$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: 9doo+x2PIm0K6Ey+RT9Q0GDL8den9jzgyRXLkgDZK3I= Subject key identifier: 32:85:5E:E9:61:4B:7C:63:09:97:9E:D4:30:C5:F6:5A:19:62:6F:3D Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0A95 Signing time: Fri 22 Aug 2025 19:41:28 +0000 Manifest this update: Fri 22 Aug 2025 19:41:28 +0000 Manifest next update: Fri 29 Aug 2025 19:41:28 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: tztO2M5zjlucYK/7Frz+yB7EgTtpykq8eKZthY2CK0s=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) 3: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2730 (0xaaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Aug 22 19:41:28 2025 GMT Not After : Aug 29 19:41:28 2025 GMT Subject: CN=68a8c7e8-a228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:8d:eb:65:1b:fd:ba:92:f6:8a:1a:c3:26: 50:2e:e5:e7:65:06:c6:d9:36:42:4f:2d:e4:7d:13: 49:1d:cb:fa:ce:ea:c7:f0:be:d4:1c:35:ed:ca:14: ba:d3:e5:98:6f:d0:b5:5c:88:0f:be:3c:63:11:67: 46:5b:22:97:6f:ba:4b:7c:e0:b1:f4:f2:e5:98:66: 80:28:17:ea:05:c8:7c:64:d0:1f:63:a0:a4:f4:11: c7:a0:18:08:64:b2:a2:7e:b4:ea:d0:35:8a:ad:2f: 1c:a1:b2:9e:43:17:df:94:8c:16:d7:8f:3f:4d:02: 01:38:fd:35:24:41:1f:ff:d2:fb:c1:eb:a7:85:25: 14:12:17:b1:87:59:39:82:11:9d:29:b5:7e:0c:73: 5f:d4:7e:57:19:4c:d5:e2:3c:f7:d3:66:c5:e3:83: e7:ee:ac:7d:fb:cc:04:39:00:c5:b9:34:bb:f6:ab: 96:60:7f:d9:b2:9c:9a:e8:e6:e2:56:64:5e:6a:e5: 72:bf:de:7f:32:d5:19:d2:27:ac:8d:5e:2f:62:b6: bf:f5:56:15:68:36:83:b0:99:06:0c:58:fd:78:4b: ba:87:2f:7a:57:d9:48:e9:60:79:d4:1b:d3:96:a2: 55:db:f5:52:5b:ea:32:d4:db:27:dc:0a:18:1d:bb: 45:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:85:5E:E9:61:4B:7C:63:09:97:9E:D4:30:C5:F6:5A:19:62:6F:3D X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:2d:15:96:3b:86:0d:78:be:76:fb:b7:83:11:a6:0a:be:a2: 9c:55:f9:55:33:48:27:32:af:51:43:6e:12:ad:b3:cf:2e:c8: f5:c9:3f:ed:fe:e5:30:be:9b:fa:84:a5:a5:3d:a9:e1:21:c0: 40:4e:04:48:b7:15:a2:eb:af:e8:fe:e8:b8:e5:c9:c3:08:77: a0:24:6e:f3:f8:f8:f0:de:1d:2a:62:38:e8:04:c7:1e:e3:eb: c3:b3:e8:07:84:d4:7e:d4:54:62:44:61:81:dd:eb:9e:64:f1: c5:f4:73:78:53:3e:9a:d6:f3:99:1c:30:90:8f:b1:44:86:cc: 10:e3:e6:6a:f2:d7:fa:50:db:73:fa:97:14:c2:17:a2:15:1e: 33:22:3f:5f:e6:f0:03:f2:70:39:9d:0b:7c:00:04:7c:0e:7d: 70:db:b4:49:29:ed:bf:83:27:4b:29:11:37:3d:ab:ad:08:0a: 6d:2a:a4:a1:82:e9:b8:c9:3e:a5:9b:9f:77:92:f8:6b:d4:21: 46:4e:89:9c:42:04:8e:91:89:44:c3:0b:15:bb:07:11:bc:72: 1f:ca:a8:ae:99:55:47:f2:cf:96:3d:1e:11:da:84:52:b6:b2: 08:fb:34:84:7e:18:a9:27:69:b0:6c:10:d9:7a:73:4f:8a:e2: c8:7b:87:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjUwODIyMTk0MTI4WhcNMjUwODI5MTk0MTI4WjAYMRYwFAYD VQQDEw02OGE4YzdlOC1hMjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7eN62Ub/bqS9ooawyZQLuXnZQbG2TZCTy3kfRNJHcv6zurH8L7UHDXtyhS6 0+WYb9C1XIgPvjxjEWdGWyKXb7pLfOCx9PLlmGaAKBfqBch8ZNAfY6Ck9BHHoBgI ZLKifrTq0DWKrS8cobKeQxfflIwW148/TQIBOP01JEEf/9L7weunhSUUEhexh1k5 ghGdKbV+DHNf1H5XGUzV4jz302bF44Pn7qx9+8wEOQDFuTS79quWYH/Zspya6Obi VmReauVyv95/MtUZ0iesjV4vYra/9VYVaDaDsJkGDFj9eEu6hy96V9lI6WB51BvT lqJV2/VSW+oy1Nsn3AoYHbtFLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKFXulh S3xjCZee1DDF9loZYm89MB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaLRWWO4YNeL52+7eDEaYKvqKcVflVM0gnMq9RQ24SrbPPLsj1yT/t /uUwvpv6hKWlPanhIcBATgRItxWi66/o/ui45cnDCHegJG7z+Pjw3h0qYjjoBMce 4+vDs+gHhNR+1FRiRGGB3eueZPHF9HN4Uz6a1vOZHDCQj7FEhswQ4+Zq8tf6UNtz +pcUwheiFR4zIj9f5vAD8nA5nQt8AAR8Dn1w27RJKe2/gydLKRE3PautCAptKqSh gum4yT6lm593kvhr1CFGTomcQgSOkYlEwwsVuwcRvHIfyqiumVVH8s+WPR4R2oRS trII+zSEfhipJ2mwbBDZenNPiuLIe4dP -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:34 2025 by rpki-client