$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft File: BRnee0hmA7e6W2bauYkgP98ttJQ.mft (raw, json) Hash identifier: GJ9dIFLx4ssxb8PkoyYUqIgpZbn01ftDW3z6L0OO65o= Subject key identifier: 8B:22:B1:87:48:E2:D4:DC:74:A8:A4:B5:5C:8C:7A:DF:14:33:0B:80 Authority key identifier: 05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 Certificate issuer: /CN=A91912DD/serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Certificate serial: 0C44 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft Manifest number: 0C3D Signing time: Sat 06 Sep 2025 16:45:18 +0000 Manifest this update: Sat 06 Sep 2025 16:45:18 +0000 Manifest next update: Sat 13 Sep 2025 16:45:18 +0000 Files and hashes: 1: BRnee0hmA7e6W2bauYkgP98ttJQ.crl (hash: imCMn8/xwtJEX5vHMU/uMLdOqQi3nB3GTXEQbgQ/YKM=) 2: 05BE20062C5811EAA90F4B0EC4F9AE02.roa (hash: KZLdlP1OQSAqnUANoQynhHKfuaNstAKbyzLi1TUSbtw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3140 (0xc44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=0519DE7B486603B7BA5B66DAB989203FDF2DB494 Validity Not Before: Sep 6 16:45:18 2025 GMT Not After : Sep 13 16:45:18 2025 GMT Subject: CN=68bc651e-9a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:6b:3d:17:f6:ba:b0:11:8a:f0:22:b2:fa: b0:81:c2:fa:97:c4:d2:1d:c2:af:2e:32:fe:39:5f: 67:c9:c4:1b:df:ff:87:bd:6a:9b:d6:9c:cb:ab:a7: 73:58:b5:57:ae:29:51:0e:c8:bb:e9:78:5d:dd:55: ef:f8:59:c5:62:42:be:d0:ae:24:76:93:93:e8:db: 06:c1:d7:72:7d:73:16:cc:bc:9e:f4:8d:5d:1c:d9: 2f:cb:54:f7:78:4a:f6:31:e8:40:ea:b4:6c:d7:62: 4a:39:69:b0:6d:c5:f3:31:3e:21:52:c5:f2:3a:21: 0c:7f:68:41:29:2f:12:46:ec:73:6a:76:42:d4:e0: c4:b5:d2:69:4b:52:6c:35:ae:ac:67:21:1b:52:b5: 6a:98:78:8b:dc:ed:45:f3:85:2e:b1:1c:a3:99:73: 20:38:9c:9c:4c:56:be:44:c9:de:69:f5:79:ab:bc: 49:45:7e:dc:86:9b:cb:b3:92:e4:14:07:23:55:d9: 8e:01:ae:97:53:d7:9b:94:17:2a:38:37:c0:23:2c: f9:c0:dc:4d:2b:74:00:44:c8:9e:fc:f0:db:0a:f4: e6:95:1b:63:21:d8:ac:5a:e4:cc:7e:bb:de:dc:93: 42:d3:bc:a5:95:7c:1c:3d:38:3d:b0:2d:34:af:28: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:22:B1:87:48:E2:D4:DC:74:A8:A4:B5:5C:8C:7A:DF:14:33:0B:80 X509v3 Authority Key Identifier: keyid:05:19:DE:7B:48:66:03:B7:BA:5B:66:DA:B9:89:20:3F:DF:2D:B4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BRnee0hmA7e6W2bauYkgP98ttJQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/DB4A6CFC10D311EA9BD1A55DC4F9AE02/BRnee0hmA7e6W2bauYkgP98ttJQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d6:a6:8b:18:1a:ca:e8:79:d2:b2:30:b9:77:6e:9f:a5:1a: 73:50:ce:19:c9:e2:49:b2:41:72:0c:6c:be:30:2a:3c:c6:ad: 94:4d:78:6d:06:e3:5c:5e:c7:c6:93:f7:8f:94:7d:0b:b3:66: 0e:f3:b0:6a:8e:7f:b4:1c:37:a7:f2:bc:1c:eb:7b:a7:97:df: f6:42:f4:32:64:64:8e:11:c7:02:9d:c2:cb:78:62:ef:67:d8: 4d:80:6f:29:06:db:58:8e:e6:f8:1e:9d:df:6a:c5:c5:0d:d3: 0d:0e:41:3b:86:d6:3c:f6:2d:61:b3:21:e5:52:9e:63:1a:10: a9:aa:65:f2:e3:a8:42:8a:0e:9c:6a:3a:25:5b:76:28:68:c2: 07:06:e9:7e:c1:38:09:60:14:a9:9f:d9:52:7b:1b:f1:4e:c2: 0e:02:22:62:5f:c4:0d:cf:b2:06:26:0e:03:b5:43:99:10:24: 67:ee:89:d4:f6:a8:0c:3f:e9:f5:8e:08:68:a4:77:a6:c9:0b: 30:b2:7f:4a:5b:28:00:8d:4a:e6:eb:88:fb:c5:73:c9:e0:8a: 99:53:35:4b:ee:27:59:0b:b5:3a:6e:4f:90:df:dd:3c:b4:37: a4:22:0a:42:4c:d0:5e:14:5f:56:b0:0f:d1:f4:6d:01:3e:e8: a0:25:87:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKDA1MTlERTdCNDg2NjAzQjdCQTVCNjZEQUI5ODkyMDNG REYyREI0OTQwHhcNMjUwOTA2MTY0NTE4WhcNMjUwOTEzMTY0NTE4WjAYMRYwFAYD VQQDEw02OGJjNjUxZS05YTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXVrPRf2urARivAisvqwgcL6l8TSHcKvLjL+OV9nycQb3/+HvWqb1pzLq6dz WLVXrilRDsi76Xhd3VXv+FnFYkK+0K4kdpOT6NsGwddyfXMWzLye9I1dHNkvy1T3 eEr2MehA6rRs12JKOWmwbcXzMT4hUsXyOiEMf2hBKS8SRuxzanZC1ODEtdJpS1Js Na6sZyEbUrVqmHiL3O1F84UusRyjmXMgOJycTFa+RMneafV5q7xJRX7chpvLs5Lk FAcjVdmOAa6XU9eblBcqODfAIyz5wNxNK3QARMie/PDbCvTmlRtjIdisWuTMfrve 3JNC07yllXwcPTg9sC00ryilqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsisYdI 4tTcdKiktVyMet8UMwuAMB8GA1UdIwQYMBaAFAUZ3ntIZgO3ultm2rmJID/fLbSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC9EQjRBNkNGQzEw RDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3ZTZXMmJhdVlrZ1A5OHR0 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JSbmVlMGhtQTdlNlcyYmF1WWtnUDk4dHRKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC9EQjRBNkNGQzEwRDMxMUVBOUJEMUE1NURDNEY5QUUwMi9CUm5lZTBobUE3 ZTZXMmJhdVlrZ1A5OHR0SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd1qaLGBrK6HnSsjC5d26fpRpzUM4ZyeJJskFyDGy+MCo8xq2UTXht BuNcXsfGk/ePlH0Ls2YO87Bqjn+0HDen8rwc63unl9/2QvQyZGSOEccCncLLeGLv Z9hNgG8pBttYjub4Hp3fasXFDdMNDkE7htY89i1hsyHlUp5jGhCpqmXy46hCig6c ajolW3YoaMIHBul+wTgJYBSpn9lSexvxTsIOAiJiX8QNz7IGJg4DtUOZECRn7onU 9qgMP+n1jghopHemyQswsn9KWygAjUrm64j7xXPJ4IqZUzVL7idZC7U6bk+Q3908 tDekIgpCTNBeFF9WsA/R9G0BPuigJYdd -----END CERTIFICATE-----Generated at Sun Sep 7 23:29:23 2025 by rpki-client