$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: cYYshG4SIKn027+qT9Qlv32PQmI8bRCeYx5m0uhHlU4= Subject key identifier: 3F:32:0E:4D:30:AD:26:FD:23:E9:C3:D6:5C:34:24:1F:03:50:E5:3E Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 08C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 089A Signing time: Wed 22 Jul 2026 21:17:00 +0000 Manifest this update: Wed 22 Jul 2026 21:17:00 +0000 Manifest next update: Wed 29 Jul 2026 21:17:00 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: wG0+VbKmdjUdOSOiAonOYh31sW88QIqKNQNigZ9zPcw=) 2: 1069D50EB54B11F092E79246C4F9AE02.roa (hash: JsUeiXEOmuVUlO8HRg1GmGUUo3Dnw9BhGmxQtqKXIUU=) 3: 4314DB4C8EAF11F091C0B421C4F9AE02.roa (hash: v7v6WaMiJJgHGJFslronZNjFXcWnrbiRDd5BXO1kv5Q=) 4: A576C5087C3311F1890EBC415EA30FBC.roa (hash: o1LaRtnUxR5FRr8B3BX8B3EB9L3DEMtxsK/GkL6V8bI=) 5: 1DB0529C7CA711F0A52C5966C4F9AE02.roa (hash: Jad+xXpbo9F1Si83r3/4thdMZxhxo4YYl8MwD9607wo=) 6: 6228B5D67C3311F1A4365A405EA30FBC.roa (hash: bNk8VvQSntb32870a6p2htFO1hzD7/gwJIAsb7UOcxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2247 (0x8c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Jul 22 21:17:00 2026 GMT Not After : Jul 29 21:17:00 2026 GMT Subject: CN=6a61334c-a397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:b3:f5:33:65:ae:83:da:91:61:97:1d:20: 74:0c:e1:24:5f:31:7b:22:ff:64:97:20:a0:9e:51: 7b:90:83:df:bb:20:ac:03:05:af:2c:be:67:f2:a2: 87:27:3a:ab:16:6a:6e:a7:62:b0:f3:ca:f4:8c:0b: 88:db:d5:96:b1:77:8d:40:eb:7e:b8:40:e7:46:32: c0:ab:f2:4e:52:d1:25:b4:12:37:66:d6:5a:1d:68: c9:fb:33:19:be:78:fe:d3:12:ad:bc:a3:64:50:69: bf:14:75:f9:50:33:22:6f:15:57:af:da:35:62:83: 60:ad:5c:a6:16:79:b2:95:b9:33:28:2f:9e:d5:16: 1b:1c:ee:d1:09:6f:17:ed:65:4e:52:64:f0:2d:52: fb:7e:51:6d:53:bf:44:2b:0f:31:7b:8d:1b:48:46: 33:5a:fb:b2:3b:f5:5f:d2:6b:a1:f3:c3:13:9b:8e: 50:61:a1:df:90:de:4a:b1:88:a3:d0:ce:61:1b:ab: 3f:a5:2c:30:61:f1:35:1f:90:0f:c5:8a:03:06:75: ec:c5:97:aa:5c:1f:6e:b9:df:ef:aa:66:f5:a2:9f: d5:c1:c9:36:c0:c7:6f:bf:f8:11:61:0e:ed:96:88: a7:a9:d3:09:d3:52:f5:3f:91:26:db:6d:f7:45:1c: f3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:0E:4D:30:AD:26:FD:23:E9:C3:D6:5C:34:24:1F:03:50:E5:3E X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b0:d7:ac:87:c5:ef:c9:ed:14:4b:41:ed:42:08:c7:74:9b: fa:39:b2:7c:23:45:ee:5a:fc:de:56:c2:f0:90:03:fc:25:67: 44:90:42:40:a7:16:e5:a9:43:b9:14:3f:8a:d8:90:c7:30:79: ee:77:9b:bb:ed:15:4b:5e:dd:df:19:2d:73:d3:2f:9f:4a:73: cd:ae:f9:aa:4e:9c:93:41:b6:e0:e3:ca:44:94:0b:d4:a4:14: 26:72:26:58:71:e7:9f:28:44:66:c0:68:9e:3b:85:34:3f:6a: 75:92:d5:61:3e:b6:61:ed:aa:b4:c3:5b:2f:14:77:dd:6f:c1: a7:cd:0f:d8:2e:77:91:1a:9d:d2:7a:82:ba:8b:c7:f4:56:a0: 0f:bf:05:cc:52:80:c9:89:76:a5:e3:97:51:9c:29:a9:3f:55: d5:87:d4:74:b7:4c:39:c4:3d:d7:88:ae:cb:f1:9b:d6:38:d6: 20:31:e0:36:45:32:08:6a:cc:a0:07:2c:41:f3:25:ca:c7:81: 7a:67:69:42:bd:62:4f:7d:7a:3d:e8:d9:45:e8:3f:41:dc:de: 12:07:80:ad:18:4d:1f:3e:a5:2c:ba:2c:67:c1:ac:02:a4:6d: 69:65:14:8b:b6:fb:3d:c9:0b:2d:47:48:73:3a:0e:2e:19:0e: c3:d1:ae:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjYwNzIyMjExNzAwWhcNMjYwNzI5MjExNzAwWjAYMRYwFAYD VQQDEw02YTYxMzM0Yy1hMzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumGz9TNlroPakWGXHSB0DOEkXzF7Iv9klyCgnlF7kIPfuyCsAwWvLL5n8qKH JzqrFmpup2Kw88r0jAuI29WWsXeNQOt+uEDnRjLAq/JOUtEltBI3ZtZaHWjJ+zMZ vnj+0xKtvKNkUGm/FHX5UDMibxVXr9o1YoNgrVymFnmylbkzKC+e1RYbHO7RCW8X 7WVOUmTwLVL7flFtU79EKw8xe40bSEYzWvuyO/Vf0muh88MTm45QYaHfkN5KsYij 0M5hG6s/pSwwYfE1H5APxYoDBnXsxZeqXB9uud/vqmb1op/Vwck2wMdvv/gRYQ7t loinqdMJ01L1P5Em2233RRzzoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8yDk0w rSb9I+nD1lw0JB8DUOU+MB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACrDXrIfF78ntFEtB7UIIx3Sb+jmyfCNF7lr83lbC8JAD/CVnRJBCQKcW5alD uRQ/itiQxzB57nebu+0VS17d3xktc9Mvn0pzza75qk6ck0G24OPKRJQL1KQUJnIm WHHnnyhEZsBonjuFND9qdZLVYT62Ye2qtMNbLxR33W/Bp80P2C53kRqd0nqCuovH 9FagD78FzFKAyYl2peOXUZwpqT9V1YfUdLdMOcQ914iuy/Gb1jjWIDHgNkUyCGrM oAcsQfMlyseBemdpQr1iT316PejZReg/QdzeEgeArRhNHz6lLLosZ8GsAqRtaWUU i7b7PckLLUdIczoOLhkOw9GudQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:42:28 2026 by rpki-client