$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: nKdmLnZh9WkNVtm9AoBUNMcHYlfO7AzxPNojoXmyhV4= Subject key identifier: 30:05:E0:B5:9C:B9:EA:04:52:BB:3A:22:31:0D:A0:49:8E:B2:4F:0D Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B5E Signing time: Thu 10 Sep 2026 19:08:50 +0000 Manifest this update: Thu 10 Sep 2026 19:08:49 +0000 Manifest next update: Thu 17 Sep 2026 19:08:49 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: n6Tk8Et6Ln4GjEyZPGq6Qus5gWIIng4J3RRHho1Nvd0=) 2: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) 4: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Sep 10 19:08:49 2026 GMT Not After : Sep 17 19:08:49 2026 GMT Subject: CN=6aa30042-3bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:6b:83:53:32:c3:7a:06:b3:a3:0a:ca:54: 8a:8d:81:15:af:de:7d:6b:aa:9b:65:a0:0a:7b:90: cf:12:ba:ec:5e:b9:b6:0f:be:1e:75:66:45:4e:6e: 0f:29:88:40:8f:cb:e1:d6:68:14:0a:df:1c:03:5b: 77:d6:b1:99:06:2f:29:c0:e1:70:23:52:1b:e7:da: 3a:f5:e0:60:7e:76:b3:a3:d3:11:1e:fd:d6:70:c4: eb:27:aa:85:f3:51:52:3b:b1:03:1c:66:b4:2e:97: 3f:ea:ca:96:7d:87:a6:02:a1:56:92:64:55:7c:4a: d1:04:2c:23:36:a7:95:eb:9e:ca:9d:1f:db:09:42: 69:28:98:6a:e2:d6:e6:9c:41:b2:36:73:d4:52:1a: dd:ca:fd:ba:60:bc:c3:f6:2c:28:4f:e8:6a:7a:fe: 68:c0:4c:d4:93:ff:f8:b5:35:fd:7c:a7:45:31:29: d0:4d:e8:ae:71:0e:09:be:b8:82:50:55:38:78:58: 9b:72:27:21:7b:f1:b2:eb:4f:d6:d2:ca:37:37:ce: da:e7:f5:83:6e:22:cf:b9:bb:70:45:3b:58:a6:2e: b2:50:a6:21:d2:24:5f:d6:e5:85:1a:45:2f:3b:aa: 14:8f:bf:35:e3:19:ff:73:c6:ad:c3:fe:7c:62:3f: 93:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:05:E0:B5:9C:B9:EA:04:52:BB:3A:22:31:0D:A0:49:8E:B2:4F:0D X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7f:f6:f6:cc:87:bb:aa:c6:51:fa:e7:47:75:e9:80:19:97: 2b:24:74:ff:ab:ba:1d:64:0c:5c:94:82:7f:ea:57:21:90:92: f7:9f:6e:88:83:b0:a6:08:ce:de:70:d9:b9:2f:eb:1f:ff:95: c8:0a:51:5f:07:af:9a:56:01:ea:7c:a3:73:a3:86:89:3f:d7: 39:8c:ed:af:b7:d2:ca:82:2b:47:61:7a:f6:b2:93:96:2d:1b: bf:27:f3:ab:19:67:66:bf:7d:c8:e0:6a:d7:50:ec:69:68:50: 4b:ea:c8:2b:ba:f7:27:6e:0f:76:82:2d:84:fb:0e:0d:c9:2f: a4:81:6e:bd:2e:3f:d0:3e:37:46:f7:f9:05:ff:c0:cc:da:c9: 16:f0:49:b9:ee:85:25:92:82:0e:44:35:18:c0:b7:a9:ac:0f: f2:7a:4c:2a:0d:0f:c7:0f:6e:09:f9:71:9d:24:91:ee:03:6f: 0b:49:b0:13:7d:a7:a2:fa:3d:f8:3d:17:f9:00:96:3f:69:2f: 2d:50:04:0e:77:b0:83:b2:10:73:17:ed:5d:a6:71:8e:02:bc: e8:af:88:1a:24:41:1d:5a:66:ea:f3:a8:fc:ff:6d:3d:85:ac: 7b:72:ce:38:53:c9:87:ec:94:2b:56:da:b5:fe:3d:48:dc:1d: 4a:3b:c6:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwOTEwMTkwODQ5WhcNMjYwOTE3MTkwODQ5WjAYMRYwFAYD VQQDEw02YWEzMDA0Mi0zYmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYRrg1Myw3oGs6MKylSKjYEVr959a6qbZaAKe5DPErrsXrm2D74edWZFTm4P KYhAj8vh1mgUCt8cA1t31rGZBi8pwOFwI1Ib59o69eBgfnazo9MRHv3WcMTrJ6qF 81FSO7EDHGa0Lpc/6sqWfYemAqFWkmRVfErRBCwjNqeV657KnR/bCUJpKJhq4tbm nEGyNnPUUhrdyv26YLzD9iwoT+hqev5owEzUk//4tTX9fKdFMSnQTeiucQ4JvriC UFU4eFibciche/Gy60/W0so3N87a5/WDbiLPubtwRTtYpi6yUKYh0iRf1uWFGkUv O6oUj7814xn/c8atw/58Yj+TnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDAF4LWc ueoEUrs6IjENoEmOsk8NMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOH/29syHu6rGUfrnR3XpgBmXKyR0/6u6HWQMXJSCf+pXIZCS959uiIOwpgjO 3nDZuS/rH/+VyApRXwevmlYB6nyjc6OGiT/XOYztr7fSyoIrR2F69rKTli0bvyfz qxlnZr99yOBq11DsaWhQS+rIK7r3J24PdoIthPsODckvpIFuvS4/0D43Rvf5Bf/A zNrJFvBJue6FJZKCDkQ1GMC3qawP8npMKg0Pxw9uCflxnSSR7gNvC0mwE32novo9 +D0X+QCWP2kvLVAEDnewg7IQcxftXaZxjgK86K+IGiRBHVpm6vOo/P9tPYWse3LO OFPJh+yUK1batf49SNwdSjvG8Q== -----END CERTIFICATE-----Generated at Fri Sep 11 14:52:21 2026 by rpki-client