$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: u0BvN+aVCdt3gF6yJqZ8BjUMF+f1ayvtTfp7rnPJsNo= Subject key identifier: C4:7A:4A:F7:42:07:AD:65:0A:23:16:27:B2:08:06:11:35:FB:CA:15 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B31 Signing time: Fri 08 Aug 2025 19:31:09 +0000 Manifest this update: Fri 08 Aug 2025 19:31:08 +0000 Manifest next update: Fri 15 Aug 2025 19:31:08 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: AVtI3sqFIWvyYSenDdVfjzPWvHaINhKtCgdeak2x6Qs=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Aug 8 19:31:08 2025 GMT Not After : Aug 15 19:31:08 2025 GMT Subject: CN=6896507d-2f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:60:23:ed:d9:ab:06:cb:b3:a6:b3:39:21: 78:b8:ce:ce:65:db:29:ce:a0:d8:ef:39:b0:63:27: ab:9e:0f:5e:3c:ca:20:40:6d:60:a7:2a:b9:06:e3: 1b:80:c3:d1:cb:72:ac:a6:ea:e5:30:28:df:75:48: 4c:e3:60:61:03:62:54:6b:73:d5:c2:e4:95:a2:83: 44:d8:e1:ed:ce:48:d4:3d:a1:e4:85:55:59:7b:6d: eb:b3:8e:a3:ca:ce:b1:77:c6:ba:23:04:8b:69:a3: df:41:37:8a:e8:cc:35:9a:d0:77:1d:6b:0f:24:c0: 56:fb:8f:4a:e1:29:6f:59:27:de:3f:25:73:38:31: 9b:27:81:c2:47:a8:ad:ed:01:6c:9f:5a:a1:c8:35: 04:b1:45:3d:15:c5:bd:bb:61:95:4d:f3:12:d1:64: f7:00:48:ad:ac:d0:ec:27:f9:20:cd:47:2c:d8:ce: 96:08:05:05:7e:22:70:a2:3e:bb:b3:47:9c:6e:17: f5:91:be:33:61:10:5d:67:30:aa:3b:16:cf:7c:a5: 01:41:c3:94:9f:06:1c:bf:84:61:13:47:82:f7:ec: 45:41:e2:bf:ca:af:05:48:bb:96:fe:10:6c:39:bc: b7:2d:3a:bc:19:60:c6:02:73:7d:cb:19:4c:f6:75: 35:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7A:4A:F7:42:07:AD:65:0A:23:16:27:B2:08:06:11:35:FB:CA:15 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d0:93:82:98:a2:55:90:0d:60:6c:a2:18:09:cb:26:fd:27: b7:62:26:ea:3b:00:e0:bb:d6:72:55:14:32:23:df:f3:e8:90: fe:36:1e:da:e0:22:04:c8:8e:ec:64:17:42:85:c5:82:5f:19: 6a:2d:37:f4:a8:a6:28:98:37:38:f2:8d:be:95:8c:4e:c7:62: 34:19:8d:50:17:65:8e:9e:fd:1f:b2:16:06:4e:8c:fe:2e:03: cb:46:d8:8f:29:fe:3d:df:7b:41:73:97:d3:ba:e4:da:53:36: 6f:10:65:53:74:4d:5e:7b:63:1a:74:fc:96:65:fd:95:fe:94: 38:78:b8:45:5b:2c:1c:08:45:7f:1d:ce:c8:f7:a7:3b:97:fb: bf:91:c0:86:e2:40:1c:29:24:6d:b8:f2:03:07:00:c3:5b:ce: bf:fe:4c:90:49:e7:1c:a0:5b:1e:b6:db:f7:ac:91:26:d0:53: 9e:dd:db:6d:e2:0f:63:f6:a7:c3:9b:50:3d:55:71:7a:8a:dd: 4c:30:3e:31:37:b9:c1:eb:a5:20:24:01:32:ba:42:ed:13:cb: d7:03:ca:1a:cc:4e:99:28:11:38:13:e9:b4:55:aa:61:df:96: df:18:0e:54:97:73:ab:64:8f:27:e0:a5:85:f6:51:0d:97:d7: d5:60:3e:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUwODA4MTkzMTA4WhcNMjUwODE1MTkzMTA4WjAYMRYwFAYD VQQDEw02ODk2NTA3ZC0yZjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWRgI+3ZqwbLs6azOSF4uM7OZdspzqDY7zmwYyerng9ePMogQG1gpyq5BuMb gMPRy3KspurlMCjfdUhM42BhA2JUa3PVwuSVooNE2OHtzkjUPaHkhVVZe23rs46j ys6xd8a6IwSLaaPfQTeK6Mw1mtB3HWsPJMBW+49K4SlvWSfePyVzODGbJ4HCR6it 7QFsn1qhyDUEsUU9FcW9u2GVTfMS0WT3AEitrNDsJ/kgzUcs2M6WCAUFfiJwoj67 s0ecbhf1kb4zYRBdZzCqOxbPfKUBQcOUnwYcv4RhE0eC9+xFQeK/yq8FSLuW/hBs Oby3LTq8GWDGAnN9yxlM9nU1SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMR6SvdC B61lCiMWJ7IIBhE1+8oVMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB20JOCmKJVkA1gbKIYCcsm/Se3YibqOwDgu9ZyVRQyI9/z6JD+Nh7a 4CIEyI7sZBdChcWCXxlqLTf0qKYomDc48o2+lYxOx2I0GY1QF2WOnv0fshYGToz+ LgPLRtiPKf4933tBc5fTuuTaUzZvEGVTdE1ee2MadPyWZf2V/pQ4eLhFWywcCEV/ Hc7I96c7l/u/kcCG4kAcKSRtuPIDBwDDW86//kyQSeccoFsettv3rJEm0FOe3dtt 4g9j9qfDm1A9VXF6it1MMD4xN7nB66UgJAEyukLtE8vXA8oazE6ZKBE4E+m0Vaph 35bfGA5Ul3OrZI8n4KWF9lENl9fVYD6o -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:19 2025 by rpki-client