$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: SHPopddg2jvf4Ri4Wy8OUyRwlpkVhQ+HKQGfEq5HzNg= Subject key identifier: 5A:CB:D8:43:6A:76:F8:DA:52:A8:CE:81:FB:C7:85:5A:03:79:ED:9B Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 01B7 Signing time: Sun 01 Mar 2026 04:42:26 +0000 Manifest this update: Sun 01 Mar 2026 04:42:25 +0000 Manifest next update: Sun 08 Mar 2026 04:42:25 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: qPWg6f/+OFtitxNMTbT2q2XgRu5O8iGwZfaMjUBMV0o=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: C0wDD+AgzZ7rjhppUX9KQGRP55NqDPFQsX30TucXWZw=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: A+eIQ7dJ6b4jdnXFCKHgDz5bYK+SgjdqalthmATouvM=) 4: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: 06LRxy/YBwv2lrxUrKbgxV+lgP7QaNp/Mg4b/u0zmQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Mar 1 04:42:25 2026 GMT Not After : Mar 8 04:42:25 2026 GMT Subject: CN=69a3c3b2-dd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:fe:ac:80:0e:d0:7f:b8:42:19:9b:48:4f: e9:d4:f0:0e:86:1f:91:0b:e3:0b:4f:30:72:28:66: 2e:1f:cf:d2:50:66:73:a6:9a:43:2f:6a:7c:d5:41: e7:04:7f:01:a0:63:8f:ea:35:53:e2:b7:c7:79:91: 4a:89:7a:5e:c7:48:d6:e9:d1:6d:d8:e6:af:1b:1e: 4f:e8:e8:fd:48:82:eb:20:6b:ea:94:50:98:c9:b1: b6:39:a2:c8:cb:27:d6:5a:4e:6e:47:29:23:d3:1d: ee:cd:97:9a:98:07:ea:4d:c5:53:19:11:cb:a6:65: d7:57:43:19:ce:1e:da:e3:e5:5e:24:ca:ad:6c:c1: ea:ad:2a:a0:25:e1:3d:fc:0b:ca:f6:6c:fc:13:6c: 89:42:ac:c1:98:49:70:4f:50:ec:24:95:c7:eb:c2: 27:59:c5:b4:66:7f:c4:97:ad:24:23:08:0b:5f:54: 3a:93:24:96:f7:c2:67:f3:b2:37:7f:1a:80:d7:84: e5:c1:90:6e:71:fb:af:c4:ae:db:42:c2:0e:56:9d: 75:34:f0:3e:22:30:36:f5:62:42:a5:04:01:58:06: 35:c1:26:14:b8:5a:83:6c:77:9c:35:4b:1d:75:7d: 8e:59:67:44:3d:be:7f:83:e1:f3:ad:41:a3:3b:54: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:CB:D8:43:6A:76:F8:DA:52:A8:CE:81:FB:C7:85:5A:03:79:ED:9B X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:6d:da:86:03:8d:a1:0b:fe:ed:df:8d:41:db:e4:b8:39:f4: bd:e6:b7:76:e1:fe:02:1f:1f:6b:80:58:64:25:d8:fc:fe:5c: 9d:cb:99:be:fe:1a:ab:fb:c9:0c:72:02:08:3e:ed:54:1d:72: 4c:37:5a:09:59:c3:85:81:d0:5e:ec:2d:13:63:a9:af:7f:f5: 7e:bc:73:f5:85:d3:98:d7:9b:6d:4c:d7:a2:20:e4:ea:e4:88: 9d:7e:71:05:b0:44:19:df:c1:c4:c5:bf:e6:c3:70:00:ec:a6: 0a:59:62:2a:17:c3:75:a5:66:b5:2f:6f:fb:1d:e7:9c:04:c4: 77:62:49:38:dc:ff:2c:22:04:66:7d:2e:5a:42:4a:19:0a:45: 65:6f:88:a3:da:1b:a1:8d:61:5f:ac:02:86:a2:4b:bc:6a:de: 89:81:24:91:28:14:1f:6c:36:6d:e8:67:4b:cb:c3:43:f5:47: 22:96:61:23:e1:f9:82:21:b4:ef:66:f9:b1:7c:e3:1e:ba:66: 8d:de:29:d9:6e:ab:27:ce:18:7e:6e:d9:dd:4b:11:06:e4:83: ae:68:79:23:8c:bc:c4:18:b9:4a:1d:1d:72:d4:1d:99:aa:c1: 05:90:06:a2:98:8c:a8:26:56:47:fd:2b:b8:8c:23:00:a1:3d: 0c:9b:db:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYwMzAxMDQ0MjI1WhcNMjYwMzA4MDQ0MjI1WjAYMRYwFAYD VQQDDA02OWEzYzNiMi1kZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqL/+rIAO0H+4QhmbSE/p1PAOhh+RC+MLTzByKGYuH8/SUGZzpppDL2p81UHn BH8BoGOP6jVT4rfHeZFKiXpex0jW6dFt2OavGx5P6Oj9SILrIGvqlFCYybG2OaLI yyfWWk5uRykj0x3uzZeamAfqTcVTGRHLpmXXV0MZzh7a4+VeJMqtbMHqrSqgJeE9 /AvK9mz8E2yJQqzBmElwT1DsJJXH68InWcW0Zn/El60kIwgLX1Q6kySW98Jn87I3 fxqA14TlwZBucfuvxK7bQsIOVp11NPA+IjA29WJCpQQBWAY1wSYUuFqDbHecNUsd dX2OWWdEPb5/g+HzrUGjO1T1LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFrL2ENq dvjaUqjOgfvHhVoDee2bMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASG3ahgONoQv+7d+NQdvkuDn0vea3duH+Ah8fa4BYZCXY/P5cncuZvv4aq/vJ DHICCD7tVB1yTDdaCVnDhYHQXuwtE2Opr3/1frxz9YXTmNebbUzXoiDk6uSInX5x BbBEGd/BxMW/5sNwAOymClliKhfDdaVmtS9v+x3nnATEd2JJONz/LCIEZn0uWkJK GQpFZW+Io9oboY1hX6wChqJLvGreiYEkkSgUH2w2behnS8vDQ/VHIpZhI+H5giG0 72b5sXzjHrpmjd4p2W6rJ84Yfm7Z3UsRBuSDrmh5I4y8xBi5Sh0dctQdmarBBZAG opiMqCZWR/0ruIwjAKE9DJvbkg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:22:14 2026 by rpki-client