$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: 4rWd6rIr5ERLeFHqJJ+aE3hvZDes+4TkirVp7LR9is4= Subject key identifier: 40:90:98:61:BC:82:F7:3A:E6:4E:E2:CA:74:5B:E9:8F:D5:CD:F7:E8 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0BAD Signing time: Tue 24 Mar 2026 18:52:11 +0000 Manifest this update: Tue 24 Mar 2026 18:52:11 +0000 Manifest next update: Tue 31 Mar 2026 18:52:11 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: KREVrfnCfyKUXkujdsHIbK+nyJUEhBxoy0dx17RypaU=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: EP70FT9vYILp9XYrmWiAL3jLqbW9+S8BdvaaLqMxnTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Mar 24 18:52:11 2026 GMT Not After : Mar 31 18:52:11 2026 GMT Subject: CN=69c2dd5b-8650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:89:0d:9f:9b:75:42:ff:81:b7:54:80:7b: 94:df:b0:60:63:25:93:8b:3b:84:5d:86:34:25:e3: 2e:c5:90:88:8c:a3:19:31:dc:d5:b9:98:6a:b2:ac: ca:94:68:98:2e:ca:d0:a9:b2:6f:88:99:00:31:17: 8f:d7:36:de:ac:44:1c:4f:a3:b2:d5:71:72:32:2d: 6a:b3:3d:a6:8d:9c:6a:54:8e:01:5f:7e:5c:e8:56: 9d:45:51:07:8d:3e:71:ea:bb:b1:95:7d:02:f2:b0: 73:89:40:6f:93:2a:a3:08:9d:d3:ab:61:c9:30:a4: cf:72:50:b8:a3:1e:07:48:73:e5:f4:35:8e:d0:6f: 41:29:73:58:b6:20:91:40:a6:9b:d2:f2:1b:c0:3a: 3b:db:9e:54:22:20:ca:c2:c8:09:04:7a:bd:d3:a9: 20:99:fe:7f:cf:75:c9:4a:31:18:c5:0a:9a:d5:ca: 07:69:bc:54:cd:91:b5:d0:9a:29:15:ab:fa:a4:33: 87:72:85:d4:63:c6:de:aa:60:19:10:0e:9c:4d:06: 79:34:af:f8:2f:05:71:31:ef:1d:9e:49:df:c4:89: 61:28:39:b0:36:15:a3:08:17:05:57:79:00:11:9e: e1:7e:b2:b8:63:f1:1e:fd:7d:1e:0b:f9:0d:80:19: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:90:98:61:BC:82:F7:3A:E6:4E:E2:CA:74:5B:E9:8F:D5:CD:F7:E8 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:e2:c2:9a:90:bd:0f:4f:87:1d:c2:b8:48:e2:51:61:7a:d8: b0:f6:0a:69:01:fc:1e:a0:ba:75:b5:f8:94:91:2a:76:d8:4f: be:1e:0e:8c:e8:b6:bd:9e:bf:f8:94:b1:66:78:17:09:43:a0: 16:f6:53:70:ae:e7:3b:dc:b1:b1:52:a0:e7:74:db:0f:cd:1a: b0:fd:a9:3e:96:dc:6a:81:b8:ce:61:e7:c5:79:76:96:e8:62: 27:4f:7e:0a:23:e2:82:02:22:ab:b3:65:96:b9:12:e8:bb:14: f2:a5:ad:8a:ed:ae:a0:fe:4e:8f:b2:38:a8:2c:fe:31:29:38: 9e:a5:6f:42:32:3f:12:95:3f:2f:ac:95:2d:9c:de:33:7b:08: 8c:0f:a5:08:c6:e1:3d:28:f7:8b:1a:27:4e:0b:d9:f9:57:98: 55:64:90:41:75:91:9f:a2:19:95:5e:5d:49:19:f8:08:03:d6: b2:f0:15:12:65:4b:eb:c4:55:40:57:7a:02:b4:0e:e9:56:82: 98:c3:c0:87:c3:45:c4:8d:95:4f:e6:ac:b0:82:fb:fb:30:ab: da:68:20:e7:d4:59:fb:5c:46:a4:fd:10:81:c8:2c:74:5e:1b: a0:cc:ab:75:42:d4:1b:f0:6f:67:ac:8a:ef:d8:5d:b7:b9:99: 1c:0c:54:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjYwMzI0MTg1MjExWhcNMjYwMzMxMTg1MjExWjAYMRYwFAYD VQQDEw02OWMyZGQ1Yi04NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlkKJDZ+bdUL/gbdUgHuU37BgYyWTizuEXYY0JeMuxZCIjKMZMdzVuZhqsqzK lGiYLsrQqbJviJkAMReP1zberEQcT6Oy1XFyMi1qsz2mjZxqVI4BX35c6FadRVEH jT5x6ruxlX0C8rBziUBvkyqjCJ3Tq2HJMKTPclC4ox4HSHPl9DWO0G9BKXNYtiCR QKab0vIbwDo7255UIiDKwsgJBHq906kgmf5/z3XJSjEYxQqa1coHabxUzZG10Jop Fav6pDOHcoXUY8beqmAZEA6cTQZ5NK/4LwVxMe8dnknfxIlhKDmwNhWjCBcFV3kA EZ7hfrK4Y/Ee/X0eC/kNgBlzqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECQmGG8 gvc65k7iynRb6Y/VzffoMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqeLCmpC9D0+HHcK4SOJRYXrYsPYKaQH8HqC6dbX4lJEqdthPvh4OjOi2vZ6/ +JSxZngXCUOgFvZTcK7nO9yxsVKg53TbD80asP2pPpbcaoG4zmHnxXl2luhiJ09+ CiPiggIiq7NllrkS6LsU8qWtiu2uoP5Oj7I4qCz+MSk4nqVvQjI/EpU/L6yVLZze M3sIjA+lCMbhPSj3ixonTgvZ+VeYVWSQQXWRn6IZlV5dSRn4CAPWsvAVEmVL68RV QFd6ArQO6VaCmMPAh8NFxI2VT+assIL7+zCr2mgg59RZ+1xGpP0QgcgsdF4boMyr dULUG/BvZ6yK79hdt7mZHAxUGQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:52 2026 by rpki-client