$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft File: BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json) Hash identifier: ynmbF/9JsWbJlTJSX2wfVOOyMXn4NfdqFOm9nIUZLuA= Subject key identifier: 63:F9:24:64:EF:F7:E8:1F:F5:E8:E0:D5:3B:A6:4F:77:7D:15:B8:05 Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 Certificate issuer: /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft Manifest number: 058A Signing time: Tue 04 Nov 2025 23:19:17 +0000 Manifest this update: Tue 04 Nov 2025 23:19:17 +0000 Manifest next update: Tue 11 Nov 2025 23:19:17 +0000 Files and hashes: 1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: 7YuLgY9topXW3pbMq76BXXPFAFaf/W/GQRhltUJjEJ0=) 2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: RsPiskI8J+DOmAgpml1CI6H0pcvIuyGnV1tRhCzeJAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158015, serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Validity Not Before: Nov 4 23:19:17 2025 GMT Not After : Nov 11 23:19:17 2025 GMT Subject: CN=690a89f5-6387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:6c:15:42:78:68:c7:16:3a:57:87:c8:04: 1f:14:41:aa:2a:d1:a3:74:7c:0e:a7:39:d3:58:cf: ee:96:b9:86:ac:c3:54:cc:61:c8:7b:98:7e:80:8d: a6:a9:7f:5b:0f:c2:38:8f:0c:10:84:e8:b8:fa:82: 4b:22:f8:82:6d:29:d6:0d:3d:fe:c8:cd:3d:72:c4: 9e:b4:21:d9:ba:27:fd:b9:2a:7a:b8:0f:61:6f:78: a1:33:ce:70:ea:4d:9c:77:a1:91:27:dc:24:ef:ff: 47:f8:bc:04:65:2f:7f:c8:95:33:fd:b6:d4:0f:64: 45:cc:28:c2:22:ec:5a:16:49:7e:8f:40:ae:55:14: ad:81:93:4c:c5:b7:cb:03:a3:0a:b8:46:a5:8f:79: 02:e7:57:69:c9:a5:73:d3:77:32:bd:70:e9:bd:67: 89:58:97:48:e4:ea:cf:9b:4d:9e:d7:2a:03:a2:80: 12:52:49:b5:9a:6c:57:68:34:2e:91:ea:8c:31:93: 2d:8b:41:c7:f6:26:8d:66:b5:d2:a4:08:2f:41:7f: 0c:f7:97:ba:da:e6:2c:22:5f:70:6c:d4:0f:79:28: 8b:fb:09:e3:2b:fb:58:1d:36:4d:25:19:aa:a8:92: ba:44:e8:65:e9:37:76:5a:52:e1:05:12:46:19:94: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F9:24:64:EF:F7:E8:1F:F5:E8:E0:D5:3B:A6:4F:77:7D:15:B8:05 X509v3 Authority Key Identifier: keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:d8:6c:00:5e:e4:67:7a:13:fb:34:31:ad:9c:f6:78:04:13: 07:dc:4c:b7:b8:23:bc:a3:3a:3c:87:e1:86:a0:08:dd:e7:78: 44:a6:5b:fa:7d:76:c3:26:ee:99:0b:6c:47:18:81:10:c4:66: cd:21:a7:5b:ce:59:17:3e:6f:ef:3c:6c:06:ff:3a:0e:3d:d2: 0b:fc:2e:b6:e3:11:c6:36:13:2f:ea:99:24:e1:a4:d5:59:cd: 37:23:01:f0:42:e2:d4:67:7b:3c:cc:43:64:55:78:31:cb:a1: 0e:e4:f8:d5:41:fa:73:22:08:9f:6b:cb:7c:10:d8:24:e5:a5: 8a:30:10:7b:d8:5c:5f:a7:d8:1f:4e:69:68:57:d0:1b:eb:4b: 4d:49:4f:0c:0d:f4:60:d1:bb:c6:91:89:20:49:60:05:c0:d1: 58:d3:05:68:54:c2:11:24:66:4a:f6:1f:28:e3:46:87:48:57: 66:3b:42:0b:a7:89:3a:59:9b:02:af:fe:75:c4:9d:a9:f8:f3: c8:01:94:f5:3a:1c:16:41:ee:dc:6a:10:16:7a:24:47:c5:23: a1:50:8d:2e:ad:7e:98:41:8f:18:5c:1c:39:f3:8e:cd:01:46: 99:99:68:f1:01:27:a9:ee:d8:0c:6c:0c:3f:b7:6b:a3:f5:10: 12:cf:66:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJBRkJDRUIzQjRD RDIzNURDNDgwHhcNMjUxMTA0MjMxOTE3WhcNMjUxMTExMjMxOTE3WjAYMRYwFAYD VQQDEw02OTBhODlmNS02Mzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCpsFUJ4aMcWOleHyAQfFEGqKtGjdHwOpznTWM/ulrmGrMNUzGHIe5h+gI2m qX9bD8I4jwwQhOi4+oJLIviCbSnWDT3+yM09csSetCHZuif9uSp6uA9hb3ihM85w 6k2cd6GRJ9wk7/9H+LwEZS9/yJUz/bbUD2RFzCjCIuxaFkl+j0CuVRStgZNMxbfL A6MKuEalj3kC51dpyaVz03cyvXDpvWeJWJdI5OrPm02e1yoDooASUkm1mmxXaDQu keqMMZMti0HH9iaNZrXSpAgvQX8M95e62uYsIl9wbNQPeSiL+wnjK/tYHTZNJRmq qJK6ROhl6Td2WlLhBRJGGZS7FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP5JGTv 9+gf9ejg1TumT3d9FbgFMB8GA1UdIwQYMBaAFAa7EaMoTeHuzib7r7zrO0zSNdxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAxNS9GNkRBMEYxQ0Y5 MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRlN09KdnV2dk9zN1ROSTEz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Jyc1JveWhONGU3T0p2dXZ2T3M3VE5JMTNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAxNS9GNkRBMEYxQ0Y5MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRl N09KdnV2dk9zN1ROSTEzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDW2GwAXuRnehP7NDGtnPZ4BBMH3Ey3uCO8ozo8h+GGoAjd53hEplv6 fXbDJu6ZC2xHGIEQxGbNIadbzlkXPm/vPGwG/zoOPdIL/C624xHGNhMv6pkk4aTV Wc03IwHwQuLUZ3s8zENkVXgxy6EO5PjVQfpzIgifa8t8ENgk5aWKMBB72Fxfp9gf TmloV9Ab60tNSU8MDfRg0bvGkYkgSWAFwNFY0wVoVMIRJGZK9h8o40aHSFdmO0IL p4k6WZsCr/51xJ2p+PPIAZT1OhwWQe7cahAWeiRHxSOhUI0urX6YQY8YXBw5847N AUaZmWjxASep7tgMbAw/t2uj9RASz2bJ -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:25 2025 by rpki-client