$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft File: 17AA392C0CFF754F6249006D89386F871B9693FA.mft (raw, json) Hash identifier: EwjVzTDo0Got3YDy3JmH4Dku9l4wT6CD16cBIO3AQck= Subject key identifier: E1:AF:97:47:13:25:73:D7:26:93:26:1E:1C:FE:97:2B:F8:C8:81:90 Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA Certificate issuer: /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Certificate serial: 195794E882525BC694D814D241EFC725EDB31E57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject info access: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft Manifest number: 0110 Signing time: Sun 01 Mar 2026 15:23:57 +0000 Manifest this update: Sun 01 Mar 2026 15:18:57 +0000 Manifest next update: Mon 02 Mar 2026 17:42:57 +0000 Files and hashes: 1: 323030313a6466343a353134383a3a2f34382d3438203d3e2039383333.roa (hash: zl/9BBoJJ3neyY8UfSuYMMT4qwgA84XRS4rr+sykVxA=) 2: 323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (hash: 6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=) 3: 17AA392C0CFF754F6249006D89386F871B9693FA.crl (hash: X55MgJ5nMA8AL+mmoBU6LSA/KunHDUCDyZbWxWzQdn8=) 4: 323030313a6466343a353134663a3a2f34382d3438203d3e20313533333436.roa (hash: HOBlUUzXIgqWknT1VOL1nB3qMa6Fu6vRC1OMoEBjewg=) 5: 323030313a6466343a353134303a3a2f34342d3434203d3e20313533333436.roa (hash: 0cKeFRvMg4K7CjG6EjM23reqsbS6dbzuJZqiCsKqNyg=) Validation: OK Signature path: rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 17:42:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:57:94:e8:82:52:5b:c6:94:d8:14:d2:41:ef:c7:25:ed:b3:1e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA Validity Not Before: Mar 1 15:18:57 2026 GMT Not After : Mar 2 17:42:57 2026 GMT Subject: CN=E1AF9747132573D72693261E1CFE972BF8C88190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:02:df:bc:bc:59:21:9a:16:fc:df:dc:e1:6a: d7:8b:02:1a:1f:38:b2:26:9a:34:66:0d:b6:23:6a: d7:2f:60:1f:3d:ab:5d:28:c1:11:b8:9e:17:84:56: b3:21:a6:9a:09:bc:cf:2c:ec:74:c6:ec:59:bf:d2: 7c:c4:02:cd:a6:a2:03:80:2e:b8:1a:da:bc:0c:15: 5a:d3:2e:26:24:8b:c1:8e:ef:19:40:4f:f1:22:13: c2:33:fe:89:13:51:ae:55:92:a4:fe:38:71:56:ec: 5d:3e:24:e3:9b:9e:1d:7c:b9:24:56:5c:3e:ed:89: 5e:2a:ca:34:37:15:a5:02:54:e0:cb:d3:27:5d:5d: a6:3b:cf:3e:96:b8:77:11:a4:a2:20:45:a6:66:1f: 7c:4b:0d:12:6a:87:83:52:c0:b3:e5:b1:eb:33:f6: 47:03:51:a0:1d:02:67:c7:45:b4:6a:d4:02:09:3d: 05:d5:70:e0:cc:1e:bf:89:3c:3e:b9:92:9e:99:20: 6b:f7:57:83:1c:51:50:fa:c4:80:40:94:84:d5:f3: 8c:7a:b6:ab:15:ba:32:cc:40:6b:92:7b:2d:34:d0: 75:b2:80:90:2e:98:f0:55:50:52:b9:aa:7a:9e:1e: e0:6f:9e:b7:82:75:04:e3:c5:1d:3f:b5:55:76:29: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:97:47:13:25:73:D7:26:93:26:1E:1C:FE:97:2B:F8:C8:81:90 X509v3 Authority Key Identifier: keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:02:48:00:2c:be:be:f7:b4:31:a2:f3:c8:32:bb:e9:56:cb: 3c:f8:9a:c2:3c:d3:49:cc:d3:9e:8a:22:8e:02:ef:75:67:df: 67:34:a6:7c:0d:64:85:26:d0:9a:a3:27:d7:55:2d:9a:30:97: 29:6c:73:fc:2e:8b:e9:b9:14:c3:be:2c:7a:48:d1:f7:a9:1e: a2:f1:14:18:71:9f:f3:8c:45:d3:f7:88:af:be:e4:d5:5d:d5: b8:d2:ad:62:ad:91:e6:2c:b7:b8:34:7c:31:27:66:7d:1f:ca: 76:d9:3b:ce:24:20:a1:d1:8a:ae:29:4b:ef:0a:67:15:6c:6b: a3:64:ba:e0:b0:9c:b0:a7:c8:04:24:2f:d0:4c:84:ec:10:db: 31:3e:a9:c9:dc:27:9d:8d:f6:b3:ae:1b:54:e4:77:b9:5f:72: 12:66:a9:68:7d:2f:b9:70:50:98:fe:e6:09:5f:8d:0c:c4:21: c6:af:07:76:31:a6:cc:59:e8:8a:d5:3a:8d:9b:27:df:3e:eb: 06:ec:e5:84:b5:f4:09:e4:ac:d6:a7:90:c1:17:7f:83:8d:91: 5e:77:ba:ed:62:b3:e5:65:72:9f:5a:ae:1f:eb:c3:71:d8:4c: 75:2a:96:0a:32:e4:bf:b9:e6:dd:86:79:47:7d:97:5e:25:14: e2:12:0f:f9 -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIUGVeU6IJSW8aU2BTSQe/HJe2zHlcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNzQ0N0IwMDAwMTEwLwYDVQQFEygxN0FBMzkyQzBD RkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBMB4XDTI2MDMwMTE1MTg1N1oX DTI2MDMwMjE3NDI1N1owMzExMC8GA1UEAxMoRTFBRjk3NDcxMzI1NzNENzI2OTMy NjFFMUNGRTk3MkJGOEM4ODE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIC37y8WSGaFvzf3OFq14sCGh84siaaNGYNtiNq1y9gHz2rXSjBEbieF4RW syGmmgm8zyzsdMbsWb/SfMQCzaaiA4AuuBravAwVWtMuJiSLwY7vGUBP8SITwjP+ iRNRrlWSpP44cVbsXT4k45ueHXy5JFZcPu2JXirKNDcVpQJU4MvTJ11dpjvPPpa4 dxGkoiBFpmYffEsNEmqHg1LAs+Wx6zP2RwNRoB0CZ8dFtGrUAgk9BdVw4Mwev4k8 PrmSnpkga/dXgxxRUPrEgECUhNXzjHq2qxW6MsxAa5J7LTTQdbKAkC6Y8FVQUrmq ep4e4G+et4J1BOPFHT+1VXYpWVkCAwEAAaOCAhswggIXMB0GA1UdDgQWBBThr5dH EyVz1yaTJh4c/pcr+MiBkDAfBgNVHSMEGDAWgBQXqjksDP91T2JJAG2JOG+HG5aT +jAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3QjAwMDAvMS8xN0FBMzky QzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZBLmNybDB+BggrBgEFBQcB AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GNm81TEF6X2RV OWlTUUJ0aVRodmh4dVdrX28uY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE3NDQ3 QjAwMDAvMS8xN0FBMzkyQzBDRkY3NTRGNjI0OTAwNkQ4OTM4NkY4NzFCOTY5M0ZB Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAPQJIACy+vve0MaLzyDK76VbLPPiawjzTSczTnooijgLvdWff ZzSmfA1khSbQmqMn11UtmjCXKWxz/C6L6bkUw74sekjR96keovEUGHGf84xF0/eI r77k1V3VuNKtYq2R5iy3uDR8MSdmfR/Kdtk7ziQgodGKrilL7wpnFWxro2S64LCc sKfIBCQv0EyE7BDbMT6pydwnnY32s64bVOR3uV9yEmapaH0vuXBQmP7mCV+NDMQh xq8HdjGmzFnoitU6jZsn3z7rBuzlhLX0CeSs1qeQwRd/g42RXne67WKz5WVyn1qu H+vDcdhMdSqWCjLkv7nm3YZ5R32XXiUU4hIP+Q== -----END CERTIFICATE-----Generated at Sun Mar 1 21:14:00 2026 by rpki-client