$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft File: baE3ApweGgauD6j3W7iPLKV4-Fo.mft (raw, json) Hash identifier: 3riqxxgIqWnuDk8ke7fd/3rf60It6OuT0JYvjkX+aRo= Subject key identifier: 1B:60:FA:5E:43:4F:7A:48:DD:0D:58:5D:21:27:62:64:8D:96:89:CB Authority key identifier: 6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A Certificate issuer: /CN=A91C46FC/serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Certificate serial: 0B7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft Manifest number: 0B64 Signing time: Tue 22 Sep 2026 19:01:48 +0000 Manifest this update: Tue 22 Sep 2026 19:01:47 +0000 Manifest next update: Tue 29 Sep 2026 19:01:47 +0000 Files and hashes: 1: baE3ApweGgauD6j3W7iPLKV4-Fo.crl (hash: CMTm8Wr+rijUPbdBEgKLW8Cjcjw8zkqV6GACdEjuQs0=) 2: F450F110AAFE11EAAF572C5EC4F9AE02.roa (hash: MhSSopJ/JAPmVvz5fPGMBDsDhrvRNFqSWC1Tcmowbok=) 3: 04D48448620C11EA9F85A781C4F9AE02.roa (hash: +zdoGcVsAJI940dyRRaQvwVeNb/WXVoFqihQHDMJqhE=) 4: FB648B80F9DD11EC85C44880C4F9AE02.roa (hash: 4e4B5LsisnyYT1evoN7ERaWPyKTvxYn+QXiVQ3JiEHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C46FC, serialNumber=6DA137029C1E1A06AE0FA8F75BB88F2CA578F85A Validity Not Before: Sep 22 19:01:47 2026 GMT Not After : Sep 29 19:01:47 2026 GMT Subject: CN=6ab2d09c-435b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:de:e6:f8:99:79:89:01:95:e0:b3:a9:d8: f5:07:6e:45:6e:4c:e1:04:09:de:44:9a:89:3c:70: b1:36:b7:3a:f8:02:e7:44:a4:9f:98:87:d2:c4:6d: 8d:ce:f7:ea:14:e7:88:8c:51:9b:66:d5:74:ce:f3: 94:9e:bf:17:c3:d8:d9:af:e9:d2:46:c3:ea:a6:56: e9:6c:f1:7f:5b:c6:92:5c:ce:0d:da:f1:35:27:39: 8b:f2:5e:6e:86:79:91:75:84:47:98:b6:76:98:2b: f6:5b:ff:42:da:29:b9:9b:ae:45:54:b3:e5:6e:9f: 6b:9e:f0:f3:a5:32:b6:bc:3b:76:b7:08:6c:41:a1: 3f:1f:72:ad:20:86:bc:4f:cb:af:f6:e9:0f:91:1f: 4c:c6:74:25:02:b7:17:51:d2:0b:a4:3c:87:52:9d: 45:e4:33:df:dc:c7:cd:33:c8:85:2e:e0:86:d6:f8: f1:bb:6f:4f:68:4f:2e:2b:64:42:71:43:df:57:82: a1:d7:a5:68:33:01:29:17:75:53:d1:dd:8d:1e:9c: 46:ae:46:c3:fe:e5:9d:0c:3d:3c:45:f5:90:2d:21: 25:ea:40:92:03:22:ba:9c:32:30:86:6f:06:66:37: 80:3c:6a:a1:9f:5a:f4:fe:87:6e:60:09:ad:27:7e: eb:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:60:FA:5E:43:4F:7A:48:DD:0D:58:5D:21:27:62:64:8D:96:89:CB X509v3 Authority Key Identifier: keyid:6D:A1:37:02:9C:1E:1A:06:AE:0F:A8:F7:5B:B8:8F:2C:A5:78:F8:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baE3ApweGgauD6j3W7iPLKV4-Fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C46FC/0E8505F0620511EABAFFE16BC4F9AE02/baE3ApweGgauD6j3W7iPLKV4-Fo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:31:32:6f:6b:bc:25:3b:49:b8:39:e2:93:79:bf:9c:a2:a3: 84:3a:16:3b:d0:67:f0:aa:dc:87:d2:04:55:80:0a:d8:45:ee: 10:52:65:e1:70:04:9b:a3:f5:6e:38:2d:be:6b:2d:1d:49:89: 1b:53:57:93:df:d5:78:d2:b9:e7:c2:a0:93:b2:32:aa:fa:63: c0:2f:07:16:31:31:42:a7:3e:10:1d:ad:aa:24:c1:6c:73:a6: bf:e6:9b:50:8f:e2:40:4d:35:9d:9e:26:92:e6:93:87:88:56: a2:dc:8a:7d:76:0f:1e:a1:cc:19:1d:c6:7c:5a:a9:da:9b:f2: 0a:50:13:23:f5:cd:45:b1:50:31:df:f6:e6:24:a4:77:f4:8b: 55:e5:33:bf:a5:a7:cc:10:6b:cb:15:0b:fc:0b:dc:3c:63:3e: 27:01:00:98:cf:5d:f2:25:46:74:75:d3:c5:bc:bf:5e:55:1a: 7d:a0:c8:c6:bf:c6:f0:41:83:16:3e:82:23:a0:a6:33:89:95: 43:a7:5b:1d:11:52:95:5c:f7:5c:b8:b2:9e:22:62:c6:d1:4a: 04:22:7b:fd:71:e7:5b:6f:cc:5d:05:58:83:da:47:ce:3a:9b: 0f:a7:37:fb:9d:ef:d2:80:ea:fe:2c:37:38:0f:a7:cf:f0:dc: 18:68:f4:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ2RkMxMTAvBgNVBAUTKDZEQTEzNzAyOUMxRTFBMDZBRTBGQThGNzVCQjg4RjJD QTU3OEY4NUEwHhcNMjYwOTIyMTkwMTQ3WhcNMjYwOTI5MTkwMTQ3WjAYMRYwFAYD VQQDEw02YWIyZDA5Yy00MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmfe5viZeYkBleCzqdj1B25FbkzhBAneRJqJPHCxNrc6+ALnRKSfmIfSxG2N zvfqFOeIjFGbZtV0zvOUnr8Xw9jZr+nSRsPqplbpbPF/W8aSXM4N2vE1JzmL8l5u hnmRdYRHmLZ2mCv2W/9C2im5m65FVLPlbp9rnvDzpTK2vDt2twhsQaE/H3KtIIa8 T8uv9ukPkR9MxnQlArcXUdILpDyHUp1F5DPf3MfNM8iFLuCG1vjxu29PaE8uK2RC cUPfV4Kh16VoMwEpF3VT0d2NHpxGrkbD/uWdDD08RfWQLSEl6kCSAyK6nDIwhm8G ZjeAPGqhn1r0/oduYAmtJ37rwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtg+l5D T3pI3Q1YXSEnYmSNlonLMB8GA1UdIwQYMBaAFG2hNwKcHhoGrg+o91u4jyylePha MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDZGQy8wRTg1MDVGMDYy MDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdnYXVENmozVzdpUExLVjQt Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhRTNBcHdlR2dhdUQ2ajNXN2lQTEtWNC1Gby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDZGQy8wRTg1MDVGMDYyMDUxMUVBQkFGRkUxNkJDNEY5QUUwMi9iYUUzQXB3ZUdn YXVENmozVzdpUExLVjQtRm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeTEyb2u8JTtJuDnik3m/nKKjhDoWO9Bn8Krch9IEVYAK2EXuEFJl4XAEm6P1 bjgtvmstHUmJG1NXk9/VeNK558Kgk7IyqvpjwC8HFjExQqc+EB2tqiTBbHOmv+ab UI/iQE01nZ4mkuaTh4hWotyKfXYPHqHMGR3GfFqp2pvyClATI/XNRbFQMd/25iSk d/SLVeUzv6WnzBBryxUL/AvcPGM+JwEAmM9d8iVGdHXTxby/XlUafaDIxr/G8EGD Fj6CI6CmM4mVQ6dbHRFSlVz3XLiyniJixtFKBCJ7/XHnW2/MXQVYg9pHzjqbD6c3 +53v0oDq/iw3OA+nz/DcGGj0Zg== -----END CERTIFICATE-----Generated at Wed Sep 23 16:54:00 2026 by rpki-client