$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: J2k8acRlKktrsxUGYPgyMco0BerlF0yriVgcR5KCfQ0= Subject key identifier: A3:19:20:D8:08:96:78:EC:C9:A0:C9:52:31:E8:CF:54:98:D2:9F:C0 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0AE5 Signing time: Fri 22 Aug 2025 19:39:38 +0000 Manifest this update: Fri 22 Aug 2025 19:39:37 +0000 Manifest next update: Fri 29 Aug 2025 19:39:37 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: lu7sinUDUKXv/PyuHrzSRSyJUdDMARFDeqF0EIBsJHg=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: y3b59N8xTAyBST+gKWzOT+m6SJf9WUMXCwyOq4G/KEM=) 5: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 6: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 10: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: Ri1dXeOFxDR/7l+L35yanQI8/jxsp+el2wPepBX2c9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Aug 22 19:39:37 2025 GMT Not After : Aug 29 19:39:37 2025 GMT Subject: CN=68a8c779-9a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:62:47:ea:b3:14:b6:13:44:de:f3:92:2d: 37:34:95:ac:f5:79:93:49:04:20:b9:79:b1:08:5f: 6e:1a:f9:31:63:18:96:88:fb:f5:a2:1f:1e:13:ad: b5:34:49:8f:f2:49:cb:cd:3f:67:a8:09:ad:55:71: 9f:7c:48:69:b9:19:d3:e4:7c:de:be:24:f9:69:8a: de:38:e3:7b:f3:13:cd:96:a8:69:02:5b:15:1e:a9: 33:8b:5b:fb:91:91:26:bc:82:cb:ff:03:09:65:6c: 64:7b:c1:82:d2:ec:3a:8b:5a:38:50:36:be:2b:1b: 21:d2:8a:12:24:82:e9:fa:fa:01:a9:79:58:9a:74: 9c:43:26:1f:ff:ca:6f:f0:ea:6c:0b:a8:bd:3d:50: c6:45:2d:11:9b:9d:3b:3a:b3:74:dd:49:d8:06:de: 63:71:8b:92:54:44:50:8d:9d:d9:88:b8:72:e4:2a: 08:44:4a:33:59:8d:74:24:13:43:6f:b7:e3:61:eb: a8:32:89:97:d0:b1:4c:b2:11:44:b5:74:a2:83:20: 62:05:09:37:ca:6d:e4:ae:4b:4b:99:fb:ff:e0:c4: 8d:7a:d3:4a:fa:7b:a7:75:cf:4c:d3:01:8b:43:f7: bf:e1:e7:26:61:c3:91:07:de:44:81:04:3a:5b:04: 45:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:19:20:D8:08:96:78:EC:C9:A0:C9:52:31:E8:CF:54:98:D2:9F:C0 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:35:8d:01:40:90:49:40:c6:b7:bc:64:a3:bd:f6:8d:a5:6d: 1e:b3:80:03:c7:17:8b:14:7c:01:11:e9:84:7f:61:86:d2:3c: 8a:7f:31:7c:52:aa:63:a0:4c:6d:b7:4d:a2:d0:93:3c:53:2a: f7:71:cb:b7:24:0e:71:66:a4:df:89:2e:cc:e9:ab:c1:04:45: 7b:91:37:0e:3d:82:22:33:8d:52:d4:83:fc:79:41:fe:7e:5a: 47:5d:93:cc:91:76:89:d7:6a:04:96:60:f2:c3:22:72:36:ef: d0:b8:f8:b9:60:a5:9a:ea:f6:52:3c:5a:c3:60:27:00:f1:ef: 96:6c:1a:11:05:7d:38:03:ab:00:17:41:ef:2c:ca:ed:f0:0b: 4c:29:3e:4b:dc:5e:cc:3f:b0:b1:4b:fd:15:85:59:b4:14:f3: 98:2b:98:d1:1c:b6:c5:30:9a:40:7a:1a:ad:70:1a:a4:f3:4a: fc:0d:4e:1d:d0:2c:8e:b7:f4:8b:e4:04:e4:da:83:80:80:f2: 89:54:fe:9a:c9:d9:31:5b:73:fc:c8:95:19:31:3d:bd:ee:8e: 8d:3f:43:35:21:da:9f:28:05:cb:5b:12:55:ea:0f:82:6f:bc: 4c:60:87:44:55:07:37:91:f6:a4:17:81:db:1b:75:34:19:68: ad:d5:e1:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUwODIyMTkzOTM3WhcNMjUwODI5MTkzOTM3WjAYMRYwFAYD VQQDEw02OGE4Yzc3OS05YTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWBiR+qzFLYTRN7zki03NJWs9XmTSQQguXmxCF9uGvkxYxiWiPv1oh8eE621 NEmP8knLzT9nqAmtVXGffEhpuRnT5HzeviT5aYreOON78xPNlqhpAlsVHqkzi1v7 kZEmvILL/wMJZWxke8GC0uw6i1o4UDa+Kxsh0ooSJILp+voBqXlYmnScQyYf/8pv 8OpsC6i9PVDGRS0Rm507OrN03UnYBt5jcYuSVERQjZ3ZiLhy5CoIREozWY10JBND b7fjYeuoMomX0LFMshFEtXSigyBiBQk3ym3krktLmfv/4MSNetNK+nundc9M0wGL Q/e/4ecmYcORB95EgQQ6WwRFhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMZINgI lnjsyaDJUjHoz1SY0p/AMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpNY0BQJBJQMa3vGSjvfaNpW0es4ADxxeLFHwBEemEf2GG0jyKfzF8 UqpjoExtt02i0JM8Uyr3ccu3JA5xZqTfiS7M6avBBEV7kTcOPYIiM41S1IP8eUH+ flpHXZPMkXaJ12oElmDywyJyNu/QuPi5YKWa6vZSPFrDYCcA8e+WbBoRBX04A6sA F0HvLMrt8AtMKT5L3F7MP7CxS/0VhVm0FPOYK5jRHLbFMJpAehqtcBqk80r8DU4d 0CyOt/SL5ATk2oOAgPKJVP6aydkxW3P8yJUZMT297o6NP0M1IdqfKAXLWxJV6g+C b7xMYIdEVQc3kfakF4HbG3U0GWit1eFN -----END CERTIFICATE-----Generated at Sat Aug 23 13:33:24 2025 by rpki-client