$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: mJnJ8SKt/5DpD3/7C35P4/BBlD7MEj3QSzNtHJkbjwM= Subject key identifier: C0:C7:31:6D:0C:24:14:F5:37:04:7E:A2:AA:95:1E:56:3C:EA:A8:F0 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C59 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C52 Signing time: Sat 18 Oct 2025 17:04:35 +0000 Manifest this update: Sat 18 Oct 2025 17:04:34 +0000 Manifest next update: Sat 25 Oct 2025 17:04:34 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: YNO0ACWVi+CFU5RCN74e/7uO9rOsn7kE9rPRcK/sK+Y=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:04:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Oct 18 17:04:34 2025 GMT Not After : Oct 25 17:04:34 2025 GMT Subject: CN=68f3c8a3-eae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:97:8c:34:c6:dd:17:55:2d:ec:fe:c9:3c: 12:db:df:f8:c3:12:3f:cb:f0:32:db:bc:9a:d8:81: 5a:fd:84:94:f4:46:b1:f8:af:5c:1b:2d:7f:6b:c4: a0:8d:9f:f4:42:65:13:22:97:54:3c:d9:81:89:3a: 64:d4:2b:04:02:85:a8:70:4a:cb:0d:c6:18:3d:2b: ab:4d:c9:38:d4:93:e9:82:11:26:a7:82:1a:39:7d: 31:51:07:8a:f1:c9:96:f4:c5:55:46:0a:02:0a:a2: 91:88:ed:b1:1e:d6:d7:d4:a7:b4:7e:78:92:e1:47: 86:06:d1:07:8c:a7:21:46:b8:75:56:ad:9f:1b:fa: 85:fb:91:ca:3b:20:81:2c:be:c1:80:c0:ce:91:67: a4:70:cb:e9:c2:a6:0a:f9:f7:bf:98:99:ac:ce:d8: bd:31:a1:23:b4:a1:df:a9:72:fe:14:76:59:6f:9c: 32:e8:d1:ac:38:41:70:bc:01:21:39:2a:c9:6b:b4: 5a:69:07:7c:96:21:74:22:b8:31:b6:8c:b9:3d:12: 1b:0f:c0:a6:08:c1:e2:fc:4d:85:32:58:79:15:d3: a1:ef:6a:bd:98:26:a0:54:d7:2e:94:0f:a9:d0:14: 7c:de:c4:dd:4d:38:f4:cb:59:8f:2e:fc:57:82:93: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C7:31:6D:0C:24:14:F5:37:04:7E:A2:AA:95:1E:56:3C:EA:A8:F0 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:5b:dc:b5:df:f9:63:4f:11:36:56:73:2a:64:66:d8:ee:fd: 2a:21:54:e2:16:a1:14:4c:c8:55:33:d5:53:b7:68:fb:82:6d: 44:55:dd:53:c7:af:0a:b3:36:6a:b2:d1:68:cb:57:d7:d9:b2: 67:ff:36:19:3a:a3:cd:ec:b2:f9:68:5d:53:eb:4b:1d:5d:6a: a1:a4:42:ad:d7:bb:59:da:eb:ca:1d:b8:ed:dc:47:ee:ff:2c: 5a:6d:ee:ac:3b:24:ae:8a:fd:30:a8:f0:dc:f1:4a:92:1f:11: 2e:85:77:2b:3c:a8:87:a0:4e:fa:df:be:6f:27:6c:cb:7b:ba: ae:6c:a7:22:26:55:3a:95:c0:4b:84:b8:d6:bc:d1:cf:a7:88: 5a:ce:53:ff:b5:88:c1:f1:b1:ec:44:80:0a:c3:7c:56:2e:96: d4:52:0c:07:ef:d1:9f:40:68:a8:8f:9c:ad:6a:cf:6b:c5:75: 2b:30:f0:5b:6a:c6:80:83:6e:6a:ec:91:18:ed:8a:c9:19:fc: 2c:e2:cb:f9:35:20:94:b0:87:db:3a:b8:c7:68:22:55:1a:a0: 76:5f:bd:62:ff:2f:d3:da:19:6d:17:92:9f:fe:40:03:3e:19: 79:a3:ab:6a:13:05:3b:b6:5e:87:a2:91:10:fd:60:07:3e:02: 35:14:1d:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUxMDE4MTcwNDM0WhcNMjUxMDI1MTcwNDM0WjAYMRYwFAYD VQQDEw02OGYzYzhhMy1lYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBKXjDTG3RdVLez+yTwS29/4wxI/y/Ay27ya2IFa/YSU9Eax+K9cGy1/a8Sg jZ/0QmUTIpdUPNmBiTpk1CsEAoWocErLDcYYPSurTck41JPpghEmp4IaOX0xUQeK 8cmW9MVVRgoCCqKRiO2xHtbX1Ke0fniS4UeGBtEHjKchRrh1Vq2fG/qF+5HKOyCB LL7BgMDOkWekcMvpwqYK+fe/mJmszti9MaEjtKHfqXL+FHZZb5wy6NGsOEFwvAEh OSrJa7RaaQd8liF0Irgxtoy5PRIbD8CmCMHi/E2FMlh5FdOh72q9mCagVNculA+p 0BR83sTdTTj0y1mPLvxXgpPV4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDHMW0M JBT1NwR+oqqVHlY86qjwMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXW9y13/ljTxE2VnMqZGbY7v0qIVTiFqEUTMhVM9VTt2j7gm1EVd1T x68KszZqstFoy1fX2bJn/zYZOqPN7LL5aF1T60sdXWqhpEKt17tZ2uvKHbjt3Efu /yxabe6sOySuiv0wqPDc8UqSHxEuhXcrPKiHoE76375vJ2zLe7qubKciJlU6lcBL hLjWvNHPp4hazlP/tYjB8bHsRIAKw3xWLpbUUgwH79GfQGioj5ytas9rxXUrMPBb asaAg25q7JEY7YrJGfws4sv5NSCUsIfbOrjHaCJVGqB2X71i/y/T2hltF5Kf/kAD Phl5o6tqEwU7tl6HopEQ/WAHPgI1FB3X -----END CERTIFICATE-----Generated at Mon Oct 20 18:26:00 2025 by rpki-client