$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: K/1OtWzxelmno1JPQ+4aCHkKmY/rPyJJaRT4JWxkmfw= Subject key identifier: 75:26:C4:27:5F:6E:6E:2B:C3:59:23:85:34:C8:2E:8B:57:6D:E5:6B Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B20 Signing time: Tue 12 May 2026 19:20:57 +0000 Manifest this update: Tue 12 May 2026 19:20:56 +0000 Manifest next update: Tue 19 May 2026 19:20:56 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: hfneh5kUPwAPee7rmUO+6z3XGqOdcx3QaR+YL4aefwU=) 2: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) 3: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) 4: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2875 (0xb3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: May 12 19:20:56 2026 GMT Not After : May 19 19:20:56 2026 GMT Subject: CN=6a037d99-99f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:0f:8f:22:e2:53:a8:90:26:c6:59:df:de: 63:50:2e:01:de:5c:ec:e5:3f:67:24:25:a8:0b:0a: 15:73:43:99:f3:4c:58:49:9e:07:f1:c6:63:b5:ba: e8:41:5f:69:e7:aa:68:03:fd:b4:ed:35:b7:b5:27: d8:b4:fa:57:bf:e6:d2:06:48:a9:b1:b0:7a:1d:92: c4:27:21:fa:f2:23:6d:9c:d9:94:a2:4f:ec:f5:71: c7:d5:5b:76:46:53:22:23:01:dd:b0:fe:5d:25:15: e3:47:36:1b:3b:c3:01:27:82:40:7f:83:5d:dd:0c: de:70:fe:4d:c6:2e:3b:65:76:7a:f3:58:49:3e:11: 07:55:97:50:0a:94:c1:bd:48:ce:ab:c0:05:01:46: 9a:be:81:f8:fe:93:89:b2:f9:70:38:ab:5b:3c:d8: d8:ba:17:43:6a:1d:93:8d:b3:b8:16:a6:92:6c:22: b3:ed:08:84:2f:33:35:7d:ef:94:9e:75:51:26:2b: fb:ef:e2:38:a9:45:65:54:8d:85:01:1d:12:54:35: d9:f8:c5:c2:2e:b4:d2:0d:68:45:c5:9a:7a:72:7e: 8b:63:e6:57:5d:52:7e:ae:f5:c3:8c:21:58:87:72: 48:70:68:ed:96:8b:ba:64:88:5b:45:c8:39:7c:8e: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:26:C4:27:5F:6E:6E:2B:C3:59:23:85:34:C8:2E:8B:57:6D:E5:6B X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:92:a3:73:d5:4c:43:f6:fc:7d:e1:fa:e3:de:0d:26:bc:6a: f2:7c:c3:62:0d:e7:02:6f:82:f2:b4:07:aa:7e:0a:fe:74:41: 68:e9:29:b6:64:80:8f:6d:23:54:86:d5:46:f5:90:f7:a5:71: 5e:69:ed:21:99:26:50:ca:78:53:af:bc:ef:47:9c:6e:5d:7c: 23:0e:97:75:c5:5e:11:5b:04:d8:ac:9f:51:a4:c4:c0:9d:22: 60:76:27:a6:5a:e4:b6:ca:dd:19:35:01:e6:7f:61:fd:ac:92: 43:b1:42:78:b2:9a:17:ce:44:16:1f:ce:92:2c:e6:c6:0b:73: 9a:d4:f3:cc:37:80:3a:04:a9:02:b6:1f:d4:56:7b:55:cf:3c: f7:ba:2a:fb:f9:b5:c1:c2:5e:ad:68:64:59:a9:d8:54:9d:99: e3:b3:ad:37:8e:cc:86:d3:91:80:e6:b1:13:43:72:d4:aa:c2: bc:aa:9c:32:82:ba:c3:51:52:f9:e9:da:51:be:0a:83:70:80: c7:e1:e3:51:81:17:2d:6f:4f:9a:86:c1:7f:0a:a0:73:32:6f: bf:ee:8c:39:5d:89:4b:e1:c7:7f:36:b5:ae:7f:c2:58:3b:e3: cf:fb:dc:39:38:95:9d:a0:8c:fa:dd:8b:94:2c:a5:8b:2f:e6: 27:03:f3:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwNTEyMTkyMDU2WhcNMjYwNTE5MTkyMDU2WjAYMRYwFAYD VQQDEw02YTAzN2Q5OS05OWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnykPjyLiU6iQJsZZ395jUC4B3lzs5T9nJCWoCwoVc0OZ80xYSZ4H8cZjtbro QV9p56poA/207TW3tSfYtPpXv+bSBkipsbB6HZLEJyH68iNtnNmUok/s9XHH1Vt2 RlMiIwHdsP5dJRXjRzYbO8MBJ4JAf4Nd3QzecP5Nxi47ZXZ681hJPhEHVZdQCpTB vUjOq8AFAUaavoH4/pOJsvlwOKtbPNjYuhdDah2TjbO4FqaSbCKz7QiELzM1fe+U nnVRJiv77+I4qUVlVI2FAR0SVDXZ+MXCLrTSDWhFxZp6cn6LY+ZXXVJ+rvXDjCFY h3JIcGjtlou6ZIhbRcg5fI7LpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHUmxCdf bm4rw1kjhTTILotXbeVrMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtpKjc9VMQ/b8feH6494NJrxq8nzDYg3nAm+C8rQHqn4K/nRBaOkptmSAj20j VIbVRvWQ96VxXmntIZkmUMp4U6+870ecbl18Iw6XdcVeEVsE2KyfUaTEwJ0iYHYn plrktsrdGTUB5n9h/aySQ7FCeLKaF85EFh/OkizmxgtzmtTzzDeAOgSpArYf1FZ7 Vc8897oq+/m1wcJerWhkWanYVJ2Z47OtN47MhtORgOaxE0Ny1KrCvKqcMoK6w1FS +enaUb4Kg3CAx+HjUYEXLW9PmobBfwqgczJvv+6MOV2JS+HHfza1rn/CWDvjz/vc OTiVnaCM+t2LlCyliy/mJwPzLQ== -----END CERTIFICATE-----Generated at Wed May 13 01:12:21 2026 by rpki-client