$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: 63zd3WDcjBaSx3RhFpzL+D1z55GuSFEZjAojufDOfyA= Subject key identifier: BA:B9:EF:4F:13:20:FC:12:46:F3:96:C9:09:C1:CC:B9:05:DF:AD:D6 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 0223 Signing time: Wed 23 Sep 2026 02:42:40 +0000 Manifest this update: Wed 23 Sep 2026 02:42:40 +0000 Manifest next update: Wed 30 Sep 2026 02:42:40 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: Xpk2s/grlp7NReUaQsrkVXd4svdtegpBPU1qaoXLSXU=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: tOMkH0Ay9qb/mpun76IvTGnqwv+4Yq7qBoEQv2FSAAk=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLCHLkKHbHA08+tXZCtJcmyubM9Z6U4xpeyvONN3Ypg=) 4: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: PHajpZxrBbwNo1rzop6t1kDAND+XuEDmiysqwaKiUK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Sep 23 02:42:40 2026 GMT Not After : Sep 30 02:42:40 2026 GMT Subject: CN=6ab33ca0-55dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:1c:d1:3f:9c:b5:96:09:3f:1e:31:2f:ff: 88:e9:b4:0b:6e:76:45:52:7b:aa:18:9a:e8:cd:de: 7a:85:1b:8f:6e:4f:80:13:63:d3:37:cb:4b:7f:f2: cb:de:46:b5:5e:96:93:23:c4:49:18:76:67:61:9b: 0b:84:da:68:8e:06:7c:01:ee:44:79:ff:44:5d:f6: ac:6d:18:3e:0e:cc:06:fb:bc:ea:19:23:1c:8f:54: 0b:3a:dc:39:d4:a4:ca:e0:00:0b:92:77:80:a8:da: e3:49:7e:ff:c9:85:a3:a6:70:8e:bb:3c:ef:55:7f: 4a:19:c9:e3:88:92:b1:b1:28:01:ac:0b:b2:ae:0f: 8d:15:03:cc:6b:0b:fc:28:ec:f2:26:75:dc:6f:a6: 40:13:c2:f7:8e:d7:77:fe:49:75:00:63:01:fc:8a: 35:01:4f:58:f8:30:2e:d7:74:57:53:d8:4b:82:6d: ba:e4:a9:8b:6d:91:8d:b0:7e:eb:76:37:a6:98:ed: d9:e1:ce:28:c0:24:b3:10:46:5a:c5:ab:4d:55:2b: 72:a5:89:86:78:ba:93:5c:dc:ee:08:5d:2d:24:b6: 17:86:2a:35:ef:31:53:bb:0b:20:17:1c:6a:cc:ea: 83:f8:00:8b:3c:e5:97:e4:1d:b3:46:3e:c8:92:dd: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B9:EF:4F:13:20:FC:12:46:F3:96:C9:09:C1:CC:B9:05:DF:AD:D6 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:49:51:72:aa:26:b9:8f:2d:45:52:45:6a:5c:17:98:03: 85:ef:46:22:81:5b:b7:76:70:71:53:31:f1:cf:9f:47:6d:c1: 68:cd:cd:51:af:ba:61:79:96:23:a6:ba:04:8a:02:9e:c7:f3: 57:67:f4:7b:87:45:b3:c1:e2:d9:b7:5e:5f:c5:9e:3d:d7:d9: 37:58:74:5e:7f:d4:fe:b0:b5:46:ca:7b:ba:e7:c0:4d:df:f6: 2f:a8:44:a1:75:2f:c2:42:d4:dc:24:e7:ed:2f:66:a9:8f:1f: ba:01:94:ea:be:34:82:81:08:f9:4f:0a:55:a9:3f:ee:20:35: 70:9c:86:9a:fd:5c:7d:ef:4d:81:d4:05:a1:29:e4:c6:59:4b: e9:37:80:c8:12:29:20:1b:d5:86:dc:10:3d:48:aa:86:b3:cd: 99:04:ae:f3:3c:06:9a:80:7a:4b:f9:2c:83:4e:5e:2a:a8:ed: 79:c5:67:a7:31:74:dd:ec:a9:b1:a0:a3:7c:60:ff:71:ad:dc: c3:a3:68:75:23:3d:47:21:1c:bc:49:26:f8:40:10:82:d0:a6: 2e:25:8d:84:bd:6b:55:4e:3c:c0:ba:ab:e0:1f:33:d8:3d:69: 1c:71:a9:05:f8:e3:6b:a6:06:c0:59:24:77:67:a2:e6:dd:c4: a5:81:41:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYwOTIzMDI0MjQwWhcNMjYwOTMwMDI0MjQwWjAYMRYwFAYD VQQDEw02YWIzM2NhMC01NWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Twc0T+ctZYJPx4xL/+I6bQLbnZFUnuqGJrozd56hRuPbk+AE2PTN8tLf/LL 3ka1XpaTI8RJGHZnYZsLhNpojgZ8Ae5Eef9EXfasbRg+DswG+7zqGSMcj1QLOtw5 1KTK4AALkneAqNrjSX7/yYWjpnCOuzzvVX9KGcnjiJKxsSgBrAuyrg+NFQPMawv8 KOzyJnXcb6ZAE8L3jtd3/kl1AGMB/Io1AU9Y+DAu13RXU9hLgm265KmLbZGNsH7r djemmO3Z4c4owCSzEEZaxatNVStypYmGeLqTXNzuCF0tJLYXhio17zFTuwsgFxxq zOqD+ACLPOWX5B2zRj7Ikt1Z4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLq5708T IPwSRvOWyQnBzLkF363WMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATNpJUXKqJrmPLUVSRWpcF5gDhe9GIoFbt3ZwcVMx8c+fR23BaM3NUa+6YXmW I6a6BIoCnsfzV2f0e4dFs8Hi2bdeX8WePdfZN1h0Xn/U/rC1Rsp7uufATd/2L6hE oXUvwkLU3CTn7S9mqY8fugGU6r40goEI+U8KVak/7iA1cJyGmv1cfe9NgdQFoSnk xllL6TeAyBIpIBvVhtwQPUiqhrPNmQSu8zwGmoB6S/ksg05eKqjtecVnpzF03eyp saCjfGD/ca3cw6NodSM9RyEcvEkm+EAQgtCmLiWNhL1rVU48wLqr4B8z2D1pHHGp Bfjja6YGwFkkd2ei5t3EpYFBKg== -----END CERTIFICATE-----Generated at Wed Sep 23 13:14:21 2026 by rpki-client