$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: 5PUlt7qpnue/n6ehVJk9zRdQfkVdKQPmdjaqhthxePY= Subject key identifier: 47:9A:00:47:BC:A5:27:8A:D7:7C:BE:F5:9C:62:64:FB:C5:CA:17:92 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B13 Signing time: Thu 16 Apr 2026 19:14:12 +0000 Manifest this update: Thu 16 Apr 2026 19:14:12 +0000 Manifest next update: Thu 23 Apr 2026 19:14:12 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: 1SsZRWpH/hqdf1wiXyMudIfbg3GN74rKbo5G+GHEx5I=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) 3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) 4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Apr 16 19:14:12 2026 GMT Not After : Apr 23 19:14:12 2026 GMT Subject: CN=69e13504-01c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:38:a7:75:6b:44:66:e9:74:a1:4f:c1:6a: 5c:6a:2b:f2:46:7f:16:0e:85:39:3e:9c:83:a7:4c: 11:df:bc:67:12:46:87:5a:ad:13:c4:a4:1d:2a:5d: 3e:e3:ea:e5:1e:6d:a7:d9:93:b9:5c:89:ed:1f:df: 23:24:88:3a:32:35:a7:4e:ff:5b:e9:58:4a:d3:96: e4:7b:13:a4:b7:7b:20:9c:7a:9d:0f:9d:59:20:4e: 82:c6:e5:f8:73:fc:ff:51:bd:88:eb:07:dc:02:4c: 11:e5:7b:1a:84:5a:e4:ae:7e:9e:6c:be:c1:b2:85: b2:5f:b7:d7:a7:08:ab:5c:37:e5:85:d0:0f:bb:66: 49:24:40:98:83:02:34:1c:f0:8b:4b:64:c8:d7:11: c9:6a:b5:b2:b8:be:8c:3a:3b:8b:48:07:12:f9:33: ff:96:7e:0b:9a:7e:78:51:f6:b0:2d:2d:27:46:68: 9e:7b:a8:7f:23:32:b4:c2:c6:3b:24:ca:fd:57:c8: c0:7f:2b:44:14:67:41:9b:bf:03:e3:75:53:40:90: 40:85:c9:1a:07:d4:40:32:d6:de:bd:d0:e8:ea:26: 92:6b:73:29:19:af:75:80:33:e7:af:b8:2c:3f:5b: 73:f4:85:00:87:f5:d5:df:ca:fb:75:9a:00:99:3d: b8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9A:00:47:BC:A5:27:8A:D7:7C:BE:F5:9C:62:64:FB:C5:CA:17:92 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3c:92:fa:a7:a9:2f:be:39:76:65:5f:9c:39:aa:ca:9e:60: 60:27:9e:50:8e:22:a3:38:c1:a3:a7:03:af:c5:fb:54:2e:87: d0:bc:89:04:a5:e5:ba:64:96:35:26:52:09:9d:3d:47:62:d1: 5e:9d:d7:3b:01:ac:16:06:16:05:12:0f:7d:61:13:41:ab:db: b9:cf:b0:14:ac:2a:b9:71:27:da:ba:2b:49:9b:ff:75:60:c7: 45:96:ff:aa:73:4f:08:72:07:6a:61:51:2c:df:33:9a:fa:8a: 5a:14:07:2b:1d:84:fe:57:61:d0:b6:ba:93:54:b7:55:a5:71: d0:64:04:9d:b8:05:d7:85:61:52:ee:1d:c6:c4:0f:2d:df:25: 65:e3:d1:4c:34:a1:58:d5:d1:97:c6:75:8d:f0:56:df:1e:89: 2c:4b:ba:d2:7c:c7:ef:f7:a0:f2:cc:d0:32:11:31:3e:ae:1e: 85:e5:bd:b3:a9:68:a4:88:34:fa:a5:00:31:e1:a9:94:c3:01: b2:1c:de:bd:25:2f:21:ec:8f:65:8c:a9:04:bf:70:42:2c:77: bc:d8:3a:d6:b8:11:22:4d:7e:1e:97:b1:83:a8:b4:47:37:34: d5:55:9f:8e:7e:b6:b5:b7:ca:d8:85:dc:02:b9:7d:4d:99:7b: 02:a0:42:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwNDE2MTkxNDEyWhcNMjYwNDIzMTkxNDEyWjAYMRYwFAYD VQQDEw02OWUxMzUwNC0wMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs144p3VrRGbpdKFPwWpcaivyRn8WDoU5PpyDp0wR37xnEkaHWq0TxKQdKl0+ 4+rlHm2n2ZO5XIntH98jJIg6MjWnTv9b6VhK05bkexOkt3sgnHqdD51ZIE6CxuX4 c/z/Ub2I6wfcAkwR5XsahFrkrn6ebL7BsoWyX7fXpwirXDflhdAPu2ZJJECYgwI0 HPCLS2TI1xHJarWyuL6MOjuLSAcS+TP/ln4Lmn54UfawLS0nRmiee6h/IzK0wsY7 JMr9V8jAfytEFGdBm78D43VTQJBAhckaB9RAMtbevdDo6iaSa3MpGa91gDPnr7gs P1tz9IUAh/XV38r7dZoAmT246QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEeaAEe8 pSeK13y+9ZxiZPvFyheSMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcDyS+qepL745dmVfnDmqyp5gYCeeUI4iozjBo6cDr8X7VC6H0LyJBKXlumSW NSZSCZ09R2LRXp3XOwGsFgYWBRIPfWETQavbuc+wFKwquXEn2rorSZv/dWDHRZb/ qnNPCHIHamFRLN8zmvqKWhQHKx2E/ldh0La6k1S3VaVx0GQEnbgF14VhUu4dxsQP Ld8lZePRTDShWNXRl8Z1jfBW3x6JLEu60nzH7/eg8szQMhExPq4eheW9s6lopIg0 +qUAMeGplMMBshzevSUvIeyPZYypBL9wQix3vNg61rgRIk1+Hpexg6i0Rzc01VWf jn62tbfK2IXcArl9TZl7AqBCRQ== -----END CERTIFICATE-----Generated at Fri Apr 17 10:44:26 2026 by rpki-client