$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft File: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft (raw, json) Hash identifier: 8iA66hQRIV/5uDHncjlJuE4kGJVEZCyNP3TE2JqiAQI= Subject key identifier: FC:E8:A1:CC:76:BC:5C:FC:54:15:D2:41:76:45:93:97:C5:D5:F1:03 Authority key identifier: D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC Certificate issuer: /CN=A914247C/serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Certificate serial: 0BC4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft Manifest number: 0BB3 Signing time: Sat 04 Apr 2026 18:52:08 +0000 Manifest this update: Sat 04 Apr 2026 18:52:08 +0000 Manifest next update: Sat 11 Apr 2026 18:52:08 +0000 Files and hashes: 1: 1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl (hash: TnaGo/g1qg6Hzk2/1MNuZHxYjhji8h7w5Nz9u9U5AMk=) 2: 9156042083EB11ECB7EC3B76C4F9AE02.roa (hash: EP70FT9vYILp9XYrmWiAL3jLqbW9+S8BdvaaLqMxnTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3012 (0xbc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=D5A0250634DFC03DC9CFCABA9795180FF05158FC Validity Not Before: Apr 4 18:52:08 2026 GMT Not After : Apr 11 18:52:08 2026 GMT Subject: CN=69d15dd8-5ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:53:ea:f3:89:26:df:e5:75:db:d0:f2:00: 1e:6e:7d:51:fd:1e:91:76:d6:80:3e:84:84:a0:0b: e4:50:f2:10:6f:70:9e:3c:58:bc:82:30:47:97:a2: 63:14:4d:68:bd:8f:af:3c:7f:68:e9:2d:eb:6f:a4: 68:b7:3a:77:fc:8a:57:5f:c8:a8:ee:98:a6:6b:10: 99:be:27:e3:6b:13:f4:25:1b:8e:17:57:36:3f:f6: f2:05:f4:ec:7f:aa:bb:f6:c1:6f:5e:8e:e7:f3:42: a3:a0:b1:53:d9:61:d1:67:95:cd:49:a8:8a:32:c5: ab:e0:0d:9a:17:24:10:8b:13:8b:79:21:af:dc:a4: 15:da:0b:6c:65:dd:cf:c1:b2:4e:ec:cc:be:12:a5: 88:fa:52:45:33:71:73:2b:e3:b2:24:45:cc:5e:2f: ce:f5:7e:f2:33:17:a9:c9:c6:f3:50:fb:0f:bc:8a: 89:39:25:a8:31:7a:4f:be:f8:a5:67:17:62:fd:74: 78:d9:81:cb:a7:47:c0:46:2f:31:77:96:fb:47:cf: 78:93:73:ec:53:9a:ba:ef:d4:27:d6:99:f6:02:3a: 44:09:aa:f6:3c:54:a7:2c:96:a6:4f:73:bd:d0:f0: 2b:d2:a0:8e:71:36:31:58:09:6f:d5:55:7d:63:1a: ec:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E8:A1:CC:76:BC:5C:FC:54:15:D2:41:76:45:93:97:C5:D5:F1:03 X509v3 Authority Key Identifier: keyid:D5:A0:25:06:34:DF:C0:3D:C9:CF:CA:BA:97:95:18:0F:F0:51:58:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/8A1C4616430A11EA858CDC76C4F9AE02/1aAlBjTfwD3Jz8q6l5UYD_BRWPw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:dd:53:59:cf:a3:89:69:db:dc:68:f0:5d:77:fb:6b:bd:4c: 25:2a:19:90:dd:7b:43:cd:75:db:90:1f:3e:b3:4f:3b:7e:54: 1b:9e:5f:30:1e:40:cc:6f:d0:64:19:f4:ff:64:6c:60:6e:c2: 64:00:cd:a3:12:06:df:ae:4e:e4:84:4f:51:11:06:54:40:59: fe:6d:ca:18:c9:7d:ae:88:88:e9:11:3e:d6:36:19:61:b3:0d: 3a:33:c7:64:31:71:dc:5f:3e:20:02:2c:b9:43:00:79:fd:32: 69:a1:ab:ad:e8:fa:64:87:a6:5e:8f:e8:08:ee:2b:b0:b5:6e: 1a:e4:ed:a1:63:44:20:58:20:01:c9:45:f7:a3:2d:eb:e6:f4: 9d:d8:76:91:93:6f:23:30:f1:7c:67:59:55:86:b0:62:9f:6a: cf:5c:89:77:f7:52:57:e8:ea:ca:b6:37:67:27:f1:2a:a9:0a: fd:c3:ee:e8:20:0a:33:2a:71:75:71:45:de:df:6d:7d:35:54: 43:ab:6d:33:f5:42:be:2e:cf:cb:db:33:71:43:62:d0:19:c9: db:93:14:05:ef:74:1f:e5:7b:9f:ad:85:6e:94:e9:2e:08:34: 3d:d0:86:92:0a:19:42:6d:00:2f:d8:9c:8b:55:10:bf:49:10: b7:9e:a1:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKEQ1QTAyNTA2MzRERkMwM0RDOUNGQ0FCQTk3OTUxODBG RjA1MTU4RkMwHhcNMjYwNDA0MTg1MjA4WhcNMjYwNDExMTg1MjA4WjAYMRYwFAYD VQQDEw02OWQxNWRkOC01ZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56dT6vOJJt/lddvQ8gAebn1R/R6RdtaAPoSEoAvkUPIQb3CePFi8gjBHl6Jj FE1ovY+vPH9o6S3rb6Rotzp3/IpXX8io7pimaxCZvifjaxP0JRuOF1c2P/byBfTs f6q79sFvXo7n80KjoLFT2WHRZ5XNSaiKMsWr4A2aFyQQixOLeSGv3KQV2gtsZd3P wbJO7My+EqWI+lJFM3FzK+OyJEXMXi/O9X7yMxepycbzUPsPvIqJOSWoMXpPvvil Zxdi/XR42YHLp0fARi8xd5b7R894k3PsU5q679Qn1pn2AjpECar2PFSnLJamT3O9 0PAr0qCOcTYxWAlv1VV9YxrsuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzoocx2 vFz8VBXSQXZFk5fF1fEDMB8GA1UdIwQYMBaAFNWgJQY038A9yc/KupeVGA/wUVj8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy84QTFDNDYxNjQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndEM0p6OHE2bDVVWURfQlJX UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFhQWxCalRmd0QzSno4cTZsNVVZRF9CUldQdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy84QTFDNDYxNjQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi8xYUFsQmpUZndE M0p6OHE2bDVVWURfQlJXUHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgN1TWc+jiWnb3GjwXXf7a71MJSoZkN17Q81125AfPrNPO35UG55fMB5AzG/Q ZBn0/2RsYG7CZADNoxIG365O5IRPUREGVEBZ/m3KGMl9roiI6RE+1jYZYbMNOjPH ZDFx3F8+IAIsuUMAef0yaaGrrej6ZIemXo/oCO4rsLVuGuTtoWNEIFggAclF96Mt 6+b0ndh2kZNvIzDxfGdZVYawYp9qz1yJd/dSV+jqyrY3ZyfxKqkK/cPu6CAKMypx dXFF3t9tfTVUQ6ttM/VCvi7Py9szcUNi0BnJ25MUBe90H+V7n62FbpTpLgg0PdCG kgoZQm0AL9ici1UQv0kQt56hAQ== -----END CERTIFICATE-----Generated at Mon Apr 6 16:37:16 2026 by rpki-client