$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json) Hash identifier: kBFug7eOfafiXdr1pyEkhIyj5ddGfTg7owUxpg66BEE= Subject key identifier: F1:AF:5C:BD:F7:F4:D8:A1:B2:52:BE:BB:77:95:6A:47:4D:5E:C6:73 Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft Manifest number: 3A Signing time: Tue 21 Apr 2026 08:20:37 +0000 Manifest this update: Tue 21 Apr 2026 08:20:37 +0000 Manifest next update: Tue 28 Apr 2026 08:20:37 +0000 Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: VIhm4Yaz1I48sRYpqSLLJ5LoPEyOO7/cXl97wqzcmfY=) 2: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=) 3: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Validity Not Before: Apr 21 08:20:37 2026 GMT Not After : Apr 28 08:20:37 2026 GMT Subject: CN=69e73355-3b69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fd:e7:88:39:54:7f:2e:77:01:b3:6d:f9:3e: e9:e1:e8:ee:27:6a:95:8b:6c:df:3c:00:62:28:de: c6:db:4e:23:04:84:5e:49:33:a7:4f:59:6b:d9:57: 05:c0:2e:a5:34:b4:b5:da:db:f8:7d:93:46:11:f8: 10:72:fd:ab:54:99:69:0e:08:88:11:60:a4:36:d1: f0:b8:e6:e7:dc:d9:e3:fe:cc:27:1c:02:40:d1:1e: a7:59:90:2b:2a:2f:54:1e:13:09:f0:66:47:04:af: ef:46:75:c7:63:b5:b4:01:8d:39:c0:b5:f9:82:b9: 45:86:a4:4b:19:3d:0e:12:24:2e:c7:28:7b:45:0e: 59:a0:ba:c2:60:c4:9b:27:1e:76:5e:29:77:20:17: 49:cf:2f:08:09:bd:97:cc:d7:2a:b9:73:21:52:18: 22:a6:f4:30:b9:20:8c:82:9e:ed:46:3e:3c:72:e1: ce:58:6b:8d:c7:a5:90:1d:34:6e:ce:ba:72:67:ea: 02:05:f9:77:7a:b4:e4:e2:50:17:da:d3:8b:0e:08: 44:14:b7:3f:ea:4c:a0:1a:10:63:d4:23:0d:31:99: d6:14:ad:d6:02:8a:0a:78:90:ba:c8:42:99:72:a1: d0:90:5b:85:a3:7a:bb:87:c7:0c:63:01:d4:05:bc: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AF:5C:BD:F7:F4:D8:A1:B2:52:BE:BB:77:95:6A:47:4D:5E:C6:73 X509v3 Authority Key Identifier: keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:fe:6f:1f:21:8d:37:b8:97:d3:c8:e7:d7:36:08:ba:7e:2d: 05:83:88:53:02:84:61:c5:53:9e:a7:7c:ea:9f:50:2c:76:c9: d2:9e:9a:00:97:ee:08:37:8e:91:a4:15:37:ab:32:95:fa:4b: 23:12:3d:ac:0f:3e:ab:7a:72:c0:7e:67:11:8a:36:b5:e3:8e: ab:f2:e0:87:8d:48:e4:53:98:49:37:eb:41:6b:40:99:36:2e: 39:59:a9:8a:bf:c5:80:5b:fd:b3:d5:ea:de:08:23:14:9a:9e: a2:73:2d:f1:79:e9:48:89:c7:4b:99:08:44:24:be:5c:06:83: 8d:ba:c3:e2:16:18:ed:58:0f:07:14:f3:dc:3f:42:7e:e1:1e: a7:50:46:34:0e:a9:89:8c:e1:27:a1:7d:b9:e1:30:e8:13:54: 05:d9:a3:39:69:a3:24:76:12:91:93:67:43:d7:a6:8c:7b:96: c4:c2:5f:6f:4e:81:48:78:fe:60:75:14:1c:46:71:b0:53:ef: 00:4a:fb:15:86:84:bc:f6:b1:d7:11:cf:ba:9f:3a:c7:d6:31: 42:24:23:7f:71:f6:d9:0a:71:37:ec:e9:2c:75:ce:c4:91:d5: cb:d0:b1:22:89:ca:9d:df:ad:15:61:46:ee:68:04:72:f6:52: 0f:6f:4e:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzhDMjExMC8GA1UEBRMoMDM2RDczNEFBNjMwMjY0QTE4RUM1NjRERDZBQjQxNjQ2 MUM2QTQ2QTAeFw0yNjA0MjEwODIwMzdaFw0yNjA0MjgwODIwMzdaMBgxFjAUBgNV BAMTDTY5ZTczMzU1LTNiNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDT/eeIOVR/LncBs235Punh6O4napWLbN88AGIo3sbbTiMEhF5JM6dPWWvZVwXA LqU0tLXa2/h9k0YR+BBy/atUmWkOCIgRYKQ20fC45ufc2eP+zCccAkDRHqdZkCsq L1QeEwnwZkcEr+9GdcdjtbQBjTnAtfmCuUWGpEsZPQ4SJC7HKHtFDlmgusJgxJsn HnZeKXcgF0nPLwgJvZfM1yq5cyFSGCKm9DC5IIyCnu1GPjxy4c5Ya43HpZAdNG7O unJn6gIF+Xd6tOTiUBfa04sOCEQUtz/qTKAaEGPUIw0xmdYUrdYCigp4kLrIQply odCQW4WjeruHxwxjAdQFvNqnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8a9cvff0 2KGyUr67d5VqR01exnMwHwYDVR0jBBgwFoAUA21zSqYwJkoY7FZN1qtBZGHGpGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OEMyLzM1NDQ2Mzc2RURF NTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3SmtvWTdGWk4xcXRCWkdIR3BH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTIxelNxWXdKa29ZN0ZaTjFxdEJaR0hHcEdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3Smtv WTdGWk4xcXRCWkdIR3BHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBH/m8fIY03uJfTyOfXNgi6fi0Fg4hTAoRhxVOep3zqn1AsdsnSnpoAl+4IN46R pBU3qzKV+ksjEj2sDz6renLAfmcRija1446r8uCHjUjkU5hJN+tBa0CZNi45WamK v8WAW/2z1ereCCMUmp6icy3xeelIicdLmQhEJL5cBoONusPiFhjtWA8HFPPcP0J+ 4R6nUEY0DqmJjOEnoX254TDoE1QF2aM5aaMkdhKRk2dD16aMe5bEwl9vToFIeP5g dRQcRnGwU+8ASvsVhoS89rHXEc+6nzrH1jFCJCN/cfbZCnE37Oksdc7EkdXL0LEi icqd360VYUbuaARy9lIPb063 -----END CERTIFICATE-----Generated at Wed Apr 22 04:09:21 2026 by rpki-client