$ rpki-client -vvvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft File: baFr8M0J73aPkCE7ZtjLw86TQgY.mft (raw, json) Hash identifier: QTRLNFklCZzwH/2r8ZgsuQOHBA7H0XJwawO7whUpPJA= Subject key identifier: 4F:40:06:03:A5:4B:23:B5:03:B5:7F:C0:4D:EC:59:FD:36:D4:7D:C3 Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 Certificate issuer: /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Certificate serial: 0862 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft Manifest number: 0853 Signing time: Wed 04 Nov 2026 21:19:29 +0000 Manifest this update: Wed 04 Nov 2026 21:19:29 +0000 Manifest next update: Wed 11 Nov 2026 21:19:29 +0000 Files and hashes: 1: baFr8M0J73aPkCE7ZtjLw86TQgY.crl (hash: Mh5kaIn4u8AS6847cs5mbXBEsAf3jJoLXvR6G4iooCw=) 2: 0A866A522EAB11EBAB198239C4F9AE02.roa (hash: cVjs8CCmJom1l0o4wFC6QkXwpn/JOlzgY1YvrYV5KoA=) 3: C2C5450E608B11F0BF46DC2EC4F9AE02.roa (hash: VwwT7RQ/qXGeiFBkCB3JtIL1WCq5yNf8aGSsCVk++yQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 21:19:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2146 (0x862) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206 Validity Not Before: Nov 4 21:19:29 2026 GMT Not After : Nov 11 21:19:29 2026 GMT Subject: CN=6aeba161-c2aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:96:3b:27:0b:01:3f:34:12:70:dc:60:33:06: 40:f0:dc:f8:30:32:c5:f1:69:fc:bb:a5:36:ed:54: eb:f1:c5:51:72:35:10:5c:2f:e8:de:9e:90:aa:5e: 92:5e:f2:36:77:ea:39:4e:16:ec:48:17:ea:0a:07: 85:94:14:bd:50:e0:00:f4:df:85:eb:34:bb:80:84: ce:aa:72:87:38:8c:f6:e5:de:56:ed:17:1b:3a:3c: 14:80:bb:22:b7:6d:ce:ac:81:c4:bb:df:ae:2e:fc: 57:a8:aa:f3:c7:50:12:4e:a8:ed:ae:56:26:72:3a: 1c:f9:3c:45:38:38:d6:46:49:18:2b:e2:c1:ad:eb: a8:63:8c:be:04:ad:11:21:97:77:01:9d:7b:cc:c8: c8:9f:96:20:50:06:fa:e0:a8:6b:d6:ed:a0:42:7b: 14:ec:14:54:2a:85:64:31:27:e6:0e:db:c8:1e:97: 18:6a:39:46:a3:b7:3c:18:f6:c4:9b:51:89:8f:f6: 01:31:90:a0:45:15:e0:fb:59:be:fe:55:42:a3:ec: 7a:dd:ae:76:35:55:b2:b9:d2:35:35:47:28:2b:fd: fb:9c:8d:89:80:8e:98:2f:61:47:72:46:b7:61:15: 5b:88:af:85:0f:0a:f2:ff:5f:92:b2:16:93:b2:5c: 2b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:40:06:03:A5:4B:23:B5:03:B5:7F:C0:4D:EC:59:FD:36:D4:7D:C3 X509v3 Authority Key Identifier: keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7f:5c:6d:46:64:0c:1a:67:7e:f9:a4:ae:0f:f2:cd:71:6b: 6e:af:ae:05:a0:9a:c9:e1:b7:e9:2c:d9:f8:bb:1a:16:31:cf: 3d:22:28:d6:d0:ab:27:a4:d5:fb:69:2e:0e:b3:29:aa:c6:54: 31:49:bf:7f:bd:43:c9:06:73:a1:65:cf:78:46:54:bf:e7:3c: e9:1d:b5:1a:77:4b:88:12:d2:e2:dd:92:46:2b:7a:e7:6c:92: 65:a0:9b:00:de:c1:58:ee:1b:6c:e5:03:a1:6a:45:d1:5f:ae: 8b:00:80:31:ba:a7:c5:72:4a:0d:d9:31:c1:aa:d9:47:d5:9f: ae:8e:8b:68:f5:fc:d7:a8:42:0b:e9:1f:4e:7c:0b:08:7e:b3: 32:4a:59:5d:91:25:04:45:4f:c2:85:6e:02:48:d5:db:af:96: 0f:ad:72:e5:89:f0:2f:85:3d:6f:ca:3b:32:ec:90:c7:9e:cf: b8:eb:15:5f:f5:fe:42:42:63:f4:db:65:f6:99:dc:ac:46:60: 27:af:4c:61:c6:d9:e6:82:c8:04:cd:94:bc:4d:43:7c:32:ae: da:6e:02:56:b7:6c:41:38:a6:be:8b:d6:d1:8b:71:d1:e0:33: 8d:e9:44:ae:7d:6f:38:d4:9d:8c:f0:56:aa:d9:34:2c:05:a3: f5:f1:89:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz Q0U5MzQyMDYwHhcNMjYxMTA0MjExOTI5WhcNMjYxMTExMjExOTI5WjAYMRYwFAYD VQQDEw02YWViYTE2MS1jMmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5Y7JwsBPzQScNxgMwZA8Nz4MDLF8Wn8u6U27VTr8cVRcjUQXC/o3p6Qql6S XvI2d+o5ThbsSBfqCgeFlBS9UOAA9N+F6zS7gITOqnKHOIz25d5W7RcbOjwUgLsi t23OrIHEu9+uLvxXqKrzx1ASTqjtrlYmcjoc+TxFODjWRkkYK+LBreuoY4y+BK0R IZd3AZ17zMjIn5YgUAb64Khr1u2gQnsU7BRUKoVkMSfmDtvIHpcYajlGo7c8GPbE m1GJj/YBMZCgRRXg+1m+/lVCo+x63a52NVWyudI1NUcoK/37nI2JgI6YL2FHcka3 YRVbiK+FDwry/1+SshaTslwr1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE9ABgOl SyO1A7V/wE3sWf021H3DMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUI3MS85RkQ1RjgwRTJFQTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjcz YVBrQ0U3WnRqTHc4NlRRZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADH9cbUZkDBpnfvmkrg/yzXFrbq+uBaCayeG36SzZ+LsaFjHPPSIo1tCrJ6TV +2kuDrMpqsZUMUm/f71DyQZzoWXPeEZUv+c86R21GndLiBLS4t2SRit652ySZaCb AN7BWO4bbOUDoWpF0V+uiwCAMbqnxXJKDdkxwarZR9Wfro6LaPX816hCC+kfTnwL CH6zMkpZXZElBEVPwoVuAkjV26+WD61y5YnwL4U9b8o7MuyQx57PuOsVX/X+QkJj 9Ntl9pncrEZgJ69MYcbZ5oLIBM2UvE1DfDKu2m4CVrdsQTimvovW0Ytx0eAzjelE rn1vONSdjPBWqtk0LAWj9fGJ1Q== -----END CERTIFICATE-----Generated at Thu Nov 5 19:27:37 2026 by rpki-client