$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: hi+K7y1R1o1y3ioBUE1bCjhmi0WVMLGCElVSSr1aeQo= Subject key identifier: 6C:34:F5:21:A5:B2:22:A9:48:4F:03:36:DB:69:EF:B5:C9:5E:14:D7 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 1B Signing time: Mon 03 Nov 2025 07:49:04 +0000 Manifest this update: Mon 03 Nov 2025 07:49:04 +0000 Manifest next update: Mon 10 Nov 2025 07:49:04 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: +Rw32w5HX/tBO4sDbxHRJH0LRf70Mabl+59yep+C688=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Nov 3 07:49:04 2025 GMT Not After : Nov 10 07:49:04 2025 GMT Subject: CN=69085e70-59c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:2e:0e:54:37:d3:46:61:6b:b6:0d:49:93: c9:30:fc:1a:5b:96:56:e2:9c:db:ca:ef:24:f7:af: 60:a0:ec:98:85:3d:b1:90:a7:d6:21:ae:ac:14:77: d9:cb:9c:66:59:19:75:78:0e:a4:ee:8d:e1:f5:49: ac:c7:95:ac:cf:b1:52:c0:ef:19:f9:93:ce:55:1e: 5a:b2:19:95:ee:85:5c:74:85:39:44:f7:af:1b:fe: a4:23:f2:ff:d1:af:cc:03:6d:d6:4d:41:45:06:8b: 92:93:8c:3a:6e:df:c5:08:93:7d:14:49:6c:a9:03: 3a:dd:26:bd:68:41:3f:7e:fe:75:4c:c0:e2:fe:a5: bf:89:00:6b:ec:fd:73:bd:19:5d:96:1b:90:a3:d7: 3b:b5:00:e1:ad:c7:c5:bb:72:05:a2:37:5b:f8:17: 6a:6d:fd:c4:5d:64:e9:1b:7c:15:ef:13:03:00:43: 28:a2:95:db:5b:de:5f:56:df:85:7b:2b:28:6e:d5: 48:04:c3:0e:08:71:7d:c9:1e:24:2e:9b:6e:7d:aa: 2f:2d:24:31:3a:0f:ce:93:08:72:d7:e9:3c:67:f1: fe:1f:d7:af:f6:4c:89:db:0b:d5:30:42:c4:2c:49: f8:81:90:ba:f1:a2:c9:7f:7e:c2:0a:af:ba:64:cf: fa:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:34:F5:21:A5:B2:22:A9:48:4F:03:36:DB:69:EF:B5:C9:5E:14:D7 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d6:26:9a:d3:0b:71:b3:ba:48:07:48:07:39:25:dc:b1:56: 2c:76:bd:93:2e:1f:c4:e9:1f:8e:87:7c:62:03:3c:22:8a:c5: 43:89:32:88:65:49:df:07:ad:7a:96:a3:6f:bb:38:66:b3:aa: cc:1b:95:72:2c:6e:a2:23:0d:4a:7b:9a:61:0e:7a:ab:bf:15: 11:f0:2d:bf:90:f6:56:d9:16:ce:5a:47:36:ad:f9:7a:31:99: fe:d8:23:5e:aa:19:48:02:04:1d:97:55:a8:58:9f:d4:56:b0: c0:fb:f8:d0:05:fb:23:19:e9:8e:83:4a:48:ab:76:01:d1:60: 76:97:67:9e:59:f9:3f:ba:17:ee:67:5b:bd:a8:7b:bd:0f:7c: db:15:da:7f:28:e7:40:5f:66:fd:53:f6:c1:ec:9e:9d:e2:a2: 84:6d:b4:48:bd:10:fa:93:dc:cd:a0:9f:92:ec:e9:f6:7f:42: 8a:2f:ee:b3:aa:42:12:f3:31:37:1f:5f:0f:b9:1b:30:27:6b: 6a:62:f1:d2:fa:e3:6d:2c:de:6f:dc:3d:1b:b8:a6:06:8b:20: 6c:ca:ab:a1:15:c0:9e:fa:d7:f7:d7:7c:c3:87:5e:bd:8d:b1: 94:9e:c3:3f:39:3c:89:d7:d0:7c:e3:f5:f4:f7:2e:5a:0a:a9: dd:35:c2:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNTExMDMwNzQ5MDRaFw0yNTExMTAwNzQ5MDRaMBgxFjAUBgNV BAMTDTY5MDg1ZTcwLTU5YzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqGi4OVDfTRmFrtg1Jk8kw/BpbllbinNvK7yT3r2Cg7JiFPbGQp9YhrqwUd9nL nGZZGXV4DqTujeH1SazHlazPsVLA7xn5k85VHlqyGZXuhVx0hTlE968b/qQj8v/R r8wDbdZNQUUGi5KTjDpu38UIk30USWypAzrdJr1oQT9+/nVMwOL+pb+JAGvs/XO9 GV2WG5Cj1zu1AOGtx8W7cgWiN1v4F2pt/cRdZOkbfBXvEwMAQyiildtb3l9W34V7 Kyhu1UgEww4IcX3JHiQum259qi8tJDE6D86TCHLX6Txn8f4f16/2TInbC9UwQsQs SfiBkLrxosl/fsIKr7pkz/q7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbDT1IaWy IqlITwM222nvtcleFNcwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGfWJprTC3GzukgHSAc5JdyxVix2vZMuH8TpH46HfGIDPCKKxUOJMohl Sd8HrXqWo2+7OGazqswblXIsbqIjDUp7mmEOequ/FRHwLb+Q9lbZFs5aRzat+Xox mf7YI16qGUgCBB2XVahYn9RWsMD7+NAF+yMZ6Y6DSkirdgHRYHaXZ55Z+T+6F+5n W72oe70PfNsV2n8o50BfZv1T9sHsnp3iooRttEi9EPqT3M2gn5Ls6fZ/Qoov7rOq QhLzMTcfXw+5GzAna2pi8dL6420s3m/cPRu4pgaLIGzKq6EVwJ761/fXfMOHXr2N sZSewz85PInX0Hzj9fT3LloKqd01whc= -----END CERTIFICATE-----Generated at Tue Nov 4 01:12:15 2025 by rpki-client