$ rpki-client -vvvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: +jkcHmRAdiRtZiFU1Ps7h5bg+VOake8sKE6gzh9A1lo= Subject key identifier: 96:9F:00:76:2D:5D:50:3C:D5:62:68:4B:D9:28:B2:AE:D7:23:6D:12 Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0AF8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0ACC Signing time: Fri 16 Oct 2026 19:40:12 +0000 Manifest this update: Fri 16 Oct 2026 19:40:12 +0000 Manifest next update: Fri 23 Oct 2026 19:40:12 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: W7+8rnNjlTGrH/O2l6mgIzupgqvYSJFsipgvVRZ2HVQ=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: bk/7/6niDOy4Wgez/WOfJOA9hAaC3ZIe5csnBCnmc2c=) 3: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: GltJ8ldfOd4MALKW5R9sn4CvSE9nA9cuV/EopB0f2fc=) 4: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: G/h6ay+lVDrxmj5QAHf9M00uXSgMYuBFxLTXw3Ioa1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 Oct 2026 19:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2808 (0xaf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Oct 16 19:40:12 2026 GMT Not After : Oct 23 19:40:12 2026 GMT Subject: CN=6ad27d9c-85ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:03:5b:fa:6d:09:c5:18:e8:27:89:ab:87: fd:0c:70:1d:2f:e4:fd:d7:31:9a:2a:d6:74:6e:e2: 53:99:73:92:6f:ce:e6:c8:4e:9c:fd:be:1f:df:32: 1d:ef:6f:62:f8:ad:3a:01:21:b0:d9:21:aa:c6:da: a9:11:03:1f:7b:31:75:6f:f4:ea:0b:c1:1f:85:69: 24:c2:20:4b:a1:1f:1b:52:b3:ff:ee:ad:fe:a0:2f: 13:e8:18:d7:4d:10:6c:a2:3b:52:7a:9e:55:1e:8c: 74:17:ea:05:5f:a3:2f:16:a6:df:57:c8:61:da:96: fc:e5:ff:72:5b:2f:a5:c6:d2:89:33:78:6d:c6:33: 6a:d0:44:d4:b0:59:63:aa:b4:75:e4:03:43:dd:53: 47:c1:07:81:cd:b1:64:8b:f9:da:82:83:44:07:a4: 65:9c:d4:0a:ae:d9:77:4d:2b:3b:e3:03:f8:ab:eb: b4:6e:2f:f1:ae:0a:44:35:b3:e2:a6:ac:97:86:e9: d4:f6:c7:84:ef:7c:4b:d6:b1:42:bd:ae:90:af:35: 61:68:d8:da:e0:ff:ec:bb:0d:ce:8f:f5:62:d5:df: 12:86:bc:15:84:85:b5:ad:dd:b7:79:cf:84:55:00: f8:b3:9c:d0:a4:07:d2:58:43:4c:dc:40:3a:39:2b: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9F:00:76:2D:5D:50:3C:D5:62:68:4B:D9:28:B2:AE:D7:23:6D:12 X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:69:b6:fc:69:fc:01:8e:24:b5:83:1b:bd:d9:7a:79:dc:75: 85:f1:70:00:27:e6:5a:07:78:65:f1:78:2a:ed:61:d4:ee:db: b9:b7:25:cc:8a:58:84:39:ed:53:06:73:b7:e1:dc:a4:89:39: 6b:e8:3d:28:bc:0f:2a:83:52:6c:ca:70:7d:78:88:94:88:e2: 21:14:11:42:b0:db:bd:68:bc:c6:68:02:9a:68:8e:f4:fd:63: ff:ba:e5:d1:2b:bd:bd:b3:c8:96:3c:eb:20:93:8f:85:fd:92: 9b:b7:6a:27:68:a8:9c:9c:09:e8:3a:37:85:e4:34:dd:96:41: 34:1e:0a:de:4b:fb:5f:02:e4:d9:ff:44:b4:a6:44:71:8b:ce: 79:41:6e:8d:1e:df:a6:07:ee:9c:40:5d:2c:04:ff:6f:f1:9c: e8:fb:76:f1:7b:25:d2:96:88:4f:b3:a5:f0:85:cf:a7:98:a0: 06:64:06:bb:03:22:6c:40:99:cb:88:2f:d8:58:68:4e:b6:40: 66:ad:0e:20:6c:09:36:3f:e5:e5:46:74:be:b2:e0:df:06:07: e2:5f:c0:72:5a:0b:a6:4a:1a:85:0c:2d:cb:d1:f8:57:7b:23: 2f:67:2d:75:cc:c2:7e:53:f7:d3:e7:0a:f4:5c:4f:77:90:1d: d0:8a:14:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYxMDE2MTk0MDEyWhcNMjYxMDIzMTk0MDEyWjAYMRYwFAYD VQQDEw02YWQyN2Q5Yy04NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp1IDW/ptCcUY6CeJq4f9DHAdL+T91zGaKtZ0buJTmXOSb87myE6c/b4f3zId 729i+K06ASGw2SGqxtqpEQMfezF1b/TqC8EfhWkkwiBLoR8bUrP/7q3+oC8T6BjX TRBsojtSep5VHox0F+oFX6MvFqbfV8hh2pb85f9yWy+lxtKJM3htxjNq0ETUsFlj qrR15AND3VNHwQeBzbFki/nagoNEB6RlnNQKrtl3TSs74wP4q+u0bi/xrgpENbPi pqyXhunU9seE73xL1rFCva6QrzVhaNja4P/suw3Oj/Vi1d8ShrwVhIW1rd23ec+E VQD4s5zQpAfSWENM3EA6OSsSowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJafAHYt XVA81WJoS9kosq7XI20SMB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgWm2/Gn8AY4ktYMbvdl6edx1hfFwACfmWgd4ZfF4Ku1h1O7bubclzIpYhDnt UwZzt+HcpIk5a+g9KLwPKoNSbMpwfXiIlIjiIRQRQrDbvWi8xmgCmmiO9P1j/7rl 0Su9vbPIljzrIJOPhf2Sm7dqJ2ionJwJ6Do3heQ03ZZBNB4K3kv7XwLk2f9EtKZE cYvOeUFujR7fpgfunEBdLAT/b/Gc6Pt28Xsl0paIT7Ol8IXPp5igBmQGuwMibECZ y4gv2FhoTrZAZq0OIGwJNj/l5UZ0vrLg3wYH4l/AcloLpkoahQwty9H4V3sjL2ct dczCflP30+cK9FxPd5Ad0IoU2g== -----END CERTIFICATE-----Generated at Sun Oct 18 12:06:34 2026 by rpki-client