$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: b4LtK8Y6Jk7+Bw/vFvuhlfoKQnSIGAgnHRzthYIPm0g= Subject key identifier: B0:F2:FF:EA:0D:7C:D2:B2:67:99:E5:2C:0C:98:A6:9C:18:A5:88:04 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: C7 Signing time: Sat 03 Oct 2026 07:30:02 +0000 Manifest this update: Sat 03 Oct 2026 07:30:01 +0000 Manifest next update: Sat 10 Oct 2026 07:30:01 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: mogehyPdmMbvFHgQ0ePtND36YIGDBtYuNXRJ76bxfsk=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: fkyVK3E2J0f/yExfHCeubc3yjTlzp83fa7AWD5BMRNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 07:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Oct 3 07:30:01 2026 GMT Not After : Oct 10 07:30:01 2026 GMT Subject: CN=6ac0aefa-b29a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:b5:a0:d3:2d:4b:5a:a5:b1:31:d8:a3:b6: 29:43:d5:87:d8:f1:73:e8:f9:71:c5:5d:13:74:36: 4e:e9:f8:c0:b1:23:2b:5d:9a:48:bb:4e:c2:23:00: bf:5a:45:46:0d:bf:c6:2f:ab:17:c8:6b:ce:72:43: b1:13:2b:84:08:3e:9f:06:13:92:29:a0:29:49:bd: f6:67:5b:98:3c:bb:f9:37:08:b1:08:2b:9d:b2:8f: f7:8f:ac:66:67:b0:de:05:dd:6c:1b:9d:5e:a6:1d: ef:97:b5:e7:33:63:c8:5e:62:d7:2e:2b:59:7e:62: b8:f9:d0:02:42:55:14:90:f6:17:10:17:3b:f4:67: 10:cd:da:d3:5f:a1:5f:52:f0:bc:ae:1e:6b:be:bc: c6:79:df:ac:35:4a:fe:2f:a6:bb:c6:a2:a8:90:a3: 73:38:0e:fe:7b:b3:83:9a:e6:f0:5d:7c:c0:64:5a: 1f:cd:21:48:4b:2a:b0:49:51:24:54:85:9a:19:2e: ff:75:0b:85:ce:7d:6f:13:31:5b:f9:b6:fd:68:4f: cb:ea:8b:25:40:1b:e8:c6:97:46:32:78:74:95:ce: c0:4b:2a:15:a8:8c:52:86:fd:f5:fa:be:19:8e:cd: fc:bc:54:70:a9:c7:e1:c8:0a:4f:7c:47:cc:d9:7e: d6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F2:FF:EA:0D:7C:D2:B2:67:99:E5:2C:0C:98:A6:9C:18:A5:88:04 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:7b:9f:b3:34:49:8c:d9:0a:b2:1e:96:96:29:60:81:1a:5a: e0:07:86:a4:81:f7:a5:63:21:e7:ad:6f:df:eb:5b:60:27:b3: e9:4f:cb:41:3a:b5:52:c2:9b:e1:a4:0c:52:b8:56:83:57:da: 0b:93:5a:2e:40:ed:60:1d:7d:7b:4b:85:3a:49:9f:0d:9f:c2: 85:56:fb:9c:04:49:a9:55:7b:05:66:b8:56:a8:c9:32:00:4d: 06:ec:c1:d4:30:ba:0c:55:56:46:2c:f9:34:6f:3d:72:7d:1a: a4:ca:e2:60:44:f3:96:02:77:47:fe:15:41:a7:8b:ae:ce:fd: 19:e0:96:06:92:0b:e0:96:94:d3:15:42:38:b8:41:dc:b9:5d: b1:b1:36:12:f7:d8:bd:a9:0c:27:24:ca:bf:df:55:be:6a:1c: c7:44:02:a1:d6:df:37:d0:a0:fb:7c:64:53:64:a9:98:76:52: a2:9a:15:19:83:23:ad:d9:60:28:16:df:fc:3a:3a:15:65:41: ec:ed:a4:56:d9:f1:1a:2e:3f:f1:1e:13:fd:81:4f:2a:63:bc: 0a:09:38:80:00:20:42:6c:dc:5b:b2:4e:93:68:73:8c:90:48: 4e:dc:4a:20:10:7c:05:f9:6c:33:d1:d7:c3:2d:44:d7:c0:08: 8d:f6:c1:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFENTExMTAvBgNVBAUTKERGOTFCNzcwQkMzMUI1MkZDODk0QkREODRBNjc1ODI3 NUFBRTUzMUQwHhcNMjYxMDAzMDczMDAxWhcNMjYxMDEwMDczMDAxWjAYMRYwFAYD VQQDEw02YWMwYWVmYS1iMjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulO1oNMtS1qlsTHYo7YpQ9WH2PFz6PlxxV0TdDZO6fjAsSMrXZpIu07CIwC/ WkVGDb/GL6sXyGvOckOxEyuECD6fBhOSKaApSb32Z1uYPLv5NwixCCudso/3j6xm Z7DeBd1sG51eph3vl7XnM2PIXmLXLitZfmK4+dACQlUUkPYXEBc79GcQzdrTX6Ff UvC8rh5rvrzGed+sNUr+L6a7xqKokKNzOA7+e7ODmubwXXzAZFofzSFISyqwSVEk VIWaGS7/dQuFzn1vEzFb+bb9aE/L6oslQBvoxpdGMnh0lc7ASyoVqIxShv31+r4Z js38vFRwqcfhyApPfEfM2X7WXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLDy/+oN fNKyZ5nlLAyYppwYpYgEMB8GA1UdIwQYMBaAFN+Rt3C8MbUvyJS92EpnWCdarlMd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ1MS9BNjgyRTFDNDhG QzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3eHRTX0lsTDNZU21kWUoxcXVV eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ1MS9BNjgyRTFDNDhGQzcxMUYwOEE5MzU2M0FDNEY5QUUwMi8zNUczY0x3eHRT X0lsTDNZU21kWUoxcXVVeDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZXufszRJjNkKsh6WlilggRpa4AeGpIH3pWMh561v3+tbYCez6U/LQTq1UsKb 4aQMUrhWg1faC5NaLkDtYB19e0uFOkmfDZ/ChVb7nARJqVV7BWa4VqjJMgBNBuzB 1DC6DFVWRiz5NG89cn0apMriYETzlgJ3R/4VQaeLrs79GeCWBpIL4JaU0xVCOLhB 3LldsbE2EvfYvakMJyTKv99Vvmocx0QCodbfN9Cg+3xkU2SpmHZSopoVGYMjrdlg KBbf/Do6FWVB7O2kVtnxGi4/8R4T/YFPKmO8Cgk4gAAgQmzcW7JOk2hzjJBITtxK IBB8BflsM9HXwy1E18AIjfbBJA== -----END CERTIFICATE-----Generated at Sun Oct 4 20:00:33 2026 by rpki-client