$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: 7eAV9Y1GZU3Z7jVyC9gGwkm1vfWtBBFofCPTdp7TDcI= Subject key identifier: B8:20:77:06:CA:CA:BB:38:F4:B0:2B:35:51:F7:80:46:25:4F:BC:0A Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: 010F Signing time: Sun 19 Oct 2025 07:48:09 +0000 Manifest this update: Sun 19 Oct 2025 07:48:09 +0000 Manifest next update: Sun 26 Oct 2025 07:48:09 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: mU5FxMj95l6bOzxIamle3tL5z3QJFi497bXc6gTcDlo=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Oct 19 07:48:09 2025 GMT Not After : Oct 26 07:48:09 2025 GMT Subject: CN=68f497b9-ca61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:7f:f9:76:0f:46:b3:42:ee:40:63:ce:3a: ef:cf:d1:ce:16:99:ef:f0:14:1f:84:b6:46:d5:db: 7e:88:a0:72:04:7c:6f:12:78:9d:8c:44:20:4a:1d: d5:b0:a0:0e:94:68:e8:b4:fe:d6:97:20:97:6b:bc: 5a:4e:15:7c:fb:f7:c4:52:96:e5:20:d6:fc:07:8a: 8f:05:da:bd:79:3f:3a:60:69:83:5e:81:74:60:61: 38:94:75:14:38:79:36:0e:be:5f:65:1c:5a:bd:ac: 57:cc:67:aa:ab:d3:d2:64:f1:6c:09:68:ce:ca:15: 58:5f:db:33:76:24:aa:30:07:38:f2:0a:15:08:a1: e8:c4:e8:95:d8:00:50:8a:7e:4f:16:12:e2:f1:e9: 36:66:5b:8a:81:ec:ff:34:40:2b:f2:0e:71:68:30: d3:25:b5:9b:83:7d:96:93:da:75:4f:50:b1:35:05: 1a:19:1b:0a:41:14:aa:59:f7:b4:52:87:79:ea:1a: f9:9f:ac:49:de:a8:c9:21:58:08:43:ac:ee:72:7f: 69:4b:28:94:61:4d:9d:b5:29:e2:4a:28:e0:f1:53: e8:8a:22:0e:24:79:c8:a6:d5:fe:ab:41:f7:80:52: 9b:24:43:80:c8:11:40:c2:54:e6:a1:89:2f:06:83: 70:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:20:77:06:CA:CA:BB:38:F4:B0:2B:35:51:F7:80:46:25:4F:BC:0A X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:63:76:63:69:58:f7:5a:82:95:0f:a2:4c:10:36:fc:85:4e: 4e:f4:b3:da:d7:8d:d7:bc:85:e2:d8:3f:74:75:a9:7b:e1:bf: 22:e7:b7:0d:26:26:22:11:75:27:43:d3:3f:2c:1e:1a:db:78: 95:1c:3e:b3:e3:ef:82:df:85:5e:e1:bd:68:ed:e1:10:6d:12: 36:9c:52:e6:99:44:d7:24:7f:d2:37:9a:b3:4c:24:ab:77:93: 99:71:44:24:4e:3d:57:35:f9:8b:d9:a0:03:11:87:4c:38:f3: a0:81:fe:ee:8e:f8:8c:b2:62:75:a0:0a:9e:da:5b:6f:ba:25: ff:c3:61:f3:15:c8:16:19:61:29:bf:bf:12:df:f5:bc:78:dd: 32:61:ba:ff:14:6d:1a:dd:74:e4:9a:5e:81:4c:f7:bf:46:ef: e2:57:f3:1b:88:af:13:c6:02:43:f0:41:a0:50:05:e4:ab:60: 18:92:43:cc:cd:81:8d:25:11:5c:a5:da:61:08:ae:91:b6:15: 6f:25:3c:05:80:eb:79:0b:c6:56:64:4c:cb:f5:85:b9:44:1e: a9:da:8f:ba:37:3e:f8:83:58:29:cc:36:82:58:a1:78:19:00: fa:dd:f2:53:b2:6d:c3:8f:15:62:e4:a1:98:d9:80:78:9f:4d: b1:e9:ff:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUxMDE5MDc0ODA5WhcNMjUxMDI2MDc0ODA5WjAYMRYwFAYD VQQDEw02OGY0OTdiOS1jYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO9/+XYPRrNC7kBjzjrvz9HOFpnv8BQfhLZG1dt+iKByBHxvEnidjEQgSh3V sKAOlGjotP7WlyCXa7xaThV8+/fEUpblINb8B4qPBdq9eT86YGmDXoF0YGE4lHUU OHk2Dr5fZRxavaxXzGeqq9PSZPFsCWjOyhVYX9szdiSqMAc48goVCKHoxOiV2ABQ in5PFhLi8ek2ZluKgez/NEAr8g5xaDDTJbWbg32Wk9p1T1CxNQUaGRsKQRSqWfe0 Uod56hr5n6xJ3qjJIVgIQ6zucn9pSyiUYU2dtSniSijg8VPoiiIOJHnIptX+q0H3 gFKbJEOAyBFAwlTmoYkvBoNwSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLggdwbK yrs49LArNVH3gEYlT7wKMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOY3ZjaVj3WoKVD6JMEDb8hU5O9LPa143XvIXi2D90dal74b8i57cN JiYiEXUnQ9M/LB4a23iVHD6z4++C34Ve4b1o7eEQbRI2nFLmmUTXJH/SN5qzTCSr d5OZcUQkTj1XNfmL2aADEYdMOPOggf7ujviMsmJ1oAqe2ltvuiX/w2HzFcgWGWEp v78S3/W8eN0yYbr/FG0a3XTkml6BTPe/Ru/iV/MbiK8TxgJD8EGgUAXkq2AYkkPM zYGNJRFcpdphCK6RthVvJTwFgOt5C8ZWZEzL9YW5RB6p2o+6Nz74g1gpzDaCWKF4 GQD63fJTsm3DjxVi5KGY2YB4n02x6f/r -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:50 2025 by rpki-client