$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: tAoS3ZtypqgmbZ5hq7e+NgHT+7hYZdU4DLdzfapeP0A= Subject key identifier: 63:38:0D:98:0A:B6:61:3A:81:0E:24:99:C9:A7:73:D9:C2:AE:DF:51 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0AF0 Signing time: Fri 12 Sep 2025 19:36:28 +0000 Manifest this update: Fri 12 Sep 2025 19:36:27 +0000 Manifest next update: Fri 19 Sep 2025 19:36:27 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: DzpQJVn5LondZA0eSEOx1+gIu1dBRuG6JIqIXtRvHDI=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: y3b59N8xTAyBST+gKWzOT+m6SJf9WUMXCwyOq4G/KEM=) 5: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 6: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 10: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: Ri1dXeOFxDR/7l+L35yanQI8/jxsp+el2wPepBX2c9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 22:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Sep 12 19:36:27 2025 GMT Not After : Sep 19 19:36:27 2025 GMT Subject: CN=68c4763c-c9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:19:88:17:ed:44:6f:77:12:14:00:77:ca: 1e:6b:7f:0e:9f:e3:3d:38:a5:9f:3c:ae:1e:79:5c: ab:3b:2f:0e:67:c8:54:58:41:3e:7b:90:fd:31:cf: 6a:90:cd:53:62:01:20:19:97:25:2f:32:28:8e:e8: db:a8:0b:ad:66:9b:31:e8:62:86:d9:33:96:d4:14: 0f:23:cc:13:94:fc:9e:d2:06:49:96:37:25:83:33: a7:15:d2:0f:6c:62:6b:16:a9:8f:16:cb:c8:6c:40: 8e:9a:d5:8f:69:f0:8b:7a:86:a6:3e:e0:f3:f8:b5: 4f:60:36:64:f6:61:45:4a:1f:10:12:31:49:47:13: 42:d4:cc:fa:09:91:cf:e1:60:e3:b9:40:ea:7a:16: f9:ed:59:cf:e3:13:94:27:0b:3e:b4:88:46:b5:8b: cb:bb:64:78:dc:15:df:03:55:69:d6:a9:6c:1f:d0: 80:d5:1f:bb:5c:4b:30:86:bd:9a:78:da:b0:35:48: f6:78:bb:0d:82:88:67:93:24:f5:2b:e3:3e:55:72: 8f:05:d9:7b:80:23:41:ca:7b:3e:c4:d1:8c:67:3d: 66:bd:f3:96:01:92:fa:04:24:2b:07:07:9f:93:4b: 74:fc:f1:cf:49:6d:58:7c:e2:19:de:65:73:bf:5e: 6c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:38:0D:98:0A:B6:61:3A:81:0E:24:99:C9:A7:73:D9:C2:AE:DF:51 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4c:91:4b:6e:39:45:88:4f:07:b9:10:d9:f0:25:a5:0f:76: ec:e6:65:f6:53:60:71:bc:ad:11:6e:96:c5:0f:1a:25:64:67: b1:b1:16:27:1b:35:ec:fa:68:ad:51:e0:1b:6e:73:ce:93:21: 30:05:a2:49:a3:37:b8:f7:a6:f3:79:26:e6:62:f8:f5:53:86: 36:77:8e:ee:ba:2f:fc:8f:e3:e6:7c:ad:1b:2c:84:81:d2:8b: 30:15:ac:cf:e4:ab:44:56:8d:27:78:87:e9:08:48:8b:06:1b: 65:a2:9b:aa:d1:29:3e:36:b4:c6:a1:53:b2:47:4f:53:c2:cb: 9b:33:fc:ba:8d:74:23:a5:e9:03:97:eb:00:91:c3:b5:88:a3: 45:7f:64:91:de:e2:a6:fa:d7:f2:32:56:ba:54:68:c7:3c:1f: 0a:f5:96:7c:18:a0:ed:27:7c:46:54:2d:27:4d:64:a1:63:84: 61:31:9e:27:01:70:55:3c:ea:11:a3:fa:f1:5e:37:21:30:6e: a9:aa:a5:8e:d3:c8:d0:2c:e6:34:02:61:a2:8f:a7:1f:87:f4: 1b:98:ba:35:f6:fa:ce:44:57:85:fe:54:67:3b:db:77:82:c6: c3:19:73:f2:9a:c6:98:a9:d7:a7:38:00:20:06:59:88:0f:e9: 99:53:fd:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUwOTEyMTkzNjI3WhcNMjUwOTE5MTkzNjI3WjAYMRYwFAYD VQQDEw02OGM0NzYzYy1jOWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0skZiBftRG93EhQAd8oea38On+M9OKWfPK4eeVyrOy8OZ8hUWEE+e5D9Mc9q kM1TYgEgGZclLzIojujbqAutZpsx6GKG2TOW1BQPI8wTlPye0gZJljclgzOnFdIP bGJrFqmPFsvIbECOmtWPafCLeoamPuDz+LVPYDZk9mFFSh8QEjFJRxNC1Mz6CZHP 4WDjuUDqehb57VnP4xOUJws+tIhGtYvLu2R43BXfA1Vp1qlsH9CA1R+7XEswhr2a eNqwNUj2eLsNgohnkyT1K+M+VXKPBdl7gCNByns+xNGMZz1mvfOWAZL6BCQrBwef k0t0/PHPSW1YfOIZ3mVzv15sowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM4DZgK tmE6gQ4kmcmnc9nCrt9RMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvTJFLbjlFiE8HuRDZ8CWlD3bs5mX2U2BxvK0RbpbFDxolZGexsRYn GzXs+mitUeAbbnPOkyEwBaJJoze496bzeSbmYvj1U4Y2d47uui/8j+PmfK0bLISB 0oswFazP5KtEVo0neIfpCEiLBhtlopuq0Sk+NrTGoVOyR09TwsubM/y6jXQjpekD l+sAkcO1iKNFf2SR3uKm+tfyMla6VGjHPB8K9ZZ8GKDtJ3xGVC0nTWShY4RhMZ4n AXBVPOoRo/rxXjchMG6pqqWO08jQLOY0AmGij6cfh/QbmLo19vrORFeF/lRnO9t3 gsbDGXPymsaYqdenOAAgBlmID+mZU/1M -----END CERTIFICATE-----Generated at Sun Sep 14 15:26:57 2025 by rpki-client