$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: d9v4Z75xWnocfHpCqBt2t4AELxS880u3bm3bWHHpfAE= Subject key identifier: 35:4F:22:FD:D2:47:C7:37:FE:EE:00:5F:A0:54:95:D9:C8:EC:47:1B Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 0842 Signing time: Fri 02 Oct 2026 21:23:14 +0000 Manifest this update: Fri 02 Oct 2026 21:23:13 +0000 Manifest next update: Fri 09 Oct 2026 21:23:13 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: n7uILy2VSyLhS1kQH3AQFVUcNm4OVYL7AdGJOPGIjso=) 2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: cVjs8CCmJom1l0o4wFC6QkXwpn/JOlzgY1YvrYV5KoA=) 3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: VwwT7RQ/qXGeiFBkCB3JtIL1WCq5yNf8aGSsCVk++yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Oct 2 21:23:13 2026 GMT Not After : Oct 9 21:23:13 2026 GMT Subject: CN=6ac020c1-b52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c1:6b:3d:cc:7d:4c:91:92:28:4a:b8:88:4d: 63:67:22:33:0e:39:b1:80:92:3e:0e:ab:fd:7c:3e: bb:f3:cd:7f:ae:53:70:4a:f7:dc:27:f6:b2:5f:2d: b0:a6:0f:fa:ad:33:65:f9:1b:c9:7c:c9:71:00:58: 9b:e4:9a:9e:70:b4:1f:bc:74:34:e1:59:cf:39:c3: 78:39:a3:ad:84:ef:3e:e5:86:5c:a7:34:2d:82:d9: dc:d8:b0:7e:c1:ff:4c:f4:58:85:1f:ea:1e:dd:be: 11:fc:8f:e7:d4:d2:74:8f:9f:ff:49:be:2a:ab:7e: e5:74:4f:6e:3e:16:42:e5:27:85:e0:cf:4e:c6:a0: 61:78:9f:d8:c2:99:a8:f1:c4:a7:05:f6:fc:1f:ce: 0c:54:23:56:94:6d:5a:6e:ee:3d:53:6f:76:2d:bf: 69:d9:f7:3b:5f:aa:0c:16:0c:52:c0:0b:b2:26:14: 25:31:43:7a:05:96:b7:d0:80:a8:1b:aa:6f:11:19: 1b:53:28:11:da:37:fe:40:8c:b1:3a:2c:41:44:a8: 5d:9c:6a:d9:ea:df:b5:df:6d:4f:76:13:32:9a:99: f9:01:ca:8b:01:8f:ba:49:ed:84:5f:9c:3f:fe:dc: 80:93:d9:1b:39:3c:1a:4f:3c:7d:2c:d0:4b:55:f7: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:22:FD:D2:47:C7:37:FE:EE:00:5F:A0:54:95:D9:C8:EC:47:1B X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:90:b0:ea:50:c4:c2:93:1e:46:18:51:1a:76:ca:2b:0e:67: c1:8a:75:7f:17:fa:29:13:3e:55:79:6a:c4:9b:c0:a0:93:78: 41:5f:a5:24:de:23:f6:ce:b0:7c:a7:d9:88:cd:c5:d9:8a:36: 6b:49:4c:49:90:30:f7:25:28:fd:96:88:e0:a8:08:75:6b:e7: d0:3e:9d:d7:31:eb:ca:06:8c:c4:8b:b6:f8:a6:af:47:af:57: 60:71:d8:87:19:67:ff:d3:f5:b8:60:44:fa:f0:d8:06:11:ad: b5:cc:2c:ca:00:8c:ad:53:ee:71:d6:31:e4:ed:70:d4:e2:ae: 9d:bd:0b:a5:8b:ed:ac:be:41:28:06:0b:a5:f5:85:22:f0:d9: e3:5d:a6:fd:ac:41:ba:d4:7f:21:4b:24:be:e1:47:e6:d5:a9: a5:cf:2a:d5:76:78:b4:ff:e8:69:89:15:51:6e:64:dc:9b:a4: 98:60:ee:f2:1f:8e:2f:61:68:46:ba:23:5e:05:2b:f7:10:70: 12:54:80:25:b5:49:a1:67:fe:87:f1:d3:37:1f:d9:e0:85:34: ea:c1:cb:d8:25:94:5e:e6:be:de:e4:ac:d4:01:bd:f3:c8:6e: 68:15:30:8f:40:44:c4:9e:23:a1:c2:87:05:10:0c:e7:55:21: 08:ce:7b:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjYxMDAyMjEyMzEzWhcNMjYxMDA5MjEyMzEzWjAYMRYwFAYD VQQDEw02YWMwMjBjMS1iNTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sFrPcx9TJGSKEq4iE1jZyIzDjmxgJI+Dqv9fD67881/rlNwSvfcJ/ayXy2w pg/6rTNl+RvJfMlxAFib5JqecLQfvHQ04VnPOcN4OaOthO8+5YZcpzQtgtnc2LB+ wf9M9FiFH+oe3b4R/I/n1NJ0j5//Sb4qq37ldE9uPhZC5SeF4M9OxqBheJ/Ywpmo 8cSnBfb8H84MVCNWlG1abu49U292Lb9p2fc7X6oMFgxSwAuyJhQlMUN6BZa30ICo G6pvERkbUygR2jf+QIyxOixBRKhdnGrZ6t+1321PdhMympn5AcqLAY+6Se2EX5w/ /tyAk9kbOTwaTzx9LNBLVfc9BwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDVPIv3S R8c3/u4AX6BUldnI7EcbMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUJCw6lDEwpMeRhhRGnbKKw5nwYp1fxf6KRM+VXlqxJvAoJN4QV+lJN4j9s6w fKfZiM3F2Yo2a0lMSZAw9yUo/ZaI4KgIdWvn0D6d1zHrygaMxIu2+KavR69XYHHY hxln/9P1uGBE+vDYBhGttcwsygCMrVPucdYx5O1w1OKunb0LpYvtrL5BKAYLpfWF IvDZ412m/axButR/IUskvuFH5tWppc8q1XZ4tP/oaYkVUW5k3JukmGDu8h+OL2Fo RrojXgUr9xBwElSAJbVJoWf+h/HTNx/Z4IU06sHL2CWUXua+3uSs1AG988huaBUw j0BExJ4jocKHBRAM51UhCM57TQ== -----END CERTIFICATE-----Generated at Sun Oct 4 19:50:03 2026 by rpki-client