$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: G2Vr36OTOyGNESGrBvI10Om2Pbx5N7rs0hM2mKYj478= Subject key identifier: 6B:55:2F:4F:60:58:EE:01:81:16:DF:53:C5:34:B3:59:AF:AD:99:04 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B30 Signing time: Fri 12 Jun 2026 19:17:54 +0000 Manifest this update: Fri 12 Jun 2026 19:17:53 +0000 Manifest next update: Fri 19 Jun 2026 19:17:53 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: FFzdX4OBIW9WuKvJJRTwfsYA1qpEzF9HBqSm/C379lA=) 2: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) 3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) 4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 18:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Jun 12 19:17:53 2026 GMT Not After : Jun 19 19:17:53 2026 GMT Subject: CN=6a2c5b62-e899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:70:4c:4a:f8:97:73:99:3a:93:e4:f6:d4: 17:34:2e:3c:ce:8a:5e:09:5f:db:d9:e9:34:3d:25: f1:ae:6d:90:de:c5:77:f8:91:fc:13:5c:d5:d1:36: f8:da:7a:ef:ac:f6:8c:0b:31:d7:9b:bc:9e:2d:0d: ba:af:e5:8b:89:42:c3:e9:44:0d:56:a9:76:20:02: fa:32:71:bd:3f:20:d4:b2:e5:cb:bb:0e:bf:b9:3a: d7:d7:67:02:ad:a0:87:01:38:8a:c4:77:eb:21:e2: c8:94:b9:cd:2a:9a:e4:79:8e:ae:84:b3:d6:68:d7: 79:9e:15:46:ba:0b:61:bf:30:ec:71:23:9f:fd:16: cc:ab:57:2c:5e:a0:fe:1f:7a:2d:ba:d1:69:df:c3: 2d:13:1f:87:3c:93:c7:bd:31:a4:ab:40:9c:71:b4: 6d:43:29:8b:cf:5b:c6:58:fd:ec:a9:64:21:82:88: e1:ae:1f:a6:ed:7e:90:f0:b4:e7:73:2b:0b:0b:20: b0:cb:04:cd:01:45:41:13:45:72:8a:73:3f:fa:8e: d6:3e:6e:3d:f1:e4:fa:b8:fd:65:70:85:b7:c0:a3: 6b:de:50:cb:21:39:e2:44:8b:d5:c8:a1:7d:39:e3: 8e:20:73:aa:3f:40:75:d5:3a:b5:ba:68:60:d9:94: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:55:2F:4F:60:58:EE:01:81:16:DF:53:C5:34:B3:59:AF:AD:99:04 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:99:d3:bc:66:41:b5:c6:43:81:f1:4a:14:6b:90:79:73:ce: 9e:f4:a2:d1:e2:b3:a3:49:9f:12:90:e1:7a:66:39:4d:db:a1: 98:eb:8f:dd:9f:fe:dd:00:d7:1e:ad:12:49:f4:97:75:60:71: 3d:47:46:be:6d:a7:91:97:48:37:ac:f2:d2:62:5d:e8:12:55: d9:82:c9:ff:c7:c0:4b:d3:6c:01:e2:bf:bd:1d:d6:94:ae:8a: 35:b9:e5:f1:63:8d:0e:4f:be:b5:35:98:e9:c4:42:eb:a8:a4: aa:a7:a2:29:47:22:10:cb:eb:cc:8e:a2:c1:5b:74:47:11:a7: 9e:12:31:af:da:f3:d2:c8:66:9f:38:4f:8a:8e:9e:f5:34:45: fa:d2:cc:85:b2:ac:7a:6e:a8:c8:d0:b9:6f:03:a6:ee:56:b0: 12:34:c5:59:1b:6e:b2:40:a4:a6:5d:16:3b:1b:e0:31:31:6f: 7f:6d:54:24:06:44:27:a0:c5:84:5e:c8:95:ba:c3:61:21:af: b4:92:e7:f5:c8:57:b6:d1:42:55:8e:ce:31:3d:81:62:e4:6a: 60:cc:74:e5:65:7d:ff:23:e6:8e:65:23:cc:e0:91:49:1f:88: 98:15:20:c0:1f:43:33:e1:d8:e2:e0:eb:56:f0:db:27:28:2c: 86:f8:5d:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwNjEyMTkxNzUzWhcNMjYwNjE5MTkxNzUzWjAYMRYwFAYD VQQDEw02YTJjNWI2Mi1lODk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjZwTEr4l3OZOpPk9tQXNC48zopeCV/b2ek0PSXxrm2Q3sV3+JH8E1zV0Tb4 2nrvrPaMCzHXm7yeLQ26r+WLiULD6UQNVql2IAL6MnG9PyDUsuXLuw6/uTrX12cC raCHATiKxHfrIeLIlLnNKprkeY6uhLPWaNd5nhVGugthvzDscSOf/RbMq1csXqD+ H3otutFp38MtEx+HPJPHvTGkq0CccbRtQymLz1vGWP3sqWQhgojhrh+m7X6Q8LTn cysLCyCwywTNAUVBE0VyinM/+o7WPm498eT6uP1lcIW3wKNr3lDLITniRIvVyKF9 OeOOIHOqP0B11Tq1umhg2ZQJbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGtVL09g WO4BgRbfU8U0s1mvrZkEMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpnTvGZBtcZDgfFKFGuQeXPOnvSi0eKzo0mfEpDhemY5TduhmOuP3Z/+3QDX Hq0SSfSXdWBxPUdGvm2nkZdIN6zy0mJd6BJV2YLJ/8fAS9NsAeK/vR3WlK6KNbnl 8WONDk++tTWY6cRC66ikqqeiKUciEMvrzI6iwVt0RxGnnhIxr9rz0shmnzhPio6e 9TRF+tLMhbKsem6oyNC5bwOm7lawEjTFWRtuskCkpl0WOxvgMTFvf21UJAZEJ6DF hF7IlbrDYSGvtJLn9chXttFCVY7OMT2BYuRqYMx05WV9/yPmjmUjzOCRSR+ImBUg wB9DM+HY4uDrVvDbJygshvhd9Q== -----END CERTIFICATE-----Generated at Sat Jun 13 02:21:02 2026 by rpki-client