$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: MfrdnnoIKJUsuklv/gjfRtmArsMoSzu6m+1cOtsZ76Y= Subject key identifier: 79:A9:8D:EE:A7:83:8A:47:14:03:DF:2C:95:A5:8E:30:AF:3D:BC:BE Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0AEC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0AC0 Signing time: Tue 22 Sep 2026 19:20:53 +0000 Manifest this update: Tue 22 Sep 2026 19:20:53 +0000 Manifest next update: Tue 29 Sep 2026 19:20:53 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: z04R5dKPiZ5l16jhWrNEr5EvK27/ZQeBR5KGWMFN9sI=) 2: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: G/h6ay+lVDrxmj5QAHf9M00uXSgMYuBFxLTXw3Ioa1o=) 3: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: bk/7/6niDOy4Wgez/WOfJOA9hAaC3ZIe5csnBCnmc2c=) 4: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Sep 22 19:20:53 2026 GMT Not After : Sep 29 19:20:53 2026 GMT Subject: CN=6ab2d515-4aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:84:a7:35:e7:09:b7:5e:93:88:12:4f:52:9f: a4:7e:3b:97:3d:1f:77:f4:f1:6c:b4:35:72:99:21: 87:63:93:fd:4a:d7:91:e0:a3:ae:df:c1:a4:23:82: f3:01:0c:f7:55:8f:0a:96:5c:e6:06:63:09:0f:bd: d5:5c:6c:d6:f9:0a:dc:bb:61:b7:9f:82:aa:26:d3: d5:e8:c2:56:dd:22:f0:5e:ef:88:ca:d3:09:ee:a8: 8b:db:0e:36:1f:be:9d:92:f7:9e:f1:6d:c1:e8:f4: ee:38:79:76:14:9d:88:36:ed:b1:a5:fb:96:30:e5: be:15:e5:c8:81:27:28:43:02:24:b3:b1:d4:fc:80: 0f:ea:df:d4:c3:fc:ed:8c:6f:bc:e2:f3:8c:24:b0: e4:18:bc:1b:6e:da:df:44:d0:2d:9c:3e:04:71:62: 88:df:c5:a0:fa:43:a6:cc:0d:ef:ce:a5:d1:35:b9: 0d:39:ac:fb:39:20:fe:a2:08:e5:95:a2:98:60:08: 0e:73:87:7b:19:bc:5c:c3:3b:70:12:92:7a:44:22: 9d:ff:6a:13:47:66:b0:99:95:80:58:f3:3d:df:bf: 34:8b:8f:d0:41:16:a4:77:71:09:9f:1e:6c:2d:42: 6f:a7:a4:37:c0:2e:5a:1b:a8:b6:f5:73:35:34:09: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:8D:EE:A7:83:8A:47:14:03:DF:2C:95:A5:8E:30:AF:3D:BC:BE X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:bf:af:99:54:97:ce:fa:47:96:0d:1d:b3:df:9d:fe:4d:5e: b2:39:40:ed:37:fb:28:33:f1:5b:cd:a7:0f:ae:a4:09:5f:5c: 49:f3:bc:30:28:e2:63:32:aa:43:ab:77:38:32:54:6a:e3:2e: 60:d5:b0:26:87:11:59:1c:a0:e3:de:df:dc:f6:1a:3f:d0:79: d4:7a:9d:58:58:90:63:de:aa:ad:5a:5c:ba:54:1e:32:c2:be: 3a:9f:f6:98:31:01:2e:c0:17:dd:71:a1:87:63:21:90:5c:2c: 9e:3e:c7:6d:03:1c:aa:d0:ba:13:2a:c0:2a:70:66:6d:1f:eb: 06:45:51:68:59:50:73:b8:d5:54:bc:37:a9:29:e4:8c:65:c4: 6d:bb:cc:7f:0b:01:f1:ea:05:8e:5a:4f:e7:63:5c:84:9d:07: 23:25:ce:c7:be:c6:3a:be:fb:fc:3d:af:83:44:ea:bb:50:bc: eb:5d:31:ef:73:eb:b3:d1:38:67:bc:43:44:9c:b1:99:6d:ff: 43:69:81:1d:f1:44:f5:bd:43:0f:76:5f:a4:3d:aa:3f:d3:a8: 7b:15:3a:8b:5c:d9:cd:95:70:f4:30:23:e5:de:cb:ae:cf:e8: 32:2f:b6:99:9c:36:b7:02:24:d7:e4:5e:3f:0e:15:b4:0d:60: 0f:d8:0a:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYwOTIyMTkyMDUzWhcNMjYwOTI5MTkyMDUzWjAYMRYwFAYD VQQDEw02YWIyZDUxNS00YWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YSnNecJt16TiBJPUp+kfjuXPR939PFstDVymSGHY5P9SteR4KOu38GkI4Lz AQz3VY8KllzmBmMJD73VXGzW+Qrcu2G3n4KqJtPV6MJW3SLwXu+IytMJ7qiL2w42 H76dkvee8W3B6PTuOHl2FJ2INu2xpfuWMOW+FeXIgScoQwIks7HU/IAP6t/Uw/zt jG+84vOMJLDkGLwbbtrfRNAtnD4EcWKI38Wg+kOmzA3vzqXRNbkNOaz7OSD+ogjl laKYYAgOc4d7GbxcwztwEpJ6RCKd/2oTR2awmZWAWPM93780i4/QQRakd3EJnx5s LUJvp6Q3wC5aG6i29XM1NAnT+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHmpje6n g4pHFAPfLJWljjCvPby+MB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaL+vmVSXzvpHlg0ds9+d/k1esjlA7Tf7KDPxW82nD66kCV9cSfO8MCjiYzKq Q6t3ODJUauMuYNWwJocRWRyg497f3PYaP9B51HqdWFiQY96qrVpculQeMsK+Op/2 mDEBLsAX3XGhh2MhkFwsnj7HbQMcqtC6EyrAKnBmbR/rBkVRaFlQc7jVVLw3qSnk jGXEbbvMfwsB8eoFjlpP52NchJ0HIyXOx77GOr77/D2vg0Tqu1C8610x73Prs9E4 Z7xDRJyxmW3/Q2mBHfFE9b1DD3ZfpD2qP9OoexU6i1zZzZVw9DAj5d7Lrs/oMi+2 mZw2twIk1+RePw4VtA1gD9gKQw== -----END CERTIFICATE-----Generated at Thu Sep 24 12:41:35 2026 by rpki-client