$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: FHOAWNOBWAjwxGh3XoQPiQtONvlToIAjKNQuCD6D++g= Subject key identifier: 88:52:E7:D8:91:A4:8B:4B:94:46:FD:C3:2F:F2:4D:DC:DC:42:FD:5F Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 01D1 Signing time: Fri 17 Apr 2026 03:23:25 +0000 Manifest this update: Fri 17 Apr 2026 03:23:25 +0000 Manifest next update: Fri 24 Apr 2026 03:23:25 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: 9ATVdNTaP9+vsbI7q06VgsWDwAKNiS9+1kec69/wLgk=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: Dy/O9oy6clN/Qg+QCiirOL6pAskWHr8uHyrk6yzQtfg=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: vnVgvIfqJI2mgZD/IhMpky2IouHtF6u2DvFf6UoUXp8=) 4: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: cqj/q7H7QDiXe6/7jCe/lSMVIy9mfeqMpQ15gsKTszI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Apr 17 03:23:25 2026 GMT Not After : Apr 24 03:23:25 2026 GMT Subject: CN=69e1a7ad-ee34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:4f:e6:51:0e:bf:37:e5:c7:f5:c0:f9:c0: 48:df:5b:3c:94:e1:8b:ed:e2:55:be:c7:8d:bf:56: 28:ec:01:f7:94:4a:61:5d:ab:63:46:0b:ee:ca:df: 9d:44:10:d0:5e:32:21:0a:85:be:55:12:60:bf:7b: 36:0d:7e:a6:46:94:d8:f5:e8:97:c7:ab:ee:c9:f3: ea:6e:23:a7:67:02:f0:96:4c:7b:d1:a6:d9:3e:33: d6:00:09:cd:bc:3a:ac:64:aa:e7:f2:77:a3:bc:75: e9:a5:70:de:ff:03:85:eb:63:a4:7f:25:2a:20:0c: d5:ac:d7:34:e5:e3:b7:83:ca:36:d2:d8:aa:e7:29: 84:f9:36:01:2d:a4:15:8a:97:f2:cf:8e:d7:66:44: ad:3b:be:4d:0c:58:5d:ca:56:1f:16:ea:bd:40:b0: ee:1f:a8:ac:6f:f7:1b:3e:a3:7e:77:49:d3:02:d6: 7b:52:7a:57:94:e4:ec:78:b9:62:16:e5:9c:e5:31: 14:6e:d4:8c:73:b2:cc:71:0d:b6:7e:91:06:fc:06: cd:39:20:cd:a3:fa:82:57:c3:fe:b8:f2:a0:c4:62: 6d:34:b3:77:54:80:33:da:a4:06:87:aa:98:30:19: 9e:94:ff:83:ae:b2:2a:ed:c7:c7:7b:c8:77:56:20: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:52:E7:D8:91:A4:8B:4B:94:46:FD:C3:2F:F2:4D:DC:DC:42:FD:5F X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:af:48:2f:f5:79:04:81:a2:82:bb:e7:91:fa:bb:99:e9:f8: 70:8c:c0:03:18:e2:92:5c:d3:d2:92:53:c8:e9:b1:c9:ee:7b: 8e:75:be:44:4a:16:09:49:1b:7d:33:da:46:5d:6d:98:45:ac: a6:ae:58:5d:8d:35:ba:93:43:5a:35:69:c0:d9:89:f9:4e:7b: 6b:4a:57:93:c3:e8:54:8b:f9:e6:da:1b:18:d8:ba:d3:25:1a: f1:1b:ec:32:5f:91:a8:f1:ac:c8:1e:02:00:5b:ce:c7:ce:fd: 13:ec:76:03:9c:f2:5a:56:6b:da:91:be:28:5a:f7:2b:87:d1: d3:47:85:73:d4:1d:80:8b:f8:7f:a3:7c:4c:8f:fd:91:f8:91: ea:6e:6e:91:7f:db:b5:cd:b9:58:0f:16:f7:07:e6:ca:bf:0d: 84:d9:57:b6:b5:52:d8:2e:b7:0d:8e:c6:56:04:ad:e6:02:94: 8b:68:6f:64:da:2f:93:0a:5e:8d:60:70:88:4c:e2:e7:da:14: 25:dd:24:f7:66:89:be:fc:fd:56:94:a2:b3:3a:95:a8:c8:57: 98:43:f4:b7:0e:d4:40:99:c2:ee:a7:44:1b:0b:bb:a7:33:c1: 69:a0:f9:bf:15:bd:cf:42:f8:84:cf:d9:94:2c:49:d3:db:38: de:41:a4:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYwNDE3MDMyMzI1WhcNMjYwNDI0MDMyMzI1WjAYMRYwFAYD VQQDEw02OWUxYTdhZC1lZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1X1P5lEOvzflx/XA+cBI31s8lOGL7eJVvseNv1Yo7AH3lEphXatjRgvuyt+d RBDQXjIhCoW+VRJgv3s2DX6mRpTY9eiXx6vuyfPqbiOnZwLwlkx70abZPjPWAAnN vDqsZKrn8nejvHXppXDe/wOF62OkfyUqIAzVrNc05eO3g8o20tiq5ymE+TYBLaQV ipfyz47XZkStO75NDFhdylYfFuq9QLDuH6isb/cbPqN+d0nTAtZ7UnpXlOTseLli FuWc5TEUbtSMc7LMcQ22fpEG/AbNOSDNo/qCV8P+uPKgxGJtNLN3VIAz2qQGh6qY MBmelP+DrrIq7cfHe8h3ViB2XwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhS59iR pItLlEb9wy/yTdzcQv1fMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQK9IL/V5BIGigrvnkfq7men4cIzAAxjiklzT0pJTyOmxye57jnW+REoWCUkb fTPaRl1tmEWspq5YXY01upNDWjVpwNmJ+U57a0pXk8PoVIv55tobGNi60yUa8Rvs Ml+RqPGsyB4CAFvOx879E+x2A5zyWlZr2pG+KFr3K4fR00eFc9QdgIv4f6N8TI/9 kfiR6m5ukX/btc25WA8W9wfmyr8NhNlXtrVS2C63DY7GVgSt5gKUi2hvZNovkwpe jWBwiEzi59oUJd0k92aJvvz9VpSiszqVqMhXmEP0tw7UQJnC7qdEGwu7pzPBaaD5 vxW9z0L4hM/ZlCxJ09s43kGk+Q== -----END CERTIFICATE-----Generated at Fri Apr 17 07:56:30 2026 by rpki-client