$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: oCX7QqokUGnG2KnDP2NwoKTCBWX/A8MZdfbcVkPCFGg= Subject key identifier: 96:3A:D9:8A:87:F6:5E:BB:52:07:6C:2B:1D:66:16:44:0E:F5:E6:CA Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B05 Signing time: Mon 12 May 2025 19:11:18 +0000 Manifest this update: Mon 12 May 2025 19:11:18 +0000 Manifest next update: Mon 19 May 2025 19:11:18 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: TdvzGrxwyUOLg8zOw875dQVQF2/uT0CnMRvLwKmtPYw=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: May 12 19:11:18 2025 GMT Not After : May 19 19:11:18 2025 GMT Subject: CN=682247d6-6c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:da:56:b4:29:20:d3:01:23:66:49:0c:f1:56: db:90:0e:8f:b4:82:24:17:0f:6c:46:cd:18:8a:04: 0b:32:d5:a6:7f:fc:f5:ca:9f:a3:ef:8c:2f:c8:63: 2c:6d:22:f4:ef:59:64:83:53:4b:3d:a1:aa:19:ac: f3:9b:72:67:2e:61:ee:f1:d4:29:ae:c1:6b:f3:01: a3:18:b4:3d:9c:93:18:53:6b:5e:ee:17:63:2a:c1: 56:5b:07:a8:e1:c2:8f:30:72:88:6d:83:b6:6e:9f: d8:00:d1:64:1a:80:69:3c:52:6c:00:29:69:1f:f0: 9a:bb:0d:13:86:74:15:b9:8c:74:cb:23:45:ef:3a: 8b:45:f3:d7:08:b6:d6:42:ee:62:0e:6a:66:31:77: e9:b3:7c:be:ff:9c:ab:65:65:aa:64:ed:82:d4:07: ea:76:64:64:2f:da:c3:a6:3f:8d:b3:5e:96:b7:fd: 90:56:1d:03:c6:2a:39:7d:e0:23:67:03:5e:60:1d: bd:52:c1:e0:67:6e:2f:fa:ee:e3:a1:4f:b6:d6:36: 41:88:9e:2c:1f:0e:f8:58:62:18:c5:3e:d4:e1:d9: 33:b6:a0:2c:e6:a8:eb:9b:89:83:d9:31:73:23:53: c1:27:5e:76:e4:fc:cc:03:2a:3a:37:1b:cc:05:21: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3A:D9:8A:87:F6:5E:BB:52:07:6C:2B:1D:66:16:44:0E:F5:E6:CA X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5d:e5:47:01:8e:b5:c0:6c:24:48:10:51:f8:ea:47:6d:12: cd:c7:e0:c7:f9:36:71:47:ea:0c:3c:d2:45:e6:d5:c5:82:cb: 25:cb:88:50:c7:89:36:b2:e2:c5:43:e6:98:86:73:fe:77:fb: a9:a0:39:1e:af:cd:22:7e:0d:4e:be:5f:72:16:61:99:30:f9: f8:7c:3d:c5:fe:ae:80:98:b0:57:d2:85:54:1c:11:c9:7a:14: 22:f1:36:f7:28:dc:e3:cc:f9:b7:0b:9a:4c:a3:48:c2:32:dc: 01:10:7b:6c:48:e0:0b:c6:aa:75:4a:e0:47:f2:d5:1d:b7:42: 4f:b8:69:34:05:60:f2:2c:3f:60:04:4d:92:21:d1:ec:a9:35: c0:8b:da:5f:eb:b9:3e:6f:06:d9:c0:4b:aa:c7:92:7a:ca:1f: 22:e0:12:27:c2:42:c5:45:b0:01:06:c5:1e:58:c5:62:5d:ee: 9f:01:5f:b9:35:05:6c:17:55:d8:09:52:5f:cf:85:fa:ad:87: 98:d8:df:a3:81:7b:bc:9b:2b:30:d1:97:02:b2:df:3d:ce:cf: 45:78:5c:29:f7:98:9b:2e:62:01:29:33:eb:aa:19:d0:7f:db: 49:7c:88:a8:fc:90:44:8f:b6:b2:b8:80:f3:ff:d3:8d:69:5a: 0b:99:c2:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUwNTEyMTkxMTE4WhcNMjUwNTE5MTkxMTE4WjAYMRYwFAYD VQQDEw02ODIyNDdkNi02YzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNpWtCkg0wEjZkkM8VbbkA6PtIIkFw9sRs0YigQLMtWmf/z1yp+j74wvyGMs bSL071lkg1NLPaGqGazzm3JnLmHu8dQprsFr8wGjGLQ9nJMYU2te7hdjKsFWWweo 4cKPMHKIbYO2bp/YANFkGoBpPFJsAClpH/Cauw0ThnQVuYx0yyNF7zqLRfPXCLbW Qu5iDmpmMXfps3y+/5yrZWWqZO2C1AfqdmRkL9rDpj+Ns16Wt/2QVh0Dxio5feAj ZwNeYB29UsHgZ24v+u7joU+21jZBiJ4sHw74WGIYxT7U4dkztqAs5qjrm4mD2TFz I1PBJ1525PzMAyo6NxvMBSFYmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY62YqH 9l67UgdsKx1mFkQO9ebKMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsXeVHAY61wGwkSBBR+OpHbRLNx+DH+TZxR+oMPNJF5tXFgssly4hQ x4k2suLFQ+aYhnP+d/upoDker80ifg1Ovl9yFmGZMPn4fD3F/q6AmLBX0oVUHBHJ ehQi8Tb3KNzjzPm3C5pMo0jCMtwBEHtsSOALxqp1SuBH8tUdt0JPuGk0BWDyLD9g BE2SIdHsqTXAi9pf67k+bwbZwEuqx5J6yh8i4BInwkLFRbABBsUeWMViXe6fAV+5 NQVsF1XYCVJfz4X6rYeY2N+jgXu8mysw0ZcCst89zs9FeFwp95ibLmIBKTPrqhnQ f9tJfIio/JBEj7ayuIDz/9ONaVoLmcI1 -----END CERTIFICATE-----Generated at Wed May 14 14:33:07 2025 by rpki-client