$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: YvkLi2YrwSqPLfUF82J/qWR2i14TZyZQia8uSheiGOU= Subject key identifier: 91:DA:B5:EE:B6:F1:2C:26:FF:3D:9D:BF:DB:EF:53:8C:65:A6:F6:C6 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B44 Signing time: Wed 22 Jul 2026 19:35:13 +0000 Manifest this update: Wed 22 Jul 2026 19:35:13 +0000 Manifest next update: Wed 29 Jul 2026 19:35:13 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: a2evaFsi4YO154v3D6TJLl0djsnsbUey7gKFqnIWAbQ=) 2: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) 3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) 4: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:35:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Jul 22 19:35:13 2026 GMT Not After : Jul 29 19:35:13 2026 GMT Subject: CN=6a611b71-ec4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:83:4b:29:be:c7:b6:14:d5:8d:ca:5e:f2:72: c5:2f:ab:28:8e:ce:44:ec:13:b8:dc:96:99:1b:72: 2a:9c:ce:a0:37:ef:c4:92:2e:f8:dd:e8:81:a4:67: 23:45:a6:b0:58:d8:3a:75:46:56:b4:cc:2a:fc:95: 9e:ea:65:cd:9b:63:b4:d4:39:01:24:66:a3:6a:8d: 7d:82:69:1b:76:ce:26:d7:ac:57:79:78:83:2e:8f: 74:77:1b:09:e9:5f:b0:92:d0:a8:bc:c5:1e:c1:70: 7a:ee:e0:e5:ab:3a:18:52:f6:30:8d:b4:bb:83:19: d5:b4:76:b0:47:73:8a:a4:0c:f6:89:1e:ee:1a:75: 09:33:df:88:c5:eb:68:ef:59:e5:17:55:52:c4:04: a6:1f:08:49:0c:07:8b:84:0c:be:8a:c7:e4:39:2c: 52:bf:32:2c:77:19:96:bc:5b:98:ae:f2:98:21:72: bd:9d:2a:f7:b2:1b:58:8b:13:92:1d:49:e7:9f:23: 40:9b:77:19:69:28:d7:21:ca:b2:c2:ce:60:7d:bf: 46:8d:53:5e:e8:cd:8e:a5:85:ee:cd:c8:ad:d1:b5: 5c:fb:00:59:45:00:5a:4b:50:a5:6f:90:4f:44:43: 54:c2:5d:0a:25:12:fa:10:83:d1:ac:95:5e:98:1c: 82:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:DA:B5:EE:B6:F1:2C:26:FF:3D:9D:BF:DB:EF:53:8C:65:A6:F6:C6 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f0:94:99:12:db:89:38:15:70:e8:71:2f:cd:d2:59:8a:11: 43:98:d5:e1:14:4f:da:b6:ab:79:1a:09:22:ab:e6:cf:16:00: c5:bd:c6:03:0d:97:c8:53:4c:cc:e3:44:0b:a8:8f:31:db:e7: ce:1a:aa:0c:03:7e:ad:b4:2b:03:16:b3:03:42:10:fc:6e:bf: ec:c9:d4:26:45:42:a5:b7:c0:f9:6c:27:05:75:a0:99:9d:28: c4:f8:ad:73:63:8a:0f:a0:f6:1d:cf:b2:85:45:6a:4d:ae:ef: 21:d5:d4:9b:7d:31:38:cb:01:b9:0d:62:59:4e:86:45:c7:2d: ab:3b:a6:e5:74:d6:5a:99:f7:ff:b9:e2:24:37:7b:b0:1a:59: ca:58:e0:a2:d0:e5:f1:f9:03:ee:8d:3e:03:f0:07:e4:5f:23: ee:9b:9d:df:2c:59:3b:d3:1e:c1:01:4a:bb:15:07:69:d1:ff: ab:b7:80:75:af:29:27:e0:65:bb:2d:84:e3:3f:23:0e:f9:34: c6:8a:8b:40:e0:92:7f:a6:f9:24:91:75:59:5b:1f:77:6b:62: 52:8d:f4:ed:b3:5b:7e:e2:6d:15:bf:18:3b:1a:7c:da:c8:47: 93:21:68:fc:fa:8b:c7:88:dc:10:e3:1b:e3:cc:ac:46:6d:94: 1e:b3:72:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwNzIyMTkzNTEzWhcNMjYwNzI5MTkzNTEzWjAYMRYwFAYD VQQDEw02YTYxMWI3MS1lYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYNLKb7HthTVjcpe8nLFL6sojs5E7BO43JaZG3IqnM6gN+/Eki743eiBpGcj RaawWNg6dUZWtMwq/JWe6mXNm2O01DkBJGajao19gmkbds4m16xXeXiDLo90dxsJ 6V+wktCovMUewXB67uDlqzoYUvYwjbS7gxnVtHawR3OKpAz2iR7uGnUJM9+Ixeto 71nlF1VSxASmHwhJDAeLhAy+isfkOSxSvzIsdxmWvFuYrvKYIXK9nSr3shtYixOS HUnnnyNAm3cZaSjXIcqyws5gfb9GjVNe6M2OpYXuzcit0bVc+wBZRQBaS1Clb5BP RENUwl0KJRL6EIPRrJVemByCkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJHate62 8Swm/z2dv9vvU4xlpvbGMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATvCUmRLbiTgVcOhxL83SWYoRQ5jV4RRP2rareRoJIqvmzxYAxb3GAw2XyFNM zONEC6iPMdvnzhqqDAN+rbQrAxazA0IQ/G6/7MnUJkVCpbfA+WwnBXWgmZ0oxPit c2OKD6D2Hc+yhUVqTa7vIdXUm30xOMsBuQ1iWU6GRcctqzum5XTWWpn3/7niJDd7 sBpZyljgotDl8fkD7o0+A/AH5F8j7pud3yxZO9MewQFKuxUHadH/q7eAda8pJ+Bl uy2E4z8jDvk0xoqLQOCSf6b5JJF1WVsfd2tiUo307bNbfuJtFb8YOxp82shHkyFo /PqLx4jcEOMb48ysRm2UHrNyWg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:42:09 2026 by rpki-client