 2026 18:11:49 +0000 Manifest next update: Mon 02 Nov 2026 18:11:49 +0000 Files and hashes: 1: g3GOntShsiknnjylVdRNbh_KjMU.crl (hash: BuVs3A67PP+SbUx9U/GYTd9vtm8Xqahungy6hnZf23s=) 2: CD3E621E12F511F180FA8278113D8C67.roa (hash: HiYaFULG330NEjSyB7vQtymlRctIKK1KJBuLZlff9pU=) 3: 96AE931812F511F1BA310F6D113D8C67.roa (hash: cXOeiMyk2P1h/V1+QkWeGss+P0oU/Wj1wZhDnilOemo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 18:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A17B, serialNumber=83718E9ED4A1B229279E3CA555D44D6E1FCA8CC5 Validity Not Before: Oct 26 18:11:49 2026 GMT Not After : Nov 2 18:11:49 2026 GMT Subject: CN=6adf97e5-1a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:44:56:7f:30:18:3b:a6:07:c9:3c:a9:85:38: 97:71:63:32:7a:da:a0:e9:cc:15:2a:e2:5b:2b:b9: 4f:98:20:f5:a2:d3:d0:90:b1:13:55:02:d5:81:a2: 3d:17:5d:dc:89:c5:9c:f5:31:bf:2f:58:a9:df:b7: ce:b2:dd:5f:2d:ee:94:c2:af:c1:ab:eb:44:99:11: 7c:91:aa:55:76:da:77:25:11:aa:ca:2b:a7:05:83: 27:17:ca:56:f1:49:a6:a4:e3:54:6d:69:45:47:4c: 5d:7a:1a:3e:96:58:44:db:5e:bd:ad:92:44:a8:b3: ac:2e:25:ba:b5:ca:75:fe:a6:f0:14:fe:c5:16:9c: bf:2a:06:5a:4d:f5:50:a8:4f:f4:b5:c7:fd:d9:43: 8c:e4:e2:26:33:a4:4b:fd:0f:f4:52:44:31:b7:77: d1:7a:17:44:5c:ec:83:84:7b:e1:f0:af:2a:fe:de: 2b:58:ff:92:85:0d:fa:76:c3:28:b7:35:c8:f3:92: 5b:5d:d1:26:48:89:78:38:b4:71:70:b5:5b:73:a0: 9b:24:b5:d2:0a:6b:b6:72:ea:22:41:b3:aa:53:df: 44:02:62:74:0f:89:c0:7d:0b:bc:32:10:51:1a:dd: 90:ec:22:25:fa:f0:16:66:6d:13:21:c3:b9:9e:a5: 7e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:2D:0B:63:84:53:3C:AF:EC:94:C6:6B:D6:77:DC:2B:63:02:14 X509v3 Authority Key Identifier: keyid:83:71:8E:9E:D4:A1:B2:29:27:9E:3C:A5:55:D4:4D:6E:1F:CA:8C:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g3GOntShsiknnjylVdRNbh_KjMU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A17B/85395D6E06D311EABA5D5A49C4F9AE02/g3GOntShsiknnjylVdRNbh_KjMU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:2c:38:b6:84:34:09:6f:62:3e:ec:0f:5d:90:d7:4d:ab:7e: 7c:fd:5c:e8:b6:8d:aa:92:1b:d6:5d:93:25:00:35:bb:09:f0: 3a:9b:c8:46:e5:8f:98:93:b2:88:73:36:e5:e8:8b:af:a0:a4: 54:58:e0:34:8e:a9:fa:2b:ce:63:dc:9b:58:4d:a1:cd:e4:1b: 44:94:81:37:82:ab:44:fe:36:c2:d6:86:2c:31:98:99:96:95: ca:bc:b8:99:b0:36:3e:bf:93:b3:0e:7f:ad:eb:06:cb:e1:47: 2d:3f:c9:dd:d9:74:43:d9:af:e3:5d:7a:af:2e:48:8d:74:40: e6:78:1a:f9:30:8b:c2:bf:00:24:8c:e1:e1:58:6c:57:f2:6e: b8:d3:1c:46:bf:b2:5e:ee:f8:c5:a5:39:ef:dd:27:fa:a3:37: 9c:06:19:d2:b2:99:a7:bb:5e:3a:3e:9b:9f:44:02:e6:ce:8e: c3:46:1a:b4:d8:63:ad:b5:29:8b:05:73:1a:d5:4e:46:85:5d: 0a:fc:78:f0:d7:6d:25:97:7d:48:5b:c8:56:a1:e4:2c:8f:2b: 3f:74:91:04:41:44:b9:55:c4:0b:27:66:a1:57:71:e0:ae:67: ec:8a:d8:c5:b3:bf:85:f0:58:17:06:7d:8b:44:ba:87:df:42: 22:a7:0d:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ExN0IxMTAvBgNVBAUTKDgzNzE4RTlFRDRBMUIyMjkyNzlFM0NBNTU1RDQ0RDZF MUZDQThDQzUwHhcNMjYxMDI2MTgxMTQ5WhcNMjYxMTAyMTgxMTQ5WjAYMRYwFAYD VQQDEw02YWRmOTdlNS0xYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0RWfzAYO6YHyTyphTiXcWMyetqg6cwVKuJbK7lPmCD1otPQkLETVQLVgaI9 F13cicWc9TG/L1ip37fOst1fLe6Uwq/Bq+tEmRF8kapVdtp3JRGqyiunBYMnF8pW 8UmmpONUbWlFR0xdeho+llhE2169rZJEqLOsLiW6tcp1/qbwFP7FFpy/KgZaTfVQ qE/0tcf92UOM5OImM6RL/Q/0UkQxt3fRehdEXOyDhHvh8K8q/t4rWP+ShQ36dsMo tzXI85JbXdEmSIl4OLRxcLVbc6CbJLXSCmu2cuoiQbOqU99EAmJ0D4nAfQu8MhBR Gt2Q7CIl+vAWZm0TIcO5nqV+UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcfLQtj hFM8r+yUxmvWd9wrYwIUMB8GA1UdIwQYMBaAFINxjp7UobIpJ548pVXUTW4fyozF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE3Qi84NTM5NUQ2RTA2 RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNpa25uanlsVmRSTmJoX0tq TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2czR09udFNoc2lrbm5qeWxWZFJOYmhfS2pNVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTE3Qi84NTM5NUQ2RTA2RDMxMUVBQkE1RDVBNDlDNEY5QUUwMi9nM0dPbnRTaHNp a25uanlsVmRSTmJoX0tqTVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiiw4toQ0CW9iPuwPXZDXTat+fP1c6LaNqpIb1l2TJQA1uwnwOpvIRuWPmJOy iHM25eiLr6CkVFjgNI6p+ivOY9ybWE2hzeQbRJSBN4KrRP42wtaGLDGYmZaVyry4 mbA2Pr+Tsw5/resGy+FHLT/J3dl0Q9mv4116ry5IjXRA5nga+TCLwr8AJIzh4Vhs V/JuuNMcRr+yXu74xaU5790n+qM3nAYZ0rKZp7teOj6bn0QC5s6Ow0YatNhjrbUp iwVzGtVORoVdCvx48NdtJZd9SFvIVqHkLI8rP3SRBEFEuVXECydmoVdx4K5n7IrY xbO/hfBYFwZ9i0S6h99CIqcN/w== -----END CERTIFICATE-----Generated at Wed Oct 28 18:06:24 2026 by rpki-client