$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: eJF+GMXeicR1NVWgoUG+nkgg4J7wtPa0i7TUqLG1N+U= Subject key identifier: 82:23:2D:E2:2C:79:50:CA:29:B5:8B:67:41:40:27:02:0A:8D:9C:83 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 0230 Signing time: Mon 19 Oct 2026 03:15:35 +0000 Manifest this update: Mon 19 Oct 2026 03:15:34 +0000 Manifest next update: Mon 26 Oct 2026 03:15:34 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: tR9EHxR7APKR0p2C9OeO55Q9rj06379WuRqPJkQhpiY=) 2: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: yLCHLkKHbHA08+tXZCtJcmyubM9Z6U4xpeyvONN3Ypg=) 3: E9CD871CA36911F09537DC54C4F9AE02.roa (hash: PHajpZxrBbwNo1rzop6t1kDAND+XuEDmiysqwaKiUK4=) 4: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: tOMkH0Ay9qb/mpun76IvTGnqwv+4Yq7qBoEQv2FSAAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Oct 19 03:15:34 2026 GMT Not After : Oct 26 03:15:34 2026 GMT Subject: CN=6ad58b57-97af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:4b:18:41:10:52:6a:98:64:2b:65:2e:41: ea:6c:bc:2a:5a:6c:a0:c0:7b:d5:20:c2:7b:0e:4c: 77:4f:81:1f:a2:4c:c1:da:37:10:a1:bb:84:9b:03: 77:a2:8b:d7:bc:dd:32:36:55:d6:db:2a:cf:60:62: 1a:fd:14:5c:a1:dd:85:e5:65:e5:88:12:dd:b3:44: 9f:61:4d:de:19:e3:74:4f:b8:7c:08:63:60:61:fe: 5b:f2:22:78:ce:66:91:7c:4f:9e:8b:d9:25:c1:6d: 62:fb:20:d0:62:d5:40:68:e6:42:bf:fb:29:ad:2b: 98:76:02:38:d2:b5:b2:d1:88:0c:97:1d:00:3b:2e: 5c:6c:77:ad:cf:44:23:74:83:2b:8a:67:25:e7:7a: dc:3d:0b:cc:66:53:f5:fd:6f:97:2c:ec:17:46:0b: 79:c6:45:e2:4f:15:8e:30:fb:5c:a9:fb:9d:eb:ea: d8:d2:c6:de:ee:57:84:dd:30:4c:43:96:f8:f6:0e: 92:30:b6:c3:35:a0:dd:a0:4d:08:35:06:ae:de:f6: f0:77:37:be:ba:6c:77:5a:8f:2f:eb:f0:ea:80:eb: a7:ce:88:1c:54:19:57:77:9e:b0:90:c2:1f:35:0c: 59:0e:5d:48:9a:7c:f2:86:1a:9a:8d:1f:32:39:d7: a6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:23:2D:E2:2C:79:50:CA:29:B5:8B:67:41:40:27:02:0A:8D:9C:83 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:94:08:70:07:e6:42:ef:73:e1:ab:53:77:5e:f1:17:4a:ad: e2:59:eb:97:30:d4:d2:3d:3a:ac:9f:4b:0c:9b:65:60:54:23: 03:0a:e5:5d:e2:84:6f:12:9b:58:fa:ec:03:58:73:25:df:f2: ae:8d:e6:e0:33:31:4e:94:be:3a:78:e4:db:20:5e:90:43:ec: 8f:b7:c7:11:c4:c7:e4:3c:ee:dd:f1:d4:44:5d:91:d4:12:9b: 9b:c8:d1:7c:5a:8f:9a:f9:ec:44:0b:80:66:fb:55:e8:a4:55: a3:a6:13:26:89:ef:3e:96:48:6c:67:fa:c5:3d:aa:f7:60:f7: a2:95:3d:2a:87:37:91:ba:6a:f5:00:d9:78:fe:e2:bd:a2:16: ac:c0:fd:8b:56:0f:2a:0e:32:02:c8:42:cd:e6:03:a1:62:62: 87:43:8d:83:47:a3:cb:9f:53:e5:57:02:af:fc:07:19:c6:c8: 0e:1e:bb:d7:47:27:8f:22:88:4c:92:d7:3d:c8:04:b4:de:34: e5:c0:6d:bc:e3:cb:f7:50:a3:3c:ae:0d:65:70:18:85:e6:4c: 92:cc:68:b4:f9:5e:5e:08:42:51:14:09:ad:1b:4b:3b:5c:b8: b1:22:63:5f:7f:66:5e:70:5b:52:9d:52:df:62:83:7d:01:76: fd:eb:ab:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjYxMDE5MDMxNTM0WhcNMjYxMDI2MDMxNTM0WjAYMRYwFAYD VQQDEw02YWQ1OGI1Ny05N2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlhLGEEQUmqYZCtlLkHqbLwqWmygwHvVIMJ7Dkx3T4EfokzB2jcQobuEmwN3 oovXvN0yNlXW2yrPYGIa/RRcod2F5WXliBLds0SfYU3eGeN0T7h8CGNgYf5b8iJ4 zmaRfE+ei9klwW1i+yDQYtVAaOZCv/sprSuYdgI40rWy0YgMlx0AOy5cbHetz0Qj dIMrimcl53rcPQvMZlP1/W+XLOwXRgt5xkXiTxWOMPtcqfud6+rY0sbe7leE3TBM Q5b49g6SMLbDNaDdoE0INQau3vbwdze+umx3Wo8v6/DqgOunzogcVBlXd56wkMIf NQxZDl1ImnzyhhqajR8yOdemqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIIjLeIs eVDKKbWLZ0FAJwIKjZyDMB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa5QIcAfmQu9z4atTd17xF0qt4lnrlzDU0j06rJ9LDJtlYFQjAwrlXeKEbxKb WPrsA1hzJd/yro3m4DMxTpS+Onjk2yBekEPsj7fHEcTH5Dzu3fHURF2R1BKbm8jR fFqPmvnsRAuAZvtV6KRVo6YTJonvPpZIbGf6xT2q92D3opU9Koc3kbpq9QDZeP7i vaIWrMD9i1YPKg4yAshCzeYDoWJih0ONg0ejy59T5VcCr/wHGcbIDh6710cnjyKI TJLXPcgEtN405cBtvOPL91CjPK4NZXAYheZMksxotPleXghCURQJrRtLO1y4sSJj X39mXnBbUp1S32KDfQF2/eurKg== -----END CERTIFICATE-----Generated at Tue Oct 20 20:45:28 2026 by rpki-client