$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: 7sQETCNx8V1PFDJuXBJA94rfaRF1uzKVUWTeoo0wy9c= Subject key identifier: A6:73:88:AE:61:5E:A7:B0:C0:58:06:66:19:32:F2:15:10:D0:E8:FE Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0B2C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0B1F Signing time: Fri 04 Jul 2025 19:38:24 +0000 Manifest this update: Fri 04 Jul 2025 19:38:23 +0000 Manifest next update: Fri 11 Jul 2025 19:38:23 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: WkHfuHcOAj9Jifc+we5E7lunwLSrwsfPVO5oLXX3IPc=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: dPrx3cF0sDj9FTl2qCoRHJgtgGOLW5ACbJ0tx2wVxmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Jul 4 19:38:23 2025 GMT Not After : Jul 11 19:38:23 2025 GMT Subject: CN=68682db0-dbb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:74:0b:2c:c7:5e:f8:de:c4:ba:d1:e3:09: ce:cc:c3:95:02:15:72:3d:85:34:63:a3:50:44:c7: c3:47:cb:50:9a:06:59:c5:80:51:0d:fe:65:5d:eb: 42:7b:19:86:43:bb:2c:07:1a:0a:50:77:4b:b0:98: f6:7c:ec:7c:41:00:30:75:f7:43:77:c6:24:0b:8b: c2:26:25:89:69:9f:40:76:e9:d3:be:d7:56:9a:26: 3c:96:c0:26:f6:a4:45:38:6a:65:68:53:ce:12:a2: ed:06:73:a2:b5:e2:cc:11:03:80:18:6d:ba:4b:b0: e0:43:b2:81:83:5e:68:58:48:b3:93:f5:f8:10:09: 8b:15:0b:b5:c9:d6:a5:12:d7:ad:d8:25:dc:22:00: 1c:50:f3:c5:67:5d:e3:e3:27:d7:64:3b:2d:74:78: 9b:58:2e:5e:8c:68:67:61:1a:ba:ed:0f:15:5e:f8: 88:ea:dc:28:28:c4:df:28:4c:c6:8a:62:60:12:d9: 23:82:4f:75:89:5e:69:07:b8:dc:b5:e0:b2:cc:a2: 09:07:ba:da:b5:96:25:7a:75:70:20:ef:ae:f0:93: 90:0a:fb:9b:d9:8f:21:23:c8:bb:5c:f4:6b:14:ee: ed:c5:1f:29:84:1e:74:6e:9a:13:ae:a8:ee:5c:0b: 12:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:73:88:AE:61:5E:A7:B0:C0:58:06:66:19:32:F2:15:10:D0:E8:FE X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:58:f4:76:14:0e:49:88:0b:42:1d:36:d2:28:77:74:92:8a: d4:2d:3f:7c:38:a1:b5:41:fa:ac:94:ff:d5:48:9a:3d:d3:4a: 48:d6:24:de:77:6c:49:84:26:a9:f7:7b:29:33:1e:97:f6:d2: 17:6f:56:9c:42:d6:8d:c9:5a:2b:d0:18:0d:6c:c4:2c:ba:7c: 52:26:b6:45:c1:7f:ea:ea:e3:ca:20:4a:7e:58:e5:80:85:1b: e1:9f:80:27:05:17:93:55:1b:1e:ed:12:4e:88:8b:3b:4f:70: 3b:13:36:e7:55:5f:07:71:48:91:ee:82:f2:32:e9:4f:07:04: cb:31:01:4f:7b:2a:4b:a1:72:8b:4e:9e:8c:0c:e9:b8:1a:aa: 93:a4:ed:57:87:1f:39:5e:73:6b:81:77:34:20:a5:62:6e:ac: a4:b8:88:75:4e:9b:83:ed:37:6f:75:b7:34:2f:e6:54:ad:1d: 6d:be:42:51:ee:c9:04:ca:2d:ff:13:ae:bc:43:86:9b:fb:3e: bb:56:10:21:6e:e1:cd:29:42:e9:eb:a0:5a:df:5a:b6:49:bb: ed:73:7e:01:b9:5a:ba:53:97:e6:70:a2:3a:9b:b0:60:26:d2: 32:c6:af:ad:7d:5c:08:de:36:b2:ab:d3:86:14:14:f5:6b:2a: 4c:42:d8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjUwNzA0MTkzODIzWhcNMjUwNzExMTkzODIzWjAYMRYwFAYD VQQDEw02ODY4MmRiMC1kYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyJ0CyzHXvjexLrR4wnOzMOVAhVyPYU0Y6NQRMfDR8tQmgZZxYBRDf5lXetC exmGQ7ssBxoKUHdLsJj2fOx8QQAwdfdDd8YkC4vCJiWJaZ9AdunTvtdWmiY8lsAm 9qRFOGplaFPOEqLtBnOiteLMEQOAGG26S7DgQ7KBg15oWEizk/X4EAmLFQu1ydal Etet2CXcIgAcUPPFZ13j4yfXZDstdHibWC5ejGhnYRq67Q8VXviI6twoKMTfKEzG imJgEtkjgk91iV5pB7jcteCyzKIJB7ratZYlenVwIO+u8JOQCvub2Y8hI8i7XPRr FO7txR8phB50bpoTrqjuXAsSsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZziK5h XqewwFgGZhky8hUQ0Oj+MB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXWPR2FA5JiAtCHTbSKHd0korULT98OKG1QfqslP/VSJo900pI1iTe d2xJhCap93spMx6X9tIXb1acQtaNyVor0BgNbMQsunxSJrZFwX/q6uPKIEp+WOWA hRvhn4AnBReTVRse7RJOiIs7T3A7EzbnVV8HcUiR7oLyMulPBwTLMQFPeypLoXKL Tp6MDOm4GqqTpO1Xhx85XnNrgXc0IKVibqykuIh1TpuD7Tdvdbc0L+ZUrR1tvkJR 7skEyi3/E668Q4ab+z67VhAhbuHNKULp66Ba31q2Sbvtc34BuVq6U5fmcKI6m7Bg JtIyxq+tfVwI3jayq9OGFBT1aypMQthn -----END CERTIFICATE-----Generated at Sat Jul 5 05:35:40 2025 by rpki-client