$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: AZd5p7a/2t/h2EbX7KJDfpqf59eB5NiCGuKuGY1w83I= Subject key identifier: 28:94:4C:96:98:7C:C0:8B:21:D6:03:F9:84:1E:AC:4D:3A:10:AA:C5 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0A98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0A83 Signing time: Fri 18 Jul 2025 19:49:15 +0000 Manifest this update: Fri 18 Jul 2025 19:49:15 +0000 Manifest next update: Fri 25 Jul 2025 19:49:15 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: +ct+oYDS29mf86HucW5rs6XGdRBcKnygY1xDoGpmtlQ=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2712 (0xa98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Jul 18 19:49:15 2025 GMT Not After : Jul 25 19:49:15 2025 GMT Subject: CN=687aa53b-1d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:63:ff:0d:ca:a4:e7:3c:3b:5d:44:ea:4f:91: ac:c0:e9:08:d1:64:5b:df:ce:3c:6e:be:1f:0a:60: c9:3f:cf:37:bb:6e:ad:fd:94:ce:72:2d:50:66:70: 2c:03:c4:cf:cf:8e:6e:fc:26:0c:d7:05:1c:25:90: 18:43:bb:90:b7:fd:aa:3e:4e:02:cb:cb:cf:a4:80: 4c:40:71:e2:1d:b0:ea:e2:3a:b5:83:b1:a4:c1:ac: b8:ac:cf:08:e7:d7:7e:e7:18:fa:4f:2c:f8:5d:40: b5:03:87:67:d5:3f:e9:65:18:19:d4:47:ed:ec:5e: 1c:77:72:a7:4a:a9:13:3a:8c:8f:ac:d5:b8:f2:2a: d3:14:bc:64:a8:2c:76:48:1a:8b:62:3f:b8:3f:ff: 04:74:65:92:90:c8:e0:4a:92:84:e6:27:b6:37:8f: cd:09:1c:10:92:8e:e6:96:4c:38:94:d2:3a:06:08: 74:c5:a8:06:58:03:bc:35:a6:4a:c2:7f:f4:00:5a: f0:c3:8e:12:83:25:a7:d5:c5:a2:85:e4:a8:12:92: 77:bc:9d:7e:95:bc:78:89:f7:05:18:0f:af:20:26: 88:7e:88:9b:eb:f9:af:7c:f9:90:8f:00:71:f2:e3: dc:ca:a6:5a:62:66:fa:80:e6:bf:80:b6:84:ee:33: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:4C:96:98:7C:C0:8B:21:D6:03:F9:84:1E:AC:4D:3A:10:AA:C5 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:b1:56:bd:9d:41:71:88:be:15:51:19:fe:30:c0:14:39:8e: 8e:69:5b:6a:6a:a4:45:66:a3:a4:c2:5f:46:14:50:4b:27:40: 34:9a:74:63:8c:b6:8e:d2:4a:9c:12:5c:84:8b:e9:25:f4:d9: 65:2b:ac:f2:52:e4:83:ee:10:8a:f1:96:5e:68:7d:0b:75:cc: 9c:b2:68:3a:8e:15:e4:0c:6a:d2:01:f3:e7:5a:5a:b0:71:b7: ab:4a:3e:aa:d1:b4:22:44:19:27:35:6a:0e:35:01:c3:35:f3: 2b:01:ac:0d:59:43:0c:5f:e1:35:81:87:63:e0:90:1e:9d:05: 8e:e0:45:e2:e1:ee:fc:ed:07:12:e2:bc:e3:c5:f9:83:9c:7f: 88:30:62:0d:36:f0:61:59:11:8e:0d:94:a9:c4:50:07:3c:d9: 04:49:ef:8f:4b:e5:af:ff:55:1d:18:0d:4b:75:39:81:e4:bf: 9a:96:f1:7e:e4:24:69:60:59:4d:bb:15:da:9c:90:e1:cc:25: d0:25:1c:bd:42:cc:2a:85:3f:82:cd:21:0e:39:ef:e7:19:70: 15:97:80:8d:38:7b:e0:2c:bd:3a:c9:e3:21:bb:f0:64:b7:6a: 48:17:88:5e:6a:bc:1c:82:ba:53:ee:be:53:5c:37:21:a7:8f: 61:8f:71:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUwNzE4MTk0OTE1WhcNMjUwNzI1MTk0OTE1WjAYMRYwFAYD VQQDEw02ODdhYTUzYi0xZDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGP/Dcqk5zw7XUTqT5GswOkI0WRb3848br4fCmDJP883u26t/ZTOci1QZnAs A8TPz45u/CYM1wUcJZAYQ7uQt/2qPk4Cy8vPpIBMQHHiHbDq4jq1g7Gkway4rM8I 59d+5xj6Tyz4XUC1A4dn1T/pZRgZ1Eft7F4cd3KnSqkTOoyPrNW48irTFLxkqCx2 SBqLYj+4P/8EdGWSkMjgSpKE5ie2N4/NCRwQko7mlkw4lNI6Bgh0xagGWAO8NaZK wn/0AFrww44SgyWn1cWiheSoEpJ3vJ1+lbx4ifcFGA+vICaIfoib6/mvfPmQjwBx 8uPcyqZaYmb6gOa/gLaE7jMh5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiUTJaY fMCLIdYD+YQerE06EKrFMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwsVa9nUFxiL4VURn+MMAUOY6OaVtqaqRFZqOkwl9GFFBLJ0A0mnRj jLaO0kqcElyEi+kl9NllK6zyUuSD7hCK8ZZeaH0Ldcycsmg6jhXkDGrSAfPnWlqw cberSj6q0bQiRBknNWoONQHDNfMrAawNWUMMX+E1gYdj4JAenQWO4EXi4e787QcS 4rzjxfmDnH+IMGINNvBhWRGODZSpxFAHPNkESe+PS+Wv/1UdGA1LdTmB5L+alvF+ 5CRpYFlNuxXanJDhzCXQJRy9QswqhT+CzSEOOe/nGXAVl4CNOHvgLL06yeMhu/Bk t2pIF4hearwcgrpT7r5TXDchp49hj3HY -----END CERTIFICATE-----Generated at Sun Jul 20 16:29:20 2025 by rpki-client