$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: dUJ2FOXpyl3yEnrAUy15NIAwd+ojhnTCNPvCqJbVDkk= Subject key identifier: D6:CC:6B:F6:65:0F:3A:B0:92:52:2E:A6:DA:52:BA:D4:81:40:1F:D6 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B60 Signing time: Tue 04 Nov 2025 19:16:34 +0000 Manifest this update: Tue 04 Nov 2025 19:16:33 +0000 Manifest next update: Tue 11 Nov 2025 19:16:33 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: ZictOc2k7fPQrzmCsoUsytzAtc2N3v7Wlv2+FWT6Kn4=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: pLnncZW/+2aMcnpBmFNNa8a+AYjIGNXBznPCsUBo+1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2926 (0xb6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Nov 4 19:16:33 2025 GMT Not After : Nov 11 19:16:33 2025 GMT Subject: CN=690a5112-6132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:98:07:61:7b:4a:03:b0:bb:f2:2d:db:39:29: 85:6f:ff:6c:9a:0c:2c:63:89:ea:a3:0c:d3:8c:d6: 03:fd:70:9a:e5:3c:0b:d6:ed:88:4a:65:b7:07:f7: c2:c9:a3:3c:2c:ca:65:13:d1:b8:b8:37:fb:27:75: a6:f1:37:9c:cd:89:f7:92:99:b3:5c:e4:0e:78:c2: f7:fb:fc:ab:5f:26:e4:1e:73:90:12:b6:5b:2c:96: c0:4f:d3:e6:cf:d3:ed:2d:52:3d:69:a1:33:3c:18: 8f:18:12:3e:9e:e8:43:b2:14:2b:4d:8e:38:7b:d2: 04:c2:bd:8d:d4:2c:4b:0e:26:be:4a:28:e3:b4:6b: ca:50:79:b8:cc:2b:a0:79:98:51:ac:27:e0:22:60: 55:3f:ae:92:d1:12:0c:33:a2:ac:c3:d7:27:ec:7d: 31:dc:ba:2d:de:a1:ce:b0:5d:1f:69:44:fd:c2:29: e9:b7:a6:16:b7:7f:2c:2d:93:2c:1d:df:1b:56:10: 3b:da:de:4c:40:f5:22:91:4a:42:55:40:49:48:52: e0:53:49:13:3b:53:0c:53:12:c2:1f:49:3f:3c:7c: e3:d6:ec:18:09:ea:e2:01:6d:88:b2:f6:8f:19:6b: ff:5c:77:db:78:31:ff:58:29:11:95:16:22:03:63: a9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CC:6B:F6:65:0F:3A:B0:92:52:2E:A6:DA:52:BA:D4:81:40:1F:D6 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ac:23:8b:4f:e9:ea:b0:86:ca:9d:2e:7f:53:be:b3:6c:4c: 68:00:82:ea:b7:d4:f8:7e:c1:a1:ac:f0:f8:5b:dc:d9:8f:94: 28:34:7a:53:70:10:89:1e:fb:81:80:c5:ab:4b:63:ca:a5:44: c5:0b:af:d1:58:4a:ae:b5:12:5a:9a:c7:11:7b:97:fc:b8:de: 36:52:db:c1:7c:69:6b:a3:0e:bd:e3:d9:15:7d:90:06:57:5b: b6:a4:58:d4:9d:a1:64:72:de:6c:f4:eb:9f:b9:5d:40:65:9b: 2e:91:e5:90:4a:ce:6b:a2:33:49:19:5a:c5:29:a8:5c:ed:57: 6b:38:42:5a:8a:d1:6c:81:88:cf:20:f4:6a:14:ff:f0:24:bd: ce:a6:fc:26:b8:70:b8:f6:33:f0:51:9f:4d:1e:a0:18:76:3c: 14:5c:2e:dc:2b:5f:95:cf:44:fd:94:f4:3f:52:f7:45:9d:b1: bc:59:12:e7:6f:dd:b0:e8:d0:9b:94:40:99:12:fd:0c:76:82: 99:b5:22:8e:c4:c1:d5:44:3b:df:14:4e:6c:e3:d3:36:50:32: 53:4f:ff:80:3b:e9:7e:7d:25:f8:70:39:e7:26:8e:83:05:5b: f9:ad:38:60:c2:2a:ff:77:2f:eb:57:5b:dd:03:eb:f1:3c:37: 93:2e:bf:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUxMTA0MTkxNjMzWhcNMjUxMTExMTkxNjMzWjAYMRYwFAYD VQQDEw02OTBhNTExMi02MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5JgHYXtKA7C78i3bOSmFb/9smgwsY4nqowzTjNYD/XCa5TwL1u2ISmW3B/fC yaM8LMplE9G4uDf7J3Wm8TeczYn3kpmzXOQOeML3+/yrXybkHnOQErZbLJbAT9Pm z9PtLVI9aaEzPBiPGBI+nuhDshQrTY44e9IEwr2N1CxLDia+SijjtGvKUHm4zCug eZhRrCfgImBVP66S0RIMM6Ksw9cn7H0x3Lot3qHOsF0faUT9winpt6YWt38sLZMs Hd8bVhA72t5MQPUikUpCVUBJSFLgU0kTO1MMUxLCH0k/PHzj1uwYCeriAW2IsvaP GWv/XHfbeDH/WCkRlRYiA2OplwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbMa/Zl DzqwklIuptpSutSBQB/WMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrrCOLT+nqsIbKnS5/U76zbExoAILqt9T4fsGhrPD4W9zZj5QoNHpT cBCJHvuBgMWrS2PKpUTFC6/RWEqutRJamscRe5f8uN42UtvBfGlrow6949kVfZAG V1u2pFjUnaFkct5s9OufuV1AZZsukeWQSs5rojNJGVrFKahc7VdrOEJaitFsgYjP IPRqFP/wJL3OpvwmuHC49jPwUZ9NHqAYdjwUXC7cK1+Vz0T9lPQ/UvdFnbG8WRLn b92w6NCblECZEv0MdoKZtSKOxMHVRDvfFE5s49M2UDJTT/+AO+l+fSX4cDnnJo6D BVv5rThgwir/dy/rV1vdA+vxPDeTLr8B -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:42 2025 by rpki-client