$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: 0DfAkD4bXqBrlHaIoXw5aNYS4GCQlwB2uO5HfOxelNk= Subject key identifier: 05:A3:49:AF:49:21:A7:E2:FD:DA:88:F4:D9:15:A4:12:69:C3:C8:6B Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 0221 Signing time: Sat 19 Sep 2026 02:57:00 +0000 Manifest this update: Sat 19 Sep 2026 02:57:00 +0000 Manifest next update: Sat 26 Sep 2026 02:57:00 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: wcWGq9UGfnEpXD1Mg1FqaLNmjV9EIG11Z/A7Vqy0fVw=) 2: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: PHajpZxrBbwNo1rzop6t1kDAND+XuEDmiysqwaKiUK4=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLCHLkKHbHA08+tXZCtJcmyubM9Z6U4xpeyvONN3Ypg=) 4: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: tOMkH0Ay9qb/mpun76IvTGnqwv+4Yq7qBoEQv2FSAAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Sep 19 02:57:00 2026 GMT Not After : Sep 26 02:57:00 2026 GMT Subject: CN=6aadf9fc-72e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e4:8c:7d:54:7d:ca:c1:45:e6:16:7a:32:65: bc:bf:58:b0:5c:36:5d:c8:76:b3:1f:c9:23:36:bd: c7:e9:36:5c:3b:1c:f3:c4:af:94:de:96:13:13:37: 71:2e:52:0a:0d:52:81:c8:ed:9a:d1:bf:26:a7:37: dc:e0:62:e1:80:5e:f4:1d:05:a6:c1:49:72:a7:2c: dc:56:0d:16:09:39:dd:86:41:74:40:3e:63:7f:ea: 94:08:1b:ff:3d:c3:59:68:f4:da:13:16:25:1d:6c: 28:7d:4c:0b:ed:3e:d0:e3:ab:12:3b:d1:d9:61:bb: 58:5b:27:ea:16:2b:d3:07:7b:ef:4b:16:ce:7e:67: 76:71:75:bc:66:da:1c:22:86:28:3e:3c:87:01:cb: e7:c2:5b:91:11:9d:b7:c4:11:52:7f:e2:ab:15:5e: c1:65:64:c8:30:86:f3:70:48:5d:a3:6f:c7:d9:35: d8:5f:19:a2:b7:9b:e9:aa:ff:06:07:c7:fa:ba:9c: 70:c5:d4:33:12:4b:7f:95:1b:56:8c:39:d2:08:75: 55:4d:96:e2:07:06:8f:c5:1f:c1:ca:29:37:7f:72: e6:7a:79:33:5c:87:78:00:18:fb:f6:19:90:a7:28: 98:c9:aa:53:6e:5e:ef:fb:83:f9:0d:2a:6f:b8:3d: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:49:AF:49:21:A7:E2:FD:DA:88:F4:D9:15:A4:12:69:C3:C8:6B X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fe:97:32:21:9e:3c:6f:1a:99:74:7a:b8:09:64:9c:e4:b1: 64:7b:e2:2e:61:6a:83:53:d2:2b:e3:f9:c1:7f:8f:3b:32:b9: 62:e5:ee:bc:57:fe:da:92:c2:f9:53:05:33:da:42:17:da:c3: 2b:a7:e2:c8:24:32:18:c4:a7:30:da:6a:5a:36:e5:26:20:b5: 88:67:99:2f:19:55:a0:79:a9:28:00:d4:8f:db:28:d4:8f:92: 80:95:f2:93:54:9e:d0:03:03:59:eb:71:31:d2:60:36:c2:fe: 65:bd:75:21:4a:fa:68:21:59:b6:e9:90:bb:ea:74:72:74:ef: 21:f9:d0:d4:f7:44:58:a7:ab:e1:4d:2d:b0:8a:84:db:d9:7d: a3:eb:27:f6:ae:33:fc:16:54:02:ec:ea:eb:89:45:7e:ab:0b: d3:00:67:19:e3:43:3b:d8:c3:ef:36:4c:dd:52:34:a7:28:90: bb:6d:53:56:ca:4c:ff:5b:c7:6d:94:8e:5d:31:fe:ea:13:3d: e1:56:85:ac:ba:54:be:36:29:42:8f:2f:65:b2:bc:75:65:ed: 19:36:3d:8e:e7:10:ac:ff:ed:f2:8d:77:e3:bd:93:7d:1b:ea: 7c:6a:28:65:79:47:86:e4:7e:2f:46:88:e4:54:a6:88:55:a8: 55:3f:a6:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYwOTE5MDI1NzAwWhcNMjYwOTI2MDI1NzAwWjAYMRYwFAYD VQQDEw02YWFkZjlmYy03MmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OSMfVR9ysFF5hZ6MmW8v1iwXDZdyHazH8kjNr3H6TZcOxzzxK+U3pYTEzdx LlIKDVKByO2a0b8mpzfc4GLhgF70HQWmwUlypyzcVg0WCTndhkF0QD5jf+qUCBv/ PcNZaPTaExYlHWwofUwL7T7Q46sSO9HZYbtYWyfqFivTB3vvSxbOfmd2cXW8Ztoc IoYoPjyHAcvnwluREZ23xBFSf+KrFV7BZWTIMIbzcEhdo2/H2TXYXxmit5vpqv8G B8f6upxwxdQzEkt/lRtWjDnSCHVVTZbiBwaPxR/Byik3f3LmenkzXId4ABj79hmQ pyiYyapTbl7v+4P5DSpvuD1cWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWjSa9J Iafi/dqI9NkVpBJpw8hrMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJP6XMiGePG8amXR6uAlknOSxZHviLmFqg1PSK+P5wX+POzK5YuXuvFf+2pLC +VMFM9pCF9rDK6fiyCQyGMSnMNpqWjblJiC1iGeZLxlVoHmpKADUj9so1I+SgJXy k1Se0AMDWetxMdJgNsL+Zb11IUr6aCFZtumQu+p0cnTvIfnQ1PdEWKer4U0tsIqE 29l9o+sn9q4z/BZUAuzq64lFfqsL0wBnGeNDO9jD7zZM3VI0pyiQu21TVspM/1vH bZSOXTH+6hM94VaFrLpUvjYpQo8vZbK8dWXtGTY9jucQrP/t8o13472TfRvqfGoo ZXlHhuR+L0aI5FSmiFWoVT+mHg== -----END CERTIFICATE-----Generated at Sun Sep 20 19:22:53 2026 by rpki-client