$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: M+A91y+jqZpQLiQCcE+1LSToWZXeC87+txPCY6pSCBg= Subject key identifier: BF:63:7F:9F:64:FB:1A:DD:5A:89:7D:D0:45:67:0F:2B:31:DE:3B:9B Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 08A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 089A Signing time: Sun 01 Mar 2026 23:52:13 +0000 Manifest this update: Sun 01 Mar 2026 23:52:12 +0000 Manifest next update: Sun 08 Mar 2026 23:52:12 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: TPipQNn2saxnvpPPT0/1m7FyawfSSI7TGQhFX6bNXoA=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: 2eup2m0aHXQJQWm9cIyVkI2HXtK+Dw0dwIa6EDDGEm8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2210 (0x8a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Mar 1 23:52:12 2026 GMT Not After : Mar 8 23:52:12 2026 GMT Subject: CN=69a4d12d-2854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:91:cd:6e:91:e4:bb:f1:b4:bb:12:a1:7d: ac:07:50:f0:8b:1c:05:59:f2:1d:a3:0b:a8:ca:98: c5:95:2a:d0:5e:02:74:a0:83:8a:4e:3f:b7:2a:b5: 3e:f1:f6:38:96:51:7b:8b:da:1c:64:9c:93:8a:3a: 81:69:57:68:59:aa:29:1a:5c:65:d1:5b:16:62:ce: 0b:d2:d2:f7:84:88:6a:bd:d4:20:9d:7a:36:92:0f: 00:fb:e9:99:57:0d:7d:6b:a6:22:f2:41:8b:db:0d: c7:5b:93:e0:d3:e9:ab:3c:f5:9e:2d:03:f8:61:fb: 6c:ab:1f:20:d2:fe:23:ec:a8:63:56:b1:45:2f:8d: 3f:8d:4e:02:12:f8:77:24:01:36:37:57:63:b9:29: dd:cd:9e:0b:9c:cc:bf:74:18:a2:29:b3:06:95:e9: 7f:bb:7d:f3:5c:65:38:bf:49:cb:cb:60:45:cc:a6: 0b:f2:05:80:d4:67:72:c9:de:1e:ce:c2:8b:fd:5d: 64:9f:f1:34:3c:58:01:95:f4:01:34:3c:e8:84:7a: 2a:f0:2a:dd:6b:ff:55:99:f4:c4:7a:01:ea:22:97: 60:77:fd:8b:b1:8f:09:a6:8a:28:e0:aa:f5:4b:48: d8:89:e8:0a:35:0d:83:2f:b8:ca:8c:e8:46:4a:64: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:63:7F:9F:64:FB:1A:DD:5A:89:7D:D0:45:67:0F:2B:31:DE:3B:9B X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:de:77:28:b0:39:42:cf:0f:a8:9a:45:ef:cd:40:69:6c:52: d6:ea:7b:6d:84:11:cb:47:1b:ec:e0:7e:78:20:a9:70:65:fe: 04:19:0e:2a:5f:05:36:de:ad:03:a9:bc:9e:ee:28:2f:9a:7a: 35:1b:2c:98:52:9f:47:21:9a:7c:a6:80:92:d3:5f:d8:18:cf: e0:f4:5e:a2:6d:6e:ce:d5:20:53:b8:a2:6c:a2:f9:55:1a:ba: 67:bc:2e:7d:ef:1d:16:88:b8:2b:b5:f4:44:f6:30:ac:2c:da: 08:92:c5:2b:2d:c4:84:16:9e:de:16:c1:e1:9a:de:bf:ca:1f: 3e:58:e8:85:29:08:56:a1:8d:0a:1b:79:72:01:9e:4b:48:17: 98:6e:87:85:ed:58:ed:47:98:00:c9:75:7f:30:15:12:db:fa: 27:f8:d6:76:31:78:5f:48:4e:5e:ea:3f:15:2a:0e:85:96:fd: 71:df:90:bc:19:37:1b:ce:43:3d:ee:61:51:21:1c:76:46:0c: 03:46:dc:68:67:90:d6:2b:54:f6:bd:2d:38:b9:82:c0:12:e7: 38:2f:f6:55:6e:72:de:03:b8:59:50:f2:bb:26:85:b9:6e:93: e6:32:ba:bb:71:4e:9f:3e:42:26:14:6e:41:9d:03:71:19:e4: f0:65:87:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjYwMzAxMjM1MjEyWhcNMjYwMzA4MjM1MjEyWjAYMRYwFAYD VQQDEw02OWE0ZDEyZC0yODU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKaRzW6R5LvxtLsSoX2sB1DwixwFWfIdowuoypjFlSrQXgJ0oIOKTj+3KrU+ 8fY4llF7i9ocZJyTijqBaVdoWaopGlxl0VsWYs4L0tL3hIhqvdQgnXo2kg8A++mZ Vw19a6Yi8kGL2w3HW5Pg0+mrPPWeLQP4Yftsqx8g0v4j7KhjVrFFL40/jU4CEvh3 JAE2N1djuSndzZ4LnMy/dBiiKbMGlel/u33zXGU4v0nLy2BFzKYL8gWA1Gdyyd4e zsKL/V1kn/E0PFgBlfQBNDzohHoq8Crda/9VmfTEegHqIpdgd/2LsY8Jpooo4Kr1 S0jYiegKNQ2DL7jKjOhGSmQUEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL9jf59k +xrdWol90EVnDysx3jubMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOt53KLA5Qs8PqJpF781AaWxS1up7bYQRy0cb7OB+eCCpcGX+BBkOKl8FNt6t A6m8nu4oL5p6NRssmFKfRyGafKaAktNf2BjP4PReom1uztUgU7iibKL5VRq6Z7wu fe8dFoi4K7X0RPYwrCzaCJLFKy3EhBae3hbB4Zrev8ofPljohSkIVqGNCht5cgGe S0gXmG6Hhe1Y7UeYAMl1fzAVEtv6J/jWdjF4X0hOXuo/FSoOhZb9cd+QvBk3G85D Pe5hUSEcdkYMA0bcaGeQ1itU9r0tOLmCwBLnOC/2VW5y3gO4WVDyuyaFuW6T5jK6 u3FOnz5CJhRuQZ0DcRnk8GWHbw== -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:17 2026 by rpki-client