$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: bijlr2FnkHS/UED/bZnAT59KLByehyB7xeZHPPjUZSM= Subject key identifier: 68:5C:B6:47:97:10:3E:04:E2:46:C9:18:F6:E7:B0:BA:8E:B2:C3:F2 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0B02 Signing time: Sat 18 Oct 2025 20:24:44 +0000 Manifest this update: Sat 18 Oct 2025 20:24:44 +0000 Manifest next update: Sat 25 Oct 2025 20:24:44 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: ti1qZZAvLF33avEwnD1erDpCPS3IKSGkeRXZqbCi3TE=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: y3b59N8xTAyBST+gKWzOT+m6SJf9WUMXCwyOq4G/KEM=) 5: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 6: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 10: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: Ri1dXeOFxDR/7l+L35yanQI8/jxsp+el2wPepBX2c9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Oct 18 20:24:44 2025 GMT Not After : Oct 25 20:24:44 2025 GMT Subject: CN=68f3f78c-2639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:1c:be:89:a5:a0:df:2e:ad:13:3e:2f:81: 42:cb:24:4e:3c:87:b9:7c:ca:f4:ce:fa:3c:ec:5b: 5f:99:64:dd:13:e6:f6:d0:af:50:5e:50:ea:c4:1f: 18:8d:93:0a:71:83:9e:62:09:48:53:a7:25:73:8a: f6:bb:30:c5:29:27:e1:55:f7:9e:9f:f6:b1:bf:f2: 48:f2:ee:14:89:5e:1e:bc:c2:b0:dd:cc:ad:50:46: f3:e0:d0:8e:d6:be:8a:12:b2:c1:99:c6:c3:c8:95: be:bb:d4:e7:9b:37:4f:59:06:4b:ca:9c:ce:d5:4c: d2:aa:cf:43:36:58:2b:8e:71:3f:55:67:bf:b3:96: 73:59:40:35:75:51:1a:0e:c4:c9:ad:67:78:f2:9d: b3:d4:cb:43:f8:e0:d7:37:d0:ff:1b:73:65:ad:5a: 92:d3:b1:75:91:2f:a4:b1:4e:61:4f:2e:5d:b5:8a: 70:3c:d1:72:ee:03:7b:8e:b5:cc:0e:e0:cc:10:fb: 90:c3:71:9f:0e:d5:e9:60:de:7c:e4:3a:4e:20:ee: cf:6c:58:61:f8:a9:25:24:d0:fb:3a:fd:04:5d:e4: ef:28:ef:33:c3:45:47:82:99:ee:fe:e1:30:4b:6b: 02:bc:34:2e:0e:35:af:dd:09:b3:88:31:ea:c2:6e: e8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5C:B6:47:97:10:3E:04:E2:46:C9:18:F6:E7:B0:BA:8E:B2:C3:F2 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:26:51:7b:5d:c2:05:fc:c7:4c:99:48:62:f8:60:83:c1:2f: 42:b2:4b:00:3b:36:e2:df:ef:10:e9:ba:1d:21:97:a7:2f:c1: 5c:be:e5:14:d0:2b:1b:36:2a:fb:7f:7e:0c:43:33:05:86:30: 62:3a:1b:44:3b:3a:91:8a:54:c6:c4:06:49:d0:ed:c1:e9:a4: d9:a1:3c:ed:15:df:8e:cd:09:bc:e3:17:ec:22:f7:d9:b2:5c: ce:e6:01:b9:cc:49:ba:10:85:ad:10:43:0c:0c:b7:78:24:27: 9d:69:da:69:9c:85:ac:07:9a:e2:19:2a:b9:64:20:af:be:03: 0d:04:39:d2:ed:c8:1b:79:dd:b7:be:33:ef:78:d6:a9:93:fb: 24:ee:89:dd:1a:df:86:a7:72:2f:26:a8:c2:90:31:d5:4e:84: 6b:25:08:bd:c8:6e:f9:1f:36:43:a8:a1:dd:25:d7:93:dc:ac: 22:66:46:9d:0d:d5:60:fd:0f:3a:fe:74:dd:28:73:7b:46:02: 41:4c:9f:48:f7:50:ff:f0:64:92:de:bc:9e:94:94:9b:65:bd: ed:71:69:42:4a:b6:0f:2b:37:5c:9e:2a:3b:f9:fa:0f:33:be: fb:7f:09:1a:58:86:8b:e5:82:bc:e8:26:7e:ef:1b:87:4c:9e: 2c:3c:29:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUxMDE4MjAyNDQ0WhcNMjUxMDI1MjAyNDQ0WjAYMRYwFAYD VQQDEw02OGYzZjc4Yy0yNjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymscvomloN8urRM+L4FCyyROPIe5fMr0zvo87FtfmWTdE+b20K9QXlDqxB8Y jZMKcYOeYglIU6clc4r2uzDFKSfhVfeen/axv/JI8u4UiV4evMKw3cytUEbz4NCO 1r6KErLBmcbDyJW+u9TnmzdPWQZLypzO1UzSqs9DNlgrjnE/VWe/s5ZzWUA1dVEa DsTJrWd48p2z1MtD+ODXN9D/G3NlrVqS07F1kS+ksU5hTy5dtYpwPNFy7gN7jrXM DuDMEPuQw3GfDtXpYN585DpOIO7PbFhh+KklJND7Ov0EXeTvKO8zw0VHgpnu/uEw S2sCvDQuDjWv3QmziDHqwm7ozwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhctkeX ED4E4kbJGPbnsLqOssPyMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzJlF7XcIF/MdMmUhi+GCDwS9CsksAOzbi3+8Q6bodIZenL8FcvuUU 0CsbNir7f34MQzMFhjBiOhtEOzqRilTGxAZJ0O3B6aTZoTztFd+OzQm84xfsIvfZ slzO5gG5zEm6EIWtEEMMDLd4JCedadppnIWsB5riGSq5ZCCvvgMNBDnS7cgbed23 vjPveNapk/sk7ondGt+Gp3IvJqjCkDHVToRrJQi9yG75HzZDqKHdJdeT3KwiZkad DdVg/Q86/nTdKHN7RgJBTJ9I91D/8GSS3ryelJSbZb3tcWlCSrYPKzdcnio7+foP M777fwkaWIaL5YK86CZ+7xuHTJ4sPCmo -----END CERTIFICATE-----Generated at Mon Oct 20 04:11:14 2025 by rpki-client