$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: j7l8sV7VK/YZ8YdXtOAFBjASXSzzFiMi7hOWbU2Onjg= Subject key identifier: 67:CD:23:AE:81:0D:7C:16:C4:83:AF:B7:3C:A6:3C:4C:6F:A7:08:6C Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0BCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0B5C Signing time: Tue 24 Mar 2026 19:06:56 +0000 Manifest this update: Tue 24 Mar 2026 19:06:55 +0000 Manifest next update: Tue 31 Mar 2026 19:06:55 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: eonlNhENvcdMI0YsTOySYir3SPJ+fcMKIa+Yas6S4p4=) 2: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 4abL4xIYGxaDwtZ2SH2+5ZKmO1Ys5r+LEPIwldIA334=) 3: 58F54538023A11F1A52751391D3D8C67.roa (hash: z1uio79TPLowMm0kT18AE7ic1OAaktv6my41QeEIQto=) 4: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: 7v6uelL8OrL55pjxxbIx0xi/kAw0shUB/buk6IIa7mg=) 5: 3061606C730211EE89A20645C4F9AE02.roa (hash: 4rsroTZmZtOVvq2pXVxJ9+vhXeo2GaYkFSNbtr0ft6c=) 6: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: 95Cvg2zwZcw/BgeOc0WgBXkq0e8152XDILO2/aK+H3M=) 7: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ppMV4z82z5NW891AK5M12LBj8EGTNLyucBG3JsaVDho=) 8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: 2L0qmPJWlSuztHyt83Ndq4Mfp9otdvrdJcHOMZF+P2E=) 9: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: HJaToLePFZB89VkW0fGyPEdHzI89CWSnjN5awLA7vSM=) 10: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: LqR/UZmLsp/hlnh1P02a45elMJow2MTJH9+YtGc5TI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3019 (0xbcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Mar 24 19:06:55 2026 GMT Not After : Mar 31 19:06:55 2026 GMT Subject: CN=69c2e0d0-86cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:bc:85:1a:27:c5:bb:76:5d:18:50:3f:6b:be: cc:8b:07:d3:83:97:36:1d:29:6d:f3:27:17:5c:01: 0d:fc:ae:8d:d6:90:69:8d:59:a3:e3:fa:ff:84:d4: 77:65:9d:df:a0:8d:bd:f5:04:6d:f3:d8:6d:7a:64: 68:7d:36:0c:90:c0:19:c0:7f:90:66:4b:8e:3e:c4: 61:1a:8c:5b:16:fc:67:05:6f:ac:53:d5:e7:3c:5e: 41:1b:0c:bf:72:b2:bd:e8:f9:80:b7:d2:fa:4b:58: 65:95:87:aa:c5:1b:e3:46:c5:3e:53:b0:8e:2b:08: e7:30:af:94:18:be:b5:79:c2:29:76:43:ab:04:09: b2:07:00:25:d1:0d:72:d9:5f:58:e7:7e:30:c6:b5: ba:ca:ec:cf:73:63:d7:09:ec:d0:68:d8:80:b4:a3: e8:7b:2d:e2:fc:eb:49:49:2b:15:84:78:f3:13:32: c3:56:07:d5:13:4e:4f:3e:26:e5:da:e4:dd:29:71: 01:9f:c0:73:ec:31:75:46:db:7a:c2:9e:19:45:97: 00:f8:93:eb:83:b0:48:c6:2e:e2:4d:25:57:b3:04: 54:06:42:f9:d2:47:d7:7c:ac:8c:b4:62:9e:28:76: 1f:64:06:0a:7f:92:15:53:fb:93:ee:46:d4:0d:80: 1f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CD:23:AE:81:0D:7C:16:C4:83:AF:B7:3C:A6:3C:4C:6F:A7:08:6C X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:f0:c1:d9:6c:bb:de:b6:c6:d8:60:58:65:aa:4a:76:b3:bb: 5d:77:99:52:90:57:2e:47:f3:79:a9:3b:8d:08:d2:b6:48:d0: 2d:98:74:2b:15:7b:b0:08:16:e4:08:be:10:20:ff:8a:07:87: 6c:3a:34:e8:92:7c:f8:29:85:ce:6f:64:13:ad:2c:8d:a4:e2: 4d:a7:f1:58:dc:e5:c5:ab:44:f6:3d:96:5b:2e:24:ea:ff:3e: e4:99:06:23:3e:4e:15:4f:01:82:23:53:88:05:f3:8d:c3:a4: 3c:21:28:e9:6a:96:95:e3:7b:c7:eb:0d:27:29:b7:2e:64:b6: cd:46:d2:d7:05:c0:21:40:9d:4e:b0:cd:a1:46:4e:ee:c6:9b: d1:72:2c:58:d1:ca:20:0c:62:27:6e:e1:03:29:27:d7:95:7d: 46:14:9e:45:5d:ca:9c:dc:7e:a9:06:f6:f3:7b:83:fa:d9:ef: 4f:b6:67:a9:09:f3:48:f1:21:09:d3:8a:81:ec:07:b9:0f:3f: 7d:ec:03:94:53:32:14:6a:16:58:29:be:5f:96:f5:08:42:9a: fd:60:1d:bb:e9:67:0a:e9:bb:c9:c2:99:26:01:46:6f:f7:61: d4:a4:e8:82:07:65:3e:91:c5:56:77:78:e8:52:ef:e8:c3:7a: 3a:d4:b6:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjYwMzI0MTkwNjU1WhcNMjYwMzMxMTkwNjU1WjAYMRYwFAYD VQQDEw02OWMyZTBkMC04NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ryFGifFu3ZdGFA/a77MiwfTg5c2HSlt8ycXXAEN/K6N1pBpjVmj4/r/hNR3 ZZ3foI299QRt89htemRofTYMkMAZwH+QZkuOPsRhGoxbFvxnBW+sU9XnPF5BGwy/ crK96PmAt9L6S1hllYeqxRvjRsU+U7COKwjnMK+UGL61ecIpdkOrBAmyBwAl0Q1y 2V9Y534wxrW6yuzPc2PXCezQaNiAtKPoey3i/OtJSSsVhHjzEzLDVgfVE05PPibl 2uTdKXEBn8Bz7DF1Rtt6wp4ZRZcA+JPrg7BIxi7iTSVXswRUBkL50kfXfKyMtGKe KHYfZAYKf5IVU/uT7kbUDYAfnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGfNI66B DXwWxIOvtzymPExvpwhsMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACPDB2Wy73rbG2GBYZapKdrO7XXeZUpBXLkfzeak7jQjStkjQLZh0KxV7sAgW 5Ai+ECD/igeHbDo06JJ8+CmFzm9kE60sjaTiTafxWNzlxatE9j2WWy4k6v8+5JkG Iz5OFU8BgiNTiAXzjcOkPCEo6WqWleN7x+sNJym3LmS2zUbS1wXAIUCdTrDNoUZO 7sab0XIsWNHKIAxiJ27hAykn15V9RhSeRV3KnNx+qQb283uD+tnvT7ZnqQnzSPEh CdOKgewHuQ8/fewDlFMyFGoWWCm+X5b1CEKa/WAdu+lnCum7ycKZJgFGb/dh1KTo ggdlPpHFVnd46FLv6MN6OtS2Ug== -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:13 2026 by rpki-client