$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: gAgsS4OOmd8l3vCxYUAq8P0l2C9hIMGqecnUaKMlY4E= Subject key identifier: 01:E0:B1:FC:4F:D1:42:3E:12:F6:98:87:6B:A4:A2:F1:E0:EC:A5:EA Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 07EA Signing time: Thu 16 Apr 2026 21:13:19 +0000 Manifest this update: Thu 16 Apr 2026 21:13:19 +0000 Manifest next update: Thu 23 Apr 2026 21:13:19 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: o3nrqlRXLynNDVAPTQbepd+MNjvlceyCumyrZfw21Tg=) 2: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: /ee3Z/RejGv34651CFjDfo357/BI2yYheaPQiVddGg4=) 3: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: +Ytbh6uS9SueVTTFSqsYD08Z5VmVPcYhz5ek3giGdE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Apr 16 21:13:19 2026 GMT Not After : Apr 23 21:13:19 2026 GMT Subject: CN=69e150ef-a74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:c6:98:8a:56:4c:56:98:67:8c:18:f7:4a: ac:1a:1a:a9:d3:fe:af:5d:57:d2:f8:e0:b9:c8:c4: 1b:c9:df:57:d0:c2:87:aa:26:7e:ac:ac:2c:80:d2: e5:5d:38:a5:0a:ba:d6:46:a5:d3:e4:2d:5e:60:70: 36:e0:22:0f:3e:c1:00:66:ac:ae:b6:63:02:ad:22: f4:35:f5:cd:b4:41:ec:87:a1:24:b8:fe:d2:89:ff: 20:a8:7f:d6:a6:d2:2e:89:b0:5f:cc:82:9d:49:05: 82:a4:4c:c9:4c:94:f1:b7:0a:06:af:c4:7d:99:6a: 6f:9e:8c:b2:b9:33:78:f4:75:23:ba:dd:bd:c2:56: 0f:a2:b5:a7:1a:3c:1a:1e:b5:12:27:b8:a2:d1:1a: 91:b2:01:f8:70:62:a3:35:c6:13:24:50:4f:89:8c: a8:79:50:b6:3b:cb:2a:35:70:57:d5:98:0b:6e:f2: 6d:de:03:45:95:a9:c0:01:33:b1:77:eb:96:db:46: 3a:06:9b:fc:4b:f9:05:aa:4a:56:af:32:fc:80:4f: db:10:4c:43:db:61:cc:70:d5:ce:36:f4:b5:31:df: 56:0e:15:69:63:31:c4:f2:a8:21:0e:9c:aa:26:0d: e7:19:b2:81:e8:23:2b:27:01:b6:d1:82:67:4d:9b: 53:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E0:B1:FC:4F:D1:42:3E:12:F6:98:87:6B:A4:A2:F1:E0:EC:A5:EA X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:56:a2:3a:86:76:1a:9b:5f:d8:bd:9e:ac:55:d0:88:95:d5: c6:d1:14:52:78:e0:51:31:5a:50:d3:d2:79:b6:5c:dc:de:55: a2:a8:25:6f:63:c4:f6:20:18:2b:c3:ce:fb:bc:6c:a3:e1:d1: 37:32:1b:1c:8f:08:e3:67:eb:39:7d:2c:30:da:a1:4d:5c:46: b5:a0:6f:e3:6a:cb:a5:57:29:53:b9:f1:c3:27:c0:66:3d:1f: 33:4f:8e:9a:68:13:d3:18:e9:01:96:02:38:43:5f:e8:83:34: e4:11:b4:33:d9:39:ed:20:79:e5:4a:87:7a:a4:88:8c:d7:01: d0:5e:bd:02:27:66:18:aa:cf:45:8d:ef:5a:87:8c:15:24:66: 48:09:d5:75:3c:df:5a:16:28:45:38:0a:c2:be:db:ce:b8:4d: fe:4a:c9:87:59:9e:ae:c6:1b:d5:ec:c8:30:13:dd:88:35:10: bf:45:fb:cc:42:ce:90:3d:ff:da:16:14:32:4b:04:b5:71:ef: 6f:e0:2f:5e:26:b2:1d:f4:27:9c:5d:06:36:c8:86:b9:81:64: 48:1b:28:96:8e:b9:7a:42:88:84:38:09:45:79:9b:0f:b4:df: 9a:90:fb:c4:ff:df:3c:af:6e:80:e5:59:fc:e0:5d:a3:64:7b: 2d:32:2a:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjYwNDE2MjExMzE5WhcNMjYwNDIzMjExMzE5WjAYMRYwFAYD VQQDEw02OWUxNTBlZi1hNzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpTGmIpWTFaYZ4wY90qsGhqp0/6vXVfS+OC5yMQbyd9X0MKHqiZ+rKwsgNLl XTilCrrWRqXT5C1eYHA24CIPPsEAZqyutmMCrSL0NfXNtEHsh6EkuP7Sif8gqH/W ptIuibBfzIKdSQWCpEzJTJTxtwoGr8R9mWpvnoyyuTN49HUjut29wlYPorWnGjwa HrUSJ7ii0RqRsgH4cGKjNcYTJFBPiYyoeVC2O8sqNXBX1ZgLbvJt3gNFlanAATOx d+uW20Y6Bpv8S/kFqkpWrzL8gE/bEExD22HMcNXONvS1Md9WDhVpYzHE8qghDpyq Jg3nGbKB6CMrJwG20YJnTZtTyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHgsfxP 0UI+EvaYh2ukovHg7KXqMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFaiOoZ2Gptf2L2erFXQiJXVxtEUUnjgUTFaUNPSebZc3N5Voqglb2PE9iAY K8PO+7xso+HRNzIbHI8I42frOX0sMNqhTVxGtaBv42rLpVcpU7nxwyfAZj0fM0+O mmgT0xjpAZYCOENf6IM05BG0M9k57SB55UqHeqSIjNcB0F69AidmGKrPRY3vWoeM FSRmSAnVdTzfWhYoRTgKwr7bzrhN/krJh1mersYb1ezIMBPdiDUQv0X7zELOkD3/ 2hYUMksEtXHvb+AvXiayHfQnnF0GNsiGuYFkSBsolo65ekKIhDgJRXmbD7TfmpD7 xP/fPK9ugOVZ/OBdo2R7LTIqSA== -----END CERTIFICATE-----Generated at Fri Apr 17 05:29:46 2026 by rpki-client