$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: 2XhnWdKzjp2YmpmIe6kkP1NxaNr4OzOXAlxTMIlrnbw= Subject key identifier: F3:49:99:F1:81:E5:6D:B0:0A:69:9F:20:91:85:B4:6D:6C:EE:DB:F8 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 01C5 Signing time: Wed 25 Mar 2026 03:06:04 +0000 Manifest this update: Wed 25 Mar 2026 03:06:04 +0000 Manifest next update: Wed 01 Apr 2026 03:06:04 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: LUI0KQDFe8K9xmrvSOTm+xubc2XvNX42SoWiRdvqq/Q=) 2: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: cqj/q7H7QDiXe6/7jCe/lSMVIy9mfeqMpQ15gsKTszI=) 3: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: Dy/O9oy6clN/Qg+QCiirOL6pAskWHr8uHyrk6yzQtfg=) 4: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: vnVgvIfqJI2mgZD/IhMpky2IouHtF6u2DvFf6UoUXp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Mar 25 03:06:04 2026 GMT Not After : Apr 1 03:06:04 2026 GMT Subject: CN=69c3511c-f4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:23:23:67:ac:26:ee:bd:dc:4d:8c:67:4d: ec:1b:8a:4f:1e:72:0c:6a:ae:a7:08:58:95:72:48: 18:8b:fc:98:c1:94:0a:63:a6:d7:b6:5f:ae:84:28: 84:7c:fd:e6:b1:25:32:e0:88:e0:9c:74:d9:82:eb: 43:a3:b8:13:61:70:dc:e8:1b:a6:9f:99:19:97:6d: 6e:9e:e0:30:77:7c:33:db:fe:80:0d:a5:1b:9c:ee: 95:c1:aa:9c:83:6f:c2:82:8a:5d:cb:19:26:0c:d9: 6d:f1:ae:1b:e2:2f:90:1c:85:36:88:f7:bf:da:19: 39:a5:1e:be:07:5f:e0:4c:6c:76:0f:6a:01:f4:b9: 92:31:78:dd:03:b7:82:f3:ef:d1:9b:08:91:54:b4: 8b:54:09:43:15:e7:1a:6e:40:3a:76:dd:c9:66:d6: 07:99:58:00:ac:d3:5c:c2:7c:5e:10:8e:ed:15:b9: 3c:ea:7a:93:a4:9a:5f:7d:6f:dd:38:de:60:0f:17: 1e:fb:65:2b:56:15:72:d8:19:2a:b0:47:f9:e4:50: 60:dd:91:b7:82:e4:09:a4:ef:bc:50:9b:19:5f:df: 93:9d:bf:80:e8:fc:68:03:05:41:98:b2:f8:1f:8e: 52:f0:da:23:0f:7a:ee:e0:25:2a:80:d3:a0:1a:09: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:49:99:F1:81:E5:6D:B0:0A:69:9F:20:91:85:B4:6D:6C:EE:DB:F8 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:dc:c5:39:38:4d:db:63:7d:b4:7f:95:d8:51:8f:2b:c8:be: ef:27:21:5c:75:70:1c:fc:ef:c8:16:1b:f0:c5:2f:a5:30:84: 65:d1:46:a5:d5:ce:39:44:62:6e:35:5c:57:5a:27:4b:d1:c3: 7a:a7:b4:73:dd:3a:40:3a:00:77:4e:8f:9a:85:1a:14:29:78: 65:f2:1f:ae:f9:e5:aa:c5:ab:5d:bf:45:c2:56:e9:ee:05:ce: 76:32:c4:97:6d:62:29:05:9b:2f:27:3b:a9:8e:a0:67:ac:87: 6f:53:f4:17:19:4a:b8:fe:8f:9c:80:68:f9:a6:5c:e7:57:b1: ca:e4:8c:3c:91:56:b2:e0:bc:d0:37:18:50:e2:86:af:49:52: 25:08:4f:35:7f:51:c1:42:10:4c:6d:37:67:15:a0:a9:de:7d: 4c:16:e5:c8:5d:c8:7d:8b:f1:6d:f1:44:ff:26:eb:38:b2:1d: ad:52:f8:e6:28:ee:90:36:16:0a:33:d7:97:18:d7:be:31:aa: 5a:9e:f0:d1:b3:8f:ff:02:ea:93:24:7f:21:5a:f6:80:8a:09: be:36:cc:08:8d:6c:7c:8c:83:a1:b1:4c:82:3d:89:b4:ea:3b: c8:cb:8b:a4:6f:16:c6:f3:3f:64:1f:b1:d7:8b:c1:ed:2c:48: 9e:1c:46:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYwMzI1MDMwNjA0WhcNMjYwNDAxMDMwNjA0WjAYMRYwFAYD VQQDEw02OWMzNTExYy1mNGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6YjI2esJu693E2MZ03sG4pPHnIMaq6nCFiVckgYi/yYwZQKY6bXtl+uhCiE fP3msSUy4IjgnHTZgutDo7gTYXDc6Bumn5kZl21unuAwd3wz2/6ADaUbnO6Vwaqc g2/CgopdyxkmDNlt8a4b4i+QHIU2iPe/2hk5pR6+B1/gTGx2D2oB9LmSMXjdA7eC 8+/RmwiRVLSLVAlDFecabkA6dt3JZtYHmVgArNNcwnxeEI7tFbk86nqTpJpffW/d ON5gDxce+2UrVhVy2BkqsEf55FBg3ZG3guQJpO+8UJsZX9+Tnb+A6PxoAwVBmLL4 H45S8NojD3ru4CUqgNOgGgn1UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNJmfGB 5W2wCmmfIJGFtG1s7tv4MB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASNzFOThN22N9tH+V2FGPK8i+7ychXHVwHPzvyBYb8MUvpTCEZdFGpdXOOURi bjVcV1onS9HDeqe0c906QDoAd06PmoUaFCl4ZfIfrvnlqsWrXb9Fwlbp7gXOdjLE l21iKQWbLyc7qY6gZ6yHb1P0FxlKuP6PnIBo+aZc51exyuSMPJFWsuC80DcYUOKG r0lSJQhPNX9RwUIQTG03ZxWgqd59TBblyF3IfYvxbfFE/ybrOLIdrVL45ijukDYW CjPXlxjXvjGqWp7w0bOP/wLqkyR/IVr2gIoJvjbMCI1sfIyDobFMgj2JtOo7yMuL pG8WxvM/ZB+x14vB7SxInhxGug== -----END CERTIFICATE-----Generated at Thu Mar 26 00:34:22 2026 by rpki-client