$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: FDLhakz42PC2CwCqpJzbVA1FZK2EG1yoQVqV9NnYTMQ= Subject key identifier: D9:FC:0E:AB:94:D6:2F:5E:B5:82:74:77:8E:34:17:28:2C:2E:1B:35 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 70 Signing time: Fri 17 Apr 2026 07:32:21 +0000 Manifest this update: Fri 17 Apr 2026 07:32:21 +0000 Manifest next update: Fri 24 Apr 2026 07:32:21 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: qRUzvdPicyYPReMxHXkOl9EUsTCvQ2U5tx6CUZM7SSE=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Apr 17 07:32:21 2026 GMT Not After : Apr 24 07:32:21 2026 GMT Subject: CN=69e1e205-aac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:d0:18:1e:b7:ab:27:03:17:75:42:32:24: 53:54:5a:e1:c7:63:1f:8f:d8:71:35:08:45:e1:cc: 28:53:5d:88:95:1e:08:76:3c:c9:7b:e9:e3:c5:cc: 14:34:22:b9:67:6e:85:7d:95:38:8d:1c:bf:11:64: 9c:9b:a2:95:5a:be:0e:04:f0:68:41:12:90:c4:2e: 88:8b:93:6a:98:c6:48:d9:8c:4a:b0:37:f7:2e:dc: 0e:f6:1f:36:04:e6:ce:ad:2d:6e:d4:a6:fe:59:3c: 43:33:a9:a3:e9:98:99:df:e7:2a:cc:44:9d:e3:8b: f2:fd:0f:6b:a3:e4:92:20:1c:f3:b6:4c:4e:bc:0f: b2:49:08:df:6e:41:83:2a:28:44:4c:9f:5c:0e:56: f9:f1:33:0b:c7:c1:77:ab:b6:69:a0:c1:ef:9b:e3: 10:31:22:9d:ee:fe:3f:22:8c:2e:39:41:4a:32:69: ac:55:56:26:18:d2:09:3e:16:a0:1f:95:1b:70:b0: 66:81:42:26:09:e3:fe:a5:ff:f8:53:1a:57:a6:91: 18:91:45:f1:ab:08:f9:65:2f:ae:84:93:d1:4d:bd: ef:27:05:65:b7:23:77:41:33:6d:0e:f8:3c:ae:ed: 63:8c:93:39:81:75:34:c6:8f:4c:96:7e:ae:3c:77: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FC:0E:AB:94:D6:2F:5E:B5:82:74:77:8E:34:17:28:2C:2E:1B:35 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ee:1e:8b:01:e2:18:10:10:ab:06:8f:0c:23:34:f6:55:90: 27:55:cf:bc:58:e0:91:09:70:5d:2f:5e:b4:19:4e:a1:c9:5a: 85:a8:d9:0e:ea:8f:9d:a6:aa:f1:79:4a:18:4e:99:8c:6b:73: 6c:21:40:82:90:71:2f:1a:b0:51:a5:bf:95:1a:fb:15:e3:f9: 04:3c:2a:b4:13:5b:c2:8b:0b:d2:8d:e0:60:c4:10:e5:a3:2f: c7:b6:8e:b6:99:a7:1b:6b:10:09:fd:69:c2:fa:8e:ca:b6:7d: 14:ab:57:b8:42:b4:0d:43:49:07:d7:a2:f5:02:a8:0a:a4:43: 12:65:a7:7c:7d:e9:e6:bb:98:fc:16:94:28:76:7c:49:b9:aa: bf:df:3c:35:70:f1:14:12:80:ed:66:1a:fa:0b:b1:8d:db:8e: d8:ee:6f:be:5f:12:88:8d:dc:b6:25:bb:bf:37:6a:e5:e7:5c: 5b:c5:da:31:ee:d2:93:eb:d1:df:63:43:a9:b9:25:40:c7:b4: aa:cc:06:d1:3e:1f:26:3c:2c:eb:de:d4:e9:84:e7:b8:0d:b1: de:69:4e:bc:ee:ea:6c:14:77:34:e9:68:24:93:a8:e0:98:c1: 82:90:f7:42:df:a7:13:c5:10:e4:71:c0:67:d8:b0:97:35:74: 8e:a5:be:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNjA0MTcwNzMyMjFaFw0yNjA0MjQwNzMyMjFaMBgxFjAUBgNV BAMTDTY5ZTFlMjA1LWFhYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaNtAYHrerJwMXdUIyJFNUWuHHYx+P2HE1CEXhzChTXYiVHgh2PMl76ePFzBQ0 IrlnboV9lTiNHL8RZJybopVavg4E8GhBEpDELoiLk2qYxkjZjEqwN/cu3A72HzYE 5s6tLW7Upv5ZPEMzqaPpmJnf5yrMRJ3ji/L9D2uj5JIgHPO2TE68D7JJCN9uQYMq KERMn1wOVvnxMwvHwXertmmgwe+b4xAxIp3u/j8ijC45QUoyaaxVViYY0gk+FqAf lRtwsGaBQiYJ4/6l//hTGlemkRiRRfGrCPllL66Ek9FNve8nBWW3I3dBM20O+Dyu 7WOMkzmBdTTGj0yWfq48dwKdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2fwOq5TW L161gnR3jjQXKCwuGzUwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCh7h6LAeIYEBCrBo8MIzT2VZAnVc+8WOCRCXBdL160GU6hyVqFqNkO6o+dpqrx eUoYTpmMa3NsIUCCkHEvGrBRpb+VGvsV4/kEPCq0E1vCiwvSjeBgxBDloy/Hto62 macbaxAJ/WnC+o7Ktn0Uq1e4QrQNQ0kH16L1AqgKpEMSZad8fenmu5j8FpQodnxJ uaq/3zw1cPEUEoDtZhr6C7GN247Y7m++XxKIjdy2Jbu/N2rl51xbxdox7tKT69Hf Y0OpuSVAx7SqzAbRPh8mPCzr3tTphOe4DbHeaU687upsFHc06Wgkk6jgmMGCkPdC 36cTxRDkccBn2LCXNXSOpb7V -----END CERTIFICATE-----Generated at Fri Apr 17 11:35:20 2026 by rpki-client