$ rpki-client -vvf rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft File: A21zSqYwJkoY7FZN1qtBZGHGpGo.mft (raw, json) Hash identifier: 9E3m6dT4fF/JBsY+5zUMDXDQ3vbpuotvKzQIW3Rb4mk= Subject key identifier: CA:54:82:82:9A:8F:84:D9:E1:E5:E2:C6:E3:70:E8:50:7D:84:F9:F9 Authority key identifier: 03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A Certificate issuer: /CN=A91A78C2/serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Certificate serial: 72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft Manifest number: 6A Signing time: Mon 27 Jul 2026 10:15:13 +0000 Manifest this update: Mon 27 Jul 2026 10:15:12 +0000 Manifest next update: Mon 03 Aug 2026 10:15:12 +0000 Files and hashes: 1: A21zSqYwJkoY7FZN1qtBZGHGpGo.crl (hash: rXBpajlByc/EktVA9ROL8FrZLniiBKkmyeK7UqZYupY=) 2: 95BF687CEDE511F0AFD0F13E766F56BC.roa (hash: 49VoGrV1j9cqeMk1mIx6YMz9ljPSMDMLHiAGX5B7EFE=) 3: 96376E44EDE511F0AFD0F13E766F56BC.roa (hash: c7n/rW2wnuvOsF5QuJE/p0FOOd0sZ53Jnc8uBUMGA3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 114 (0x72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A78C2, serialNumber=036D734AA630264A18EC564DD6AB416461C6A46A Validity Not Before: Jul 27 10:15:12 2026 GMT Not After : Aug 3 10:15:12 2026 GMT Subject: CN=6a672fb1-579d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b6:5a:0b:b6:fa:0b:9e:f8:87:4d:6d:1d:56: 74:e1:22:af:78:49:8a:9d:cb:7a:23:25:4a:89:1d: c5:66:5d:54:4e:2c:d6:29:9f:b6:79:40:bc:fe:a9: 56:f1:59:0a:39:7e:f0:aa:d1:ae:ec:91:66:d6:eb: cd:45:44:7f:43:95:54:fd:da:c8:aa:b2:8c:47:1b: 46:ff:dd:d4:82:6b:ff:77:38:1b:68:ee:6e:91:9c: 08:66:0f:f2:ab:b7:47:09:82:66:10:52:9d:df:ff: 5e:d1:ed:e3:cb:5d:b9:2f:4d:67:dd:9a:44:58:17: 62:e6:20:1f:e8:72:f3:5e:02:7d:09:a9:f7:72:b5: a4:fe:57:fa:44:74:73:91:55:98:95:b9:5a:8f:7c: 4c:15:59:14:f6:0d:dd:f4:5c:a2:23:ab:11:6a:30: 2e:6c:1c:18:e0:93:aa:0d:9a:b3:14:4a:6a:91:8c: 66:df:6d:f4:5b:be:3b:20:74:6d:92:37:6f:b7:6b: 8b:f9:6f:05:3b:0b:f5:90:e4:72:dc:30:89:bb:1d: 04:c2:8e:67:9d:b2:5b:fc:37:6f:72:98:66:1f:d2: 40:f8:12:37:61:8d:3f:7d:d5:7c:77:58:a5:f4:bf: ad:c2:91:47:1f:bd:88:ef:4c:34:50:0f:d7:94:3b: 4c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:54:82:82:9A:8F:84:D9:E1:E5:E2:C6:E3:70:E8:50:7D:84:F9:F9 X509v3 Authority Key Identifier: keyid:03:6D:73:4A:A6:30:26:4A:18:EC:56:4D:D6:AB:41:64:61:C6:A4:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A21zSqYwJkoY7FZN1qtBZGHGpGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A78C2/35446376EDE511F0B01B923C766F56BC/A21zSqYwJkoY7FZN1qtBZGHGpGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3c:5f:50:87:bc:d1:2b:00:34:e4:07:be:40:7b:a9:f3:2e: 8c:9c:a9:05:f3:b6:4b:8d:75:af:c3:3b:32:a8:46:ed:fa:9e: 9a:56:bc:f8:ae:11:37:2b:81:75:33:8c:21:13:89:ae:ff:57: c7:01:3b:e6:e4:ab:3a:3c:52:0d:f8:60:9b:0c:e4:70:08:29: 61:1c:83:8e:e5:9f:45:80:e7:fc:fb:bf:7a:3b:a0:93:c0:cb: a3:93:dc:aa:8d:c7:26:9c:ba:f3:f6:85:46:7c:c3:41:fc:f4: c8:92:d7:21:88:37:dd:bc:4f:24:88:7b:82:bc:0b:eb:d1:88: 9d:71:72:cf:63:6d:5b:52:e4:7f:d6:f1:87:f1:e9:69:f0:11: 22:f9:15:0f:12:27:c6:b6:9d:92:b1:0c:6f:5d:6d:0f:c4:18: 22:28:56:5e:d0:91:d6:cb:e2:ab:4f:75:ff:2c:ed:0f:84:6e: 99:cf:4f:c8:4b:02:6a:ed:8e:ed:a4:ff:c7:82:74:25:24:8f: 9f:4e:20:2d:62:44:cb:ad:86:5f:70:56:a7:e6:b4:5a:02:a4: 5c:af:8c:5d:e4:8a:01:a2:da:c4:57:38:94:c0:39:08:13:a8: 5d:09:33:d4:12:59:49:18:a3:2c:11:56:a7:30:db:cb:ef:95: bc:e1:51:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBcjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NzhDMjExMC8GA1UEBRMoMDM2RDczNEFBNjMwMjY0QTE4RUM1NjRERDZBQjQxNjQ2 MUM2QTQ2QTAeFw0yNjA3MjcxMDE1MTJaFw0yNjA4MDMxMDE1MTJaMBgxFjAUBgNV BAMTDTZhNjcyZmIxLTU3OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjtloLtvoLnviHTW0dVnThIq94SYqdy3ojJUqJHcVmXVROLNYpn7Z5QLz+qVbx WQo5fvCq0a7skWbW681FRH9DlVT92siqsoxHG0b/3dSCa/93OBto7m6RnAhmD/Kr t0cJgmYQUp3f/17R7ePLXbkvTWfdmkRYF2LmIB/ocvNeAn0JqfdytaT+V/pEdHOR VZiVuVqPfEwVWRT2Dd30XKIjqxFqMC5sHBjgk6oNmrMUSmqRjGbfbfRbvjsgdG2S N2+3a4v5bwU7C/WQ5HLcMIm7HQTCjmedslv8N29ymGYf0kD4EjdhjT991Xx3WKX0 v63CkUcfvYjvTDRQD9eUO0xdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUylSCgpqP hNnh5eLG43DoUH2E+fkwHwYDVR0jBBgwFoAUA21zSqYwJkoY7FZN1qtBZGHGpGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3OEMyLzM1NDQ2Mzc2RURF NTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3SmtvWTdGWk4xcXRCWkdIR3BH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQTIxelNxWXdKa29ZN0ZaTjFxdEJaR0hHcEdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 OEMyLzM1NDQ2Mzc2RURFNTExRjBCMDFCOTIzQzc2NkY1NkJDL0EyMXpTcVl3Smtv WTdGWk4xcXRCWkdIR3BHby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCBPF9Qh7zRKwA05Ae+QHup8y6MnKkF87ZLjXWvwzsyqEbt+p6aVrz4rhE3K4F1 M4whE4mu/1fHATvm5Ks6PFIN+GCbDORwCClhHIOO5Z9FgOf8+796O6CTwMujk9yq jccmnLrz9oVGfMNB/PTIktchiDfdvE8kiHuCvAvr0YidcXLPY21bUuR/1vGH8elp 8BEi+RUPEifGtp2SsQxvXW0PxBgiKFZe0JHWy+KrT3X/LO0PhG6Zz0/ISwJq7Y7t pP/HgnQlJI+fTiAtYkTLrYZfcFan5rRaAqRcr4xd5IoBotrEVziUwDkIE6hdCTPU EllJGKMsEVanMNvL75W84VHi -----END CERTIFICATE-----Generated at Wed Jul 29 00:14:55 2026 by rpki-client