$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: Orcc7DZfI6cNXWDkWR/eWgWT4OsEmNRLdu2QXwzh678= Subject key identifier: 35:C9:AF:C5:C8:CE:B1:BD:2C:53:9D:89:DE:AA:73:C5:97:46:23:42 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 06:57:12 +0000 Manifest this update: Wed 23 Sep 2026 06:57:11 +0000 Manifest next update: Wed 30 Sep 2026 06:57:11 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: ElkLh/6VpSMPwG2HfFjmGav67Y7v8f0qOirpCGoaFSI=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: fkyVK3E2J0f/yExfHCeubc3yjTlzp83fa7AWD5BMRNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Sep 23 06:57:11 2026 GMT Not After : Sep 30 06:57:11 2026 GMT Subject: CN=6ab37848-025d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:39:1b:63:14:6a:c3:f4:ef:42:36:95:85:cf: e4:fe:0c:f1:12:f6:1f:b7:4e:d7:4d:83:3c:cb:9a: 1a:7e:8a:c2:57:e4:8d:63:d3:1b:08:05:78:f5:16: 6f:34:87:a8:3f:e7:95:ae:87:90:83:15:e4:b9:12: 38:b4:74:6e:b5:87:45:a1:b8:fd:f2:c9:42:48:b2: 69:66:06:e7:ab:33:bb:0d:f3:c3:b7:c4:d2:45:31: 38:e6:ad:fc:ca:a2:bc:b5:bc:f9:a1:04:36:b6:a5: c6:24:24:7f:5b:3d:f9:7e:0f:ba:b6:39:7c:92:a8: 0e:70:fb:34:ec:cb:fb:cf:67:4f:86:f2:75:13:6a: ad:0d:bc:9d:0c:54:ee:fa:2f:51:c5:c4:d9:c7:42: 1c:91:05:74:d0:22:37:ad:33:9d:13:be:cc:d4:2a: f7:12:1f:fa:5d:15:8c:83:61:f7:0c:24:1d:e7:f7: 27:12:15:58:2a:1c:c8:04:bb:de:52:09:0c:32:26: e5:9c:08:f6:52:4b:03:38:18:59:a1:ee:e1:20:a3: 7d:66:08:ec:58:4a:2f:d8:76:03:b9:1f:bf:c1:26: 9f:44:20:7c:ce:45:3c:48:0e:03:cf:d1:67:ff:0a: 83:b8:1b:f5:57:7f:dd:08:68:09:39:c6:9d:bd:4e: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:AF:C5:C8:CE:B1:BD:2C:53:9D:89:DE:AA:73:C5:97:46:23:42 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9d:eb:02:26:a2:dc:b1:e5:bd:e1:ee:bb:ec:f2:32:af:2b: 74:80:ca:17:a2:c5:10:55:d2:8f:f5:e4:92:6a:6a:87:85:d3: c2:62:07:46:da:70:18:8f:4d:c1:d8:dd:24:a6:5c:07:c6:3d: 74:8a:e0:82:46:e0:d2:4d:2c:f7:e3:3c:07:d6:82:31:ed:37: 37:76:0e:ae:44:a4:66:79:42:ba:cf:40:60:50:cd:b8:3c:0e: ef:34:ec:80:98:45:55:42:89:a2:36:51:44:c6:f3:75:19:bf: fb:f7:a2:e7:02:11:ae:94:29:a0:0f:c5:30:5e:e4:e6:7e:04: 23:6b:79:96:26:b5:38:b3:cd:a7:07:28:9b:4e:4e:6a:c2:2a: ab:f5:24:e8:f1:65:07:e9:00:ac:56:ed:94:a1:ba:34:59:cf: c8:1f:93:5a:e4:f6:b8:20:11:a4:32:98:1d:ac:2a:6b:94:cb: b3:eb:1f:93:41:ea:e6:14:01:a3:ac:ae:24:c0:e0:79:dc:06: 3c:3d:1b:4a:47:44:86:f0:34:ac:d0:40:15:de:95:30:c5:8a: e2:70:45:c6:7d:8c:6f:55:c9:9b:48:91:6e:39:76:65:91:75: 08:3d:c0:9b:9a:00:2a:d8:9a:52:0a:a9:ee:e9:ed:2e:6a:9b: af:fc:f4:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENTExMTAvBgNVBAUTKERGOTFCNzcwQkMzMUI1MkZDODk0QkREODRBNjc1ODI3 NUFBRTUzMUQwHhcNMjYwOTIzMDY1NzExWhcNMjYwOTMwMDY1NzExWjAYMRYwFAYD VQQDEw02YWIzNzg0OC0wMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjkbYxRqw/TvQjaVhc/k/gzxEvYft07XTYM8y5oaforCV+SNY9MbCAV49RZv NIeoP+eVroeQgxXkuRI4tHRutYdFobj98slCSLJpZgbnqzO7DfPDt8TSRTE45q38 yqK8tbz5oQQ2tqXGJCR/Wz35fg+6tjl8kqgOcPs07Mv7z2dPhvJ1E2qtDbydDFTu +i9RxcTZx0IckQV00CI3rTOdE77M1Cr3Eh/6XRWMg2H3DCQd5/cnEhVYKhzIBLve UgkMMiblnAj2UksDOBhZoe7hIKN9ZgjsWEov2HYDuR+/wSafRCB8zkU8SA4Dz9Fn /wqDuBv1V3/dCGgJOcadvU4o2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDXJr8XI zrG9LFOdid6qc8WXRiNCMB8GA1UdIwQYMBaAFN+Rt3C8MbUvyJS92EpnWCdarlMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ1MS9BNjgyRTFDNDhG QzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3eHRTX0lsTDNZU21kWUoxcXVV eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ1MS9BNjgyRTFDNDhGQzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3eHRT X0lsTDNZU21kWUoxcXVVeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACp3rAiai3LHlveHuu+zyMq8rdIDKF6LFEFXSj/Xkkmpqh4XTwmIHRtpwGI9N wdjdJKZcB8Y9dIrggkbg0k0s9+M8B9aCMe03N3YOrkSkZnlCus9AYFDNuDwO7zTs gJhFVUKJojZRRMbzdRm/+/ei5wIRrpQpoA/FMF7k5n4EI2t5lia1OLPNpwcom05O asIqq/Uk6PFlB+kArFbtlKG6NFnPyB+TWuT2uCARpDKYHawqa5TLs+sfk0Hq5hQB o6yuJMDgedwGPD0bSkdEhvA0rNBAFd6VMMWK4nBFxn2Mb1XJm0iRbjl2ZZF1CD3A m5oAKtiaUgqp7untLmqbr/z0dw== -----END CERTIFICATE-----Generated at Thu Sep 24 08:52:42 2026 by rpki-client