$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: ngnoYtw97KzHX2teElWsWnO9lzLBhV/52wqHEPowLAY= Subject key identifier: 75:70:45:36:57:43:51:4B:4D:2E:30:51:E5:19:EF:8E:98:73:9B:9E Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: 0152 Signing time: Sun 01 Mar 2026 06:04:36 +0000 Manifest this update: Sun 01 Mar 2026 06:04:35 +0000 Manifest next update: Sun 08 Mar 2026 06:04:35 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: 232Uu9fKwIV1EAPxh3Zo7WPMvYwY0ZMQ4iQZ9Ja6dlA=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Mar 1 06:04:35 2026 GMT Not After : Mar 8 06:04:35 2026 GMT Subject: CN=69a3d6f4-c713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8e:0a:aa:82:52:e2:34:2f:a1:7b:8f:02:9e: fe:ba:93:37:0d:e3:b0:54:0a:35:76:7d:1c:c8:6f: f5:02:e1:b9:9d:16:d7:bc:e3:bd:a8:2c:e7:5f:68: a8:c2:db:da:bf:21:36:33:97:a3:0d:90:db:01:69: bd:a8:34:28:a9:52:c8:ca:a1:ed:18:93:62:fa:7f: de:f8:6a:7d:0c:5a:fa:7a:2b:b7:39:91:f3:79:0b: c4:0c:22:17:13:ff:a8:85:6a:90:d5:8d:05:cc:fa: 05:5c:42:41:3c:6c:a2:2a:e2:f8:de:b1:85:7d:e1: 2f:af:a8:ed:f3:d5:ba:d2:30:01:fd:af:e6:d9:84: 9d:1a:bc:ef:83:2f:fd:8c:81:4c:c1:62:28:7f:b2: 2a:9f:92:18:86:2d:77:bf:2e:8f:41:d4:de:db:f4: ea:6f:af:b5:2a:ad:19:b1:7c:1d:9a:37:b4:8a:fc: 3d:4a:bd:8b:b4:4c:6d:d3:3e:51:e4:34:8f:61:5d: e3:9c:24:a3:47:c9:ee:e9:e5:50:6f:8f:ba:5e:ca: bf:0c:36:a3:1e:52:9f:29:43:97:93:2a:f3:6a:3e: f2:66:26:c2:fc:70:0d:5c:c1:3f:2f:4f:fd:59:61: 8c:64:31:de:ff:01:94:db:76:e8:33:18:ca:b3:c0: 84:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:70:45:36:57:43:51:4B:4D:2E:30:51:E5:19:EF:8E:98:73:9B:9E X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:b5:57:4d:a2:df:c3:d3:88:45:07:17:ef:11:7f:90:3f: 8a:35:c0:a4:c4:09:4f:fe:14:29:62:ac:e8:cb:3c:a2:f7:83: de:f6:66:a1:c4:26:1b:38:a7:c4:23:9c:14:3a:3f:2b:f4:b0: b1:13:75:fb:74:9a:bc:a6:22:0f:8c:84:cf:09:81:f3:4d:3c: 46:f3:33:e4:cf:dc:f7:31:6a:68:75:c5:a3:10:50:39:f7:a0: fb:ac:06:5c:70:de:17:22:19:0c:5d:e2:54:4e:44:3e:b5:07: 5b:fb:79:f7:a0:e5:2c:3a:3d:53:cf:e4:0a:24:8c:42:76:57: 7c:3b:63:25:7b:a1:da:fa:eb:2d:2a:fa:7e:f6:d0:fa:f6:66: f4:36:09:2f:49:ee:b8:4a:04:cb:97:51:18:f9:4f:15:09:12: 2a:24:58:19:df:75:1c:24:f5:45:66:b4:e7:64:b0:73:c9:2c: f1:cd:f9:ef:a6:f6:1f:a8:f6:6f:1c:1e:cf:4a:b1:07:7c:d0: 61:15:bb:72:45:b5:db:cc:fe:ef:69:8a:a6:90:ad:35:10:05: 25:0e:67:26:eb:df:32:56:fa:48:9f:6a:77:df:25:f9:ce:b8: e5:e7:be:ae:d8:7e:4f:06:46:e9:be:5b:f7:e1:62:eb:3f:36: f1:02:f9:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjYwMzAxMDYwNDM1WhcNMjYwMzA4MDYwNDM1WjAYMRYwFAYD VQQDEw02OWEzZDZmNC1jNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI4KqoJS4jQvoXuPAp7+upM3DeOwVAo1dn0cyG/1AuG5nRbXvOO9qCznX2io wtvavyE2M5ejDZDbAWm9qDQoqVLIyqHtGJNi+n/e+Gp9DFr6eiu3OZHzeQvEDCIX E/+ohWqQ1Y0FzPoFXEJBPGyiKuL43rGFfeEvr6jt89W60jAB/a/m2YSdGrzvgy/9 jIFMwWIof7Iqn5IYhi13vy6PQdTe2/Tqb6+1Kq0ZsXwdmje0ivw9Sr2LtExt0z5R 5DSPYV3jnCSjR8nu6eVQb4+6Xsq/DDajHlKfKUOXkyrzaj7yZibC/HANXME/L0/9 WWGMZDHe/wGU23boMxjKs8CEDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHVwRTZX Q1FLTS4wUeUZ746Yc5ueMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATJy1V02i38PTiEUHF+8Rf5A/ijXApMQJT/4UKWKs6Ms8oveD3vZmocQmGzin xCOcFDo/K/SwsRN1+3SavKYiD4yEzwmB8008RvMz5M/c9zFqaHXFoxBQOfeg+6wG XHDeFyIZDF3iVE5EPrUHW/t596DlLDo9U8/kCiSMQnZXfDtjJXuh2vrrLSr6fvbQ +vZm9DYJL0nuuEoEy5dRGPlPFQkSKiRYGd91HCT1RWa052Swc8ks8c3576b2H6j2 bxwez0qxB3zQYRW7ckW128z+72mKppCtNRAFJQ5nJuvfMlb6SJ9qd98l+c645ee+ rth+TwZG6b5b9+Fi6z828QL5yA== -----END CERTIFICATE-----Generated at Mon Mar 2 14:47:46 2026 by rpki-client