$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: U/KnHa5r2powkbiT8cREMiLbhhP4ZxExJhN2G2AfUCc= Subject key identifier: FE:A0:0A:40:93:71:97:8D:FB:D4:54:10:98:91:E3:3D:68:37:98:48 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B38 Signing time: Fri 22 Aug 2025 19:22:41 +0000 Manifest this update: Fri 22 Aug 2025 19:22:40 +0000 Manifest next update: Fri 29 Aug 2025 19:22:40 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: 5NnlvvV1hWtbOoBYc+Rco4cGyCMMCvHvF3Cp8NnM8Fs=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2885 (0xb45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Aug 22 19:22:40 2025 GMT Not After : Aug 29 19:22:40 2025 GMT Subject: CN=68a8c381-edbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:b6:79:3c:1e:c9:0e:11:53:b4:f9:a7:f2: e3:ab:a9:9e:39:a3:b0:e4:c1:c7:c3:7e:a9:f2:e5: 73:36:26:f3:54:68:8d:0c:a5:ec:b5:d4:2a:04:fa: 0a:fb:e5:95:78:30:10:78:4f:00:45:d4:e4:fb:3a: 50:b4:d3:4a:8a:5b:46:e9:02:0b:d3:e8:cb:f5:05: cd:e9:f2:d4:34:af:da:91:da:51:4f:04:77:68:c6: 69:4f:43:3c:ea:37:ff:62:13:fa:af:ef:fd:4d:b5: d1:28:4a:e1:86:a9:f0:a8:47:2e:4b:2c:b9:57:5b: 24:72:eb:c2:b0:ba:43:9c:5f:e8:bd:bc:0d:ed:8a: ba:54:be:d5:ab:9b:dd:74:42:e2:d0:10:e8:3f:b1: f7:a7:c6:05:ec:d5:ba:a8:a1:88:48:8b:fe:ad:cc: 52:7e:39:5c:ef:cc:a4:50:b1:af:60:63:90:e1:62: a8:f4:0f:39:44:a8:74:57:37:bc:6f:56:d7:db:91: 39:97:53:23:0e:4a:f9:5a:67:2e:3e:28:04:15:48: 4c:fd:9b:5e:15:20:3d:e5:33:73:a5:dc:3d:21:78: 81:9b:43:20:15:91:0b:5d:51:e2:3d:c5:12:78:f4: 1d:db:35:df:b0:d2:45:82:2b:06:12:92:47:bb:ae: c9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A0:0A:40:93:71:97:8D:FB:D4:54:10:98:91:E3:3D:68:37:98:48 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:4e:d9:5e:4f:44:34:bb:c0:64:5a:c8:29:28:1f:60:1b:e9: a8:e8:06:28:ab:3c:7d:4d:b2:d4:50:0b:ee:8c:20:e8:0c:34: e8:c1:55:59:a1:f8:20:9d:66:1c:87:b4:ee:16:dc:56:94:bb: fa:5b:2b:3c:96:7a:54:b8:ac:72:69:0b:f5:7d:61:7e:10:a4: 38:c0:b8:cc:b7:e8:47:cc:10:c1:a0:1a:24:0e:fe:9f:f1:b6: 28:90:10:6a:df:a8:51:f3:d2:80:48:9b:49:93:d3:c8:fd:97: 59:ee:3a:5d:2c:d6:70:ec:a8:1b:29:d6:eb:63:89:7b:4b:94: 90:65:47:72:3b:67:a8:a5:42:f2:5a:c1:32:3b:1f:52:22:cf: 65:68:18:12:63:61:c1:3b:17:b6:53:8c:31:f8:d4:2e:16:77: fe:6c:41:f0:45:bd:e8:2d:b4:ee:ff:66:05:56:47:5c:cd:a4: 48:ba:79:26:b2:53:af:7b:77:e0:76:31:37:1b:9e:6f:e3:cd: 93:7b:84:89:60:48:ba:90:13:35:a8:71:4c:ff:4a:1f:99:f6: 3d:ea:47:5f:bb:7b:1f:05:e1:78:f9:bb:6f:ab:85:99:11:f6: 76:45:70:4d:37:d2:5b:6f:4d:c5:91:6f:ad:4b:32:07:fe:6f: f2:f2:2b:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUwODIyMTkyMjQwWhcNMjUwODI5MTkyMjQwWjAYMRYwFAYD VQQDEw02OGE4YzM4MS1lZGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o22eTweyQ4RU7T5p/Ljq6meOaOw5MHHw36p8uVzNibzVGiNDKXstdQqBPoK ++WVeDAQeE8ARdTk+zpQtNNKiltG6QIL0+jL9QXN6fLUNK/akdpRTwR3aMZpT0M8 6jf/YhP6r+/9TbXRKErhhqnwqEcuSyy5V1skcuvCsLpDnF/ovbwN7Yq6VL7Vq5vd dELi0BDoP7H3p8YF7NW6qKGISIv+rcxSfjlc78ykULGvYGOQ4WKo9A85RKh0Vze8 b1bX25E5l1MjDkr5WmcuPigEFUhM/ZteFSA95TNzpdw9IXiBm0MgFZELXVHiPcUS ePQd2zXfsNJFgisGEpJHu67JrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6gCkCT cZeN+9RUEJiR4z1oN5hIMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFTtleT0Q0u8BkWsgpKB9gG+mo6AYoqzx9TbLUUAvujCDoDDTowVVZ ofggnWYch7TuFtxWlLv6Wys8lnpUuKxyaQv1fWF+EKQ4wLjMt+hHzBDBoBokDv6f 8bYokBBq36hR89KASJtJk9PI/ZdZ7jpdLNZw7KgbKdbrY4l7S5SQZUdyO2eopULy WsEyOx9SIs9laBgSY2HBOxe2U4wx+NQuFnf+bEHwRb3oLbTu/2YFVkdczaRIunkm slOve3fgdjE3G55v482Te4SJYEi6kBM1qHFM/0ofmfY96kdfu3sfBeF4+btvq4WZ EfZ2RXBNN9Jbb03FkW+tSzIH/m/y8is8 -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:15 2025 by rpki-client