$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft File: 35G3cLwxtS_IlL3YSmdYJ1quUx0.mft (raw, json) Hash identifier: Rj0oll/7G+4zjcG6DILaz21wlqeo5mpO+4nEgj0uN3s= Subject key identifier: 6E:36:5D:42:84:1F:18:77:D7:94:00:FA:86:F0:F7:E6:35:B4:DE:46 Authority key identifier: DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D Certificate issuer: /CN=A91E1D51/serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft Manifest number: 6A Signing time: Sun 05 Apr 2026 07:15:41 +0000 Manifest this update: Sun 05 Apr 2026 07:15:41 +0000 Manifest next update: Sun 12 Apr 2026 07:15:41 +0000 Files and hashes: 1: 35G3cLwxtS_IlL3YSmdYJ1quUx0.crl (hash: sAxgm9RKFN8XYMgME0x3ulZo/Cl28Tvx0g5rKGP+UzU=) 2: 6645DC148FC811F08B8AA75FC4F9AE02.roa (hash: EjqSo3SW+tOTV2FfgYGjfnvYu8XgeXYJLsSNDtZjQcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D51, serialNumber=DF91B770BC31B52FC894BDD84A6758275AAE531D Validity Not Before: Apr 5 07:15:41 2026 GMT Not After : Apr 12 07:15:41 2026 GMT Subject: CN=69d20c1d-aaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:4a:3c:c7:6f:b7:10:9c:49:0e:7b:03:2b: 5d:f3:70:df:54:8d:36:b2:d1:75:68:2d:75:a6:54: 2d:b8:fa:e7:81:c2:be:09:2c:2a:00:74:ca:e3:d6: 2d:cb:3a:3c:9f:30:9f:51:40:25:35:1e:1f:d2:11: cc:a9:2c:68:9d:3d:e2:ba:c4:25:78:66:97:50:6f: 48:d0:da:a3:42:b8:86:9f:b1:f7:29:b6:1c:82:2d: 6d:16:c7:d8:5b:bf:2a:15:89:69:4e:8b:22:13:2a: 71:1e:58:84:57:d3:50:49:2f:f6:80:6b:d7:4f:56: 23:1e:d3:40:cc:83:dd:95:5c:96:ec:6d:1a:7b:8f: 32:57:57:1c:f3:2c:0f:5f:fd:5c:8f:e4:47:eb:05: 39:aa:ce:27:88:18:45:e6:c7:c9:b6:42:31:77:4b: ec:5a:6b:10:a4:e1:51:ca:ff:bb:13:8a:ae:36:6d: 95:2e:ba:d4:46:9d:23:fc:28:30:72:fb:28:6f:77: 04:16:98:35:ae:d8:ca:a2:dc:f5:99:33:e0:33:aa: 03:96:b7:a4:20:35:c9:6a:07:e9:66:42:02:ed:cf: 48:90:08:76:a0:75:58:a2:c2:41:90:da:60:a1:b8: 8d:99:6c:c2:ee:57:eb:56:a5:9c:56:4e:d5:d0:a9: ce:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:36:5D:42:84:1F:18:77:D7:94:00:FA:86:F0:F7:E6:35:B4:DE:46 X509v3 Authority Key Identifier: keyid:DF:91:B7:70:BC:31:B5:2F:C8:94:BD:D8:4A:67:58:27:5A:AE:53:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/35G3cLwxtS_IlL3YSmdYJ1quUx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D51/A682E1C48FC711F08A93563AC4F9AE02/35G3cLwxtS_IlL3YSmdYJ1quUx0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:4b:68:17:17:2c:c2:47:ba:55:79:1c:5d:3f:3f:20:12:58: cd:3d:d5:7c:94:6f:f1:fe:7c:b3:58:29:8f:49:7f:d1:4a:09: 6a:6a:ba:c5:aa:cd:6f:9b:50:bc:94:bf:ab:03:2a:6b:8c:8e: 6e:ae:1c:3a:6f:8c:ef:bb:e9:83:d9:7e:a9:65:3f:94:85:b8: a2:24:fa:7c:4e:dd:d3:43:8b:af:06:67:7d:01:b6:e4:d4:b6: 02:cb:d7:c9:a3:ba:74:62:96:30:a1:fa:7b:33:f7:99:e8:00: d9:c8:a0:5f:e8:5e:9b:fd:2c:1c:b0:eb:2d:e8:2c:71:b6:4a: 6e:a3:c8:6d:75:a6:5f:f0:21:ea:07:38:85:49:eb:4f:b5:07: d5:6d:02:f4:7a:c7:9f:90:21:59:62:bf:2f:d3:be:9f:89:07: 97:94:b7:7c:a9:41:2d:9a:3a:7b:09:1d:ca:f0:3e:71:d2:c9: 64:22:96:b8:40:38:b6:42:9a:b3:af:c6:3b:ce:54:12:bb:a2: 9d:ed:f5:5a:a9:5d:b9:3d:e2:c2:0a:58:0b:a5:d1:4e:7a:1a: cf:1b:c7:d8:ab:c7:20:08:83:51:15:48:0b:17:67:9e:f5:ed: 8d:0d:65:ca:a3:36:15:c4:a6:83:11:ef:12:d2:27:bf:dc:0f: a2:d6:05:6c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUQ1MTExMC8GA1UEBRMoREY5MUI3NzBCQzMxQjUyRkM4OTRCREQ4NEE2NzU4Mjc1 QUFFNTMxRDAeFw0yNjA0MDUwNzE1NDFaFw0yNjA0MTIwNzE1NDFaMBgxFjAUBgNV BAMTDTY5ZDIwYzFkLWFhZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCw0o8x2+3EJxJDnsDK13zcN9UjTay0XVoLXWmVC24+ueBwr4JLCoAdMrj1i3L OjyfMJ9RQCU1Hh/SEcypLGidPeK6xCV4ZpdQb0jQ2qNCuIafsfcpthyCLW0Wx9hb vyoViWlOiyITKnEeWIRX01BJL/aAa9dPViMe00DMg92VXJbsbRp7jzJXVxzzLA9f /VyP5EfrBTmqzieIGEXmx8m2QjF3S+xaaxCk4VHK/7sTiq42bZUuutRGnSP8KDBy +yhvdwQWmDWu2Mqi3PWZM+AzqgOWt6QgNclqB+lmQgLtz0iQCHagdViiwkGQ2mCh uI2ZbMLuV+tWpZxWTtXQqc5LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUbjZdQoQf GHfXlAD6hvD35jW03kYwHwYDVR0jBBgwFoAU35G3cLwxtS/IlL3YSmdYJ1quUx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRDUxL0E2ODJFMUM0OEZD NzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNfSWxMM1lTbWRZSjFxdVV4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMzVHM2NMd3h0U19JbEwzWVNtZFlKMXF1VXgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx RDUxL0E2ODJFMUM0OEZDNzExRjA4QTkzNTYzQUM0RjlBRTAyLzM1RzNjTHd4dFNf SWxMM1lTbWRZSjFxdVV4MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDES2gXFyzCR7pVeRxdPz8gEljNPdV8lG/x/nyzWCmPSX/RSglqarrFqs1vm1C8 lL+rAyprjI5urhw6b4zvu+mD2X6pZT+UhbiiJPp8Tt3TQ4uvBmd9Abbk1LYCy9fJ o7p0YpYwofp7M/eZ6ADZyKBf6F6b/SwcsOst6Cxxtkpuo8htdaZf8CHqBziFSetP tQfVbQL0esefkCFZYr8v076fiQeXlLd8qUEtmjp7CR3K8D5x0slkIpa4QDi2Qpqz r8Y7zlQSu6Kd7fVaqV25PeLCClgLpdFOehrPG8fYq8cgCINRFUgLF2ee9e2NDWXK ozYVxKaDEe8S0ie/3A+i1gVs -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:59 2026 by rpki-client