$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: bBj4UJB8UdqyDVw4wR4T1D8gAVKyZBYKGcY+SC3pYIo= Subject key identifier: 5D:8D:9E:A0:E9:77:09:29:2C:1C:56:1F:33:9E:A9:A3:D1:F6:51:D4 Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 07D0 Signing time: Sun 01 Mar 2026 23:27:03 +0000 Manifest this update: Sun 01 Mar 2026 23:27:01 +0000 Manifest next update: Sun 08 Mar 2026 23:27:01 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: vHU2/d6GS4PvSYZOe6VXXmplJWph33n0KHSJoAEsEuY=) 2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: +Ytbh6uS9SueVTTFSqsYD08Z5VmVPcYhz5ek3giGdE0=) 3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: /ee3Z/RejGv34651CFjDfo357/BI2yYheaPQiVddGg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Mar 1 23:27:01 2026 GMT Not After : Mar 8 23:27:01 2026 GMT Subject: CN=69a4cb46-e4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6f:ab:e8:45:fc:6a:df:53:ac:fa:9f:90:ac: 26:2d:47:d8:bf:5b:7a:02:1b:13:18:82:92:34:4c: 21:8b:9b:e0:81:5f:e3:a3:be:a7:fd:b6:59:7a:75: 1e:17:2c:1d:7d:26:05:31:a8:15:28:24:60:e5:8b: 6f:59:c6:00:26:2b:a2:f4:c2:b6:f0:88:a7:40:81: 39:56:0d:df:4a:06:1b:72:39:91:1d:64:b0:a3:ce: af:42:5c:77:68:dd:7c:65:70:60:0a:4f:81:91:e0: fe:bf:82:fa:e5:1a:5c:40:a7:2c:67:1c:0b:79:a2: 02:cf:c7:55:6e:56:40:da:a6:2a:16:b8:7f:21:e0: 7a:95:77:da:62:b9:7c:76:00:90:ed:83:01:53:e5: 59:63:91:ae:2f:1b:a2:23:8f:c4:c6:f7:02:d7:51: ba:1a:50:72:0d:5b:f4:23:0b:a4:1c:46:28:d5:d2: d2:37:d2:07:32:b5:91:e0:0e:ab:1f:ea:85:ac:f5: 21:f6:77:5b:9b:7a:e7:c6:39:ae:70:2b:6d:09:f7: f6:86:bb:23:a0:41:ad:17:d1:09:c9:6c:6c:1b:7b: 1f:80:df:d4:02:aa:1a:e1:07:fb:d9:4b:9b:5f:ee: 0b:dc:f2:b8:7b:01:c9:3c:1a:d2:d6:c8:b7:6e:76: d7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8D:9E:A0:E9:77:09:29:2C:1C:56:1F:33:9E:A9:A3:D1:F6:51:D4 X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:16:ea:32:fd:87:95:e2:0b:26:b0:10:6b:35:7a:c4:b3:27: a8:47:90:34:45:39:fc:9f:83:70:18:d5:07:9a:ec:f6:47:b4: 6c:30:93:3f:4c:6b:e9:77:37:6f:67:00:3b:94:b3:2f:18:b0: d9:8d:db:a7:25:56:00:65:15:fb:49:d9:66:a1:91:ab:44:94: 95:71:1c:41:d1:79:1a:96:23:86:d3:4d:c5:1e:f4:d8:29:65: 03:76:d6:f4:09:76:b6:62:7a:02:ef:b5:c3:78:d6:38:de:ca: 88:28:23:df:cc:ee:ea:33:c3:be:ff:66:d3:85:83:4f:88:ee: dc:7e:c1:9d:8c:4c:41:eb:f6:1d:46:e8:51:38:85:36:ed:c1: 85:49:d7:17:52:8d:a1:c5:85:e9:5a:ab:06:50:fe:cd:bf:7a: 34:9d:4d:26:db:04:2b:70:bd:03:b2:95:03:c4:df:3c:f3:eb: 74:43:5f:c7:f3:98:8c:b4:10:50:ba:4a:9c:37:fb:51:ad:e7: ea:03:00:67:89:ad:8c:9c:23:6b:c7:1d:9e:24:27:62:23:ab: cb:b9:91:4b:56:8f:57:26:06:13:94:d4:2e:da:16:44:cd:b9: d8:fb:a5:9a:15:b3:ec:36:7c:70:94:41:d7:60:34:4b:81:72: e2:6f:90:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjYwMzAxMjMyNzAxWhcNMjYwMzA4MjMyNzAxWjAYMRYwFAYD VQQDEw02OWE0Y2I0Ni1lNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m+r6EX8at9TrPqfkKwmLUfYv1t6AhsTGIKSNEwhi5vggV/jo76n/bZZenUe FywdfSYFMagVKCRg5YtvWcYAJiui9MK28IinQIE5Vg3fSgYbcjmRHWSwo86vQlx3 aN18ZXBgCk+BkeD+v4L65RpcQKcsZxwLeaICz8dVblZA2qYqFrh/IeB6lXfaYrl8 dgCQ7YMBU+VZY5GuLxuiI4/ExvcC11G6GlByDVv0IwukHEYo1dLSN9IHMrWR4A6r H+qFrPUh9ndbm3rnxjmucCttCff2hrsjoEGtF9EJyWxsG3sfgN/UAqoa4Qf72Uub X+4L3PK4ewHJPBrS1si3bnbXWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF2NnqDp dwkpLBxWHzOeqaPR9lHUMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixbqMv2HleILJrAQazV6xLMnqEeQNEU5/J+DcBjVB5rs9ke0bDCTP0xr6Xc3 b2cAO5SzLxiw2Y3bpyVWAGUV+0nZZqGRq0SUlXEcQdF5GpYjhtNNxR702CllA3bW 9Al2tmJ6Au+1w3jWON7KiCgj38zu6jPDvv9m04WDT4ju3H7BnYxMQev2HUboUTiF Nu3BhUnXF1KNocWF6VqrBlD+zb96NJ1NJtsEK3C9A7KVA8TfPPPrdENfx/OYjLQQ ULpKnDf7Ua3n6gMAZ4mtjJwja8cdniQnYiOry7mRS1aPVyYGE5TULtoWRM252Pul mhWz7DZ8cJRB12A0S4Fy4m+Q2g== -----END CERTIFICATE-----Generated at Mon Mar 2 05:39:54 2026 by rpki-client