$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: Ru6DOJr7RU//KXU8wy9CeQNPpoDRGz1zTX/UJSn2ShU= Subject key identifier: 9B:BC:F0:99:AA:F8:DE:AC:B5:EA:33:15:AE:8A:70:06:20:84:3F:DF Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 64 Signing time: Wed 25 Mar 2026 07:11:16 +0000 Manifest this update: Wed 25 Mar 2026 07:11:15 +0000 Manifest next update: Wed 01 Apr 2026 07:11:15 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: iXWAlTgyOyaH/xJmosLrZukDa+j243g7u2mAO/zJn4E=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Mar 25 07:11:15 2026 GMT Not After : Apr 1 07:11:15 2026 GMT Subject: CN=69c38a94-3c98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d0:47:29:46:66:01:b1:c8:c0:87:b8:22:af: 5b:1c:17:8a:9c:9d:9e:a9:1f:73:44:6d:e9:09:6d: 00:b3:20:e5:24:03:c9:b9:86:95:ae:c5:a4:55:a5: bf:42:eb:85:6a:ac:23:c6:69:bd:aa:00:47:b2:dc: a3:c5:b1:ac:8a:ac:48:ae:13:96:ea:6c:df:c1:54: 31:31:3c:57:93:dc:49:dc:8d:6d:b1:d5:6d:80:b4: 12:b6:82:4f:21:a2:b7:b0:fe:a0:5b:3e:de:2a:89: 42:13:bc:c5:91:97:b3:f2:84:52:bf:80:df:9e:55: 10:a1:b8:dc:31:61:9f:82:94:43:c5:ea:41:3f:97: 51:66:1d:24:c3:94:6f:c0:1d:7d:6e:8a:4b:7e:dd: 32:a9:43:51:a8:fc:63:bc:cb:da:0d:e2:c8:e6:40: 27:df:6a:8e:8a:ca:97:fb:f5:26:53:69:de:be:3a: 64:e6:94:17:d9:92:0a:78:fb:bd:0d:fd:0d:ea:f1: f5:8c:56:6b:e0:03:91:8e:2a:41:9e:68:f6:e9:5c: 4f:64:33:9c:49:8c:81:aa:1c:9f:da:90:7d:c2:27: 83:aa:38:ed:10:8f:77:af:68:09:2c:b4:8d:cc:3e: c8:d6:9c:3b:af:ef:e1:69:6f:6e:42:17:93:e5:4f: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:F0:99:AA:F8:DE:AC:B5:EA:33:15:AE:8A:70:06:20:84:3F:DF X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ce:69:14:83:5f:8d:39:79:3c:49:57:b6:bf:f5:e6:20:fa: f1:e5:a0:1e:d2:8e:3f:98:54:00:8d:54:74:22:a3:1f:f1:12: a8:fb:c9:c0:d4:ca:05:b3:5e:58:5b:b4:ae:5b:0d:3b:54:33: 68:e1:4c:88:8a:5e:9c:b9:34:8c:a0:2b:65:d9:43:a1:f4:27: 0e:69:4d:59:38:4e:5b:21:b8:3d:b2:7e:73:6f:e2:92:0a:31: 50:5b:df:a6:56:18:94:00:56:56:c0:fa:13:a3:d3:2e:27:48: f4:29:0b:66:18:76:79:8d:1d:c1:fc:bb:dd:eb:ec:46:d4:85: 13:9a:9c:0f:b4:2d:13:05:f8:2e:fc:10:a9:7d:27:90:96:c3: 22:6b:36:99:a6:b2:30:9d:fc:65:29:d0:a1:01:f5:23:d5:54: c5:0f:b2:23:d7:8e:c8:e7:df:99:5d:0f:af:81:60:8a:1b:6b: 53:e1:d7:25:56:39:9b:86:7d:85:1c:35:28:4b:4d:be:ae:79: c4:8b:7a:16:bf:3f:c2:e2:18:a2:07:9d:0b:5d:ef:fc:9a:b8: 93:09:8c:b3:c0:1b:5a:83:b9:cb:53:14:87:61:cd:a7:7d:dd: e0:b3:bc:f0:58:33:70:85:6d:b5:d3:b2:e3:ed:ad:c7:a3:7d: 86:c0:9e:30 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNjAzMjUwNzExMTVaFw0yNjA0MDEwNzExMTVaMBgxFjAUBgNV BAMTDTY5YzM4YTk0LTNjOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCO0EcpRmYBscjAh7gir1scF4qcnZ6pH3NEbekJbQCzIOUkA8m5hpWuxaRVpb9C 64VqrCPGab2qAEey3KPFsayKrEiuE5bqbN/BVDExPFeT3EncjW2x1W2AtBK2gk8h orew/qBbPt4qiUITvMWRl7PyhFK/gN+eVRChuNwxYZ+ClEPF6kE/l1FmHSTDlG/A HX1uikt+3TKpQ1Go/GO8y9oN4sjmQCffao6Kypf79SZTad6+OmTmlBfZkgp4+70N /Q3q8fWMVmvgA5GOKkGeaPbpXE9kM5xJjIGqHJ/akH3CJ4OqOO0Qj3evaAkstI3M PsjWnDuv7+Fpb25CF5PlT19XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUm7zwmar4 3qy16jMVropwBiCEP98wHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBMzmkUg1+NOXk8SVe2v/XmIPrx5aAe0o4/mFQAjVR0IqMf8RKo+8nA1MoFs15Y W7SuWw07VDNo4UyIil6cuTSMoCtl2UOh9CcOaU1ZOE5bIbg9sn5zb+KSCjFQW9+m VhiUAFZWwPoTo9MuJ0j0KQtmGHZ5jR3B/Lvd6+xG1IUTmpwPtC0TBfgu/BCpfSeQ lsMiazaZprIwnfxlKdChAfUj1VTFD7Ij147I59+ZXQ+vgWCKG2tT4dclVjmbhn2F HDUoS02+rnnEi3oWvz/C4hiiB50LXe/8mriTCYyzwBtag7nLUxSHYc2nfd3gs7zw WDNwhW2107Lj7a3Ho32GwJ4w -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:16 2026 by rpki-client