$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft File: BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json) Hash identifier: N3nCZptUXw5WnCPwy1GW5qnjww3peu7lBK5/O/vWSUM= Subject key identifier: 3A:F1:F5:1C:90:C3:8D:9D:C4:35:6F:E9:31:80:C0:A3:BB:54:DD:76 Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 Certificate issuer: /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Certificate serial: 0536 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft Manifest number: 0530 Signing time: Mon 12 May 2025 23:18:20 +0000 Manifest this update: Mon 12 May 2025 23:18:20 +0000 Manifest next update: Mon 19 May 2025 23:18:20 +0000 Files and hashes: 1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: aFp14hE7kMr5zji1N5BgEyeMlN+J3Quj7kXnIWgpY2E=) 2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: lySgXIbTeI773mGGKtKXC8wJwgy1NnARqmSlG1Myyf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1334 (0x536) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158015, serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Validity Not Before: May 12 23:18:20 2025 GMT Not After : May 19 23:18:20 2025 GMT Subject: CN=682281bc-103b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:86:e3:55:17:eb:a6:1b:4b:84:74:63:a2:cb: 7c:51:79:a6:94:8d:e3:6a:68:8b:d5:53:0c:2e:d7: 34:b8:1c:1b:c3:9d:08:b6:75:28:44:e3:71:01:71: bc:21:89:1c:77:5f:85:86:60:c7:aa:d0:a3:a6:c2: 1d:53:18:ee:3a:e7:81:10:fb:dd:80:cd:ac:c0:26: 74:47:80:33:6b:1e:17:1a:f0:6a:bf:c3:58:10:c3: 15:52:98:ae:e5:d1:c1:de:ea:db:b8:97:89:29:42: c3:82:95:b0:83:16:23:0e:7c:c7:79:9d:c3:e3:a1: 2b:e8:9b:c3:e0:e2:19:1d:40:b9:4c:33:ac:df:47: 3d:db:81:10:97:03:b3:e8:ae:8b:92:96:3f:58:02: 4f:91:64:40:7e:47:d4:3e:47:31:f6:14:ba:a4:b6: 70:6f:1f:4d:61:07:8e:d4:5c:e4:d1:9d:54:d9:21: 32:52:0a:df:db:50:23:c0:88:2d:c2:8c:8b:fb:27: 57:a0:7a:6c:d0:91:d6:c2:9c:1a:bf:d9:f6:79:20: 26:f8:9b:ee:b7:dd:6a:ed:a2:fa:8e:95:20:41:35: bf:4b:93:9c:48:b1:a0:f2:ca:58:72:b6:6f:17:5f: 14:d0:97:61:ed:63:6c:9c:a4:65:ad:12:7a:ea:27: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F1:F5:1C:90:C3:8D:9D:C4:35:6F:E9:31:80:C0:A3:BB:54:DD:76 X509v3 Authority Key Identifier: keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:1c:da:4b:b6:6c:eb:e0:bd:0c:0e:0b:02:54:ab:59:1a:ce: dd:ee:3f:f0:c4:00:56:ae:68:67:fa:3a:29:d9:26:a0:d1:60: f6:34:36:b5:ed:38:da:01:a4:be:9a:da:6c:a8:ee:7d:18:11: ef:b2:e1:78:3d:ff:e3:26:0a:30:0c:fd:78:2f:cf:b3:11:26: e2:59:13:23:b3:24:ed:8f:e3:fc:23:8e:41:65:a7:32:d8:36: f1:7b:12:2b:32:09:06:9b:ac:fa:c5:3b:fb:f5:58:65:aa:ae: a4:0e:10:04:cd:5f:74:19:ab:84:bb:37:af:43:c2:5b:9f:fe: 32:33:d3:65:85:0f:b1:53:a0:84:5b:1a:76:0e:92:a8:7b:49: 30:78:9d:d1:f1:5c:ef:77:c7:c1:53:9d:e4:95:39:f3:51:ae: de:9e:aa:40:ec:e7:0d:e0:4c:9d:10:75:a3:cd:6f:71:bb:95: 6d:af:9a:b2:f6:d2:8e:1c:6c:51:63:99:97:2f:fe:7f:6e:6c: 1c:d4:d3:45:c0:fa:fb:23:e9:5f:9f:31:bb:a4:79:20:34:e2: 55:d4:76:1f:8a:4e:d0:4e:95:12:55:b0:5b:8c:88:b5:c7:3d: 8d:75:2d:94:cc:60:36:b5:54:68:90:1e:58:b8:24:b8:3a:54: 32:45:71:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJBRkJDRUIzQjRD RDIzNURDNDgwHhcNMjUwNTEyMjMxODIwWhcNMjUwNTE5MjMxODIwWjAYMRYwFAYD VQQDEw02ODIyODFiYy0xMDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YbjVRfrphtLhHRjost8UXmmlI3jamiL1VMMLtc0uBwbw50ItnUoRONxAXG8 IYkcd1+FhmDHqtCjpsIdUxjuOueBEPvdgM2swCZ0R4Azax4XGvBqv8NYEMMVUpiu 5dHB3urbuJeJKULDgpWwgxYjDnzHeZ3D46Er6JvD4OIZHUC5TDOs30c924EQlwOz 6K6LkpY/WAJPkWRAfkfUPkcx9hS6pLZwbx9NYQeO1Fzk0Z1U2SEyUgrf21AjwIgt woyL+ydXoHps0JHWwpwav9n2eSAm+Jvut91q7aL6jpUgQTW/S5OcSLGg8spYcrZv F18U0Jdh7WNsnKRlrRJ66ifrKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrx9RyQ w42dxDVv6TGAwKO7VN12MB8GA1UdIwQYMBaAFAa7EaMoTeHuzib7r7zrO0zSNdxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAxNS9GNkRBMEYxQ0Y5 MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRlN09KdnV2dk9zN1ROSTEz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Jyc1JveWhONGU3T0p2dXZ2T3M3VE5JMTNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAxNS9GNkRBMEYxQ0Y5MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRl N09KdnV2dk9zN1ROSTEzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcHNpLtmzr4L0MDgsCVKtZGs7d7j/wxABWrmhn+jop2Sag0WD2NDa1 7TjaAaS+mtpsqO59GBHvsuF4Pf/jJgowDP14L8+zESbiWRMjsyTtj+P8I45BZacy 2DbxexIrMgkGm6z6xTv79Vhlqq6kDhAEzV90GauEuzevQ8Jbn/4yM9NlhQ+xU6CE Wxp2DpKoe0kweJ3R8Vzvd8fBU53klTnzUa7enqpA7OcN4EydEHWjzW9xu5Vtr5qy 9tKOHGxRY5mXL/5/bmwc1NNFwPr7I+lfnzG7pHkgNOJV1HYfik7QTpUSVbBbjIi1 xz2NdS2UzGA2tVRokB5YuCS4OlQyRXGf -----END CERTIFICATE-----Generated at Wed May 14 11:38:11 2025 by rpki-client