$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json) Hash identifier: y9O2Eac/TZGDc1fW1OC3erHGiPwCNYjx6qJEBTENNt0= Subject key identifier: 3B:DF:4F:BE:D2:13:47:E6:00:7D:E9:F5:04:9C:1D:FA:18:E1:41:CA Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft Manifest number: 67 Signing time: Tue 21 Jul 2026 09:50:32 +0000 Manifest this update: Tue 21 Jul 2026 09:50:32 +0000 Manifest next update: Tue 28 Jul 2026 09:50:32 +0000 Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: 9yFPwD7o8cr0D+iv/xGwAF7sPL9frMzvwTLxcXOkPFk=) 2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=) 3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 09:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Validity Not Before: Jul 21 09:50:32 2026 GMT Not After : Jul 28 09:50:32 2026 GMT Subject: CN=6a5f40e8-084f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:93:c6:14:fb:70:5e:3a:27:af:63:a9:b9: 7c:29:b3:b4:10:e1:f1:ec:71:cf:0b:1b:51:70:3e: 23:5a:3c:d7:11:5e:a7:78:bf:61:69:55:e5:15:59: 4a:3d:1a:bd:67:f0:9f:c3:38:70:71:08:54:36:b1: c5:8a:53:4b:e1:3a:f0:d8:e9:31:3d:cd:57:b5:10: 33:db:ad:78:2f:f3:29:61:c4:f7:68:c7:b2:2a:db: da:a9:a2:33:38:5f:b1:f2:d9:0b:6d:2a:01:64:9c: 93:a9:18:0d:6b:cb:92:0d:6b:4a:05:2f:9f:49:92: 2e:95:2e:82:8e:bb:09:ca:25:7d:d7:97:28:04:aa: 9d:6d:90:56:81:0e:47:4d:44:89:20:4c:9b:4f:cf: 47:a1:a8:28:25:fe:8e:67:70:02:0f:f5:5c:41:bb: ad:06:f6:e1:a9:a8:98:70:90:b9:d2:19:a2:2a:e4: 65:02:cb:18:fc:0c:cb:a8:b5:ec:49:b3:84:1b:db: 1d:15:0f:be:e1:c1:b6:f8:c3:22:4b:8b:2e:c1:39: ad:bb:bb:38:d0:bb:cc:e9:86:43:c9:1c:15:db:ae: 32:33:3d:29:18:41:7d:d2:d4:c5:d2:b1:da:c6:74: af:94:9d:2d:ed:76:21:d5:5a:a5:46:b7:90:e3:85: cd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DF:4F:BE:D2:13:47:E6:00:7D:E9:F5:04:9C:1D:FA:18:E1:41:CA X509v3 Authority Key Identifier: keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:29:21:f6:6a:bf:29:fa:48:a7:ef:be:8e:0d:34:8c:cc:2f: da:ea:46:11:9d:77:79:d9:1c:7f:ed:74:c7:95:b6:ad:94:8c: ed:4e:0d:b4:bd:c4:9e:3d:d2:6f:27:b0:d3:c4:35:f4:3f:5c: 6c:de:1e:94:e0:45:c6:8f:49:35:88:2e:e0:19:da:52:22:94: 1c:ee:49:ab:ca:f9:24:66:a1:63:37:22:c9:db:3e:72:e7:0f: e4:63:b9:92:0f:26:16:0b:c2:c0:83:f0:87:65:b8:d6:04:29: bc:07:89:7a:a8:40:72:c3:f6:72:7a:d5:4c:9a:ee:01:a1:7a: 2f:b0:8a:9e:c7:f1:c3:0c:de:75:f4:71:22:28:d9:f3:bd:19: f1:47:15:d1:46:85:1c:87:68:88:44:4f:41:e3:d0:b4:bd:22: f3:a1:6c:b7:53:6e:71:18:3a:69:80:49:66:95:08:ac:05:b8: 3f:3c:88:72:48:e6:86:3a:ff:95:ad:a6:d8:f8:95:b4:b3:9f: d2:a3:2a:75:38:9b:95:0b:6a:ea:61:70:48:e6:d4:01:eb:48: 35:6c:38:f4:9c:cd:21:aa:f8:67:cc:eb:5f:7d:f0:a3:5c:f5: 84:a5:5c:a6:3e:b8:af:25:be:73:72:69:29:1f:2a:bc:e2:a1: da:36:09:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzhDMjExMC8GA1UEBRMoMDM2RDczNEFBNjMwMjY0QTE4RUM1NjRERDZBQjQxNjQ2 MUM2QTQ2QTAeFw0yNjA3MjEwOTUwMzJaFw0yNjA3MjgwOTUwMzJaMBgxFjAUBgNV BAMTDTZhNWY0MGU4LTA4NGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsGJPGFPtwXjonr2OpuXwps7QQ4fHscc8LG1FwPiNaPNcRXqd4v2FpVeUVWUo9 Gr1n8J/DOHBxCFQ2scWKU0vhOvDY6TE9zVe1EDPbrXgv8ylhxPdox7Iq29qpojM4 X7Hy2QttKgFknJOpGA1ry5INa0oFL59Jki6VLoKOuwnKJX3XlygEqp1tkFaBDkdN RIkgTJtPz0ehqCgl/o5ncAIP9VxBu60G9uGpqJhwkLnSGaIq5GUCyxj8DMuotexJ s4Qb2x0VD77hwbb4wyJLiy7BOa27uzjQu8zphkPJHBXbrjIzPSkYQX3S1MXSsdrG dK+UnS3tdiHVWqVGt5Djhc11AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO99PvtIT R+YAfen1BJwd+hjhQcowHwYDVR0jBBgwFoAUA21zSqYwJkoY7FZN1qtBZGHGpGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OEMyLzM1NDQ2Mzc2RURF NTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3SmtvWTdGWk4xcXRCWkdIR3BH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTIxelNxWXdKa29ZN0ZaTjFxdEJaR0hHcEdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3Smtv WTdGWk4xcXRCWkdIR3BHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQKSH2ar8p+kin776ODTSMzC/a6kYRnXd52Rx/7XTHlbatlIztTg20vcSePdJv J7DTxDX0P1xs3h6U4EXGj0k1iC7gGdpSIpQc7kmryvkkZqFjNyLJ2z5y5w/kY7mS DyYWC8LAg/CHZbjWBCm8B4l6qEByw/ZyetVMmu4BoXovsIqex/HDDN519HEiKNnz vRnxRxXRRoUch2iIRE9B49C0vSLzoWy3U25xGDppgElmlQisBbg/PIhySOaGOv+V rabY+JW0s5/Soyp1OJuVC2rqYXBI5tQB60g1bDj0nM0hqvhnzOtfffCjXPWEpVym PrivJb5zcmkpHyq84qHaNgmh -----END CERTIFICATE-----Generated at Tue Jul 21 23:03:54 2026 by rpki-client