$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft File: BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json) Hash identifier: lM8HBwZZDOe1uKGsBGhlZQ94dTyjyQ7DCppMPl5FT7U= Subject key identifier: D5:23:D1:27:D9:DA:88:14:94:55:9E:6B:1E:43:F1:CF:68:E8:61:FF Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 Certificate issuer: /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Certificate serial: 0569 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft Manifest number: 0563 Signing time: Fri 22 Aug 2025 23:32:47 +0000 Manifest this update: Fri 22 Aug 2025 23:32:46 +0000 Manifest next update: Fri 29 Aug 2025 23:32:46 +0000 Files and hashes: 1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: 8MxelTTf9oN7SuoTIHU9HEb5GXmrw0IlbtnRCidNhY8=) 2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: lySgXIbTeI773mGGKtKXC8wJwgy1NnARqmSlG1Myyf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158015, serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Validity Not Before: Aug 22 23:32:46 2025 GMT Not After : Aug 29 23:32:46 2025 GMT Subject: CN=68a8fe1e-1e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:f8:de:ac:3a:8b:27:3e:69:70:44:dd:1e: 48:26:c8:09:eb:e5:a3:4e:8c:b8:3e:fb:9d:9c:95: 74:a2:1b:81:87:5c:a2:fd:81:6f:a4:82:21:61:a3: ad:85:7f:57:37:7e:9c:08:9f:48:49:bb:41:7c:35: 00:aa:79:56:e0:7c:9d:74:51:ee:76:2f:e7:c0:85: d5:de:8c:38:5f:00:cc:92:4a:68:ac:a1:3c:4e:76: 19:64:12:29:14:3e:6f:06:b9:ef:c1:de:3c:71:42: a3:79:fa:78:45:ba:b6:19:40:16:ab:a1:0a:33:02: 23:25:a3:a9:96:81:1c:e3:bd:31:f6:2d:1c:02:02: 24:a6:45:31:b3:ce:4c:f6:23:d5:3c:75:0e:15:47: 27:29:4e:fa:c1:0f:fd:e7:3f:d7:dc:e2:a2:14:27: bc:77:94:c7:d0:4c:74:aa:28:22:c1:a8:ea:65:e1: 37:35:d5:78:31:a8:79:c2:95:32:69:e0:79:7a:f9: 12:06:10:18:15:b0:ce:12:96:ef:7d:56:e1:98:f8: 6a:40:43:7b:cd:76:4a:0f:ea:74:24:94:7d:e3:a2: 4b:3c:f3:b3:f1:ca:9d:f6:d2:7a:0c:38:75:2f:b9: 5c:fc:f6:25:0c:4a:98:1c:f6:e0:44:b5:45:03:7a: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:23:D1:27:D9:DA:88:14:94:55:9E:6B:1E:43:F1:CF:68:E8:61:FF X509v3 Authority Key Identifier: keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b8:97:ae:f4:8f:aa:6e:35:25:c6:d0:12:fb:b8:f7:6b:bb: df:46:2c:3f:46:8e:5e:fa:2f:6b:76:d0:6f:07:66:29:d2:c7: 1f:ac:67:91:0d:b4:f8:b2:a7:56:91:ab:8f:36:fb:08:e9:38: 39:c2:6f:cf:33:d2:f0:65:70:c9:38:39:f2:da:01:eb:a9:11: 1d:aa:a4:6c:e2:a2:c2:60:13:85:d0:c0:d6:ac:0a:fd:6f:b3: d1:e7:72:c0:3c:c2:43:26:2b:3f:42:2d:63:c2:15:db:d5:97: 8d:53:83:3d:ef:b4:db:11:32:1e:c8:83:b1:7a:a8:ee:3a:12: a5:74:11:6a:ca:f3:d2:80:39:37:1d:a4:e0:55:d7:65:db:07: bf:4d:76:56:73:12:5a:3e:8e:5d:eb:9b:83:1d:c7:9b:33:d0: 81:84:be:26:cc:b9:78:48:68:8c:aa:ce:5f:1b:6e:e0:75:58: 01:c9:02:70:22:54:72:ed:9d:2f:56:89:a7:1a:6f:cf:0c:67: 1d:4a:eb:76:ae:2c:cd:e3:43:fc:f8:81:4e:ba:71:35:cc:d1: a9:46:93:1b:51:ef:65:66:59:92:6d:49:8f:39:eb:ff:fe:1e: 30:e2:81:6d:61:8b:25:0e:81:1b:aa:cf:6a:71:17:a2:45:b2: 8f:e8:af:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJBRkJDRUIzQjRD RDIzNURDNDgwHhcNMjUwODIyMjMzMjQ2WhcNMjUwODI5MjMzMjQ2WjAYMRYwFAYD VQQDEw02OGE4ZmUxZS0xZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPD43qw6iyc+aXBE3R5IJsgJ6+WjToy4PvudnJV0ohuBh1yi/YFvpIIhYaOt hX9XN36cCJ9ISbtBfDUAqnlW4HyddFHudi/nwIXV3ow4XwDMkkporKE8TnYZZBIp FD5vBrnvwd48cUKjefp4Rbq2GUAWq6EKMwIjJaOploEc470x9i0cAgIkpkUxs85M 9iPVPHUOFUcnKU76wQ/95z/X3OKiFCe8d5TH0Ex0qigiwajqZeE3NdV4Mah5wpUy aeB5evkSBhAYFbDOEpbvfVbhmPhqQEN7zXZKD+p0JJR946JLPPOz8cqd9tJ6DDh1 L7lc/PYlDEqYHPbgRLVFA3oI7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNUj0SfZ 2ogUlFWeax5D8c9o6GH/MB8GA1UdIwQYMBaAFAa7EaMoTeHuzib7r7zrO0zSNdxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAxNS9GNkRBMEYxQ0Y5 MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRlN09KdnV2dk9zN1ROSTEz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Jyc1JveWhONGU3T0p2dXZ2T3M3VE5JMTNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAxNS9GNkRBMEYxQ0Y5MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRl N09KdnV2dk9zN1ROSTEzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmuJeu9I+qbjUlxtAS+7j3a7vfRiw/Ro5e+i9rdtBvB2Yp0scfrGeR DbT4sqdWkauPNvsI6Tg5wm/PM9LwZXDJODny2gHrqREdqqRs4qLCYBOF0MDWrAr9 b7PR53LAPMJDJis/Qi1jwhXb1ZeNU4M977TbETIeyIOxeqjuOhKldBFqyvPSgDk3 HaTgVddl2we/TXZWcxJaPo5d65uDHcebM9CBhL4mzLl4SGiMqs5fG27gdVgByQJw IlRy7Z0vVomnGm/PDGcdSut2rizN40P8+IFOunE1zNGpRpMbUe9lZlmSbUmPOev/ /h4w4oFtYYslDoEbqs9qcReiRbKP6K95 -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:20 2025 by rpki-client