$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: efpdm+pf931lszvu3Rkm+26IL4lhVnITBPW9MV+ruQE= Subject key identifier: F2:D6:11:7A:0F:F9:6D:21:07:C4:76:76:8F:FC:45:F9:31:64:85:A7 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0B0D Signing time: Sun 02 Nov 2025 19:25:17 +0000 Manifest this update: Sun 02 Nov 2025 19:25:16 +0000 Manifest next update: Sun 09 Nov 2025 19:25:16 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: AEi0umh3R5/LoCeBc/722Lr4ssEHvQ1aWot21z9oz6g=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: WeaTbMf7BP2O/+pSf493EUl2h+/ILCKWUynSWVLQ+8w=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 5Zn/NXgpFmO6vwefOP5YQZGHnsLFk/qGC1rRCPIC8NI=) 4: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: 5eFto7Xbd6SIdBIgHT1gzsw1kP93cMF3mG+IAAtdNqA=) 5: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: +GeY+3nzfxfGGtkbBKDt2xX2WXjnwHUxE0t1JDRZXWg=) 6: 121EADE62F7011EF82514126C4F9AE02.roa (hash: Ggk4L4L5OqKbvJnFw7W1rW5JJcN5Zt+SHJCIjJMSok0=) 7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 6RbxNEp3aAcRY9ABgjcNbqmStmri8VA4rw2gNzJyQ34=) 8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=) 9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: day2QfsK2GhqNsQUlv32u5aYAMW/wnELuNVvZR1uSgU=) 10: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: DeDkGdsN3N2xX3gJk6DxRPzTQe+BgFZ1qo1jOWYyHBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:25:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Nov 2 19:25:16 2025 GMT Not After : Nov 9 19:25:16 2025 GMT Subject: CN=6907b01d-ffe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:49:19:89:6a:86:81:4d:85:88:4b:ee:8d: 2d:74:e9:f1:38:30:32:d7:10:16:64:b6:56:29:37: 52:7b:20:34:6c:8a:d9:81:50:fa:44:d2:66:81:a3: 3f:9e:d5:1f:35:1e:ae:c0:8b:d1:95:77:04:60:f8: b3:2b:62:b0:13:bb:80:0f:6f:d8:56:68:cb:53:0b: fe:9d:33:bb:6e:75:a6:c6:c6:8b:c1:94:b3:44:4f: 77:f8:06:ee:35:97:b9:61:9d:0e:61:21:c6:3b:9a: d1:54:ac:6a:b7:7a:59:21:26:8e:61:53:19:d3:e8: 52:e9:87:2a:09:2b:30:de:d3:3a:76:da:61:5b:eb: 46:5c:87:c7:a1:6b:98:31:e0:68:f9:02:48:3e:71: b7:7b:16:ba:22:04:ec:6a:51:7a:fb:a0:ec:07:b6: 4a:5e:1b:ae:c8:85:c8:95:69:0f:73:8c:ac:85:08: c7:2e:e8:50:03:32:dc:c6:e4:96:4c:39:15:9e:8f: c6:02:25:fb:03:e3:e7:b0:34:f6:2b:99:16:41:5d: 1a:77:95:8c:8c:b4:ef:26:95:eb:46:9a:9a:ff:6f: 57:49:46:bd:ce:10:69:37:90:51:45:49:67:4f:0a: c7:5d:24:1f:ee:7c:06:fd:63:9c:7c:c1:6c:62:e3: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D6:11:7A:0F:F9:6D:21:07:C4:76:76:8F:FC:45:F9:31:64:85:A7 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:23:52:e0:08:29:31:ce:38:cd:c8:d1:55:a5:62:d6:02:33: 38:c6:2d:79:b4:4d:3e:5f:41:bf:72:1a:59:f8:a4:85:c6:e7: 64:cc:22:9a:dc:87:a6:3c:39:a6:62:3d:56:26:6d:f7:25:d8: 9d:55:fd:54:67:18:e6:c2:e3:23:1d:c8:9b:b6:2a:70:7c:f5: a0:60:81:4c:9d:16:04:e5:50:79:5c:dd:e6:c5:f2:88:b5:e1: 6d:31:6e:1a:b8:db:71:d5:87:54:9a:ea:86:ca:11:da:8c:1e: 5f:dc:51:bf:d2:db:5d:dd:5a:3c:83:75:2b:c0:54:e4:0d:e5: 2a:f7:0c:6e:e6:25:46:0f:3f:f3:e3:20:01:3b:1f:b6:db:67: 17:74:ed:a0:65:a0:4c:f2:a1:58:da:e8:f8:1c:e0:ad:c3:ee: b7:cf:34:6b:b0:c3:43:15:d1:3b:fd:26:e9:9b:76:b9:89:df: da:05:f4:fe:7d:b4:19:b7:61:59:24:22:e7:d4:7c:5f:f2:a3: a2:fc:46:9a:6d:d3:d7:77:56:94:65:b2:9e:d1:88:db:bd:29: 9f:9f:81:5a:b5:96:c2:4e:ee:ed:4e:e8:51:8d:ad:61:03:9b: 77:f8:c5:b8:9d:1d:23:e2:1a:5d:6d:dc:02:3e:71:c0:67:7a: c6:6c:6f:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUxMTAyMTkyNTE2WhcNMjUxMTA5MTkyNTE2WjAYMRYwFAYD VQQDEw02OTA3YjAxZC1mZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuD9JGYlqhoFNhYhL7o0tdOnxODAy1xAWZLZWKTdSeyA0bIrZgVD6RNJmgaM/ ntUfNR6uwIvRlXcEYPizK2KwE7uAD2/YVmjLUwv+nTO7bnWmxsaLwZSzRE93+Abu NZe5YZ0OYSHGO5rRVKxqt3pZISaOYVMZ0+hS6YcqCSsw3tM6dtphW+tGXIfHoWuY MeBo+QJIPnG3exa6IgTsalF6+6DsB7ZKXhuuyIXIlWkPc4yshQjHLuhQAzLcxuSW TDkVno/GAiX7A+PnsDT2K5kWQV0ad5WMjLTvJpXrRpqa/29XSUa9zhBpN5BRRUln TwrHXSQf7nwG/WOcfMFsYuPlpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLWEXoP +W0hB8R2do/8RfkxZIWnMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6I1LgCCkxzjjNyNFVpWLWAjM4xi15tE0+X0G/chpZ+KSFxudkzCKa 3IemPDmmYj1WJm33JdidVf1UZxjmwuMjHcibtipwfPWgYIFMnRYE5VB5XN3mxfKI teFtMW4auNtx1YdUmuqGyhHajB5f3FG/0ttd3Vo8g3UrwFTkDeUq9wxu5iVGDz/z 4yABOx+222cXdO2gZaBM8qFY2uj4HOCtw+63zzRrsMNDFdE7/Sbpm3a5id/aBfT+ fbQZt2FZJCLn1Hxf8qOi/EaabdPXd1aUZbKe0YjbvSmfn4FatZbCTu7tTuhRja1h A5t3+MW4nR0j4hpdbdwCPnHAZ3rGbG86 -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:51 2025 by rpki-client