$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: nVUiJzvomMitz9CM+LLFxVJYtZvSU7c4BKD6AZSCeaA= Subject key identifier: 3C:43:35:DB:0F:5D:05:89:D5:57:59:55:5A:69:33:6C:B6:88:CD:97 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B65 Signing time: Thu 24 Sep 2026 19:08:00 +0000 Manifest this update: Thu 24 Sep 2026 19:07:59 +0000 Manifest next update: Thu 01 Oct 2026 19:07:59 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: lIu9Rny3+Kl8FVLkkP0AZIUk1HrAsfqKi7UiHrr1I9I=) 2: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) 4: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 19:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2944 (0xb80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Sep 24 19:07:59 2026 GMT Not After : Oct 1 19:07:59 2026 GMT Subject: CN=6ab57510-a0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:b5:f5:b2:ac:fa:10:e7:41:2b:6e:8b:17: 7c:5b:c0:28:f5:29:2d:7e:53:1a:f7:7c:8e:d6:6b: ef:7b:55:f6:6f:ff:fb:57:32:f3:d7:16:67:8e:05: aa:b5:37:ab:67:1e:e9:9d:23:3e:00:23:7a:aa:d5: eb:0a:42:a7:1d:01:44:83:5f:58:c6:08:98:32:bf: f9:2b:7c:1e:01:99:cf:5e:f9:86:be:37:d5:1b:25: b5:9d:a7:bf:7f:ea:54:d8:02:2e:73:86:92:2d:f8: 77:5d:a0:a0:69:de:d3:2f:c8:1a:7d:11:99:93:1a: 7b:04:50:cb:58:3c:43:7b:d0:5d:7b:2c:46:1a:4f: d9:b9:41:d4:db:5a:02:bb:98:60:d5:7b:2f:e4:92: 46:b4:08:42:c8:4f:3b:f4:16:be:97:98:15:ac:9d: bc:aa:33:03:93:4e:dd:5f:58:1e:67:66:bb:69:22: 1d:72:d6:3e:c0:1e:93:ac:92:7d:3b:52:4f:9a:84: 08:2f:5c:5d:0f:c2:a1:29:32:74:15:c0:d8:fd:53: 46:8a:02:32:4f:f2:47:69:d3:09:ad:23:e5:a8:26: 3b:9f:a3:f1:d6:dd:9e:d2:a4:fb:90:06:dc:78:c4: 12:29:56:bf:71:d1:6c:57:91:6d:41:60:2b:13:73: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:43:35:DB:0F:5D:05:89:D5:57:59:55:5A:69:33:6C:B6:88:CD:97 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:75:e5:5c:1e:98:90:16:06:f4:50:3c:ab:80:d8:f1:0a:bf: cb:7e:11:68:c9:5c:3a:68:74:7b:bd:49:00:a1:f9:31:ec:b5: d6:92:9c:c5:92:6b:99:e1:5b:e2:01:cf:64:b6:22:60:ec:ba: d0:d2:42:7e:72:09:da:01:55:b1:51:42:b4:24:50:09:d1:74: 36:27:a8:1a:00:2c:81:2d:63:5a:07:3c:2d:ae:d7:17:fe:e5: f5:52:99:9c:91:0e:10:9f:7e:93:bf:e1:6f:7b:14:4b:bf:f6: 8e:3f:db:ca:3c:ae:fd:84:2d:63:13:6d:2c:4d:24:0e:84:d7: fe:74:d2:49:01:b3:7f:19:29:89:01:48:13:cb:4a:55:62:4b: 44:8d:db:b1:87:da:b1:9d:50:41:f9:9f:c2:65:5c:37:74:6b: 18:4a:76:6f:84:c3:71:14:41:6c:d3:a5:d2:dd:fe:11:78:8c: 3a:05:ce:92:3f:73:ee:e1:06:5b:76:7e:c3:99:62:01:ac:12: 38:2d:e6:39:7b:5e:12:f6:4c:1a:d1:2d:7b:33:6a:42:18:4f: ac:bc:39:e4:d0:65:5e:bc:6a:0e:34:84:70:61:95:e1:18:b9: 5f:cb:f8:d9:5d:df:e4:4a:a2:4c:d7:15:4f:fa:b1:11:14:21: bc:5a:ec:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwOTI0MTkwNzU5WhcNMjYxMDAxMTkwNzU5WjAYMRYwFAYD VQQDEw02YWI1NzUxMC1hMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNa19bKs+hDnQStuixd8W8Ao9SktflMa93yO1mvve1X2b//7VzLz1xZnjgWq tTerZx7pnSM+ACN6qtXrCkKnHQFEg19YxgiYMr/5K3weAZnPXvmGvjfVGyW1nae/ f+pU2AIuc4aSLfh3XaCgad7TL8gafRGZkxp7BFDLWDxDe9BdeyxGGk/ZuUHU21oC u5hg1Xsv5JJGtAhCyE879Ba+l5gVrJ28qjMDk07dX1geZ2a7aSIdctY+wB6TrJJ9 O1JPmoQIL1xdD8KhKTJ0FcDY/VNGigIyT/JHadMJrSPlqCY7n6Px1t2e0qT7kAbc eMQSKVa/cdFsV5FtQWArE3OFvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDxDNdsP XQWJ1VdZVVppM2y2iM2XMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA5XXlXB6YkBYG9FA8q4DY8Qq/y34RaMlcOmh0e71JAKH5Mey11pKcxZJrmeFb 4gHPZLYiYOy60NJCfnIJ2gFVsVFCtCRQCdF0NieoGgAsgS1jWgc8La7XF/7l9VKZ nJEOEJ9+k7/hb3sUS7/2jj/byjyu/YQtYxNtLE0kDoTX/nTSSQGzfxkpiQFIE8tK VWJLRI3bsYfasZ1QQfmfwmVcN3RrGEp2b4TDcRRBbNOl0t3+EXiMOgXOkj9z7uEG W3Z+w5liAawSOC3mOXteEvZMGtEtezNqQhhPrLw55NBlXrxqDjSEcGGV4Ri5X8v4 2V3f5EqiTNcVT/qxERQhvFrsiA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:06:03 2026 by rpki-client