$ rpki-client -vvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: K8gmjMItyp9T98UoNayF8l+DkxhDImlnvdRJnfyzkPc= Subject key identifier: 6B:3F:0F:D3:D8:AF:C6:4E:C5:13:5B:6E:6D:0D:DA:AC:BF:FC:64:B8 Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0AF7 Signing time: Sat 28 Feb 2026 19:36:10 +0000 Manifest this update: Sat 28 Feb 2026 19:36:09 +0000 Manifest next update: Sat 07 Mar 2026 19:36:09 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: vUsopPNWOB4QqQz9eQZkSRCLNmyoCod9Ty64Yn7GvzM=) 2: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: Sq5YLnrI6niWLMeWLjro3RFtUrBz6mhWVJH2BrDvMPI=) 3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: QgJRfFH6YN7lRNZNVoON5AcD6zI0xlKC/pPKsOyjCXg=) 4: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: z5ES9QnxCtUmMGb5rTePskEShI6wqlkuHRSuLJa+HEo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 19:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2828 (0xb0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Feb 28 19:36:09 2026 GMT Not After : Mar 7 19:36:09 2026 GMT Subject: CN=69a343a9-0b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:53:8d:31:e9:5f:88:74:e9:2f:5b:bf:a3:4e: 60:55:8b:48:71:26:9b:53:5f:b6:d1:75:80:51:33: ae:65:22:16:83:7d:65:a9:51:57:82:25:36:a8:78: 9e:ad:ac:8c:13:1d:c6:95:5f:a5:c0:aa:f2:13:28: 55:5e:bb:1b:10:b7:f8:22:81:cd:ec:8a:d3:fe:ed: 85:dc:4f:b4:56:37:98:02:cc:a7:1d:32:4c:b6:6e: c8:1a:de:08:61:7d:c1:56:93:55:9d:bb:fb:6f:98: e1:eb:84:59:14:b7:f5:44:bb:aa:22:7a:bf:cf:5c: f6:6b:05:74:3e:db:55:ca:f7:6c:cf:64:db:87:0e: 41:57:92:52:a8:ea:39:0e:1e:19:d7:ed:a4:66:df: 5b:20:9c:63:78:40:fb:c3:e5:e9:ce:50:b9:46:64: fb:57:97:79:64:b5:42:ae:6a:89:85:73:4e:4b:08: c0:8c:de:77:d5:4c:7e:03:21:a1:91:4d:ab:16:6f: d6:66:f2:3c:aa:36:57:c6:a6:77:cd:84:1b:27:5e: bf:d7:ee:8b:af:81:d5:7e:01:ab:fc:d7:a5:81:3c: 81:c3:8b:7b:c6:a1:23:f5:14:1e:3e:44:25:04:d4: 18:62:5a:78:75:c6:ae:17:e4:03:ba:a0:df:1b:33: ca:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:3F:0F:D3:D8:AF:C6:4E:C5:13:5B:6E:6D:0D:DA:AC:BF:FC:64:B8 X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6b:de:0a:0b:4e:a3:5d:5e:22:00:ed:56:bb:32:39:d4:8e: d9:9c:a4:9c:b5:93:73:af:1f:a5:51:3f:39:28:4e:c5:f2:b2: 86:30:b4:2c:83:f7:98:95:27:14:65:00:c4:03:01:a7:01:85: 71:66:63:6b:e8:f9:97:3c:f4:1e:10:6b:cd:2d:d0:35:8c:b7: c9:94:e5:54:8e:4f:79:b6:63:71:1b:af:bf:0b:ab:98:81:c6: bc:13:d4:17:32:55:ff:67:5f:93:db:78:e3:ac:27:e0:5b:e2: d6:15:9e:f5:b9:27:c5:e9:12:13:e6:8c:53:70:6e:34:63:ad: 21:53:28:ca:ac:e1:ea:84:86:fe:81:93:7c:b5:ae:8b:b8:9c: 49:2c:90:92:4a:09:30:41:2c:68:33:00:cd:d9:66:55:1c:0e: 4f:60:7f:4e:79:04:65:b4:1b:ff:8e:2a:25:23:e0:6e:4a:e2: 7b:cc:79:90:bf:fe:d1:44:a9:b0:cf:5c:8d:13:9a:bd:6a:29: 75:38:b3:86:30:df:4e:1f:f4:8d:e0:39:82:ea:07:37:4d:82: 02:79:fd:71:a4:7c:e1:97:26:21:a5:80:a4:e5:7c:99:92:ed: 39:47:bf:7a:4b:a6:20:8b:b8:5f:18:a2:3f:bd:24:f8:44:72: a1:e0:1e:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwMjI4MTkzNjA5WhcNMjYwMzA3MTkzNjA5WjAYMRYwFAYD VQQDDA02OWEzNDNhOS0wYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VONMelfiHTpL1u/o05gVYtIcSabU1+20XWAUTOuZSIWg31lqVFXgiU2qHie rayMEx3GlV+lwKryEyhVXrsbELf4IoHN7IrT/u2F3E+0VjeYAsynHTJMtm7IGt4I YX3BVpNVnbv7b5jh64RZFLf1RLuqInq/z1z2awV0PttVyvdsz2Tbhw5BV5JSqOo5 Dh4Z1+2kZt9bIJxjeED7w+XpzlC5RmT7V5d5ZLVCrmqJhXNOSwjAjN531Ux+AyGh kU2rFm/WZvI8qjZXxqZ3zYQbJ16/1+6Lr4HVfgGr/NelgTyBw4t7xqEj9RQePkQl BNQYYlp4dcauF+QDuqDfGzPKQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGs/D9PY r8ZOxRNbbm0N2qy//GS4MB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe2veCgtOo11eIgDtVrsyOdSO2ZyknLWTc68fpVE/OShOxfKyhjC0LIP3mJUn FGUAxAMBpwGFcWZja+j5lzz0HhBrzS3QNYy3yZTlVI5PebZjcRuvvwurmIHGvBPU FzJV/2dfk9t446wn4Fvi1hWe9bknxekSE+aMU3BuNGOtIVMoyqzh6oSG/oGTfLWu i7icSSyQkkoJMEEsaDMAzdlmVRwOT2B/TnkEZbQb/44qJSPgbkrie8x5kL/+0USp sM9cjROavWopdTizhjDfTh/0jeA5guoHN02CAnn9caR84ZcmIaWApOV8mZLtOUe/ ekumIIu4XxiiP70k+ERyoeAeUg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:00 2026 by rpki-client