$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: aTASTw348btaZZHzpMNsBHdkA8cWGeGKAgppW6q/x7g= Subject key identifier: 63:27:32:79:25:1C:D7:6C:DA:DF:AD:57:29:D8:98:04:01:94:36:C2 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0A76 Signing time: Mon 04 May 2026 19:40:41 +0000 Manifest this update: Mon 04 May 2026 19:40:40 +0000 Manifest next update: Mon 11 May 2026 19:40:40 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: ZJ0RJylEWfU9ipcrdO0nvleeBzQp1tuIBZZcVHKGxiM=) 2: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: IQJ8CffaTket9ne9+YqLheylHj7WmArcnX754ekd+dU=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: eVBXvv7YWMBaIfGnckCnkuA5YetM67743+mf0xEBTN0=) 4: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: PEH68zFCTxpFSTzGq90DnMAYUrlMtG9wBFuZ6IkSPHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 May 2026 22:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2719 (0xa9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: May 4 19:40:40 2026 GMT Not After : May 11 19:40:40 2026 GMT Subject: CN=69f8f639-4167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0a:b9:70:9e:5f:44:de:db:17:1f:2c:cf:4d: 76:18:5c:9b:f4:1d:d2:98:7a:07:e4:48:dd:80:6d: da:b6:53:d3:b9:5a:31:38:f7:c8:e6:b8:ed:ea:1a: 50:6c:c1:ba:44:5b:f6:6a:9c:8c:de:68:f0:60:83: 14:f3:3a:54:af:2e:72:ec:e2:5f:dc:73:27:10:4e: 3a:85:09:9a:43:4b:08:dc:bc:ed:83:80:f5:ec:b8: bd:09:2d:67:cf:6c:e0:25:44:d3:8f:3f:58:ef:71: a4:14:82:8c:36:e3:17:f7:05:6d:9e:5e:0e:4c:d6: 8e:7b:8f:c6:7c:0c:0c:2d:d9:92:76:ae:8e:4c:3b: 51:d2:fe:96:e2:64:50:b7:47:b2:20:b9:d7:eb:c2: a8:59:17:5c:06:8d:16:a0:11:ea:9a:47:f1:0e:5c: 93:0c:23:1d:e4:ad:28:f2:da:fa:f9:33:37:52:e8: fa:fa:e3:a7:41:0b:a0:8c:67:b0:81:21:e1:59:6f: 55:35:67:c8:f7:48:ef:84:72:64:9f:f4:a7:db:7a: aa:ba:24:81:50:f2:5b:8d:ed:0e:1c:aa:16:fa:20: c1:23:f6:56:88:23:4a:95:d4:a8:ef:3c:e5:a2:60: 6e:41:83:c4:8b:97:e6:07:28:40:7c:76:7a:c3:b6: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:27:32:79:25:1C:D7:6C:DA:DF:AD:57:29:D8:98:04:01:94:36:C2 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f2:2f:23:a1:b3:8f:63:ee:50:5e:db:d2:34:03:eb:6c:1b: 75:1c:f1:aa:5f:25:e3:48:2a:21:6e:dd:03:56:ff:2b:4b:b3: d8:a6:0e:e0:f3:22:d1:00:80:26:a8:7c:24:97:f8:c7:af:6b: 5b:b4:47:4e:10:2c:8e:61:06:5e:6b:f9:04:00:7f:4c:48:a0: 33:94:41:e8:94:80:0c:47:19:02:51:0d:1a:4d:87:e7:92:df: 7c:0f:28:e7:81:6d:79:52:78:34:d8:61:b2:55:ae:db:ff:a9: eb:55:8a:d6:20:c0:7f:0e:4f:da:77:01:ef:32:9b:e4:2e:f8: 9a:8b:f5:70:f5:2b:5c:60:4b:2d:18:3d:1e:9a:a9:7a:0c:e5: 42:e9:f7:ba:12:1e:68:5b:18:4d:33:f0:0e:3b:3d:1c:13:b2: ad:90:d1:19:d3:17:9f:32:58:61:35:83:3d:ba:a1:a3:8a:37: 06:05:30:a7:f3:63:03:81:39:c6:0b:64:44:b8:27:2e:d4:71: 6f:f8:6e:a3:14:8a:a3:25:99:34:07:e9:b8:9e:d6:5e:db:18: 73:18:d4:7b:06:1d:c1:32:7e:d6:be:b0:0b:1b:7d:73:bf:1d: f0:55:1a:c5:3d:d2:d0:c9:a1:4a:0a:22:c9:0a:c1:8f:3a:c5: b3:c1:dd:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYwNTA0MTk0MDQwWhcNMjYwNTExMTk0MDQwWjAYMRYwFAYD VQQDEw02OWY4ZjYzOS00MTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAq5cJ5fRN7bFx8sz012GFyb9B3SmHoH5EjdgG3atlPTuVoxOPfI5rjt6hpQ bMG6RFv2apyM3mjwYIMU8zpUry5y7OJf3HMnEE46hQmaQ0sI3Lztg4D17Li9CS1n z2zgJUTTjz9Y73GkFIKMNuMX9wVtnl4OTNaOe4/GfAwMLdmSdq6OTDtR0v6W4mRQ t0eyILnX68KoWRdcBo0WoBHqmkfxDlyTDCMd5K0o8tr6+TM3Uuj6+uOnQQugjGew gSHhWW9VNWfI90jvhHJkn/Sn23qquiSBUPJbje0OHKoW+iDBI/ZWiCNKldSo7zzl omBuQYPEi5fmByhAfHZ6w7bibwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMnMnkl HNds2t+tVynYmAQBlDbCMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZvIvI6Gzj2PuUF7b0jQD62wbdRzxql8l40gqIW7dA1b/K0uz2KYO4PMi0QCA Jqh8JJf4x69rW7RHThAsjmEGXmv5BAB/TEigM5RB6JSADEcZAlENGk2H55LffA8o 54FteVJ4NNhhslWu2/+p61WK1iDAfw5P2ncB7zKb5C74mov1cPUrXGBLLRg9Hpqp egzlQun3uhIeaFsYTTPwDjs9HBOyrZDRGdMXnzJYYTWDPbqho4o3BgUwp/NjA4E5 xgtkRLgnLtRxb/huoxSKoyWZNAfpuJ7WXtsYcxjUewYdwTJ+1r6wCxt9c78d8FUa xT3S0MmhSgoiyQrBjzrFs8HdDw== -----END CERTIFICATE-----Generated at Wed May 6 03:27:03 2026 by rpki-client