$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: WlaOPIHoM1Q1+DaaPeajXtV/+aAh8BXJF2/KALQOz7A= Subject key identifier: 7F:B2:9C:ED:23:D6:D4:11:3C:A4:AF:47:D5:06:A8:3C:B1:F5:DA:99 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0A17 Signing time: Tue 04 Nov 2025 19:57:04 +0000 Manifest this update: Tue 04 Nov 2025 19:57:03 +0000 Manifest next update: Tue 11 Nov 2025 19:57:03 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: QgTw6CjBRijwX/VdLLZfEnp7oF0d6OMkJnSDUyRy0gI=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: 4oLW18xAlE3B8nPyqU3w32UG4L4+C+i7k1rNnlKSQ7s=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: PcZXGp5zvO/A3lEsDn884MTZ2FtXJ7tXRCkkHLH+i5g=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: 7NNAaJL+KytCopmMwh7xFBD72cI0M9FvnIHrWbUqbbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2620 (0xa3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Nov 4 19:57:03 2025 GMT Not After : Nov 11 19:57:03 2025 GMT Subject: CN=690a5a90-ab91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:5b:15:da:99:a2:f2:dd:e7:fc:6b:36:90: 06:e1:d2:6c:b2:a2:e3:f6:6d:16:10:91:3e:e5:b3: 2b:80:d8:02:ff:49:37:2c:5f:09:db:c9:68:44:c4: 58:6e:b7:7c:40:cf:64:90:e3:bc:af:02:6f:27:89: df:ec:2e:64:b1:d6:2d:25:d2:0c:9e:e8:75:53:b3: d7:6a:79:1a:fd:d9:8f:9d:9b:d0:2e:3d:e3:75:3f: 6e:74:e8:16:e9:b8:d7:47:b9:a4:bf:91:5b:26:1e: 96:b5:4a:88:27:ea:a8:ca:8c:5a:4f:71:29:93:79: 4e:75:89:be:65:3d:17:25:62:26:08:bb:48:9a:36: 93:61:4e:61:03:4d:5b:5c:9f:9c:4e:31:ad:28:2c: 45:75:3c:38:e5:e7:24:ef:0c:ac:37:14:34:4d:ed: 22:9a:ac:6a:32:f4:52:e9:13:ba:8f:4c:19:db:95: df:cf:0f:fe:a8:b9:39:68:99:be:77:17:c0:43:b1: 2f:62:b4:22:ef:a9:86:e9:f1:2b:b2:02:a3:4d:45: b9:fa:2a:94:c8:55:2e:0d:c9:b7:de:5d:36:26:6c: 87:45:db:4a:cc:52:c9:16:a2:7e:64:44:1b:c5:92: 1c:1d:e9:28:2b:2a:eb:8a:10:ef:2c:5e:65:61:ee: 16:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:9C:ED:23:D6:D4:11:3C:A4:AF:47:D5:06:A8:3C:B1:F5:DA:99 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3a:a4:02:fe:56:1c:c5:08:b0:0c:c9:09:c9:1c:43:7e:cd: 4a:4f:1c:c7:0c:f9:b3:bf:f3:e1:1c:82:63:e2:5e:8a:e5:87: 7a:d6:63:f7:b7:ca:b5:03:53:d1:3a:06:cb:90:d4:52:79:58: 7e:0c:f7:c5:f0:1b:f7:c3:be:2d:42:1a:41:07:9d:a3:1a:b7: 39:f3:6e:07:df:d5:28:a2:93:50:85:3b:66:43:3c:da:b5:f1: 3a:82:f2:c3:50:ff:d4:48:0e:02:19:b0:f2:60:84:2e:30:ab: 05:30:65:06:d7:a3:34:f0:5c:09:8a:da:25:60:b1:72:1b:11: 81:c3:b4:a6:82:09:1b:cc:94:b9:04:6c:a2:a0:c2:1e:26:ee: 85:01:c9:68:3d:07:99:fb:c5:86:a1:c4:9c:a1:13:84:9f:0d: c7:9d:bb:1c:d9:3d:4d:36:8e:36:3e:4d:6d:36:cb:a1:8f:5c: e1:71:f6:83:d0:d2:8b:e8:75:74:53:b4:80:17:c7:05:0e:1c: 1e:8b:b1:cf:eb:4e:64:f4:2c:6f:8c:f6:93:b0:13:ea:31:0b: 11:e5:7b:49:af:c2:f5:d2:9e:8d:56:8c:75:9f:3e:24:78:cc: 98:ab:0c:88:7d:df:d1:f8:e2:c9:7f:3c:7d:33:c8:ce:fa:57: 43:2c:99:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjUxMTA0MTk1NzAzWhcNMjUxMTExMTk1NzAzWjAYMRYwFAYD VQQDEw02OTBhNWE5MC1hYjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4fhbFdqZovLd5/xrNpAG4dJssqLj9m0WEJE+5bMrgNgC/0k3LF8J28loRMRY brd8QM9kkOO8rwJvJ4nf7C5ksdYtJdIMnuh1U7PXanka/dmPnZvQLj3jdT9udOgW 6bjXR7mkv5FbJh6WtUqIJ+qoyoxaT3Epk3lOdYm+ZT0XJWImCLtImjaTYU5hA01b XJ+cTjGtKCxFdTw45eck7wysNxQ0Te0imqxqMvRS6RO6j0wZ25Xfzw/+qLk5aJm+ dxfAQ7EvYrQi76mG6fErsgKjTUW5+iqUyFUuDcm33l02JmyHRdtKzFLJFqJ+ZEQb xZIcHekoKyrrihDvLF5lYe4WfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+ynO0j 1tQRPKSvR9UGqDyx9dqZMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwOqQC/lYcxQiwDMkJyRxDfs1KTxzHDPmzv/PhHIJj4l6K5Yd61mP3 t8q1A1PROgbLkNRSeVh+DPfF8Bv3w74tQhpBB52jGrc5824H39UoopNQhTtmQzza tfE6gvLDUP/USA4CGbDyYIQuMKsFMGUG16M08FwJitolYLFyGxGBw7SmggkbzJS5 BGyioMIeJu6FAcloPQeZ+8WGocScoROEnw3Hnbsc2T1NNo42Pk1tNsuhj1zhcfaD 0NKL6HV0U7SAF8cFDhwei7HP605k9CxvjPaTsBPqMQsR5XtJr8L10p6NVox1nz4k eMyYqwyIfd/R+OLJfzx9M8jO+ldDLJnu -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:36 2025 by rpki-client