$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: XiZhKVT8KLKYypzc7VOnGIR8I0NpBcl96b7iUWyn9VM= Subject key identifier: 0A:1E:38:C5:B3:6F:85:38:82:B0:13:61:AA:DB:B5:37:80:D2:AE:2C Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 084B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 083C Signing time: Sun 20 Sep 2026 21:01:15 +0000 Manifest this update: Sun 20 Sep 2026 21:01:14 +0000 Manifest next update: Sun 27 Sep 2026 21:01:14 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: dCGxWkxLrCm0M8MnjwVdO74stpMDL4jAmKVRn9zrsxw=) 2: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: VwwT7RQ/qXGeiFBkCB3JtIL1WCq5yNf8aGSsCVk++yQ=) 3: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: cVjs8CCmJom1l0o4wFC6QkXwpn/JOlzgY1YvrYV5KoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2123 (0x84b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Sep 20 21:01:14 2026 GMT Not After : Sep 27 21:01:14 2026 GMT Subject: CN=6ab0499b-de93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:97:ca:a2:8b:c1:df:d0:05:fe:88:18:30:e4: 83:d3:ef:8d:78:e1:b4:89:54:47:26:e7:48:68:f8: 52:9c:d3:a3:2b:52:cd:bc:77:2f:53:07:bb:ed:0e: cb:d6:f1:8e:71:d7:cf:ae:95:3f:59:6a:6c:2b:f9: 4d:e0:b6:d3:23:13:db:e7:15:3f:74:c3:99:4e:06: f3:6e:b3:e0:d9:21:17:72:55:fc:b9:96:f4:31:43: f7:0a:3d:8f:84:ee:28:ae:d7:a4:9c:b3:39:be:35: 4c:fe:d4:44:76:8d:ec:1e:7b:c7:50:da:bd:b4:76: db:f3:47:0f:b9:02:f2:c4:11:56:40:27:cc:c6:58: 6c:d8:ad:77:11:6e:fb:c7:86:da:10:17:43:0b:51: db:95:9a:b8:7e:66:3b:eb:bf:9c:dd:ce:03:ff:5e: 68:18:59:12:c6:d4:18:5d:00:5d:3e:7f:2e:8f:8f: 3f:7f:26:7c:5c:cb:cd:b5:67:74:c8:5a:2c:36:75: 00:3a:6b:60:16:b6:0b:c2:7b:fe:5c:8b:ea:8a:c2: 23:5d:ab:77:e8:a0:92:8a:ee:a7:2f:75:d3:bb:3b: 92:50:f6:8e:73:93:d5:4c:e6:9a:62:54:4b:6c:60: f0:9c:be:02:f2:ca:5d:7f:e4:3b:13:75:f2:27:f5: 16:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1E:38:C5:B3:6F:85:38:82:B0:13:61:AA:DB:B5:37:80:D2:AE:2C X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7e:15:73:ae:50:d1:ca:57:a5:af:e0:5c:c8:5e:f2:e8:3b: 45:5e:38:cd:41:1d:78:a4:3f:ea:b1:f9:9b:c4:f5:75:78:9a: 7f:d0:a3:ea:2a:d6:31:86:08:1a:c9:28:42:56:66:f3:7b:ca: bc:48:a7:3b:58:b3:55:f3:88:71:23:25:6c:79:d9:9c:0d:d8: 26:63:99:fc:0e:52:f5:2d:15:6c:03:9b:f4:22:cd:e4:dc:5d: 18:03:4f:43:f6:da:db:b9:d5:2d:c7:71:bc:80:07:e1:10:93: 7d:99:ff:d7:0a:fe:06:f5:5d:3a:fe:b1:45:59:6d:80:b3:f7: 90:f1:dd:88:fd:f2:29:18:e5:15:5e:17:dc:9f:67:0e:59:7e: 65:33:7c:80:61:12:8d:bb:13:ad:13:5a:4b:b1:f3:9a:e9:dd: 1b:fc:f7:90:d9:be:7c:9c:fa:bd:3c:9c:df:7c:f0:06:ee:94: b1:54:d1:b9:f0:af:9e:d4:a6:b4:7f:a1:72:88:c5:48:12:c0: 0b:0e:d5:e5:1a:86:21:88:37:8e:af:38:1c:4c:d1:0a:cb:32: 74:20:c2:af:33:38:23:72:91:49:e2:15:43:1b:5a:02:15:d2: 4b:4d:b4:ad:17:42:48:56:40:08:4b:af:f4:f1:1f:fe:20:b9: 81:10:92:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjYwOTIwMjEwMTE0WhcNMjYwOTI3MjEwMTE0WjAYMRYwFAYD VQQDEw02YWIwNDk5Yi1kZTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5fKoovB39AF/ogYMOSD0++NeOG0iVRHJudIaPhSnNOjK1LNvHcvUwe77Q7L 1vGOcdfPrpU/WWpsK/lN4LbTIxPb5xU/dMOZTgbzbrPg2SEXclX8uZb0MUP3Cj2P hO4orteknLM5vjVM/tREdo3sHnvHUNq9tHbb80cPuQLyxBFWQCfMxlhs2K13EW77 x4baEBdDC1HblZq4fmY767+c3c4D/15oGFkSxtQYXQBdPn8uj48/fyZ8XMvNtWd0 yFosNnUAOmtgFrYLwnv+XIvqisIjXat36KCSiu6nL3XTuzuSUPaOc5PVTOaaYlRL bGDwnL4C8spdf+Q7E3XyJ/UWeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAoeOMWz b4U4grATYarbtTeA0q4sMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnn4Vc65Q0cpXpa/gXMhe8ug7RV44zUEdeKQ/6rH5m8T1dXiaf9Cj6irWMYYI GskoQlZm83vKvEinO1izVfOIcSMlbHnZnA3YJmOZ/A5S9S0VbAOb9CLN5NxdGANP Q/ba27nVLcdxvIAH4RCTfZn/1wr+BvVdOv6xRVltgLP3kPHdiP3yKRjlFV4X3J9n Dll+ZTN8gGESjbsTrRNaS7HzmundG/z3kNm+fJz6vTyc33zwBu6UsVTRufCvntSm tH+hcojFSBLACw7V5RqGIYg3jq84HEzRCssydCDCrzM4I3KRSeIVQxtaAhXSS020 rRdCSFZACEuv9PEf/iC5gRCS/Q== -----END CERTIFICATE-----Generated at Mon Sep 21 11:42:37 2026 by rpki-client