$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: Jnkv3lt/FeUVKqZPWdXRdziNpmz6t6Nap+bJ8/+D4c8= Subject key identifier: 73:DB:E2:08:8D:D2:BB:B4:04:D7:48:BB:6F:5F:B6:63:01:EE:A5:BB Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: 0117 Signing time: Wed 05 Nov 2025 04:58:29 +0000 Manifest this update: Wed 05 Nov 2025 04:58:28 +0000 Manifest next update: Wed 12 Nov 2025 04:58:28 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: 4mo9szwyMOKYBvN9gaxhM7qTGf6JMCuHmF7U1VJQvGo=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Nov 5 04:58:28 2025 GMT Not After : Nov 12 04:58:28 2025 GMT Subject: CN=690ad974-0c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9e:49:2a:02:be:8d:e8:b8:93:3c:f9:b4:ef: 32:73:6c:92:78:3b:14:77:6a:d8:a9:9e:5a:25:95: 30:4d:c8:97:c9:0c:64:14:49:eb:9e:57:34:7a:b4: 9e:1d:41:fd:96:68:2d:35:fe:5a:83:08:bb:de:af: ea:be:a9:23:db:b2:8c:69:6d:58:17:f5:62:57:98: a2:e9:24:47:b7:3c:d1:ed:5e:83:38:97:47:85:e0: 4e:7b:81:f0:34:b1:85:9e:fa:f6:9a:9e:b0:80:87: 46:a2:c2:16:ab:83:c4:6a:46:b7:8e:ea:a2:48:78: 53:26:99:94:6d:7c:e6:e7:d6:10:a3:34:90:ff:93: 08:03:93:76:15:1c:b0:11:e1:5f:fb:e6:15:13:0b: 69:7f:61:b4:54:b9:a4:a2:6a:53:6f:f3:97:62:a9: 59:a7:9e:88:f3:7c:f5:64:c7:85:1e:1e:d8:19:24: ad:0e:22:1c:da:b7:f3:3d:c0:1c:36:19:63:e1:d8: f3:7f:40:f4:e1:98:f1:3f:08:39:90:08:07:92:43: f4:89:12:89:7c:5a:7a:17:b8:21:4c:84:53:2a:fc: 82:15:53:21:8c:c3:94:d1:17:aa:ed:81:30:8e:01: 9e:49:0e:14:5f:40:ca:77:25:92:69:f0:db:91:03: 20:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DB:E2:08:8D:D2:BB:B4:04:D7:48:BB:6F:5F:B6:63:01:EE:A5:BB X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:83:ed:7a:a9:45:b7:2e:78:43:da:ea:84:c5:5e:e5:2c:eb: 56:0b:67:68:92:1b:ee:92:57:31:d3:71:ed:5e:41:7f:50:b9: 07:d7:bd:85:2b:5a:e9:d3:c9:7b:c9:1f:50:db:8c:f9:9d:c2: 9d:53:3e:da:b8:40:9d:06:3c:ed:d8:01:06:77:0d:ed:7f:d9: ff:75:27:28:65:49:af:1a:a8:1f:48:55:36:9e:38:42:49:e2: 3f:5d:fc:79:1b:ca:f8:57:77:d0:aa:be:1a:f5:d9:e9:0d:98: b8:c3:f1:73:04:5c:05:b3:ab:40:f0:2b:e3:de:80:d0:cf:d4: 94:d8:b3:97:30:b2:04:06:07:ad:3d:38:8b:82:4d:92:e6:80: eb:5d:d7:83:dc:49:b4:0b:36:06:2b:df:c0:eb:a7:9a:a5:02: 5d:69:ee:a4:7b:87:34:c5:d9:3e:55:cc:bb:bd:cf:ad:cc:cc: 12:71:fd:a7:f0:b7:7e:6d:d1:bc:fc:17:5d:b9:32:d2:e1:95: a3:a0:f4:02:e3:a1:40:13:0f:e8:9a:b5:15:93:24:ca:b6:b8: cd:fe:21:94:21:0e:54:6c:83:9d:89:26:ea:14:51:39:71:ea: b4:10:50:9f:ae:83:85:af:f2:40:3e:d3:ba:ad:7b:a0:46:8f: 83:73:f6:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUxMTA1MDQ1ODI4WhcNMjUxMTEyMDQ1ODI4WjAYMRYwFAYD VQQDEw02OTBhZDk3NC0wYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0p5JKgK+jei4kzz5tO8yc2ySeDsUd2rYqZ5aJZUwTciXyQxkFEnrnlc0erSe HUH9lmgtNf5agwi73q/qvqkj27KMaW1YF/ViV5ii6SRHtzzR7V6DOJdHheBOe4Hw NLGFnvr2mp6wgIdGosIWq4PEaka3juqiSHhTJpmUbXzm59YQozSQ/5MIA5N2FRyw EeFf++YVEwtpf2G0VLmkompTb/OXYqlZp56I83z1ZMeFHh7YGSStDiIc2rfzPcAc Nhlj4djzf0D04ZjxPwg5kAgHkkP0iRKJfFp6F7ghTIRTKvyCFVMhjMOU0Req7YEw jgGeSQ4UX0DKdyWSafDbkQMgVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPb4giN 0ru0BNdIu29ftmMB7qW7MB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbg+16qUW3LnhD2uqExV7lLOtWC2dokhvuklcx03HtXkF/ULkH172F K1rp08l7yR9Q24z5ncKdUz7auECdBjzt2AEGdw3tf9n/dScoZUmvGqgfSFU2njhC SeI/Xfx5G8r4V3fQqr4a9dnpDZi4w/FzBFwFs6tA8Cvj3oDQz9SU2LOXMLIEBget PTiLgk2S5oDrXdeD3Em0CzYGK9/A66eapQJdae6ke4c0xdk+Vcy7vc+tzMwScf2n 8Ld+bdG8/BdduTLS4ZWjoPQC46FAEw/omrUVkyTKtrjN/iGUIQ5UbIOdiSbqFFE5 ceq0EFCfroOFr/JAPtO6rXugRo+Dc/aj -----END CERTIFICATE-----Generated at Wed Nov 5 13:07:47 2025 by rpki-client