$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: NYi3wFw5czcGTQESIwkGWk6+0ZdPA7hmPai+07LVpBI= Subject key identifier: 91:B0:12:CA:16:2A:7C:87:D9:05:12:A1:49:B1:16:D5:EE:E4:D6:13 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 023D Signing time: Fri 13 Nov 2026 02:43:22 +0000 Manifest this update: Fri 13 Nov 2026 02:43:22 +0000 Manifest next update: Fri 20 Nov 2026 02:43:22 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: gwUGhrqIglDLCKk+89qXccXtQBTLYpFUIYZBGUgAp3U=) 2: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: PHajpZxrBbwNo1rzop6t1kDAND+XuEDmiysqwaKiUK4=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLCHLkKHbHA08+tXZCtJcmyubM9Z6U4xpeyvONN3Ypg=) 4: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: tOMkH0Ay9qb/mpun76IvTGnqwv+4Yq7qBoEQv2FSAAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Nov 2026 02:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Nov 13 02:43:22 2026 GMT Not After : Nov 20 02:43:22 2026 GMT Subject: CN=6af6794a-68d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:0b:ad:dc:cf:d3:f2:92:78:37:2d:a6:9e: 8b:79:82:c8:67:46:62:c3:65:29:82:07:cf:61:e1: 6f:40:0e:d6:63:9b:ce:02:4f:92:8b:f7:21:dc:dc: 60:9c:60:cd:31:64:e2:58:c3:9f:93:dc:af:12:df: d4:ac:d9:af:cc:a4:e5:4c:01:70:e8:2b:ac:24:6f: a2:ac:56:4e:35:58:9b:d3:93:fd:cc:70:2a:15:36: 1a:62:16:ac:d9:17:e8:ff:6d:39:4b:c7:3b:94:40: 61:92:69:7d:2b:b5:f1:71:4c:e7:77:03:7a:a8:cb: d8:ea:f4:7e:1a:67:e2:ca:60:14:a6:16:98:6c:41: ac:6c:19:b8:56:d1:aa:fe:5c:76:b1:d9:4f:cc:fb: 9e:e6:37:c1:60:eb:c0:27:7b:9f:eb:dd:8c:4e:d8: 96:af:34:85:7d:04:cb:d8:be:4a:8d:6e:c3:4d:d4: e1:8e:9a:41:64:b7:5b:0a:5d:0b:7b:41:39:41:4e: 27:33:13:b4:6f:06:8b:a9:c9:47:32:ca:9c:25:c0: bb:f5:38:15:38:2b:49:f9:1d:32:d8:25:6f:b5:b7: 7f:75:8a:3a:fb:bb:af:db:dc:b3:8c:88:06:6a:91: 97:fd:4c:79:85:25:ae:88:f4:df:09:c8:5f:6e:9e: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:12:CA:16:2A:7C:87:D9:05:12:A1:49:B1:16:D5:EE:E4:D6:13 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:ea:09:b8:0d:c3:32:ac:84:71:eb:2a:1b:b5:22:03:d5: 31:4a:1b:f0:af:30:ed:53:3f:52:04:a3:25:bb:c8:e9:d8:31: 7a:91:d8:0d:4f:bc:5f:2e:2e:d0:11:c8:57:93:ec:20:a6:38: 0d:50:0f:d1:89:13:29:5e:67:6b:89:6a:be:bb:39:9a:c1:e3: c8:9d:86:26:19:48:bb:f8:55:5c:bb:88:4e:c8:c9:60:3a:c6: 94:ee:e9:ef:42:4f:03:50:94:0f:bf:a6:61:77:7c:a8:8c:0c: 1d:e5:8e:74:45:8f:44:20:3e:46:50:90:85:32:a7:00:1b:59: c4:56:a2:f6:bf:1d:3b:27:e6:ae:bc:c7:8c:e1:31:08:08:4e: ef:02:a5:81:0f:dd:e9:60:ab:d6:a5:e9:cf:cf:4c:82:2e:f5: 91:17:af:86:85:f2:a4:10:2c:dc:c4:d9:b5:1c:93:20:22:f0: ef:b2:99:30:47:ee:cd:3d:ad:37:8c:67:e1:86:1a:61:53:9d: 2b:ff:d7:95:be:3e:4b:cd:03:38:ef:7c:fb:7e:0e:43:83:e2: f0:6e:df:71:76:2f:45:cc:ea:b5:b1:0f:00:41:b9:66:1d:3f: e7:c2:67:f8:c6:d5:7a:b8:c8:a9:7a:c3:52:d4:e0:40:bb:04: 03:97:3f:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYxMTEzMDI0MzIyWhcNMjYxMTIwMDI0MzIyWjAYMRYwFAYD VQQDEw02YWY2Nzk0YS02OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkxELrdzP0/KSeDctpp6LeYLIZ0Ziw2UpggfPYeFvQA7WY5vOAk+Si/ch3Nxg nGDNMWTiWMOfk9yvEt/UrNmvzKTlTAFw6CusJG+irFZONVib05P9zHAqFTYaYhas 2Rfo/205S8c7lEBhkml9K7XxcUzndwN6qMvY6vR+GmfiymAUphaYbEGsbBm4VtGq /lx2sdlPzPue5jfBYOvAJ3uf692MTtiWrzSFfQTL2L5KjW7DTdThjppBZLdbCl0L e0E5QU4nMxO0bwaLqclHMsqcJcC79TgVOCtJ+R0y2CVvtbd/dYo6+7uv29yzjIgG apGX/Ux5hSWuiPTfCchfbp5LMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJGwEsoW KnyH2QUSoUmxFtXu5NYTMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQM7qCbgNwzKshHHrKhu1IgPVMUob8K8w7VM/UgSjJbvI6dgxepHYDU+8Xy4u 0BHIV5PsIKY4DVAP0YkTKV5na4lqvrs5msHjyJ2GJhlIu/hVXLuITsjJYDrGlO7p 70JPA1CUD7+mYXd8qIwMHeWOdEWPRCA+RlCQhTKnABtZxFai9r8dOyfmrrzHjOEx CAhO7wKlgQ/d6WCr1qXpz89Mgi71kRevhoXypBAs3MTZtRyTICLw77KZMEfuzT2t N4xn4YYaYVOdK//Xlb4+S80DOO98+34OQ4Pi8G7fcXYvRczqtbEPAEG5Zh0/58Jn +MbVerjIqXrDUtTgQLsEA5c/Tg== -----END CERTIFICATE-----Generated at Sat Nov 14 22:34:52 2026 by rpki-client