$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: Lbfzct59j4eMtTnRGxeDE5sh7djswtDc1CYzyp8bXpM= Subject key identifier: 28:37:3D:EA:CD:9E:84:1E:F3:59:F7:A8:17:8C:C2:8C:04:B4:C5:3A Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0AEB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0ABF Signing time: Sun 20 Sep 2026 19:27:24 +0000 Manifest this update: Sun 20 Sep 2026 19:27:24 +0000 Manifest next update: Sun 27 Sep 2026 19:27:24 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: i1folCkZM6cqEY+QTTeHIGTaWbvhgqjWTVBablAEksg=) 2: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: G/h6ay+lVDrxmj5QAHf9M00uXSgMYuBFxLTXw3Ioa1o=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=) 4: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: bk/7/6niDOy4Wgez/WOfJOA9hAaC3ZIe5csnBCnmc2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2795 (0xaeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Sep 20 19:27:24 2026 GMT Not After : Sep 27 19:27:24 2026 GMT Subject: CN=6ab0339c-e42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:d0:59:5d:a3:6d:90:b4:16:e3:86:01:d4: af:10:40:1d:39:82:69:be:0a:6a:08:5b:52:8e:8f: ea:bb:49:1b:53:c2:42:9e:2b:42:ae:ec:d3:38:60: 95:4a:32:54:58:64:81:07:a6:17:2a:63:d6:14:8f: f7:5f:e6:54:3d:21:fd:7c:ea:52:4d:22:29:ef:c8: 83:06:f1:5b:58:00:33:d6:c9:b4:3c:fa:91:d1:b1: 5b:d4:a0:ac:c9:bb:03:dc:f8:09:ba:1c:1d:0e:3c: 25:4f:c4:38:f4:88:e0:13:5a:bf:58:7f:0e:f8:09: 08:7a:fa:e1:8d:fd:c7:e2:4e:24:e6:fa:aa:37:09: 0a:d9:7f:ad:88:06:92:74:57:39:9c:79:31:2e:e0: 50:40:06:ab:d6:60:68:15:c8:b4:2e:e7:e4:28:b9: 01:94:ef:88:b7:0e:fb:ff:1c:5a:75:c9:f6:0a:48: 28:e4:1b:97:dd:78:08:13:76:cd:aa:c6:99:cf:71: 58:98:a4:bb:07:20:58:e2:1d:51:29:5e:64:42:59: 61:9f:cb:a2:a1:c7:3e:4d:20:34:8a:b0:f4:79:26: c0:17:63:c3:be:53:70:85:90:14:f9:e6:8b:a6:46: b5:59:0b:dc:b5:81:8f:2b:e4:03:3e:70:a3:04:9c: 4c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:37:3D:EA:CD:9E:84:1E:F3:59:F7:A8:17:8C:C2:8C:04:B4:C5:3A X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:f3:d8:0b:bc:b6:8c:94:c3:60:61:90:c3:a0:f6:d4:c6:37: 0c:15:5d:a8:91:1d:07:f1:c4:b6:42:53:3a:9d:da:68:36:9b: 09:c0:a1:cb:e5:e2:49:bc:3d:23:dc:c6:ea:cf:90:15:4d:c6: f8:83:a3:7d:32:d1:e7:a3:e1:39:70:a6:47:32:c6:04:e7:2c: 33:70:0e:b8:31:11:39:7a:ba:28:65:17:f6:ae:90:d5:62:05: 10:c8:dc:e7:90:ab:a7:c0:90:5f:34:2c:d3:ae:ac:a9:75:e1: 3b:56:d9:9d:13:b7:d5:a0:24:44:f3:c4:75:5d:b0:24:c5:9e: f3:0b:42:22:cd:4c:4d:1d:f0:71:92:5e:9d:4f:29:15:ca:33: d0:34:29:4b:75:da:b5:25:05:cc:26:88:83:ef:03:f8:8a:23: 88:01:41:87:22:37:cc:d1:2a:47:85:48:d5:97:d0:a9:f3:42: e2:cf:b9:c6:ec:43:d9:47:af:83:b0:d1:1c:c2:a9:ce:ec:4b: 47:36:31:17:05:89:28:45:d2:7f:01:52:1d:87:0e:c5:fc:6c: 6b:45:2e:c6:c8:88:d9:ef:75:b6:a9:8e:16:76:65:61:ac:fe: a9:df:9e:37:47:c7:43:0f:ae:13:00:26:78:ca:db:7a:39:d3: e1:33:3b:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYwOTIwMTkyNzI0WhcNMjYwOTI3MTkyNzI0WjAYMRYwFAYD VQQDEw02YWIwMzM5Yy1lNDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukrQWV2jbZC0FuOGAdSvEEAdOYJpvgpqCFtSjo/qu0kbU8JCnitCruzTOGCV SjJUWGSBB6YXKmPWFI/3X+ZUPSH9fOpSTSIp78iDBvFbWAAz1sm0PPqR0bFb1KCs ybsD3PgJuhwdDjwlT8Q49IjgE1q/WH8O+AkIevrhjf3H4k4k5vqqNwkK2X+tiAaS dFc5nHkxLuBQQAar1mBoFci0LufkKLkBlO+Itw77/xxadcn2Ckgo5BuX3XgIE3bN qsaZz3FYmKS7ByBY4h1RKV5kQllhn8uiocc+TSA0irD0eSbAF2PDvlNwhZAU+eaL pka1WQvctYGPK+QDPnCjBJxMIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCg3PerN noQe81n3qBeMwowEtMU6MB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMfPYC7y2jJTDYGGQw6D21MY3DBVdqJEdB/HEtkJTOp3aaDabCcChy+XiSbw9 I9zG6s+QFU3G+IOjfTLR56PhOXCmRzLGBOcsM3AOuDEROXq6KGUX9q6Q1WIFEMjc 55Crp8CQXzQs066sqXXhO1bZnRO31aAkRPPEdV2wJMWe8wtCIs1MTR3wcZJenU8p Fcoz0DQpS3XatSUFzCaIg+8D+IojiAFBhyI3zNEqR4VI1ZfQqfNC4s+5xuxD2Uev g7DRHMKpzuxLRzYxFwWJKEXSfwFSHYcOxfxsa0UuxsiI2e91tqmOFnZlYaz+qd+e N0fHQw+uEwAmeMrbejnT4TM75A== -----END CERTIFICATE-----Generated at Mon Sep 21 03:35:57 2026 by rpki-client