$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: 3T9gnD1EkVWhclEBzSjORiXs+9YeOdhIae1xyO+BmbQ= Subject key identifier: AC:CB:56:9A:16:56:2E:C1:A3:FB:C0:3F:70:8A:EC:0E:6E:11:B2:B1 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0B1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0AE2 Signing time: Sat 14 Nov 2026 19:22:01 +0000 Manifest this update: Sat 14 Nov 2026 19:22:01 +0000 Manifest next update: Sat 21 Nov 2026 19:22:01 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: 3lO3CgyIpwFsUgmx8ZpjsXwzmUchWArF46KrwlOHEDQ=) 2: B961E7E2DC2211F1B48E66C01C66CEF9.roa (hash: GwKb5kZKjmPvGzWo37bYicskhnfr2Ea9PEV3+DfKotc=) 3: 0425F3F4DC1E11F18E4326E71B66CEF9.roa (hash: WLH12jV+x5WkGmhUKP6GQCaGHzrn7Mfj6Nl57Zo1hjE=) 4: 06D203C2DC1E11F18E4326E71B66CEF9.roa (hash: RTjmHoRn57xMzeJcnkYGjIMtRZ1wXuVVNkKgYhS5kKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 19:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2847 (0xb1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Nov 14 19:22:01 2026 GMT Not After : Nov 21 19:22:01 2026 GMT Subject: CN=6af8b4d9-dfcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:a6:34:af:c5:3b:22:f4:43:5e:09:e5:36: e1:62:dc:7f:0a:cf:d2:cd:5b:97:12:6f:a4:54:aa: 1f:4a:12:69:f5:ab:7a:29:12:a2:95:ff:7f:43:ea: 68:ed:fd:ae:09:ca:82:06:51:5f:38:6a:14:11:c9: 0a:d2:a0:a0:aa:a0:26:5d:6b:a6:ad:f8:5e:4d:4d: a8:51:fd:57:54:2b:78:34:de:c5:59:39:e2:18:c9: 22:8f:db:48:7b:0a:6b:94:e4:4e:a6:d9:32:00:65: cd:80:2e:d4:5c:28:23:bd:bd:42:77:85:c0:fe:5f: d8:87:f7:e5:d9:cc:70:c1:51:5a:37:e9:05:1e:e0: b9:b3:3f:56:5f:32:56:2e:19:46:72:ed:26:c8:23: 6e:9f:4a:47:a4:83:36:45:0f:cb:0e:1f:2b:34:fe: b3:00:7e:d7:ef:40:14:d4:29:30:9f:20:31:5b:22: ac:00:8c:06:2a:0e:7c:63:0d:c3:38:84:c8:6d:65: 2e:11:54:2b:25:61:36:45:72:e1:f3:15:0e:41:9d: a0:d0:67:78:c4:1c:1c:58:95:71:1b:65:bb:96:de: 43:d0:23:8a:31:c7:4e:c8:14:58:e9:81:d4:fd:fa: 8e:a0:8f:45:5c:fc:d8:d8:32:5d:80:70:90:51:1c: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CB:56:9A:16:56:2E:C1:A3:FB:C0:3F:70:8A:EC:0E:6E:11:B2:B1 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:07:78:d6:f1:e9:46:0a:b9:e5:97:92:63:dd:0f:14:3c:03: 2a:a4:76:a9:5c:b3:0a:aa:4c:d2:1e:75:6e:38:5a:5d:ac:a6: 18:48:9c:ae:b0:53:ae:79:85:40:b0:c2:c7:41:8e:e4:82:38: 77:12:e2:fc:4f:7a:3b:10:0d:87:4c:e2:8f:2e:9a:b3:aa:c2: f9:c9:a8:85:61:43:92:1d:a1:21:01:ec:a1:8f:ec:0f:91:e5: b1:51:75:db:5c:41:bb:8f:81:4a:7e:ef:ce:d2:ae:bd:66:71: 83:f4:d2:21:a0:d7:29:03:8b:52:92:77:21:f7:03:39:a1:f7: 3c:21:78:72:68:8d:50:5e:62:33:e9:a1:75:7e:eb:f5:dc:14: 99:44:51:4c:e3:4d:a6:de:90:10:de:4a:76:22:5b:e0:e7:75: 30:f1:5e:d2:52:55:54:bc:3d:02:5b:5d:cf:b5:d2:64:46:77: cd:31:2d:68:b6:4d:b1:4e:f6:55:fe:8b:2e:f9:31:c0:ef:d1: b2:c6:c3:4a:81:63:43:a4:4a:06:4d:18:e8:57:cb:21:9c:01: cb:e9:ad:2d:2d:cd:34:2d:ee:a3:de:eb:60:06:38:28:19:21: c2:67:f2:f5:19:94:63:fa:dd:00:94:ce:37:41:c2:3e:49:15: 89:9c:6b:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYxMTE0MTkyMjAxWhcNMjYxMTIxMTkyMjAxWjAYMRYwFAYD VQQDEw02YWY4YjRkOS1kZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QamNK/FOyL0Q14J5TbhYtx/Cs/SzVuXEm+kVKofShJp9at6KRKilf9/Q+po 7f2uCcqCBlFfOGoUEckK0qCgqqAmXWumrfheTU2oUf1XVCt4NN7FWTniGMkij9tI ewprlOROptkyAGXNgC7UXCgjvb1Cd4XA/l/Yh/fl2cxwwVFaN+kFHuC5sz9WXzJW LhlGcu0myCNun0pHpIM2RQ/LDh8rNP6zAH7X70AU1CkwnyAxWyKsAIwGKg58Yw3D OITIbWUuEVQrJWE2RXLh8xUOQZ2g0Gd4xBwcWJVxG2W7lt5D0COKMcdOyBRY6YHU /fqOoI9FXPzY2DJdgHCQURyqQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKzLVpoW Vi7Bo/vAP3CK7A5uEbKxMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXAd41vHpRgq55ZeSY90PFDwDKqR2qVyzCqpM0h51bjhaXaymGEicrrBTrnmF QLDCx0GO5II4dxLi/E96OxANh0zijy6as6rC+cmohWFDkh2hIQHsoY/sD5HlsVF1 21xBu4+BSn7vztKuvWZxg/TSIaDXKQOLUpJ3IfcDOaH3PCF4cmiNUF5iM+mhdX7r 9dwUmURRTONNpt6QEN5KdiJb4Od1MPFe0lJVVLw9Altdz7XSZEZ3zTEtaLZNsU72 Vf6LLvkxwO/RssbDSoFjQ6RKBk0Y6FfLIZwBy+mtLS3NNC3uo97rYAY4KBkhwmfy 9RmUY/rdAJTON0HCPkkViZxrfA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:59:10 2026 by rpki-client