$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: bgb+RoO6z1E6BQN/k0Ssmw+y6MKEMns8yTeDPnu4WW8= Subject key identifier: 5E:DD:22:A0:BC:4B:91:10:D6:FC:C0:43:55:A7:FF:A8:77:04:0C:BD Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0AFF Signing time: Thu 12 Mar 2026 19:05:20 +0000 Manifest this update: Thu 12 Mar 2026 19:05:19 +0000 Manifest next update: Thu 19 Mar 2026 19:05:19 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: 8kCkdORvkJ3F+iIO+bz3hmiBgAv2L0GvkRMle5v3y48=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: Qu2JDumVN6b8tNABInbNdA37BfFxwaTrDOYwxkHWuKA=) 3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: MUgYpe6y/VZM42iKbX4c1gmD81W4UQCvDxPF4cD1GZQ=) 4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: GQpQS4bbu93VVK5ri5hv0VdDKnOsT+IN3clXgDMzWRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 19:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2839 (0xb17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Mar 12 19:05:19 2026 GMT Not After : Mar 19 19:05:19 2026 GMT Subject: CN=69b30e70-21f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:b0:c7:ad:3f:29:19:b2:92:bf:8d:bc:87: 80:01:69:c1:6f:3f:1e:17:7a:1f:bc:36:c8:14:d3: 04:bf:04:69:20:d7:d1:f2:1e:cd:9c:35:e1:10:82: 62:05:60:f6:aa:63:2e:8e:a2:27:01:68:c5:e2:07: b6:e9:51:83:28:a9:39:b0:ad:83:7f:6c:23:ee:0a: d8:27:6f:13:bd:9a:9d:de:a6:1b:10:01:93:0d:29: 80:7f:86:72:e4:4e:69:46:06:71:40:b0:90:e1:48: b2:b8:a0:6e:34:c2:a2:30:76:83:b9:68:db:8e:9d: 69:bf:48:a4:2b:28:41:39:a3:31:26:6a:58:18:58: 64:45:0e:ea:7e:e1:49:02:79:e5:b2:27:a9:cd:dd: 3c:bb:58:4c:94:a7:8f:6d:cb:06:69:99:db:41:d4: ba:a4:9d:66:5b:e1:2f:39:b8:7f:f5:33:af:d1:9a: f9:87:48:d9:78:65:9e:18:34:39:21:b5:d4:36:df: 94:0b:e2:8e:24:92:c2:51:89:e0:93:6f:e6:61:2d: 79:1a:00:ee:63:6c:dc:62:e4:07:8c:93:7c:5e:5c: 63:aa:53:f2:26:f7:9b:92:6b:2f:5d:a8:7d:84:a3: 7c:a3:1e:4e:7b:1b:af:bb:56:d1:3d:63:96:7e:67: 76:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:22:A0:BC:4B:91:10:D6:FC:C0:43:55:A7:FF:A8:77:04:0C:BD X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:12:11:28:47:dc:16:98:51:3a:23:58:44:80:40:6f:77:dd: 07:1f:d8:29:77:90:62:83:df:ff:89:da:cf:12:a1:fb:5f:08: 69:4f:06:b9:3c:79:aa:35:3d:c2:db:1f:3d:d9:3b:50:9a:e7: 56:d6:7b:6d:23:24:21:30:e3:ac:94:cf:a9:49:f2:0f:21:82: b9:21:ad:10:68:b1:1b:dd:2f:b9:41:d7:e1:a5:b1:0a:1e:c7: 22:e4:a3:94:ba:84:05:b4:5f:09:c8:c9:47:c7:09:6a:77:f6: d9:0d:3f:94:54:b1:74:f8:43:b3:7c:7f:b8:8c:b3:2a:e3:ff: b6:4c:3c:e2:1b:d2:13:17:da:cf:37:27:74:84:be:f0:6d:58: 48:ba:99:7f:5b:56:99:89:4b:59:d6:47:50:59:87:7c:d1:da: 7a:47:d4:2f:e0:32:96:aa:89:16:e4:c4:99:d7:17:da:8b:b2: ec:43:88:b7:ef:b0:5e:58:42:c6:da:2c:6a:f1:a0:2e:bd:bc: a1:84:3a:a7:99:cc:61:be:73:6a:12:16:f5:ad:6d:4d:94:cd: d1:e5:c7:15:26:a3:6a:e4:2b:a7:aa:b8:67:ba:8a:55:0c:cb: ff:10:a2:a0:d3:62:b9:0c:05:48:2d:95:2d:aa:21:f6:f6:f1: dd:7a:e6:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwMzEyMTkwNTE5WhcNMjYwMzE5MTkwNTE5WjAYMRYwFAYD VQQDEw02OWIzMGU3MC0yMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mywx60/KRmykr+NvIeAAWnBbz8eF3ofvDbIFNMEvwRpINfR8h7NnDXhEIJi BWD2qmMujqInAWjF4ge26VGDKKk5sK2Df2wj7grYJ28TvZqd3qYbEAGTDSmAf4Zy 5E5pRgZxQLCQ4UiyuKBuNMKiMHaDuWjbjp1pv0ikKyhBOaMxJmpYGFhkRQ7qfuFJ Annlsiepzd08u1hMlKePbcsGaZnbQdS6pJ1mW+EvObh/9TOv0Zr5h0jZeGWeGDQ5 IbXUNt+UC+KOJJLCUYngk2/mYS15GgDuY2zcYuQHjJN8XlxjqlPyJvebkmsvXah9 hKN8ox5Oexuvu1bRPWOWfmd2GwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7dIqC8 S5EQ1vzAQ1Wn/6h3BAy9MB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwBIRKEfcFphROiNYRIBAb3fdBx/YKXeQYoPf/4nazxKh+18IaU8GuTx5qjU9 wtsfPdk7UJrnVtZ7bSMkITDjrJTPqUnyDyGCuSGtEGixG90vuUHX4aWxCh7HIuSj lLqEBbRfCcjJR8cJanf22Q0/lFSxdPhDs3x/uIyzKuP/tkw84hvSExfazzcndIS+ 8G1YSLqZf1tWmYlLWdZHUFmHfNHaekfUL+AylqqJFuTEmdcX2ouy7EOIt++wXlhC xtosavGgLr28oYQ6p5nMYb5zahIW9a1tTZTN0eXHFSajauQrp6q4Z7qKVQzL/xCi oNNiuQwFSC2VLaoh9vbx3Xrm6Q== -----END CERTIFICATE-----Generated at Sat Mar 14 07:35:58 2026 by rpki-client