$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: uOsp56ZdQAQvTSnvn2JCVVStkiIaOLJEvR/CdfeSVa0= Subject key identifier: 79:BE:C2:23:82:77:E1:2A:52:BB:29:75:96:CF:81:CD:A2:66:86:D8 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 14 Signing time: Sun 19 Oct 2025 11:28:55 +0000 Manifest this update: Sun 19 Oct 2025 11:28:55 +0000 Manifest next update: Sun 26 Oct 2025 11:28:54 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: pFuWhe+o10b5Sl/OqQ6ubgeN58rciI9NPWcvrAQgB+s=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Oct 19 11:28:55 2025 GMT Not After : Oct 26 11:28:54 2025 GMT Subject: CN=68f4cb77-5a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:e9:db:da:27:84:c1:6d:7d:f5:7b:38:bc: a6:d3:8e:9d:89:c7:23:fa:96:64:6a:ba:c7:d4:91: a5:be:8c:ae:1a:d9:d0:bc:f2:ed:1e:f0:6a:68:a3: 12:61:db:ec:84:da:97:25:a4:6e:fc:e5:55:b4:01: 46:43:f4:1a:11:b3:d4:78:b1:e5:5c:da:4c:7f:8b: ec:df:d5:12:80:8d:c9:ae:12:0e:29:62:51:9d:6e: 1b:0d:fa:ee:d3:2d:8a:09:5d:0d:d0:d5:ba:27:00: 85:95:42:b3:9e:e9:b8:ed:a3:5e:31:53:47:47:75: 92:e1:39:27:44:66:66:bd:40:f7:2e:9a:db:49:26: 7a:78:49:bf:e3:11:76:7a:1d:f2:c9:36:c6:ab:48: d3:67:bb:fa:e6:70:5e:0c:d9:22:94:66:c9:de:4b: b3:11:c1:c0:d8:c9:0d:e5:6a:42:d2:95:61:2a:45: fb:d5:94:1d:be:50:0d:c1:5d:cb:56:32:ad:4a:fe: 07:4c:ad:0e:9d:38:bb:8b:cc:39:ab:c8:45:59:1e: f3:07:35:54:74:52:d3:b3:c4:00:3d:d1:28:b3:61: 40:7a:60:58:f3:46:d9:9d:04:ee:4b:b1:69:ac:29: f0:e4:48:6d:ac:ed:6a:c3:5c:4b:5e:f4:d3:a9:9c: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:C2:23:82:77:E1:2A:52:BB:29:75:96:CF:81:CD:A2:66:86:D8 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:94:22:eb:b4:4d:ad:54:9f:4a:bf:6f:aa:1e:24:c3:34:3e: fa:0d:5b:49:5a:02:9b:1c:82:78:16:4c:1e:57:fa:33:7d:ac: fe:4e:96:d8:48:d8:4b:7d:b0:8b:fa:73:16:89:cd:17:ad:60: 8a:1f:ff:0a:d2:44:bc:20:29:b4:7c:02:bd:d3:ac:5f:4c:58: 52:8f:35:84:dc:76:15:61:d1:bc:ae:a7:66:5b:ce:52:61:c8: f3:f9:07:94:56:28:f3:11:c4:95:cd:4d:38:bc:7b:f3:83:83: 0d:14:dc:e3:23:b5:b4:11:73:d2:f2:db:9e:64:cd:af:98:61: 9e:37:a0:2c:52:e5:dd:9e:59:b6:6a:58:c3:3b:f4:5a:95:51: 8c:c3:6d:a6:cb:78:af:2e:19:7f:71:bc:78:05:6f:0d:77:80: cc:e8:8b:92:07:89:19:5f:65:5c:5a:2e:9f:c4:5c:9b:bc:3f: b9:97:f0:0d:c3:73:b2:5d:f0:4d:02:56:4d:b6:4e:f9:d1:99: a9:00:55:44:a7:2a:ef:70:19:6b:a5:82:2f:0b:b2:bb:55:42: fd:93:ed:fd:dc:4a:bb:3b:d7:0d:6f:d5:7b:99:07:ad:0a:e2: 70:81:88:8b:79:92:d1:f1:57:f6:f8:04:05:41:48:01:81:2e: 6c:95:9e:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNTEwMTkxMTI4NTVaFw0yNTEwMjYxMTI4NTRaMBgxFjAUBgNV BAMTDTY4ZjRjYjc3LTVhMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa8enb2ieEwW199Xs4vKbTjp2JxyP6lmRqusfUkaW+jK4a2dC88u0e8GpooxJh 2+yE2pclpG785VW0AUZD9BoRs9R4seVc2kx/i+zf1RKAjcmuEg4pYlGdbhsN+u7T LYoJXQ3Q1bonAIWVQrOe6bjto14xU0dHdZLhOSdEZma9QPcumttJJnp4Sb/jEXZ6 HfLJNsarSNNnu/rmcF4M2SKUZsneS7MRwcDYyQ3lakLSlWEqRfvVlB2+UA3BXctW Mq1K/gdMrQ6dOLuLzDmryEVZHvMHNVR0UtOzxAA90SizYUB6YFjzRtmdBO5LsWms KfDkSG2s7WrDXEte9NOpnGTzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeb7CI4J3 4SpSuyl1ls+BzaJmhtgwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOUIuu0Ta1Un0q/b6oeJMM0PvoNW0laApscgngWTB5X+jN9rP5OlthI 2Et9sIv6cxaJzRetYIof/wrSRLwgKbR8Ar3TrF9MWFKPNYTcdhVh0byup2ZbzlJh yPP5B5RWKPMRxJXNTTi8e/ODgw0U3OMjtbQRc9Ly255kza+YYZ43oCxS5d2eWbZq WMM79FqVUYzDbabLeK8uGX9xvHgFbw13gMzoi5IHiRlfZVxaLp/EXJu8P7mX8A3D c7Jd8E0CVk22TvnRmakAVUSnKu9wGWulgi8LsrtVQv2T7f3cSrs71w1v1XuZB60K 4nCBiIt5ktHxV/b4BAVBSAGBLmyVnpk= -----END CERTIFICATE-----Generated at Mon Oct 20 08:32:10 2025 by rpki-client