$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: t7NNEniraEZU9QhZK3BTp5BV3bs9rWv0FD3JKpUS9Dk= Subject key identifier: 90:7A:7B:EC:34:52:6F:61:DC:47:A5:0A:40:0E:FF:00:75:A3:AD:26 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B58 Signing time: Mon 20 Oct 2025 19:53:50 +0000 Manifest this update: Mon 20 Oct 2025 19:53:49 +0000 Manifest next update: Mon 27 Oct 2025 19:53:49 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: MQoz4CJBNDpExJFEsIkHVuzhWxdlDsOyrL63C+rJxLk=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: pLnncZW/+2aMcnpBmFNNa8a+AYjIGNXBznPCsUBo+1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Oct 20 19:53:49 2025 GMT Not After : Oct 27 19:53:49 2025 GMT Subject: CN=68f6934e-74c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ea:5a:2a:6d:5a:0d:25:8e:4f:92:fd:ce:5d: 10:1c:38:ea:a9:5f:f7:c2:7f:f7:26:f2:9b:24:b9: ee:cc:5a:38:48:be:63:89:39:1e:4a:e3:b2:3b:18: ad:36:04:8e:55:42:8f:14:77:7e:72:12:9f:7e:b9: 09:66:92:55:d4:a6:68:8b:bc:c2:af:8c:84:a9:db: c2:ca:97:0b:a4:66:67:c7:50:c4:d8:18:01:b5:3d: 2d:e9:64:7a:07:3f:61:68:05:2f:a4:ed:39:07:e0: 60:88:9d:ca:82:55:b3:57:45:34:ff:9c:d8:9e:c9: 88:7e:19:3a:7b:ac:9e:45:be:6e:da:f7:55:50:12: 5b:9a:58:c4:c7:6d:cb:10:ad:47:43:af:66:b8:c5: 51:f2:06:71:39:c5:27:d7:02:cd:a5:e6:d9:e0:d9: 6e:d9:43:19:7c:63:f0:cf:36:da:6a:8a:19:8c:39: cb:f6:73:08:ae:fd:49:1a:1f:ed:6f:51:cb:36:e0: f1:0b:b0:7c:88:59:0e:66:de:45:ab:21:92:65:20: 64:7c:c7:4c:67:b5:22:50:bb:4c:10:7d:cc:e5:f8: c2:ec:4a:7b:75:99:a3:67:0f:38:a4:d6:62:c6:0e: 44:c2:95:9d:e2:45:66:db:76:8c:c1:05:2c:81:91: fd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7A:7B:EC:34:52:6F:61:DC:47:A5:0A:40:0E:FF:00:75:A3:AD:26 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:52:b4:d6:b3:2f:ae:37:d6:49:26:65:a0:14:6c:53:68:23: 98:e0:c0:85:7b:9b:f3:7b:81:5a:f6:4e:ef:30:90:b3:39:ea: 14:6a:77:9f:d6:0a:a9:40:2e:4f:37:83:e6:db:d5:8b:74:79: 2f:3f:94:a4:1d:31:74:a2:40:64:91:9e:b3:e1:ea:1f:b9:97: b8:40:23:c4:79:d7:9c:35:ae:52:82:29:41:9a:26:ef:77:c7: 50:31:00:25:11:ea:44:d5:cb:62:fa:65:a8:02:20:06:8e:63: f7:08:47:65:2f:66:23:3d:0e:fe:b2:ac:5f:f4:00:82:c4:21: 07:05:a0:18:0d:e3:df:0f:e4:b9:2e:01:23:b3:a8:3f:76:0b: 49:a9:5a:d7:48:2e:65:f9:a5:60:79:a4:ba:72:7d:2d:53:da: db:2e:5f:7d:8a:7c:37:9b:d1:32:cf:a2:19:46:a3:f1:87:a8: 8b:60:41:a3:df:2d:72:87:3d:3c:c9:ac:a3:bc:5f:35:9a:50: 4d:03:54:5d:43:50:59:03:83:45:03:ff:0f:11:c3:e7:30:dc: 55:af:43:52:f0:e2:43:72:4d:70:6b:e7:3e:ce:e6:4f:5a:4f: d6:4d:6c:83:7b:67:d0:05:7a:6c:25:54:b0:d2:4f:f5:d1:d5: 99:46:c6:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUxMDIwMTk1MzQ5WhcNMjUxMDI3MTk1MzQ5WjAYMRYwFAYD VQQDEw02OGY2OTM0ZS03NGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4epaKm1aDSWOT5L9zl0QHDjqqV/3wn/3JvKbJLnuzFo4SL5jiTkeSuOyOxit NgSOVUKPFHd+chKffrkJZpJV1KZoi7zCr4yEqdvCypcLpGZnx1DE2BgBtT0t6WR6 Bz9haAUvpO05B+BgiJ3KglWzV0U0/5zYnsmIfhk6e6yeRb5u2vdVUBJbmljEx23L EK1HQ69muMVR8gZxOcUn1wLNpebZ4Nlu2UMZfGPwzzbaaooZjDnL9nMIrv1JGh/t b1HLNuDxC7B8iFkOZt5FqyGSZSBkfMdMZ7UiULtMEH3M5fjC7Ep7dZmjZw84pNZi xg5EwpWd4kVm23aMwQUsgZH9UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJB6e+w0 Um9h3EelCkAO/wB1o60mMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNUrTWsy+uN9ZJJmWgFGxTaCOY4MCFe5vze4Fa9k7vMJCzOeoUanef 1gqpQC5PN4Pm29WLdHkvP5SkHTF0okBkkZ6z4eofuZe4QCPEedecNa5SgilBmibv d8dQMQAlEepE1cti+mWoAiAGjmP3CEdlL2YjPQ7+sqxf9ACCxCEHBaAYDePfD+S5 LgEjs6g/dgtJqVrXSC5l+aVgeaS6cn0tU9rbLl99inw3m9Eyz6IZRqPxh6iLYEGj 3y1yhz08yayjvF81mlBNA1RdQ1BZA4NFA/8PEcPnMNxVr0NS8OJDck1wa+c+zuZP Wk/WTWyDe2fQBXpsJVSw0k/10dWZRsZs -----END CERTIFICATE-----Generated at Tue Oct 21 02:25:59 2025 by rpki-client