$ rpki-client -vvvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: 4nKhmxm7Gh60hs7vMnih7+cjKZRL/835EUM5sNMiJyM= Subject key identifier: 73:8F:24:C4:E3:5A:72:8E:E9:76:25:9C:04:1D:7C:C7:48:5A:46:31 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0D13 Signing time: Tue 20 Oct 2026 16:36:19 +0000 Manifest this update: Tue 20 Oct 2026 16:36:19 +0000 Manifest next update: Tue 27 Oct 2026 16:36:19 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: Q4n+yW61WL1NyQFlAjw6Dc87AMjyBObImy0d4jg8574=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: nphD5/zhxc+3ixvM+cDUfdvKIznpmzB6/A0Gs9H1cg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 16:36:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Oct 20 16:36:19 2026 GMT Not After : Oct 27 16:36:19 2026 GMT Subject: CN=6ad79883-2ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:19:a3:df:7c:48:67:89:35:b2:8e:65:b2: e1:3a:81:bd:35:e6:10:02:73:59:24:8e:f9:01:87: 56:74:44:8d:3c:b6:44:c0:bd:64:aa:09:7d:67:9a: 0b:70:d0:22:46:77:ab:d4:da:ce:07:5f:9a:15:e5: f9:99:22:43:aa:89:a3:bd:bf:d4:38:5f:62:b3:10: ee:39:07:92:1b:28:69:a9:23:ea:d6:83:76:17:29: e6:d8:8d:f9:15:52:67:56:e4:a8:df:9e:2f:09:26: 3a:71:0a:78:c0:c2:54:46:f8:1f:dc:16:84:4e:c2: b8:1f:01:08:a3:b4:ef:9f:5c:5e:55:8a:55:fd:99: 54:e0:59:7b:14:cb:90:ed:67:99:88:67:b4:9b:fd: af:ec:bf:27:07:75:18:ea:32:7e:42:54:ee:4e:87: 74:68:e3:2c:ea:98:52:5a:4f:04:55:87:6b:00:ad: 9d:83:52:5c:f7:8a:3b:34:80:c5:b8:71:c6:86:3e: 91:46:28:25:bc:38:c3:7e:69:7f:b5:bb:3b:32:62: 6b:5e:ad:aa:42:aa:3f:73:ef:ac:3b:d8:56:dc:c3: ff:67:36:6d:02:c4:9e:65:c7:9a:c1:18:8f:c0:83: 2d:88:7b:cf:95:7d:d2:b3:a5:94:64:f3:2f:27:9d: 50:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8F:24:C4:E3:5A:72:8E:E9:76:25:9C:04:1D:7C:C7:48:5A:46:31 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:04:82:87:dc:d3:09:69:a5:3c:3b:5d:1c:b6:1f:f0:c1:24: 0e:6d:96:84:2c:51:db:ae:6f:ce:1e:f5:59:76:58:5c:f6:37: c3:21:c6:3d:ab:23:eb:58:ba:8a:18:50:17:65:fc:19:28:73: c0:cd:a7:a5:17:b3:07:1d:38:0d:83:77:fb:54:7a:b7:d3:34: 02:ff:85:4f:5a:d5:64:00:85:6c:8d:62:29:36:47:3e:29:9a: 64:6e:8d:d4:ae:90:06:55:a6:e3:9f:13:0b:32:f8:ad:8a:3b: 0d:6c:3e:7e:f5:08:da:7b:0d:76:a2:c2:c3:7a:42:c5:a6:50: 34:9d:9c:c4:5a:74:68:f7:06:67:96:7b:8e:fa:52:ee:17:c2: 48:72:df:23:10:69:ef:9d:f9:c1:a4:d6:db:9c:b3:a7:16:39: 94:90:99:e4:52:79:d0:89:b4:ef:e2:a5:41:0e:9c:a5:3a:86: 56:05:f2:44:9d:66:04:65:a1:9a:8c:a0:6d:de:64:01:7c:57: c0:b2:33:7a:56:dc:0f:c4:9d:e0:f1:82:ed:35:ba:2b:5f:35: 65:27:06:7d:e0:bc:92:4e:78:22:ab:11:fc:04:aa:61:d4:a7: 86:c7:f6:6c:0d:c7:0d:f5:a1:4a:16:2b:29:8b:dd:6f:01:86: 28:82:4f:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjYxMDIwMTYzNjE5WhcNMjYxMDI3MTYzNjE5WjAYMRYwFAYD VQQDEw02YWQ3OTg4My0yYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjyEZo998SGeJNbKOZbLhOoG9NeYQAnNZJI75AYdWdESNPLZEwL1kqgl9Z5oL cNAiRner1NrOB1+aFeX5mSJDqomjvb/UOF9isxDuOQeSGyhpqSPq1oN2Fynm2I35 FVJnVuSo354vCSY6cQp4wMJURvgf3BaETsK4HwEIo7Tvn1xeVYpV/ZlU4Fl7FMuQ 7WeZiGe0m/2v7L8nB3UY6jJ+QlTuTod0aOMs6phSWk8EVYdrAK2dg1Jc94o7NIDF uHHGhj6RRiglvDjDfml/tbs7MmJrXq2qQqo/c++sO9hW3MP/ZzZtAsSeZceawRiP wIMtiHvPlX3Ss6WUZPMvJ51QWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOPJMTj WnKO6XYlnAQdfMdIWkYxMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbASCh9zTCWmlPDtdHLYf8MEkDm2WhCxR265vzh71WXZYXPY3wyHGPasj61i6 ihhQF2X8GShzwM2npRezBx04DYN3+1R6t9M0Av+FT1rVZACFbI1iKTZHPimaZG6N 1K6QBlWm458TCzL4rYo7DWw+fvUI2nsNdqLCw3pCxaZQNJ2cxFp0aPcGZ5Z7jvpS 7hfCSHLfIxBp7535waTW25yzpxY5lJCZ5FJ50Im07+KlQQ6cpTqGVgXyRJ1mBGWh moygbd5kAXxXwLIzelbcD8Sd4PGC7TW6K181ZScGfeC8kk54IqsR/ASqYdSnhsf2 bA3HDfWhShYrKYvdbwGGKIJPJg== -----END CERTIFICATE-----Generated at Wed Oct 21 14:42:13 2026 by rpki-client