$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft File: N35PWGHm2AHWhx-GyUH1hwj687U.mft (raw, json) Hash identifier: NFCzLRcmuoGx7et2j/pugNRuZxrCF90s6PXNRTRksYE= Subject key identifier: 10:02:49:93:72:DA:86:64:08:FE:48:33:D2:14:68:EC:01:49:90:A5 Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 Certificate issuer: /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft Manifest number: 37 Signing time: Tue 03 Mar 2026 08:10:19 +0000 Manifest this update: Tue 03 Mar 2026 08:10:18 +0000 Manifest next update: Tue 10 Mar 2026 08:10:18 +0000 Files and hashes: 1: N35PWGHm2AHWhx-GyUH1hwj687U.crl (hash: AfGu385P9rQjkjPWU1fhvTXYxolaxkDA8cN2flxxFv4=) 2: FFD0154CC51111F081EB9984C4F9AE02.roa (hash: s9ovKXk6i7U35KNY19JGw8V3ccjwmwtWthKx7l0Dc6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5 Validity Not Before: Mar 3 08:10:18 2026 GMT Not After : Mar 10 08:10:18 2026 GMT Subject: CN=69a6976b-7cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:d3:2c:69:1b:12:86:26:b7:70:d3:4d:bf: e0:13:73:8d:12:bd:03:4a:67:43:f6:06:83:d6:86: 8b:1f:6d:fa:23:47:bf:e3:46:0b:de:74:51:25:7d: 98:28:6d:d4:0c:23:c9:ae:93:25:83:e0:a3:dd:4b: be:3e:19:f8:d0:32:62:8f:c1:ec:b7:ec:6b:0b:17: 01:f2:45:33:ed:49:e1:b8:7c:aa:ed:1d:c6:c1:d1: ec:7f:13:7e:80:f0:cd:66:84:59:c4:1e:af:54:62: 0b:3f:ac:ad:48:e4:a4:87:4c:7d:3a:38:4a:8f:df: 42:7c:f1:28:8c:ef:0d:5a:2b:1f:0b:ed:00:9d:06: d5:71:d4:e6:ab:6f:19:53:42:10:16:18:cc:6b:59: 8f:04:ab:65:0b:4f:33:f5:ae:03:59:3e:99:e2:13: 84:83:35:cf:30:1c:47:06:8f:33:b8:15:4f:50:b3: 38:83:fa:4f:d8:c6:8e:17:d8:e5:03:71:17:d6:c6: 55:a4:79:f4:63:31:f3:f5:5b:4a:46:ef:d4:55:cd: 0d:f0:f1:0a:b6:1d:89:49:bb:f5:43:18:1c:1d:f7: b9:65:c1:a9:ba:45:30:a1:4c:cc:20:9b:c2:5e:28: aa:89:ce:f9:dc:d4:2e:62:e7:ed:f9:1c:2b:98:ee: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:02:49:93:72:DA:86:64:08:FE:48:33:D2:14:68:EC:01:49:90:A5 X509v3 Authority Key Identifier: keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:e4:60:c6:f9:13:05:c6:6f:3a:65:73:5e:fd:1a:fa:8d:eb: 00:d7:27:04:df:60:df:de:a3:cf:1d:5a:3c:11:9a:e5:d9:fe: 5a:41:81:5b:ca:1d:20:24:4d:fe:e5:74:22:7a:fb:ee:a7:6d: de:5f:76:1f:61:83:9b:ed:22:92:ed:c9:9d:42:09:6c:a5:85: d6:bc:3e:2a:22:9a:42:2d:a5:b3:90:9e:d8:e7:fb:b3:9c:f9: d6:66:f7:b0:46:ce:a5:80:6e:c8:d0:31:14:86:ba:30:4d:95: 78:42:59:23:5f:6b:0b:fd:49:17:71:b2:e2:e3:a5:ba:df:03: e8:84:f9:b5:97:15:82:fc:05:13:16:79:7c:7b:df:47:f6:1c: 08:fc:4c:56:d8:5d:6f:09:8d:ce:c6:9d:cf:5f:93:6b:b7:1a: cd:e4:27:30:e5:24:67:f0:e4:e6:98:72:5d:fb:d5:d5:34:23: 77:18:86:4a:db:52:27:f1:d7:98:e9:6b:e2:f2:ca:8e:53:0d: 4d:92:86:76:3b:fb:0f:b9:a0:a4:c2:13:1d:78:35:2d:82:63: 17:cd:fa:48:55:7a:eb:90:d7:62:65:06:a1:d5:f9:2c:70:bd: de:81:42:e4:e0:52:a5:41:9a:e0:4d:03:7c:59:d8:10:d0:96: a6:53:92:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG REM4NDExMC8GA1UEBRMoMzc3RTRGNTg2MUU2RDgwMUQ2ODcxRjg2Qzk0MUY1ODcw OEZBRjNCNTAeFw0yNjAzMDMwODEwMThaFw0yNjAzMTAwODEwMThaMBgxFjAUBgNV BAMTDTY5YTY5NzZiLTdjZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoPtMsaRsShia3cNNNv+ATc40SvQNKZ0P2BoPWhosfbfojR7/jRgvedFElfZgo bdQMI8mukyWD4KPdS74+GfjQMmKPwey37GsLFwHyRTPtSeG4fKrtHcbB0ex/E36A 8M1mhFnEHq9UYgs/rK1I5KSHTH06OEqP30J88SiM7w1aKx8L7QCdBtVx1OarbxlT QhAWGMxrWY8Eq2ULTzP1rgNZPpniE4SDNc8wHEcGjzO4FU9QsziD+k/Yxo4X2OUD cRfWxlWkefRjMfP1W0pG79RVzQ3w8Qq2HYlJu/VDGBwd97llwam6RTChTMwgm8Je KKqJzvnc1C5i5+35HCuY7v4VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEAJJk3La hmQI/kgz0hRo7AFJkKUwHwYDVR0jBBgwFoAUN35PWGHm2AHWhx+GyUH1hwj687Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0U4RUFDQUU0QzUx MDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFIV2h4LUd5VUgxaHdqNjg3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjM1UFdHSG0yQUhXaHgtR3lVSDFod2o2ODdVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE Qzg0L0U4RUFDQUU0QzUxMDExRjA4OTA4Qjc1RkM0RjlBRTAyL04zNVBXR0htMkFI V2h4LUd5VUgxaHdqNjg3VS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBH5GDG+RMFxm86ZXNe/Rr6jesA1ycE32Df3qPPHVo8EZrl2f5aQYFbyh0gJE3+ 5XQievvup23eX3YfYYOb7SKS7cmdQglspYXWvD4qIppCLaWzkJ7Y5/uznPnWZvew Rs6lgG7I0DEUhrowTZV4QlkjX2sL/UkXcbLi46W63wPohPm1lxWC/AUTFnl8e99H 9hwI/ExW2F1vCY3Oxp3PX5NrtxrN5Ccw5SRn8OTmmHJd+9XVNCN3GIZK21In8deY 6Wvi8sqOUw1NkoZ2O/sPuaCkwhMdeDUtgmMXzfpIVXrrkNdiZQah1fkscL3egULk 4FKlQZrgTQN8WdgQ0JamU5Ka -----END CERTIFICATE-----Generated at Wed Mar 4 14:49:14 2026 by rpki-client