$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: mXhNGkD/3pgGgeZMzpBWU4Rgm634bM3AAdYOyUa07Jw= Subject key identifier: 9B:6F:98:DC:D9:AA:AD:C9:F3:C6:8E:FF:32:18:D9:AE:66:22:0E:4D Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C08 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C01 Signing time: Mon 12 May 2025 16:37:41 +0000 Manifest this update: Mon 12 May 2025 16:37:41 +0000 Manifest next update: Mon 19 May 2025 16:37:41 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: QR0AZzkHcykmo9casPeFvV798uarpeBK+1DBzLBbxNw=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: May 12 16:37:41 2025 GMT Not After : May 19 16:37:41 2025 GMT Subject: CN=682223d5-d5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:00:e9:d1:fb:55:c3:9c:d6:8b:61:2e:85: 6c:a4:18:c7:aa:71:2e:07:66:b3:75:02:c6:22:72: 62:82:fc:14:06:43:8f:1d:a5:38:8c:56:aa:d7:a8: 73:79:e9:23:06:23:f0:cf:f5:09:c1:86:72:e5:2e: e4:17:69:84:d7:1d:0a:a3:52:ea:96:eb:34:d0:d4: fc:e3:c2:62:2d:91:ca:d9:fc:74:24:d1:dd:d4:e3: 0a:c2:50:6f:0d:54:c4:4d:d7:db:6b:4b:0b:58:42: 7b:d4:44:ca:bd:f3:4a:f2:9c:e9:ae:f1:c9:4f:6c: bc:d4:d5:3a:06:eb:06:56:4b:c5:87:c9:c6:a5:11: 2a:e5:b2:7f:1b:d1:c4:8c:37:2c:2a:41:f6:93:55: cc:82:d5:82:b3:7e:ad:9d:ec:7c:c9:19:59:ab:f7: 8a:16:6e:70:c2:9a:02:cf:e8:aa:3e:ba:3d:86:51: 77:88:42:be:02:85:9d:29:53:13:1b:67:35:bf:84: 11:06:03:1b:f4:8d:4f:07:7c:f8:ef:25:d1:ed:60: 65:3c:68:42:d0:1e:62:d5:fb:c7:65:92:10:11:ce: 0f:ca:03:10:5a:c8:00:bd:ae:bd:83:fd:79:7b:e5: 86:d4:4f:bd:a3:80:aa:37:d6:f9:18:4d:a5:50:01: 81:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6F:98:DC:D9:AA:AD:C9:F3:C6:8E:FF:32:18:D9:AE:66:22:0E:4D X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a1:37:f6:51:a9:fc:a4:04:17:3a:80:b3:3d:16:0b:65:b9: b5:93:35:c8:74:33:df:2b:5c:f2:2b:fd:94:64:4f:40:28:c1: 50:35:61:43:d3:12:6c:f4:e9:f7:18:4b:8a:7e:f5:2a:30:17: 61:0f:59:c6:97:63:a8:01:1b:82:39:77:f4:65:3c:74:ee:65: 96:ed:fb:ee:9e:da:33:0d:c9:7e:57:1f:0e:cc:66:83:1e:77: e7:24:0f:d4:c8:5c:41:19:ee:1f:37:e8:e2:44:64:16:d3:16: 1e:83:d4:66:a0:a5:53:c1:87:97:f5:d9:0b:6b:6d:0b:ae:4c: a1:bf:49:c2:99:1d:c3:3d:ff:1b:74:37:9d:f2:65:ef:9c:ab: 74:90:7a:7a:4b:9b:33:17:dd:0b:cb:24:84:98:79:38:44:ee: 62:80:b3:c4:a0:48:a1:c5:81:91:f7:76:31:eb:23:0b:ab:8f: 64:f1:fa:e5:77:66:5b:e4:2e:11:28:63:f1:b5:83:d1:72:c4: bd:52:92:61:d7:7f:12:89:da:d5:4d:2e:27:aa:72:32:17:a3: 1a:e8:a1:cf:d4:ab:9b:2b:e1:4c:e7:a6:00:e8:a7:9c:a4:a9: f8:e2:87:23:a7:16:66:a1:b0:ac:02:0a:19:fa:ca:e6:1f:11: ce:ff:b0:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUwNTEyMTYzNzQxWhcNMjUwNTE5MTYzNzQxWjAYMRYwFAYD VQQDEw02ODIyMjNkNS1kNWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUoA6dH7VcOc1othLoVspBjHqnEuB2azdQLGInJigvwUBkOPHaU4jFaq16hz eekjBiPwz/UJwYZy5S7kF2mE1x0Ko1Lqlus00NT848JiLZHK2fx0JNHd1OMKwlBv DVTETdfba0sLWEJ71ETKvfNK8pzprvHJT2y81NU6BusGVkvFh8nGpREq5bJ/G9HE jDcsKkH2k1XMgtWCs36tnex8yRlZq/eKFm5wwpoCz+iqPro9hlF3iEK+AoWdKVMT G2c1v4QRBgMb9I1PB3z47yXR7WBlPGhC0B5i1fvHZZIQEc4PygMQWsgAva69g/15 e+WG1E+9o4CqN9b5GE2lUAGBKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtvmNzZ qq3J88aO/zIY2a5mIg5NMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeoTf2Uan8pAQXOoCzPRYLZbm1kzXIdDPfK1zyK/2UZE9AKMFQNWFD 0xJs9On3GEuKfvUqMBdhD1nGl2OoARuCOXf0ZTx07mWW7fvuntozDcl+Vx8OzGaD HnfnJA/UyFxBGe4fN+jiRGQW0xYeg9RmoKVTwYeX9dkLa20Lrkyhv0nCmR3DPf8b dDed8mXvnKt0kHp6S5szF90LyySEmHk4RO5igLPEoEihxYGR93Yx6yMLq49k8frl d2Zb5C4RKGPxtYPRcsS9UpJh138SidrVTS4nqnIyF6Ma6KHP1KubK+FM56YA6Kec pKn44ocjpxZmobCsAgoZ+srmHxHO/7DU -----END CERTIFICATE-----Generated at Wed May 14 07:59:28 2025 by rpki-client