$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: oEVBoZns3wLTbWYC71C4JgyWZVX2xuo5kqsmfuvU8lk= Subject key identifier: 75:5C:E3:80:DA:C9:95:25:C9:63:BC:16:17:30:A1:F3:DA:3E:6B:27 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0AC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0AB2 Signing time: Sat 18 Oct 2025 20:26:49 +0000 Manifest this update: Sat 18 Oct 2025 20:26:49 +0000 Manifest next update: Sat 25 Oct 2025 20:26:49 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: WXdgv37+rChHXA24/1xEGtDEPxolPwbJA5CtJe9PE5s=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2759 (0xac7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Oct 18 20:26:49 2025 GMT Not After : Oct 25 20:26:49 2025 GMT Subject: CN=68f3f809-77ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:dd:56:11:2c:6e:b8:55:71:3a:91:1a:99:b2: 5b:a5:05:1a:57:2b:d6:f7:60:cf:62:1d:12:93:a6: cf:a3:c4:c6:58:d0:fa:f8:36:9f:d8:91:2e:0b:dd: 52:b0:88:ef:a3:b3:55:97:3c:c6:6b:63:31:0b:52: 06:60:8a:c8:da:e9:8d:e8:3a:c2:c0:43:dd:7f:cc: 51:e1:fc:a0:d6:e0:a8:07:6f:ce:7a:95:f2:9f:7e: 4c:3e:5a:24:d8:d8:bc:92:64:1c:a1:16:17:2d:39: 02:2d:19:98:3d:f7:d2:93:53:fb:07:ea:3b:e9:51: f3:1a:33:fa:74:6a:2e:bf:16:bd:a1:c4:02:4d:69: e5:7d:fe:02:2b:1d:40:e9:04:80:27:cf:7f:26:a8: b5:ee:5e:b8:13:22:92:6c:42:53:42:8f:5a:7f:66: c6:64:3a:a9:78:6c:9b:10:60:51:04:f5:c0:ed:8a: 05:69:28:55:f9:4e:04:df:66:6d:82:97:9c:ce:e2: bc:40:1e:7e:56:e2:4c:68:19:c8:cf:cd:d7:be:44: c7:02:e0:1d:c2:b0:03:60:51:3d:8e:cd:0d:57:b0: 2c:e9:14:79:a7:92:29:b8:22:f1:d8:15:51:06:1e: 06:93:5b:98:d6:b7:e5:e2:ec:65:04:d6:93:3e:e3: e6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5C:E3:80:DA:C9:95:25:C9:63:BC:16:17:30:A1:F3:DA:3E:6B:27 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:73:47:cf:37:0e:0a:8e:dc:ca:73:e6:7b:69:66:b0:99:07: f8:0b:c6:1c:2a:c5:c4:d1:34:d7:a2:0b:d4:ac:61:44:07:d2: 69:b6:bf:dd:8d:33:7d:99:d1:67:09:a9:d9:66:ed:f2:74:a0: 1d:54:9f:eb:a5:50:e7:c1:07:50:da:61:14:2e:5a:7e:ae:44: 20:c4:83:27:59:cd:4e:a9:2b:9a:3b:34:8f:10:cc:7a:28:d4: 04:4d:c6:33:15:45:d5:0b:27:10:b8:18:e1:8d:97:68:03:08: 27:c0:58:73:c9:5f:8c:1d:5e:68:f5:8b:a0:46:79:ea:7f:f8: df:26:5a:56:44:57:6b:b8:8c:df:30:0d:0a:d8:6c:ef:05:8c: 0f:61:6b:87:a4:77:33:d6:86:ea:59:d7:7a:c2:1a:63:1d:10: a0:98:a6:d6:6e:59:07:e4:06:d9:2e:d2:94:a0:a8:0a:34:c2: c4:f2:64:e7:30:c4:6f:1f:3c:ae:e0:d8:c0:1c:08:69:4c:1a: 1a:b7:00:52:67:22:62:68:ff:c6:7e:e9:82:8b:f7:66:75:f8: 02:3b:cd:dd:d0:05:fa:79:8d:d9:59:40:c6:24:4b:9a:0a:67: 0d:2e:43:04:29:11:59:fe:6f:0e:69:eb:93:dd:4f:65:70:e3: d4:2f:ab:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUxMDE4MjAyNjQ5WhcNMjUxMDI1MjAyNjQ5WjAYMRYwFAYD VQQDEw02OGYzZjgwOS03N2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3d1WESxuuFVxOpEambJbpQUaVyvW92DPYh0Sk6bPo8TGWND6+Daf2JEuC91S sIjvo7NVlzzGa2MxC1IGYIrI2umN6DrCwEPdf8xR4fyg1uCoB2/OepXyn35MPlok 2Ni8kmQcoRYXLTkCLRmYPffSk1P7B+o76VHzGjP6dGouvxa9ocQCTWnlff4CKx1A 6QSAJ89/Jqi17l64EyKSbEJTQo9af2bGZDqpeGybEGBRBPXA7YoFaShV+U4E32Zt gpeczuK8QB5+VuJMaBnIz83XvkTHAuAdwrADYFE9js0NV7As6RR5p5IpuCLx2BVR Bh4Gk1uY1rfl4uxlBNaTPuPmRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVc44Da yZUlyWO8FhcwofPaPmsnMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMc0fPNw4KjtzKc+Z7aWawmQf4C8YcKsXE0TTXogvUrGFEB9Jptr/d jTN9mdFnCanZZu3ydKAdVJ/rpVDnwQdQ2mEULlp+rkQgxIMnWc1OqSuaOzSPEMx6 KNQETcYzFUXVCycQuBjhjZdoAwgnwFhzyV+MHV5o9YugRnnqf/jfJlpWRFdruIzf MA0K2GzvBYwPYWuHpHcz1obqWdd6whpjHRCgmKbWblkH5AbZLtKUoKgKNMLE8mTn MMRvHzyu4NjAHAhpTBoatwBSZyJiaP/GfumCi/dmdfgCO83d0AX6eY3ZWUDGJEua CmcNLkMEKRFZ/m8OaeuT3U9lcOPUL6u6 -----END CERTIFICATE-----Generated at Mon Oct 20 04:24:49 2025 by rpki-client