$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: nBxANY10qP26mDoHWCRyyo1i5crqt3N6QV99CE4Jsog= Subject key identifier: F8:31:29:15:EB:C3:FA:C7:26:E3:A1:3E:19:CB:9A:CA:ED:6E:99:47 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0AC2 Signing time: Sat 28 Jun 2025 19:16:49 +0000 Manifest this update: Sat 28 Jun 2025 19:16:48 +0000 Manifest next update: Sat 05 Jul 2025 19:16:48 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: 7Zp0Ez4CYgr6rjDOiVF6hBtN3zxMiM0YdlJ6V5H4VfA=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 5: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 7: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: gjOpVTIrCg/GRDI2g0j816CEONXvKaN06KAW+xe46vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Jun 28 19:16:48 2025 GMT Not After : Jul 5 19:16:48 2025 GMT Subject: CN=68603fa1-36c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:45:f3:45:b6:97:16:52:cc:b8:a5:3b:f5:b9: 77:18:dc:8e:82:2e:69:d7:68:68:d3:f0:af:6c:f7: aa:b7:18:43:9f:6d:1a:c9:9e:4b:9f:90:4c:ea:5e: b1:66:fb:5a:87:34:98:f1:f8:71:67:49:e1:10:96: cc:9b:92:f3:98:03:9e:75:f7:ed:3b:14:71:61:24: 41:43:81:4f:88:69:89:25:0c:a9:dc:06:62:d6:d0: d2:72:73:b4:5c:a3:28:39:ae:07:6f:b5:5e:0b:2c: 71:71:65:b1:8b:04:12:82:d5:1a:07:e2:cd:e1:82: c8:b7:7a:81:f8:e0:52:04:95:65:2e:cd:47:b0:c3: 01:e9:ce:ce:4f:04:69:f1:b7:9d:43:2e:3b:82:ab: ee:fd:d5:e3:9a:ee:22:d6:9d:68:f5:76:66:a8:d0: 11:2a:2b:29:f0:e8:f8:b0:77:92:b7:ce:81:38:23: 69:25:4c:30:37:e2:17:60:70:3b:1c:9b:60:8d:2f: fa:3e:9f:e0:ba:c4:56:76:4b:42:02:b5:e3:94:fd: db:da:8d:2f:51:40:68:cc:46:d1:b6:92:0a:d3:9d: 34:ed:db:cf:1e:9c:13:b5:fe:f2:82:c2:5f:bd:04: 5e:31:0e:43:ae:ac:18:5d:23:21:1d:88:10:50:49: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:31:29:15:EB:C3:FA:C7:26:E3:A1:3E:19:CB:9A:CA:ED:6E:99:47 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:aa:35:75:2a:5e:15:be:56:5b:f3:0e:e5:a7:2d:a3:5b:2f: a2:e9:3d:1c:9b:4e:85:12:5e:a9:0b:ff:38:91:e2:c6:c5:df: e1:54:1a:4f:b6:48:35:c9:a4:31:4a:50:4e:78:c2:95:34:4a: 0f:18:e1:fe:e1:38:b2:15:13:f3:f6:be:c5:c0:c0:97:22:60: 0d:69:ef:b9:c6:6f:0f:0c:24:e3:05:50:b9:13:db:86:c1:d5: 6a:68:f1:02:21:40:62:ad:25:3a:6f:cb:7e:18:f4:fb:1c:87: 96:21:b9:aa:20:15:12:42:15:78:3b:fa:45:91:ed:2c:44:f2: 9c:e4:36:40:60:13:2e:7f:17:d5:c9:0b:ad:c4:44:3f:f5:e8: 26:4e:71:5c:e5:41:b5:55:8a:ea:c0:cf:43:0a:3f:b5:c8:9e: bc:0a:a8:07:8a:2a:4b:94:39:13:e2:12:19:8a:23:c2:72:82: 8a:f9:28:87:b3:fc:94:3f:b9:f3:65:ca:8c:1a:1d:e2:56:47: ef:6f:d7:f1:c8:bd:2a:a5:c9:f6:a7:43:11:d7:8c:11:b8:6d: 5d:c2:9c:5a:00:b0:75:72:5a:b2:49:01:6d:03:c7:39:8c:0d: 76:10:50:63:cd:fe:c5:90:cb:f4:f7:e4:6c:a8:2a:92:cd:40: 4e:a1:4c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUwNjI4MTkxNjQ4WhcNMjUwNzA1MTkxNjQ4WjAYMRYwFAYD VQQDEw02ODYwM2ZhMS0zNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4UXzRbaXFlLMuKU79bl3GNyOgi5p12ho0/CvbPeqtxhDn20ayZ5Ln5BM6l6x ZvtahzSY8fhxZ0nhEJbMm5LzmAOedfftOxRxYSRBQ4FPiGmJJQyp3AZi1tDScnO0 XKMoOa4Hb7VeCyxxcWWxiwQSgtUaB+LN4YLIt3qB+OBSBJVlLs1HsMMB6c7OTwRp 8bedQy47gqvu/dXjmu4i1p1o9XZmqNARKisp8Oj4sHeSt86BOCNpJUwwN+IXYHA7 HJtgjS/6Pp/gusRWdktCArXjlP3b2o0vUUBozEbRtpIK05007dvPHpwTtf7ygsJf vQReMQ5DrqwYXSMhHYgQUEl2ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgxKRXr w/rHJuOhPhnLmsrtbplHMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJqjV1Kl4VvlZb8w7lpy2jWy+i6T0cm06FEl6pC/84keLGxd/hVBpP tkg1yaQxSlBOeMKVNEoPGOH+4TiyFRPz9r7FwMCXImANae+5xm8PDCTjBVC5E9uG wdVqaPECIUBirSU6b8t+GPT7HIeWIbmqIBUSQhV4O/pFke0sRPKc5DZAYBMufxfV yQutxEQ/9egmTnFc5UG1VYrqwM9DCj+1yJ68CqgHiipLlDkT4hIZiiPCcoKK+SiH s/yUP7nzZcqMGh3iVkfvb9fxyL0qpcn2p0MR14wRuG1dwpxaALB1clqySQFtA8c5 jA12EFBjzf7FkMv09+RsqCqSzUBOoUwn -----END CERTIFICATE-----Generated at Mon Jun 30 18:53:27 2025 by rpki-client