$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: bnNAsQyn4e1ST7LJWF+tl2l43OaRYRyTnGeHgE9Wjjw= Subject key identifier: 4A:17:CE:8F:62:4E:86:48:1C:78:D2:52:DA:21:04:3C:36:F0:7C:F7 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A96 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0A6D Signing time: Thu 16 Apr 2026 19:34:55 +0000 Manifest this update: Thu 16 Apr 2026 19:34:55 +0000 Manifest next update: Thu 23 Apr 2026 19:34:55 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: pfDDJwlGj50zFIs2gWPsnKHGckquSJkogld7Ms6qa2E=) 2: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: IQJ8CffaTket9ne9+YqLheylHj7WmArcnX754ekd+dU=) 3: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: PEH68zFCTxpFSTzGq90DnMAYUrlMtG9wBFuZ6IkSPHQ=) 4: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: eVBXvv7YWMBaIfGnckCnkuA5YetM67743+mf0xEBTN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2710 (0xa96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Apr 16 19:34:55 2026 GMT Not After : Apr 23 19:34:55 2026 GMT Subject: CN=69e139df-24ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:91:14:32:29:7b:fb:5b:5f:54:ef:dd:52: c9:5d:2e:89:58:af:8f:10:65:50:84:3c:3e:85:a9: ae:42:1d:97:97:a1:27:f9:7a:b8:fd:e0:01:67:4e: 96:42:a8:37:27:73:1c:9b:a7:9b:60:49:cb:38:a7: 84:18:0b:21:d7:29:10:52:d1:37:fd:54:cd:e3:6f: 10:69:0e:ec:91:cb:cc:bb:49:75:f0:8b:b0:37:53: 60:21:9c:3f:3c:6c:7d:49:18:e3:f7:5d:35:49:05: 15:d5:e5:83:8e:08:9e:fb:6e:0b:0b:40:50:ec:c9: 94:2f:32:f7:0b:68:7a:e9:a7:df:0c:8e:b1:25:d0: cd:3d:7c:0b:82:cb:76:87:66:95:5a:ff:38:ee:e2: 4b:e2:a6:47:a6:a7:eb:55:de:17:f6:60:e1:4e:f3: 68:48:cd:62:f0:a5:62:4f:a6:1e:98:ab:e1:20:f1: d9:d0:0a:44:a7:da:fb:36:a4:c6:f0:43:cf:a6:c2: 91:a0:60:e3:19:27:43:1e:3e:2f:2a:77:af:4b:77: f0:74:a1:1b:dd:41:bd:af:ff:8c:cb:9d:59:6a:41: 81:70:13:a7:40:d5:60:69:f6:f8:97:79:c4:85:bd: de:90:ab:de:36:b2:ac:0e:0b:93:7b:59:44:d1:b7: 44:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:17:CE:8F:62:4E:86:48:1C:78:D2:52:DA:21:04:3C:36:F0:7C:F7 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:8d:0f:43:19:5c:3b:96:fb:81:b0:12:3a:55:f3:8e:52:54: 1d:dd:b4:dc:eb:24:5e:88:1d:63:d1:f6:8c:9b:0e:4c:60:e2: 71:e5:52:1d:51:fc:2d:96:60:ff:e5:16:52:8a:b9:38:f6:1b: be:c1:f1:66:3f:9a:a2:22:e7:0c:d7:59:ae:bb:0b:1e:1b:7b: 72:32:1e:b1:fb:1a:9b:b7:1b:c3:01:1b:b1:d6:60:61:56:5f: 20:c1:c2:b8:23:52:6f:ec:8c:95:f9:df:99:ee:ef:36:8e:47: de:be:0c:c9:b9:b4:02:fc:58:15:3b:72:b6:f5:28:70:84:15: 3c:0e:08:50:ab:06:18:f9:03:36:9a:f6:2b:a1:76:1b:37:47: b7:fe:84:d6:91:59:53:62:d6:28:f9:ec:1c:53:d2:ad:eb:1a: 80:ca:8e:a4:5f:0e:d8:85:8c:34:0c:dd:e8:2b:2c:68:15:8d: ea:8e:b3:6a:e6:2e:44:8f:85:0c:d3:00:b9:45:c4:76:ce:bc: ca:d0:e2:79:53:d5:83:b2:e3:33:9e:9e:e8:5f:4e:68:a7:00: 2e:4a:a5:89:46:92:28:9d:61:49:52:6c:bd:a9:5d:d0:c2:07: 47:7a:97:ec:da:bb:89:b9:9d:7a:15:9c:bc:e5:f0:d3:4c:3b: aa:d0:b1:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYwNDE2MTkzNDU1WhcNMjYwNDIzMTkzNDU1WjAYMRYwFAYD VQQDEw02OWUxMzlkZi0yNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/uRFDIpe/tbX1Tv3VLJXS6JWK+PEGVQhDw+hamuQh2Xl6En+Xq4/eABZ06W Qqg3J3Mcm6ebYEnLOKeEGAsh1ykQUtE3/VTN428QaQ7skcvMu0l18IuwN1NgIZw/ PGx9SRjj9101SQUV1eWDjgie+24LC0BQ7MmULzL3C2h66affDI6xJdDNPXwLgst2 h2aVWv847uJL4qZHpqfrVd4X9mDhTvNoSM1i8KViT6YemKvhIPHZ0ApEp9r7NqTG 8EPPpsKRoGDjGSdDHj4vKnevS3fwdKEb3UG9r/+My51ZakGBcBOnQNVgafb4l3nE hb3ekKveNrKsDguTe1lE0bdEYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoXzo9i ToZIHHjSUtohBDw28Hz3MB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVI0PQxlcO5b7gbASOlXzjlJUHd203OskXogdY9H2jJsOTGDiceVSHVH8LZZg /+UWUoq5OPYbvsHxZj+aoiLnDNdZrrsLHht7cjIesfsam7cbwwEbsdZgYVZfIMHC uCNSb+yMlfnfme7vNo5H3r4Mybm0AvxYFTtytvUocIQVPA4IUKsGGPkDNpr2K6F2 GzdHt/6E1pFZU2LWKPnsHFPSresagMqOpF8O2IWMNAzd6CssaBWN6o6zauYuRI+F DNMAuUXEds68ytDieVPVg7LjM56e6F9OaKcALkqliUaSKJ1hSVJsvald0MIHR3qX 7Nq7ibmdehWcvOXw00w7qtCxbg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:55:25 2026 by rpki-client