$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft File: c35h2qB72DNCtgxeutSxuxm-QAM.mft (raw, json) Hash identifier: M6yNjphxDXgEIDkhJRg1r0nP+vur/Z8txf1JMPDeGqw= Subject key identifier: BC:6C:60:D4:77:08:F0:15:E1:30:87:7B:BB:B5:FE:91:64:A7:6E:7E Authority key identifier: 73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 Certificate issuer: /CN=A911647C/serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Certificate serial: 0A87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft Manifest number: 0A5E Signing time: Wed 18 Mar 2026 19:24:46 +0000 Manifest this update: Wed 18 Mar 2026 19:24:45 +0000 Manifest next update: Wed 25 Mar 2026 19:24:45 +0000 Files and hashes: 1: c35h2qB72DNCtgxeutSxuxm-QAM.crl (hash: LMMgHw2ydLzhGFc/51zvi9rY5KhKYxU2yox/D6TWF9Q=) 2: 5258D3D4BCE011EFAB38225AC4F9AE02.roa (hash: PEH68zFCTxpFSTzGq90DnMAYUrlMtG9wBFuZ6IkSPHQ=) 3: 981F188018CE11EFBCD58454C4F9AE02.roa (hash: IQJ8CffaTket9ne9+YqLheylHj7WmArcnX754ekd+dU=) 4: 95B5855C18CE11EFBCD58454C4F9AE02.roa (hash: eVBXvv7YWMBaIfGnckCnkuA5YetM67743+mf0xEBTN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 19:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2695 (0xa87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=737E61DAA07BD83342B60C5EBAD4B1BB19BE4003 Validity Not Before: Mar 18 19:24:45 2026 GMT Not After : Mar 25 19:24:45 2026 GMT Subject: CN=69bafbfe-a971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:d3:ec:d8:09:53:33:31:e5:30:62:2c:53: 9f:d2:a6:3e:d4:d9:82:23:eb:17:7a:7a:0d:cd:f6: 6f:4d:8c:fe:b0:e9:c8:6a:26:6b:fa:73:84:57:9b: 3c:17:53:bb:23:fa:67:e5:d8:ad:dd:2d:ac:2b:50: a5:d6:a0:44:70:d3:e8:42:66:59:a6:25:96:6e:f5: 42:38:3d:7d:b2:a2:41:46:98:07:34:07:b6:e1:cb: c0:e0:af:67:5a:51:bb:03:77:24:eb:b0:86:61:2d: 04:35:75:58:ef:e0:c6:f0:52:bd:ac:11:76:26:6e: e2:84:d2:6b:15:1e:1a:da:72:22:c6:31:46:6c:68: d5:34:80:b5:09:39:ab:29:6a:89:20:c9:2f:8c:9a: 8a:dc:08:b9:9b:d0:4e:ec:be:13:8b:44:9b:9e:b0: e9:3e:4a:b2:e8:48:aa:da:65:d5:4c:b4:8d:16:7b: 65:46:0b:45:1b:6a:c2:88:5f:14:ff:21:c7:d5:74: e6:89:90:9c:a0:b7:c3:ec:c6:65:a2:07:3a:d1:f7: bc:ac:46:d7:e1:f4:2f:d6:9c:1a:bd:90:21:aa:6f: 62:aa:93:a0:cb:21:51:7f:9c:53:3a:80:d5:19:e2: cf:97:6e:61:c2:68:c5:7a:85:5c:71:aa:c3:7a:de: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:60:D4:77:08:F0:15:E1:30:87:7B:BB:B5:FE:91:64:A7:6E:7E X509v3 Authority Key Identifier: keyid:73:7E:61:DA:A0:7B:D8:33:42:B6:0C:5E:BA:D4:B1:BB:19:BE:40:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c35h2qB72DNCtgxeutSxuxm-QAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/3B1CDFBC851311EAAA0B0A7FC4F9AE02/c35h2qB72DNCtgxeutSxuxm-QAM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:b9:4a:51:3e:9b:43:ed:83:b2:c5:05:8e:62:05:05:e2: 0f:55:c5:d6:6f:4d:5a:23:66:71:2a:9a:ba:6b:40:2f:f1:cb: 40:1f:80:59:bb:f6:25:88:95:70:5f:48:fb:d0:0e:a2:59:0a: f7:09:db:94:5a:d3:5a:6c:dd:1d:d4:00:66:24:21:33:6b:93: 54:b1:b7:02:73:88:2e:6c:98:65:34:c6:8a:84:41:07:a8:57: d7:65:b8:74:6d:0e:99:25:a9:df:a3:cb:da:1e:21:5c:85:2d: 40:00:12:e9:53:64:17:6c:ef:36:e9:2f:f2:d0:00:fd:6a:59: 83:a6:6a:e0:57:29:e9:00:f2:0b:33:7b:26:ad:32:2c:87:15: 43:ce:63:8f:e5:7f:9f:9d:b7:c0:96:d0:a2:db:74:61:fc:da: 0a:bd:03:f4:9b:a2:d9:a7:cf:b7:85:6c:65:c8:b4:ca:ec:79: 5d:26:e2:af:79:21:27:ec:93:b8:f4:9e:34:61:f2:3f:de:e5: 17:c1:47:a0:4b:2f:3e:82:5e:fa:22:8f:45:c2:d1:56:05:f9: af:33:cd:e2:ba:a2:9d:08:5a:eb:8f:17:a5:b3:8c:58:8b:be: 30:90:c8:5c:8a:e7:c9:a6:48:89:8b:69:03:bc:b1:01:0a:2d: a9:2a:6a:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDczN0U2MURBQTA3QkQ4MzM0MkI2MEM1RUJBRDRCMUJC MTlCRTQwMDMwHhcNMjYwMzE4MTkyNDQ1WhcNMjYwMzI1MTkyNDQ1WjAYMRYwFAYD VQQDEw02OWJhZmJmZS1hOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLXT7NgJUzMx5TBiLFOf0qY+1NmCI+sXenoNzfZvTYz+sOnIaiZr+nOEV5s8 F1O7I/pn5dit3S2sK1Cl1qBEcNPoQmZZpiWWbvVCOD19sqJBRpgHNAe24cvA4K9n WlG7A3ck67CGYS0ENXVY7+DG8FK9rBF2Jm7ihNJrFR4a2nIixjFGbGjVNIC1CTmr KWqJIMkvjJqK3Ai5m9BO7L4Ti0SbnrDpPkqy6Eiq2mXVTLSNFntlRgtFG2rCiF8U /yHH1XTmiZCcoLfD7MZlogc60fe8rEbX4fQv1pwavZAhqm9iqpOgyyFRf5xTOoDV GeLPl25hwmjFeoVccarDet5JwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxsYNR3 CPAV4TCHe7u1/pFkp25+MB8GA1UdIwQYMBaAFHN+Ydqge9gzQrYMXrrUsbsZvkAD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy8zQjFDREZCQzg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJETkN0Z3hldXRTeHV4bS1R QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MzNWgycUI3MkROQ3RneGV1dFN4dXhtLVFBTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy8zQjFDREZCQzg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9jMzVoMnFCNzJE TkN0Z3hldXRTeHV4bS1RQU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACGu5SlE+m0Ptg7LFBY5iBQXiD1XF1m9NWiNmcSqaumtAL/HLQB+AWbv2JYiV cF9I+9AOolkK9wnblFrTWmzdHdQAZiQhM2uTVLG3AnOILmyYZTTGioRBB6hX12W4 dG0OmSWp36PL2h4hXIUtQAAS6VNkF2zvNukv8tAA/WpZg6Zq4Fcp6QDyCzN7Jq0y LIcVQ85jj+V/n523wJbQott0YfzaCr0D9Jui2afPt4VsZci0yux5XSbir3khJ+yT uPSeNGHyP97lF8FHoEsvPoJe+iKPRcLRVgX5rzPN4rqinQha648XpbOMWIu+MJDI XIrnyaZIiYtpA7yxAQotqSpqBQ== -----END CERTIFICATE-----Generated at Fri Mar 20 07:11:45 2026 by rpki-client