$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: H0y+9WkOm/Xt+aAGQ2KQL8CAs9htRIyCwX11RHIWmaY= Subject key identifier: 7F:6E:64:C4:ED:21:AB:CF:B0:7A:25:93:FA:42:E0:5D:C8:2D:82:03 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 05 Signing time: Wed 17 Sep 2025 08:55:48 +0000 Manifest this update: Wed 17 Sep 2025 08:55:47 +0000 Manifest next update: Wed 24 Sep 2025 08:55:47 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: 70aSjfsT3cccWz1szwCrDFXDwwGLB7igdn8LBvF7itA=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: o8m432Z1DaEAELBYfiFTDCeo+0yznHgf97uZzcWpBFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Sep 17 08:55:47 2025 GMT Not After : Sep 24 08:55:47 2025 GMT Subject: CN=68ca7793-6d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:c4:0b:35:dc:ca:90:fe:28:8c:41:90:c4: 42:ae:c3:87:eb:0b:71:cc:c2:24:22:d2:35:43:cc: ad:c7:52:59:fe:7c:98:a6:7f:24:17:43:bb:c2:49: ce:f5:fa:6a:fc:be:23:9e:f6:03:2d:1e:c4:f5:13: 0b:95:37:e4:93:4b:d0:28:20:aa:ce:61:a6:bb:e0: 60:95:e6:ce:32:c6:53:a6:c1:ee:05:11:a1:a0:70: 01:e9:6b:7f:28:88:17:23:d6:30:f4:d2:d0:48:94: b5:07:ac:c9:c0:af:86:eb:f7:9d:4b:64:16:6d:ff: c9:1b:ea:99:32:28:43:36:78:b1:ef:6b:11:f2:1f: 40:9e:ae:67:6e:0e:c5:c9:ec:69:86:ef:27:16:bd: f7:ad:cc:f5:fb:98:06:60:f6:d9:0c:2d:c5:41:46: 8f:e7:bd:e6:20:03:99:b8:5c:99:82:8d:1e:06:3e: 2c:30:cf:86:48:90:fe:c6:d9:ec:d4:b4:84:b1:63: 29:d0:35:7d:39:07:ba:39:72:30:64:eb:1e:ce:69: 28:03:43:88:2b:52:1f:bb:8e:12:74:eb:ad:b2:34: 49:e0:c9:03:34:51:ae:cb:b1:a6:6b:5c:78:f3:3b: c6:3a:bb:34:cd:fb:b9:89:15:ea:3c:4f:40:81:87: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:6E:64:C4:ED:21:AB:CF:B0:7A:25:93:FA:42:E0:5D:C8:2D:82:03 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:14:df:21:95:1a:e8:a7:7b:e9:8a:b2:45:37:83:2b:f1:b4: f8:7c:c7:db:77:a7:16:f9:4f:ed:09:3a:9d:8d:31:44:33:96: e0:48:c0:42:68:d7:d2:6b:74:42:cc:21:73:e9:b8:91:2d:a8: 1a:83:4a:c7:ca:0d:08:02:c7:17:b3:29:b6:00:d4:f5:91:4a: 7b:4a:54:61:03:cf:6c:20:f3:60:e1:7d:74:5b:d0:c4:48:ce: 56:a0:13:c5:1c:0e:26:29:cb:68:dd:36:54:76:d9:e7:fc:d6: 1c:5f:aa:bd:7c:e6:75:3b:75:3d:59:8f:28:d2:a4:0c:f4:2d: 40:be:ee:2f:e1:46:70:7b:31:65:06:00:71:46:d1:71:50:8f: 26:74:9d:07:76:00:55:b5:4e:7c:ee:97:4d:1a:e3:1b:ab:f2: 13:40:3b:bb:6b:13:17:6e:d8:7a:06:13:12:ec:8c:8d:fc:4b: dc:bd:c0:4a:9f:31:03:02:bd:8e:b5:5c:af:08:d6:eb:06:0d: a1:78:c1:cb:e7:21:b7:21:53:6c:17:e0:2a:41:05:77:33:d6: 93:ac:90:e9:0e:19:2a:9a:f9:e8:0f:db:6a:67:50:61:e3:28: 67:98:bc:66:1a:7c:21:e7:4d:c8:24:f9:66:05:70:e1:a2:1b: 98:33:51:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNTA5MTcwODU1NDdaFw0yNTA5MjQwODU1NDdaMBgxFjAUBgNV BAMTDTY4Y2E3NzkzLTZkMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpOcQLNdzKkP4ojEGQxEKuw4frC3HMwiQi0jVDzK3HUln+fJimfyQXQ7vCSc71 +mr8viOe9gMtHsT1EwuVN+STS9AoIKrOYaa74GCV5s4yxlOmwe4FEaGgcAHpa38o iBcj1jD00tBIlLUHrMnAr4br951LZBZt/8kb6pkyKEM2eLHvaxHyH0CermduDsXJ 7GmG7ycWvfetzPX7mAZg9tkMLcVBRo/nveYgA5m4XJmCjR4GPiwwz4ZIkP7G2ezU tISxYynQNX05B7o5cjBk6x7OaSgDQ4grUh+7jhJ0662yNEngyQM0Ua7LsaZrXHjz O8Y6uzTN+7mJFeo8T0CBh9YDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf25kxO0h q8+weiWT+kLgXcgtggMwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIUU3yGVGuine+mKskU3gyvxtPh8x9t3pxb5T+0JOp2NMUQzluBIwEJo 19JrdELMIXPpuJEtqBqDSsfKDQgCxxezKbYA1PWRSntKVGEDz2wg82DhfXRb0MRI zlagE8UcDiYpy2jdNlR22ef81hxfqr185nU7dT1ZjyjSpAz0LUC+7i/hRnB7MWUG AHFG0XFQjyZ0nQd2AFW1Tnzul00a4xur8hNAO7trExdu2HoGExLsjI38S9y9wEqf MQMCvY61XK8I1usGDaF4wcvnIbchU2wX4CpBBXcz1pOskOkOGSqa+egP22pnUGHj KGeYvGYafCHnTcgk+WYFcOGiG5gzUbY= -----END CERTIFICATE-----Generated at Fri Sep 19 01:01:33 2025 by rpki-client