$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: kKjvdausJ+9fBa91VhQ1bBUeu1I8wCBtjNmh3EofQko= Subject key identifier: 98:0C:49:28:99:E7:26:30:62:D9:BA:F8:93:C2:12:08:D5:78:53:69 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0CA8 Signing time: Tue 24 Mar 2026 16:31:44 +0000 Manifest this update: Tue 24 Mar 2026 16:31:44 +0000 Manifest next update: Tue 31 Mar 2026 16:31:44 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: zu30mWnUAosNrzmDTJzJoga5CJ7IZCalE1yl6ObATic=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: nphD5/zhxc+3ixvM+cDUfdvKIznpmzB6/A0Gs9H1cg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:31:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Mar 24 16:31:44 2026 GMT Not After : Mar 31 16:31:44 2026 GMT Subject: CN=69c2bc70-b354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:93:95:12:f0:35:bc:de:87:ad:17:5d:cb:6c: 87:38:99:11:68:f2:cf:be:f1:c5:43:ae:97:ad:d0: d8:47:be:6b:b6:58:88:9b:63:f7:27:e1:5d:3a:a2: 2b:ba:bf:0c:0a:fe:95:b8:59:7e:36:60:d1:b6:e7: 97:0a:60:ae:08:eb:11:93:91:c2:d0:d2:f4:e4:11: ed:87:9f:7d:5e:f9:b4:e6:1a:01:86:0f:0a:b7:60: b2:0a:56:86:c3:49:67:17:28:eb:aa:ce:a1:1c:26: ce:d3:97:48:58:75:9f:aa:e5:4f:03:cc:62:06:8f: 4a:c4:d0:6b:b9:fc:e4:73:fc:1c:6b:c5:d8:f2:dd: 40:4c:63:2f:aa:14:48:0f:76:82:bf:9a:0f:27:92: 3f:8d:fa:03:d7:d9:bc:6f:a5:f7:50:bd:d2:be:e9: e4:05:5e:69:23:e5:9c:80:6b:6f:a0:28:c4:81:0c: 0c:90:a4:62:ff:0b:6a:14:04:5d:0a:19:4d:8f:ab: 4a:72:ca:f5:9e:44:c1:ee:b2:a4:54:cf:d2:52:d7: 20:92:e6:a4:80:43:ea:13:e7:73:ab:9b:ab:9f:c6: 1a:02:dd:6a:af:9b:c0:81:62:06:4c:b1:7d:c0:63: 67:30:17:f9:db:45:3f:b8:55:c1:53:cb:81:9c:fb: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:49:28:99:E7:26:30:62:D9:BA:F8:93:C2:12:08:D5:78:53:69 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:ab:d1:6d:77:2c:98:32:d3:a3:87:83:ce:20:2d:b3:80:c6: 19:fe:88:5a:b2:ce:a2:92:3f:6c:45:8c:54:aa:da:ea:e5:17: 2d:36:5a:49:32:d0:55:71:9e:ee:2c:7c:f7:a3:49:a5:c0:96: fd:03:c1:35:a0:0e:b5:4d:b0:fd:ef:d9:fb:d2:1b:53:be:0e: 31:2b:42:bc:a5:cd:cb:be:ed:c8:02:c0:8f:19:11:60:dc:80: 1d:e6:e9:c6:ee:85:3b:1e:fe:dc:3b:65:7c:28:12:60:92:b3: 7d:ae:06:d5:4a:38:8d:c2:a3:ec:1a:0e:7f:19:8e:d8:22:84: fa:a1:0e:b8:09:08:27:e0:24:8c:b9:62:90:da:fe:e0:f2:66: 77:e9:00:2c:70:5c:25:03:ed:56:8d:23:66:e6:9b:d0:17:ce: b8:51:0c:ac:22:e7:f3:64:73:c4:a3:a3:6c:7f:43:dc:da:ac: 52:ab:a3:b4:ad:5b:41:2a:a7:da:4e:cb:c3:a5:dc:82:67:41: e5:05:4c:15:1a:75:fc:48:22:12:a9:9c:05:b5:75:1f:f5:44: c2:55:42:be:79:cf:e1:47:cd:bb:e1:62:e8:d9:1c:9d:8e:6d: 06:b3:85:c4:1d:28:6a:20:2d:d7:42:1b:f6:61:92:1b:5f:9c: b3:6f:7b:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjYwMzI0MTYzMTQ0WhcNMjYwMzMxMTYzMTQ0WjAYMRYwFAYD VQQDEw02OWMyYmM3MC1iMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5OVEvA1vN6HrRddy2yHOJkRaPLPvvHFQ66XrdDYR75rtliIm2P3J+FdOqIr ur8MCv6VuFl+NmDRtueXCmCuCOsRk5HC0NL05BHth599Xvm05hoBhg8Kt2CyClaG w0lnFyjrqs6hHCbO05dIWHWfquVPA8xiBo9KxNBrufzkc/wca8XY8t1ATGMvqhRI D3aCv5oPJ5I/jfoD19m8b6X3UL3SvunkBV5pI+WcgGtvoCjEgQwMkKRi/wtqFARd ChlNj6tKcsr1nkTB7rKkVM/SUtcgkuakgEPqE+dzq5urn8YaAt1qr5vAgWIGTLF9 wGNnMBf520U/uFXBU8uBnPuonQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJgMSSiZ 5yYwYtm6+JPCEgjVeFNpMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd6vRbXcsmDLTo4eDziAts4DGGf6IWrLOopI/bEWMVKra6uUXLTZaSTLQVXGe 7ix896NJpcCW/QPBNaAOtU2w/e/Z+9IbU74OMStCvKXNy77tyALAjxkRYNyAHebp xu6FOx7+3DtlfCgSYJKzfa4G1Uo4jcKj7BoOfxmO2CKE+qEOuAkIJ+AkjLlikNr+ 4PJmd+kALHBcJQPtVo0jZuab0BfOuFEMrCLn82RzxKOjbH9D3NqsUqujtK1bQSqn 2k7Lw6XcgmdB5QVMFRp1/EgiEqmcBbV1H/VEwlVCvnnP4UfNu+Fi6NkcnY5tBrOF xB0oaiAt10Ib9mGSG1+cs2975w== -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:55 2026 by rpki-client