$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: QIjasjbnxZq2wMUcRS2tA5sSMEfEGy1sWVrOcJJrboI= Subject key identifier: 7B:7B:94:78:B2:47:C7:70:26:BA:66:41:C7:D0:3D:DB:3C:84:94:77 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C22 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C1B Signing time: Wed 02 Jul 2025 16:48:56 +0000 Manifest this update: Wed 02 Jul 2025 16:48:55 +0000 Manifest next update: Wed 09 Jul 2025 16:48:55 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: GhKjDjcq2la0aIVZB45QT/rbpV5CuDQyZAw/EieQSeg=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3106 (0xc22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Jul 2 16:48:55 2025 GMT Not After : Jul 9 16:48:55 2025 GMT Subject: CN=686562f8-c642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:04:95:03:7b:2a:5c:b1:b8:d7:68:d4:4b: ce:f7:44:5a:87:ad:f4:d1:cf:6e:fb:29:2e:f8:81: e7:28:00:d4:84:e4:e9:0a:17:9c:03:2c:3e:37:8b: 29:95:8c:f3:9e:4e:64:9d:19:55:5e:6f:c6:2b:dc: de:9f:01:08:48:8a:3c:89:21:cf:bc:ab:7e:fa:3a: a6:1c:46:0c:ca:29:2b:90:e3:3c:e1:08:b3:e5:be: 2a:fc:46:eb:83:d5:62:8a:42:7e:de:b0:0f:11:68: 19:40:ea:63:3c:89:78:7a:21:eb:2c:f6:67:21:c6: 3f:02:af:d4:d0:7b:81:ba:19:21:3e:18:e6:88:fb: c8:f5:59:05:dc:3d:c0:60:fc:4d:be:af:92:ab:e2: a9:48:c2:4a:e0:e2:7d:5e:b5:d0:f6:04:8d:f5:b1: 68:94:2e:d9:12:43:14:c0:69:4f:f0:2f:0b:de:97: 60:fd:7b:8f:5d:20:dd:3e:8a:7b:4b:d0:d0:b6:b1: f1:f0:f1:7a:07:62:a7:7f:b2:a3:63:3c:fa:eb:60: e5:b1:b6:bb:a5:c2:35:f1:14:2e:90:8c:bf:ed:15: 74:9c:43:b7:f4:2b:d4:aa:d9:1f:0d:3c:f9:e7:e1: 05:50:8e:f2:2f:66:fe:06:53:96:ed:82:f6:8f:32: 33:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7B:94:78:B2:47:C7:70:26:BA:66:41:C7:D0:3D:DB:3C:84:94:77 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:fc:da:6c:81:d9:59:65:12:6b:dd:53:8a:f4:7d:0e:dd:95: 6d:4c:5e:aa:ca:e9:8f:43:8c:df:74:4d:ce:da:fd:ef:d6:c0: 9b:be:bb:9a:91:3f:2e:4a:7e:58:f7:e2:aa:11:d0:75:bc:fe: e5:6e:fe:7b:8c:44:67:93:c8:da:2c:b7:55:73:d5:0e:11:b6: 40:07:05:6f:67:26:ff:08:db:84:68:e9:7e:fd:a1:d6:c8:4e: 0a:7d:fd:a7:79:e0:94:a7:a3:0f:91:fa:bb:54:8c:de:6b:af: 90:8f:e9:c1:a7:f0:95:f0:79:4b:46:74:42:1b:4e:b9:82:dd: f8:de:ea:47:f9:45:42:2e:06:83:9b:04:00:6c:59:f7:ca:e0: 81:37:ee:8d:3e:02:6a:4f:c8:08:f6:d3:67:a0:9a:44:d6:bf: a4:ed:bf:34:3d:30:ea:b5:9f:6d:30:68:72:6e:10:ab:25:09: 04:f7:c1:c2:e0:9a:97:f6:c8:d5:3b:49:b8:b6:6b:03:74:e4: 33:ff:eb:9c:b4:5e:16:89:2e:da:8b:1a:71:38:74:79:d3:71: 86:b8:fc:8a:da:57:45:eb:f7:e9:cd:56:b4:96:0d:89:12:c9: bb:33:50:24:ab:43:c9:e0:05:2d:be:63:30:20:13:28:a1:85: 0f:e9:70:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUwNzAyMTY0ODU1WhcNMjUwNzA5MTY0ODU1WjAYMRYwFAYD VQQDEw02ODY1NjJmOC1jNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2b0ElQN7KlyxuNdo1EvO90Rah6300c9u+yku+IHnKADUhOTpChecAyw+N4sp lYzznk5knRlVXm/GK9zenwEISIo8iSHPvKt++jqmHEYMyikrkOM84Qiz5b4q/Ebr g9ViikJ+3rAPEWgZQOpjPIl4eiHrLPZnIcY/Aq/U0HuBuhkhPhjmiPvI9VkF3D3A YPxNvq+Sq+KpSMJK4OJ9XrXQ9gSN9bFolC7ZEkMUwGlP8C8L3pdg/XuPXSDdPop7 S9DQtrHx8PF6B2Knf7KjYzz662Dlsba7pcI18RQukIy/7RV0nEO39CvUqtkfDTz5 5+EFUI7yL2b+BlOW7YL2jzIznwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt7lHiy R8dwJrpmQcfQPds8hJR3MB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN/NpsgdlZZRJr3VOK9H0O3ZVtTF6qyumPQ4zfdE3O2v3v1sCbvrua kT8uSn5Y9+KqEdB1vP7lbv57jERnk8jaLLdVc9UOEbZABwVvZyb/CNuEaOl+/aHW yE4Kff2neeCUp6MPkfq7VIzea6+Qj+nBp/CV8HlLRnRCG065gt343upH+UVCLgaD mwQAbFn3yuCBN+6NPgJqT8gI9tNnoJpE1r+k7b80PTDqtZ9tMGhybhCrJQkE98HC 4JqX9sjVO0m4tmsDdOQz/+uctF4WiS7aixpxOHR503GGuPyK2ldF6/fpzVa0lg2J Esm7M1Akq0PJ4AUtvmMwIBMooYUP6XCQ -----END CERTIFICATE-----Generated at Thu Jul 3 08:07:02 2025 by rpki-client