$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft File: -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json) Hash identifier: ragqTIIeLEci+OTs9V5kNfjyEj+fnBifPVEL3K758MI= Subject key identifier: 2D:CA:E3:9F:9C:2B:9C:BC:B9:19:49:46:89:CF:F0:EF:F5:1F:64:5F Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 Certificate issuer: /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Certificate serial: 16FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft Manifest number: 16FA Signing time: Wed 14 Oct 2026 16:42:05 +0000 Manifest this update: Wed 14 Oct 2026 16:42:04 +0000 Manifest next update: Wed 21 Oct 2026 16:42:04 +0000 Files and hashes: 1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: sgSVGdik3Z0ZJ3FsN8dnzIrIREUVIMgZSKlVO3H2uz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 16:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5882 (0x16fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9 Validity Not Before: Oct 14 16:42:04 2026 GMT Not After : Oct 21 16:42:04 2026 GMT Subject: CN=6acfb0dd-b3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:35:c2:4b:a9:fc:02:d1:98:61:8c:03:56:5c: 42:17:b0:b1:17:21:75:aa:8e:47:84:98:74:70:68: 70:6b:be:15:a0:32:b1:7e:41:80:5e:e2:89:20:06: c4:7b:08:e6:4d:e3:2b:6a:ba:cd:c7:78:05:b7:fa: 3c:2a:ba:72:fc:26:e8:ee:d1:db:e3:22:a6:88:12: fa:4f:46:b3:48:09:22:d6:d5:00:fb:a1:5a:9f:d2: bd:44:ac:c6:30:44:71:46:37:35:01:a6:f3:b3:6d: df:d3:ba:0b:da:41:e8:98:a2:58:f1:4a:fc:63:6f: 82:fd:26:47:14:a2:cc:7a:e6:b9:6f:02:06:b5:17: eb:08:96:80:0d:21:f1:5a:9b:86:75:fb:00:7e:4c: 4b:f9:63:9a:28:7f:aa:38:21:cf:49:97:0c:32:84: fe:73:94:28:23:30:18:c5:09:42:fc:b1:45:2c:4c: f6:b9:7a:7a:ab:cf:ee:5a:5a:23:19:97:af:1c:66: c9:92:4f:98:7b:28:e1:9a:19:3d:e4:e1:82:5e:56: 0d:88:e9:57:3e:73:60:1c:52:92:78:8e:32:cb:13: 08:30:f8:5c:ee:4e:93:75:d3:28:83:95:72:1b:06: 3c:a0:68:7b:61:cb:b3:e7:f4:7d:ff:bd:09:4a:5b: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CA:E3:9F:9C:2B:9C:BC:B9:19:49:46:89:CF:F0:EF:F5:1F:64:5F X509v3 Authority Key Identifier: keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3c:d6:d0:12:5a:32:21:ae:2d:8e:7d:64:0a:b0:cb:95:a2: 71:3b:8c:61:87:60:99:af:2d:74:3c:0d:21:ff:96:4f:63:48: dd:bd:8a:63:8a:3e:bb:a3:d0:ff:4b:60:2c:07:d7:b8:ba:13: 5c:65:a1:67:bd:35:7b:30:2b:a0:33:dd:4d:d7:61:de:8e:63: d2:df:47:55:29:71:cd:d2:72:c6:b0:b2:85:cc:e1:60:e1:00: c9:c4:54:2d:bf:b4:f9:ad:92:35:6b:03:10:14:4e:21:84:be: 39:36:20:84:87:c9:d3:89:76:16:d9:a7:65:71:ac:b9:dd:82: bb:e0:58:18:10:a4:70:85:de:93:6e:e4:3b:c5:6d:43:94:1b: a0:f7:a0:3f:aa:5b:80:d9:13:04:8a:3d:77:46:cc:cd:9c:0a: 15:0d:35:14:50:66:b3:67:0d:4a:46:0b:3b:aa:90:97:51:0f: 46:31:fa:0a:b1:7b:0f:b3:50:3f:b8:62:6d:51:a8:09:3e:9d: 2a:4f:56:ff:b9:b4:88:1a:f2:70:34:7c:16:9a:58:ea:5d:60: 78:97:19:bb:9e:4f:e9:85:43:bf:bf:0a:0f:34:3a:6a:43:bd: c5:d8:b7:64:3e:c7:b6:c9:51:ea:53:e3:0a:6a:8d:6f:f2:a4: b3:e2:9a:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEQjYxMTAvBgNVBAUTKEY4MTY5NzlEMkE4OTlCMjlFQTU5NUYyQjU0RUVBMzk5 MEEyNDM2RjkwHhcNMjYxMDE0MTY0MjA0WhcNMjYxMDIxMTY0MjA0WjAYMRYwFAYD VQQDEw02YWNmYjBkZC1iM2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjXCS6n8AtGYYYwDVlxCF7CxFyF1qo5HhJh0cGhwa74VoDKxfkGAXuKJIAbE ewjmTeMrarrNx3gFt/o8Krpy/Cbo7tHb4yKmiBL6T0azSAki1tUA+6Fan9K9RKzG MERxRjc1Aabzs23f07oL2kHomKJY8Ur8Y2+C/SZHFKLMeua5bwIGtRfrCJaADSHx WpuGdfsAfkxL+WOaKH+qOCHPSZcMMoT+c5QoIzAYxQlC/LFFLEz2uXp6q8/uWloj GZevHGbJkk+Yeyjhmhk95OGCXlYNiOlXPnNgHFKSeI4yyxMIMPhc7k6TddMog5Vy GwY8oGh7Ycuz5/R9/70JSls4sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC3K45+c K5y8uRlJRonP8O/1H2RfMB8GA1UdIwQYMBaAFPgWl50qiZsp6llfK1Tuo5kKJDb5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENURCNi8xM0Y5NkI4MjE4 NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15bnFXVjhyVk82am1Rb2tO dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CYVhuU3FKbXlucVdWOHJWTzZqbVFva052ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NURCNi8xM0Y5NkI4MjE4NjIxMUU4QjFFMzE3MjlDNEY5QUUwMi8tQmFYblNxSm15 bnFXVjhyVk82am1Rb2tOdmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADzzW0BJaMiGuLY59ZAqwy5WicTuMYYdgma8tdDwNIf+WT2NI3b2KY4o+u6PQ /0tgLAfXuLoTXGWhZ701ezAroDPdTddh3o5j0t9HVSlxzdJyxrCyhczhYOEAycRU Lb+0+a2SNWsDEBROIYS+OTYghIfJ04l2FtmnZXGsud2Cu+BYGBCkcIXek27kO8Vt Q5QboPegP6pbgNkTBIo9d0bMzZwKFQ01FFBms2cNSkYLO6qQl1EPRjH6CrF7D7NQ P7hibVGoCT6dKk9W/7m0iBrycDR8FppY6l1geJcZu55P6YVDv78KDzQ6akO9xdi3 ZD7HtslR6lPjCmqNb/Kks+Kasw== -----END CERTIFICATE-----Generated at Thu Oct 15 18:46:45 2026 by rpki-client