$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: tcDoKjWRb2oR/JvhR2enCtEPSy475UdF1fSD25P666I= Subject key identifier: C7:3C:07:51:8E:52:0A:E6:60:E9:91:16:17:C6:91:74:AA:26:59:84 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0AD1 Signing time: Sun 20 Jul 2025 19:39:45 +0000 Manifest this update: Sun 20 Jul 2025 19:39:44 +0000 Manifest next update: Sun 27 Jul 2025 19:39:44 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: 4zMJ5bqZKWQQIOiGF6Az9lFySuVYZgxNSMQKyg2QXAw=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 5: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 7: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: Ri1dXeOFxDR/7l+L35yanQI8/jxsp+el2wPepBX2c9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:39:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Jul 20 19:39:44 2025 GMT Not After : Jul 27 19:39:44 2025 GMT Subject: CN=687d4600-6878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a7:d3:70:e6:7f:13:09:ce:99:04:f8:3c:77: 62:55:e3:53:c8:3f:6b:59:ed:c6:0d:f3:36:8e:a2: 42:d7:c5:c6:72:43:64:de:75:3b:f5:be:c1:34:42: 79:3b:45:b3:35:ca:23:71:fc:69:6d:8d:23:2f:01: 8c:31:ba:16:be:30:59:6b:2f:ab:31:fa:21:76:16: 55:4f:ac:f0:9b:4a:ef:2f:6c:7c:e8:c1:1d:42:bf: 10:3d:f0:a0:53:72:44:96:fd:99:6a:25:5e:12:94: 1b:99:05:02:cc:ed:37:9d:50:f1:9e:36:52:60:23: 60:7a:4d:15:c9:9a:d9:1c:df:f0:d7:8a:83:1d:50: 67:ad:ec:26:ef:2f:89:a0:b8:8e:bc:05:3e:80:a3: 01:2f:85:1c:4d:10:bc:c6:a4:0a:01:c9:fe:5b:20: 2e:7d:9d:27:78:ec:46:e5:f0:ae:99:3a:f0:61:c6: c6:c6:67:ef:52:d7:a5:7a:70:ad:91:f7:5e:2f:9e: 0c:3b:04:96:c1:bf:50:0f:c2:b8:8b:20:60:c3:de: 26:f4:52:38:ba:f2:e8:c8:bf:ec:a5:a5:67:4c:e0: 0a:4b:2c:fb:9a:d7:fd:10:08:b8:bd:15:8a:96:a4: a7:79:17:e1:f7:09:8c:74:90:45:d8:af:0c:a2:21: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3C:07:51:8E:52:0A:E6:60:E9:91:16:17:C6:91:74:AA:26:59:84 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:cf:8e:84:14:75:63:e4:be:37:9c:5b:2a:52:4e:b4:81:9c: b3:c5:b2:62:10:2e:f7:b2:86:fa:d4:aa:f1:b7:b6:e6:55:1c: 63:44:a6:48:0e:be:59:4f:2e:67:1f:5f:d3:98:6a:df:c9:63: c7:f9:cf:cf:2e:0c:e7:24:3a:ab:a1:7c:21:3b:6e:2c:81:20: a6:b0:b8:81:c9:78:95:a8:c1:09:29:7b:97:fc:8d:d9:b7:3c: 38:43:75:b0:c9:9e:13:2b:09:e6:2d:38:4d:31:6a:19:27:bb: de:aa:85:b7:69:3e:75:23:02:20:5d:46:5b:86:eb:94:fc:1e: 8c:2b:6f:42:2c:ec:6d:b3:59:df:3d:3b:70:f6:d6:91:ff:1e: e8:90:d4:9a:9c:ae:9a:83:b5:2d:0f:1f:af:65:61:cd:0a:3f: 70:d3:e5:18:a9:06:25:01:40:09:8a:ba:4b:2c:cf:a6:74:9d: 0d:62:c9:a0:65:5a:1e:07:3e:c2:30:03:2e:3e:cd:dc:5a:e6: 2a:5c:69:78:a8:ac:c0:a6:61:b2:93:41:46:0a:86:82:34:c4: c5:6e:b9:a7:34:b0:5b:1b:ad:82:3b:70:b6:da:cc:3d:68:d5: 2a:d1:b7:84:f1:2f:e4:09:9b:40:94:c6:a7:00:33:1d:b7:c3: ba:3a:ba:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUwNzIwMTkzOTQ0WhcNMjUwNzI3MTkzOTQ0WjAYMRYwFAYD VQQDEw02ODdkNDYwMC02ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyafTcOZ/EwnOmQT4PHdiVeNTyD9rWe3GDfM2jqJC18XGckNk3nU79b7BNEJ5 O0WzNcojcfxpbY0jLwGMMboWvjBZay+rMfohdhZVT6zwm0rvL2x86MEdQr8QPfCg U3JElv2ZaiVeEpQbmQUCzO03nVDxnjZSYCNgek0VyZrZHN/w14qDHVBnrewm7y+J oLiOvAU+gKMBL4UcTRC8xqQKAcn+WyAufZ0neOxG5fCumTrwYcbGxmfvUtelenCt kfdeL54MOwSWwb9QD8K4iyBgw94m9FI4uvLoyL/spaVnTOAKSyz7mtf9EAi4vRWK lqSneRfh9wmMdJBF2K8MoiF8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMc8B1GO UgrmYOmRFhfGkXSqJlmEMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWz46EFHVj5L43nFsqUk60gZyzxbJiEC73sob61Krxt7bmVRxjRKZI Dr5ZTy5nH1/TmGrfyWPH+c/PLgznJDqroXwhO24sgSCmsLiByXiVqMEJKXuX/I3Z tzw4Q3WwyZ4TKwnmLThNMWoZJ7veqoW3aT51IwIgXUZbhuuU/B6MK29CLOxts1nf PTtw9taR/x7okNSanK6ag7UtDx+vZWHNCj9w0+UYqQYlAUAJirpLLM+mdJ0NYsmg ZVoeBz7CMAMuPs3cWuYqXGl4qKzApmGyk0FGCoaCNMTFbrmnNLBbG62CO3C22sw9 aNUq0beE8S/kCZtAlManADMdt8O6OrrS -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:12 2025 by rpki-client