$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: ABUrNuUeomtUwwG010ihCkgRMzgZ9DxO+a2oEgXFiVY= Subject key identifier: D7:E3:75:E9:F2:E7:50:0E:8A:42:A2:1E:1B:52:A9:E5:B6:1D:59:C5 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B19 Signing time: Tue 28 Apr 2026 19:35:18 +0000 Manifest this update: Tue 28 Apr 2026 19:35:17 +0000 Manifest next update: Tue 05 May 2026 19:35:17 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: xDOtFFHuGXhSI/Sc4l27D1yD9ZOs5WN1U9z8erorBV4=) 2: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) 3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 19:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2868 (0xb34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Apr 28 19:35:17 2026 GMT Not After : May 5 19:35:17 2026 GMT Subject: CN=69f10bf5-2f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:56:66:fe:e4:7a:c7:26:a9:ef:d7:ad:ae:39: 83:00:33:54:06:0f:fb:02:a0:0c:fd:7f:c1:91:1a: d4:05:33:a3:93:4d:97:76:77:fd:d4:94:b9:53:23: 34:e2:48:bd:73:1e:1a:91:53:b3:f9:e1:43:23:7d: 80:27:a6:44:8d:ee:0a:1f:6e:30:0a:26:27:2c:ec: 30:bc:54:84:7e:8e:fb:8b:4c:b5:70:78:bf:07:b1: a5:82:cf:42:9a:10:70:36:6a:dc:90:bf:cb:0d:6d: b1:00:59:f1:42:5d:c5:0e:4a:ed:f4:2a:8d:69:5c: 3c:98:5d:d9:55:a5:8f:d2:1e:6d:0e:94:6c:c2:50: f5:36:43:bf:0a:d9:d2:67:0a:90:13:da:e5:9c:33: 58:f2:83:96:bd:fd:a1:2d:46:ac:37:65:22:d1:54: 96:bc:a9:5c:e8:81:6c:54:e8:ff:9b:d8:af:8f:7b: df:cf:2b:bb:f0:4a:cf:91:cc:23:7f:9b:86:52:3e: 88:24:fc:6e:db:56:18:1e:6f:9a:33:0f:d0:c8:f6: 40:dd:58:74:71:ac:46:dd:f6:7d:48:18:f9:66:ab: 3f:85:8d:21:d3:e0:7c:d6:90:b8:00:50:70:3c:38: 57:e4:a0:22:ff:01:ac:ed:42:a8:ab:14:ff:e0:cf: 4d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E3:75:E9:F2:E7:50:0E:8A:42:A2:1E:1B:52:A9:E5:B6:1D:59:C5 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:d7:b0:ae:cd:f4:cb:91:34:c2:e5:01:d6:02:80:3a:a3:8c: 03:cd:57:a7:f5:a7:31:5e:55:a0:77:2b:56:65:03:f8:db:d3: 75:7d:6c:fa:84:2f:3c:56:7d:42:0a:60:0c:38:e0:04:c5:70: ca:81:81:bf:f6:1c:38:cd:24:bb:04:ce:e6:f2:90:20:41:22: 43:d4:10:3e:91:2b:35:a6:04:77:48:62:c1:b3:20:ee:19:ad: 23:63:8d:94:e8:a1:45:69:0c:fc:dc:54:ed:33:4c:22:2c:22: 5a:6a:0a:8e:19:85:76:d3:c0:33:32:8d:dc:ef:b0:d0:de:36: da:fb:6f:0d:11:5d:bd:4b:04:b0:00:02:a3:08:8c:c9:4b:a3: cd:cd:c7:b3:45:66:59:c8:b7:89:75:d2:80:3f:ec:8b:d6:44: c3:c6:20:c3:de:17:11:4a:39:e8:d7:16:8d:f2:da:83:20:c2: 49:a0:0c:e6:c5:d4:fe:26:51:c2:60:5a:d7:ce:d3:ec:4e:98: 42:b0:49:af:d3:96:77:f8:d5:a9:29:3b:8f:c8:87:9d:fa:a1: 93:7a:ec:bd:25:41:aa:1c:88:06:90:0b:48:5c:26:10:18:a4: 01:a9:54:2f:dc:08:15:31:c2:d4:59:63:f8:7c:a9:f3:61:43: 6c:51:f5:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwNDI4MTkzNTE3WhcNMjYwNTA1MTkzNTE3WjAYMRYwFAYD VQQDEw02OWYxMGJmNS0yZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7lZm/uR6xyap79etrjmDADNUBg/7AqAM/X/BkRrUBTOjk02Xdnf91JS5UyM0 4ki9cx4akVOz+eFDI32AJ6ZEje4KH24wCiYnLOwwvFSEfo77i0y1cHi/B7Glgs9C mhBwNmrckL/LDW2xAFnxQl3FDkrt9CqNaVw8mF3ZVaWP0h5tDpRswlD1NkO/CtnS ZwqQE9rlnDNY8oOWvf2hLUasN2Ui0VSWvKlc6IFsVOj/m9ivj3vfzyu78ErPkcwj f5uGUj6IJPxu21YYHm+aMw/QyPZA3Vh0caxG3fZ9SBj5Zqs/hY0h0+B81pC4AFBw PDhX5KAi/wGs7UKoqxT/4M9N4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfjdeny 51AOikKiHhtSqeW2HVnFMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ9ewrs30y5E0wuUB1gKAOqOMA81Xp/WnMV5VoHcrVmUD+NvTdX1s+oQvPFZ9 QgpgDDjgBMVwyoGBv/YcOM0kuwTO5vKQIEEiQ9QQPpErNaYEd0hiwbMg7hmtI2ON lOihRWkM/NxU7TNMIiwiWmoKjhmFdtPAMzKN3O+w0N422vtvDRFdvUsEsAACowiM yUujzc3Hs0VmWci3iXXSgD/si9ZEw8Ygw94XEUo56NcWjfLagyDCSaAM5sXU/iZR wmBa187T7E6YQrBJr9OWd/jVqSk7j8iHnfqhk3rsvSVBqhyIBpALSFwmEBikAalU L9wIFTHC1Flj+Hyp82FDbFH13A== -----END CERTIFICATE-----Generated at Tue Apr 28 22:16:35 2026 by rpki-client