$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: PR9oPeK4PJUhpJ7DhhGV2RQHfOraPhoXSaFpBluxd0Q= Subject key identifier: 11:EB:CC:EB:05:8A:09:A3:B2:12:39:3D:5A:1B:95:CF:DA:9F:A1:BC Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C23 Signing time: Fri 18 Jul 2025 16:48:15 +0000 Manifest this update: Fri 18 Jul 2025 16:48:15 +0000 Manifest next update: Fri 25 Jul 2025 16:48:15 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: tANRXvlaTG4GdrfJf9HlmVK8IO7h1B0aOmdEv1FpkcI=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Jul 18 16:48:15 2025 GMT Not After : Jul 25 16:48:15 2025 GMT Subject: CN=687a7acf-a0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:38:b7:3c:08:3b:b4:c8:18:2d:53:49:b1: 9c:38:68:f1:43:ee:ca:38:15:a2:2d:99:3d:77:6b: b0:1e:fa:79:37:fc:cc:97:4d:ae:31:b7:bf:f6:0a: 55:7d:a2:f3:95:07:fa:ee:19:e2:3c:82:a9:eb:ad: 3a:39:8d:f4:5a:87:59:08:9b:7e:57:aa:28:cd:a8: 08:93:e9:b8:7a:fc:65:cd:7c:ed:a5:ca:08:a4:29: 88:f0:45:18:b3:25:45:03:b5:c0:c6:af:b5:83:78: fd:61:f3:98:48:2c:0b:7b:86:dd:a6:e3:00:49:8c: b1:82:2c:b7:ed:f0:fb:e4:1c:29:24:1d:4e:10:57: 54:d4:02:3d:be:1e:a2:af:b4:87:1f:83:70:74:5c: cc:f1:de:63:7b:7c:40:dc:09:10:9b:07:d7:1c:ec: 24:36:69:ee:c8:ba:4a:13:c0:12:b5:30:e3:db:ad: 43:74:ff:5f:23:09:cd:9e:65:b3:0b:00:9d:05:d2: 51:74:58:0c:01:7a:a8:93:fc:93:6a:ed:63:00:d9: 0a:95:2b:d3:03:7d:fb:79:61:99:4f:f7:2f:c3:cf: f3:bd:75:6b:ac:a5:b1:f0:5e:44:34:09:b9:2b:3c: 73:03:70:d1:89:63:df:7e:f3:98:9b:f6:f3:c7:72: 9a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EB:CC:EB:05:8A:09:A3:B2:12:39:3D:5A:1B:95:CF:DA:9F:A1:BC X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cc:78:9c:54:fe:e0:29:87:e3:da:cb:f4:80:c3:80:ed:69: e7:b3:4c:2d:8f:1c:44:1d:68:d0:7e:3c:38:7f:a3:14:84:22: 69:ad:c0:ef:98:da:24:76:e0:4d:0e:a3:14:18:31:d5:e8:5e: c6:dc:b3:a4:f9:47:30:0e:22:6d:de:1c:47:78:92:0e:b3:6e: 83:2e:c8:62:a5:fc:1d:30:a3:7a:6a:dc:5b:20:23:24:90:d1: fb:ef:88:68:79:51:92:68:d2:22:e5:76:81:a5:a2:f1:46:94: 82:0a:a6:57:33:39:ac:91:36:25:2d:d0:26:3f:88:a2:cf:5a: df:24:a4:77:bd:77:c5:8b:5c:1d:7a:e1:e7:77:1e:35:04:1f: eb:5b:e4:63:98:38:6b:e8:4e:8a:1a:7d:a4:4e:76:18:de:e9: 4d:98:f6:48:e7:2f:66:62:ea:08:2c:b5:f0:7d:69:96:1f:e0: 60:88:ee:82:9f:85:78:3b:f3:64:79:e5:b8:58:bd:59:57:03: fa:4d:67:77:c2:5c:a2:b0:d0:41:74:9f:35:67:de:9d:0b:2f: 41:fa:8f:96:f9:c3:1a:f7:53:6e:03:d2:99:66:6e:a9:12:b1: a9:37:6c:00:2c:53:92:41:bb:a7:48:00:6c:a2:5b:24:b4:6a: eb:f6:37:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUwNzE4MTY0ODE1WhcNMjUwNzI1MTY0ODE1WjAYMRYwFAYD VQQDEw02ODdhN2FjZi1hMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6c4tzwIO7TIGC1TSbGcOGjxQ+7KOBWiLZk9d2uwHvp5N/zMl02uMbe/9gpV faLzlQf67hniPIKp6606OY30WodZCJt+V6oozagIk+m4evxlzXztpcoIpCmI8EUY syVFA7XAxq+1g3j9YfOYSCwLe4bdpuMASYyxgiy37fD75BwpJB1OEFdU1AI9vh6i r7SHH4NwdFzM8d5je3xA3AkQmwfXHOwkNmnuyLpKE8AStTDj261DdP9fIwnNnmWz CwCdBdJRdFgMAXqok/yTau1jANkKlSvTA337eWGZT/cvw8/zvXVrrKWx8F5ENAm5 KzxzA3DRiWPffvOYm/bzx3KaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBHrzOsF igmjshI5PVoblc/an6G8MB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAazHicVP7gKYfj2sv0gMOA7Wnns0wtjxxEHWjQfjw4f6MUhCJprcDv mNokduBNDqMUGDHV6F7G3LOk+UcwDiJt3hxHeJIOs26DLshipfwdMKN6atxbICMk kNH774hoeVGSaNIi5XaBpaLxRpSCCqZXMzmskTYlLdAmP4iiz1rfJKR3vXfFi1wd euHndx41BB/rW+RjmDhr6E6KGn2kTnYY3ulNmPZI5y9mYuoILLXwfWmWH+BgiO6C n4V4O/NkeeW4WL1ZVwP6TWd3wlyisNBBdJ81Z96dCy9B+o+W+cMa91NuA9KZZm6p ErGpN2wALFOSQbunSABsolsktGrr9jfQ -----END CERTIFICATE-----Generated at Sun Jul 20 15:05:24 2025 by rpki-client