$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: Xm46X+5V6E+AEfDukb6oi7TQh0qlG7N4Uc7DVNEFfSw= Subject key identifier: CA:9A:C8:E9:2E:61:B6:E5:AB:DA:40:CD:75:8D:7C:7E:3F:DB:D4:1B Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: 016C Signing time: Fri 17 Apr 2026 04:28:31 +0000 Manifest this update: Fri 17 Apr 2026 04:28:31 +0000 Manifest next update: Fri 24 Apr 2026 04:28:31 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: xugDldueaQ/HqEBhpHo62vfvVavftfFKzH/RZRusILQ=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: cSaMSLtkU9FTO3/I0qdSykyZFjGm8Y6stoXYTpc1WwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Apr 17 04:28:31 2026 GMT Not After : Apr 24 04:28:31 2026 GMT Subject: CN=69e1b6ef-b894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9c:c9:d3:92:57:45:a5:39:59:6a:86:84:56: 6a:fa:6f:24:2a:5a:9d:41:df:06:05:0a:89:84:c3: c6:f8:58:7b:11:df:8e:73:6d:99:20:e4:08:9c:d2: 01:b1:3e:b6:4c:00:6e:05:66:60:48:83:1f:04:0f: 6c:e6:ba:d6:f9:18:84:db:77:fa:eb:e3:62:a8:d5: 0b:f7:d1:29:93:0c:fa:5f:36:2f:3d:9d:5b:45:b8: 57:53:a4:d9:9a:fb:1c:4d:e3:12:3d:db:6e:de:c7: a4:86:fa:9c:73:83:7d:f2:fd:03:7d:8b:58:b8:40: 5d:7a:9f:0e:34:24:a2:23:1e:85:a6:3e:d3:aa:e6: 75:90:04:3d:44:28:34:c4:3d:52:ab:9b:bf:23:8e: a3:25:a5:60:bf:a6:b0:74:f1:7f:57:e6:05:7c:78: 97:de:a6:8c:c6:0b:10:41:b2:50:78:1f:f8:d1:1e: 55:62:b0:6e:0d:59:49:1e:6c:c1:df:fc:6e:30:59: f6:e8:78:c4:10:0f:e4:5f:ed:cb:93:36:61:dc:fa: ca:61:ba:c1:e1:ed:8a:6b:8a:53:1b:70:60:14:6c: b5:c9:61:d1:a6:e5:61:39:bb:4a:af:12:d8:f2:90: 45:30:91:d4:17:39:cc:10:f9:ec:40:b2:af:e6:cc: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9A:C8:E9:2E:61:B6:E5:AB:DA:40:CD:75:8D:7C:7E:3F:DB:D4:1B X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:88:cd:41:8a:d4:5d:2b:95:26:72:f5:f4:4e:f7:08:28: 63:d8:42:f9:a7:80:81:cd:3d:09:f3:c3:fe:ed:63:e3:26:dc: b8:7e:dc:2a:e7:27:4e:2b:5d:8f:56:4c:ce:38:97:de:cb:c9: 5b:20:d6:bf:f7:b3:c0:bb:4f:0d:8e:72:47:1f:35:8a:1b:10: 02:35:48:6a:fe:74:b5:01:1b:a9:f9:a0:99:3e:84:4f:8b:90: 46:fd:99:be:a0:bc:92:8f:5b:41:01:f8:26:ba:1e:b4:17:35: 49:9a:7d:d3:fc:2a:85:43:82:af:72:dd:52:65:5d:fa:e7:96: 5c:8a:b3:14:93:77:39:0b:b4:2d:4c:f8:4c:ff:28:2b:56:64: b9:55:b5:f5:2f:c4:a4:9f:6a:63:3a:52:05:84:53:6e:df:21: a3:db:0f:4a:7b:a7:7a:05:d7:66:e4:12:a2:da:56:9d:b3:65: 19:47:6e:9e:66:bf:5c:3c:3f:d3:a5:c4:ea:1e:0f:57:6a:d0: 64:05:f2:49:69:1e:d1:0a:fd:db:59:18:5a:4b:50:f8:01:88: 2e:38:4b:24:e4:a9:2a:d5:4f:f7:8e:90:c3:68:95:cc:2b:99: 98:c7:f2:98:13:9a:9e:c9:9e:53:5b:c1:39:3f:7f:a5:09:d6: 62:41:e5:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjYwNDE3MDQyODMxWhcNMjYwNDI0MDQyODMxWjAYMRYwFAYD VQQDEw02OWUxYjZlZi1iODk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZzJ05JXRaU5WWqGhFZq+m8kKlqdQd8GBQqJhMPG+Fh7Ed+Oc22ZIOQInNIB sT62TABuBWZgSIMfBA9s5rrW+RiE23f66+NiqNUL99Epkwz6XzYvPZ1bRbhXU6TZ mvscTeMSPdtu3sekhvqcc4N98v0DfYtYuEBdep8ONCSiIx6Fpj7TquZ1kAQ9RCg0 xD1Sq5u/I46jJaVgv6awdPF/V+YFfHiX3qaMxgsQQbJQeB/40R5VYrBuDVlJHmzB 3/xuMFn26HjEEA/kX+3LkzZh3PrKYbrB4e2Ka4pTG3BgFGy1yWHRpuVhObtKrxLY 8pBFMJHUFznMEPnsQLKv5swfcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMqayOku Ybblq9pAzXWNfH4/29QbMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQfyIzUGK1F0rlSZy9fRO9wgoY9hC+aeAgc09CfPD/u1j4ybcuH7cKucnTitd j1ZMzjiX3svJWyDWv/ezwLtPDY5yRx81ihsQAjVIav50tQEbqfmgmT6ET4uQRv2Z vqC8ko9bQQH4JroetBc1SZp90/wqhUOCr3LdUmVd+ueWXIqzFJN3OQu0LUz4TP8o K1ZkuVW19S/EpJ9qYzpSBYRTbt8ho9sPSnunegXXZuQSotpWnbNlGUdunma/XDw/ 06XE6h4PV2rQZAXySWke0Qr921kYWktQ+AGILjhLJOSpKtVP946Qw2iVzCuZmMfy mBOansmeU1vBOT9/pQnWYkHlQg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:34:09 2026 by rpki-client