$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json) Hash identifier: AE9m3PS/M3EDfm0Rh2VUgg1rLKVBMGPKOEh8ENfZq84= Subject key identifier: 0D:C9:D8:43:0B:82:47:B0:19:14:E8:31:32:33:B0:C3:43:00:E3:B4 Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft Manifest number: 23 Signing time: Sat 07 Mar 2026 08:04:23 +0000 Manifest this update: Sat 07 Mar 2026 08:04:23 +0000 Manifest next update: Sat 14 Mar 2026 08:04:23 +0000 Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: 29l+RiS0sqkh5fA2CSPj+AFCAUiZu9ShiNjLb2CHQV4=) 2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=) 3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 08:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Validity Not Before: Mar 7 08:04:23 2026 GMT Not After : Mar 14 08:04:23 2026 GMT Subject: CN=69abdc07-207b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:c3:4c:b3:43:d2:cd:c5:28:f6:97:c5:ca: 22:18:42:0f:1e:c8:5e:6b:59:33:cb:42:06:5a:17: 72:2e:ea:d4:92:09:a7:85:0e:95:66:97:fd:8b:da: 07:e9:04:71:dd:87:22:a0:74:5c:11:54:31:21:a0: f7:b6:0e:ea:05:c7:e9:cf:13:9f:07:7a:af:d1:9f: 6c:fe:18:2a:04:7d:10:b4:1c:40:41:02:b3:b4:6c: 0a:20:4d:6e:7d:25:6e:64:1c:23:ff:5f:97:1f:a4: f1:dd:0b:c4:f0:6f:6d:17:35:b3:15:cc:b4:a3:3c: 28:7e:00:40:3f:5a:5e:45:61:9e:02:83:7e:c5:2e: f9:8b:41:8d:9f:a8:ee:07:39:9e:8f:4c:9f:f9:8a: 2d:c5:23:60:6d:40:b6:a8:8b:50:ba:7c:ae:62:24: e0:1f:99:e8:d8:c8:c5:ba:c0:16:8f:1d:4c:dd:cc: 47:d0:02:b8:6c:6b:d7:5e:92:85:3a:58:6e:17:79: 95:7f:f5:cf:f2:a1:66:79:28:6f:38:9a:c2:bb:49: 60:f6:92:46:d4:43:e3:74:af:8a:ce:46:d6:27:1e: cf:09:ca:33:ba:1e:92:88:ac:76:8e:91:23:65:d2: e8:c4:6a:c8:6b:be:52:7c:9d:80:a7:e3:a5:68:2c: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C9:D8:43:0B:82:47:B0:19:14:E8:31:32:33:B0:C3:43:00:E3:B4 X509v3 Authority Key Identifier: keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:9c:bc:e2:78:c5:77:c1:d2:4a:bf:2f:24:a6:34:96:df:77: 7c:f1:6b:52:6d:ab:b5:9f:ce:0e:0d:4f:18:7b:2c:bf:20:5d: 7b:d8:fe:f9:dd:5e:75:e1:a7:8c:ec:26:ea:44:15:1e:ea:e4: 6b:5e:29:78:61:c0:e3:e7:9d:bf:c6:65:1a:7e:a9:f3:90:f1: 6f:65:28:02:a5:23:8b:61:b0:c6:f4:7a:75:b5:5a:c6:1a:96: 41:d6:52:cd:d6:0c:6e:aa:7c:31:6a:3a:c7:72:43:79:29:01: 5a:ba:86:97:9a:f8:2a:bb:a5:5c:ed:5a:93:57:46:61:ac:53: 21:72:b2:d0:9b:22:f2:02:4f:dc:9e:3b:9c:a4:34:04:c5:d8: 57:bf:79:17:2a:81:f7:40:09:7b:d0:ad:dd:7f:87:a6:91:44: 80:b8:d5:70:19:e8:57:6b:a3:5a:9f:18:52:5d:b7:f9:4b:4f: 44:9a:6b:c3:60:b9:51:51:17:f4:b6:a9:43:a8:d5:ac:da:2b: 8d:93:20:ca:9a:47:51:43:88:9a:e8:30:f1:e7:f8:94:03:72: f5:32:26:ac:fa:fe:6c:5f:11:e7:63:c3:4f:11:03:fd:35:0c: a6:14:99:6a:d4:ca:c9:be:51:81:d7:6b:9c:f9:1f:15:a7:a5: 4f:4a:d5:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzhDMjExMC8GA1UEBRMoMDM2RDczNEFBNjMwMjY0QTE4RUM1NjRERDZBQjQxNjQ2 MUM2QTQ2QTAeFw0yNjAzMDcwODA0MjNaFw0yNjAzMTQwODA0MjNaMBgxFjAUBgNV BAMTDTY5YWJkYzA3LTIwN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfx8NMs0PSzcUo9pfFyiIYQg8eyF5rWTPLQgZaF3Iu6tSSCaeFDpVml/2L2gfp BHHdhyKgdFwRVDEhoPe2DuoFx+nPE58Heq/Rn2z+GCoEfRC0HEBBArO0bAogTW59 JW5kHCP/X5cfpPHdC8Twb20XNbMVzLSjPCh+AEA/Wl5FYZ4Cg37FLvmLQY2fqO4H OZ6PTJ/5ii3FI2BtQLaoi1C6fK5iJOAfmejYyMW6wBaPHUzdzEfQArhsa9dekoU6 WG4XeZV/9c/yoWZ5KG84msK7SWD2kkbUQ+N0r4rORtYnHs8JyjO6HpKIrHaOkSNl 0ujEashrvlJ8nYCn46VoLNlLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDcnYQwuC R7AZFOgxMjOww0MA47QwHwYDVR0jBBgwFoAUA21zSqYwJkoY7FZN1qtBZGHGpGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OEMyLzM1NDQ2Mzc2RURF NTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3SmtvWTdGWk4xcXRCWkdIR3BH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTIxelNxWXdKa29ZN0ZaTjFxdEJaR0hHcEdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3Smtv WTdGWk4xcXRCWkdIR3BHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBEnLzieMV3wdJKvy8kpjSW33d88WtSbau1n84ODU8Yeyy/IF172P753V514aeM 7CbqRBUe6uRrXil4YcDj552/xmUafqnzkPFvZSgCpSOLYbDG9Hp1tVrGGpZB1lLN 1gxuqnwxajrHckN5KQFauoaXmvgqu6Vc7VqTV0ZhrFMhcrLQmyLyAk/cnjucpDQE xdhXv3kXKoH3QAl70K3df4emkUSAuNVwGehXa6NanxhSXbf5S09EmmvDYLlRURf0 tqlDqNWs2iuNkyDKmkdRQ4ia6DDx5/iUA3L1Mias+v5sXxHnY8NPEQP9NQymFJlq 1MrJvlGB12uc+R8Vp6VPStVW -----END CERTIFICATE-----Generated at Sat Mar 7 19:05:12 2026 by rpki-client