$ rpki-client -vvf rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft File: BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft (raw, json) Hash identifier: ged3yK6E3B0CiVw2clHrQWsmiLyEDU0G6ywk5I161yg= Subject key identifier: 04:E4:0F:46:5F:F0:0D:E2:78:BB:B2:7C:2D:62:2D:E2:F5:DE:18:90 Authority key identifier: 06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 Certificate issuer: /CN=A9158015/serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft Manifest number: 0527 Signing time: Thu 24 Apr 2025 23:19:26 +0000 Manifest this update: Thu 24 Apr 2025 23:19:26 +0000 Manifest next update: Thu 01 May 2025 23:19:26 +0000 Files and hashes: 1: BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl (hash: aWN/0hbMxgzKqmVv3+3dho3PY9+iPsDkcmeVPT6yKsI=) 2: A2529A38F90611EBB8E0C27FC4F9AE02.roa (hash: lySgXIbTeI773mGGKtKXC8wJwgy1NnARqmSlG1Myyf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:19:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158015, serialNumber=06BB11A3284DE1EECE26FBAFBCEB3B4CD235DC48 Validity Not Before: Apr 24 23:19:26 2025 GMT Not After : May 1 23:19:26 2025 GMT Subject: CN=680ac6fe-a5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:88:5e:77:09:ea:fa:20:cb:08:17:1d:64: 3d:b1:1c:8d:61:a7:88:0e:f6:24:1f:c3:e4:03:f5: b6:63:71:8f:06:94:ca:02:72:11:e2:79:70:8a:bb: af:97:9a:fa:e5:e9:c0:31:1c:56:55:98:55:1d:e4: 0f:ff:dd:fe:42:a0:ea:be:f0:c1:21:6e:27:3c:f3: 8e:2f:33:ae:d0:c1:1a:f7:fa:91:9d:16:2d:cc:91: a2:d8:11:42:ef:ba:eb:f1:8e:10:f2:9c:a5:73:33: 3c:5a:bf:13:18:91:8e:7a:bf:79:d9:50:f4:6a:63: de:c1:14:13:ee:db:e7:97:db:65:cd:4c:ea:ce:f2: 88:33:54:27:11:0c:51:ae:c6:9a:15:88:7b:e7:a5: e1:b7:0c:77:fa:2e:40:72:e4:51:65:d0:50:c2:da: a4:4e:3b:5a:8f:15:87:6f:89:a1:78:7c:64:60:0c: 75:e4:04:39:75:bd:a7:50:29:71:51:1f:7d:59:0c: 54:c1:56:e3:13:e3:af:a4:13:80:06:70:bc:90:58: 93:59:7c:04:ab:2b:b6:f0:1b:38:76:38:23:de:16: 79:97:06:71:d4:7e:79:b6:c3:c3:97:e7:c1:5f:25: 51:e4:42:62:17:ca:d6:8e:6a:69:3c:e2:c5:2f:d3: bb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E4:0F:46:5F:F0:0D:E2:78:BB:B2:7C:2D:62:2D:E2:F5:DE:18:90 X509v3 Authority Key Identifier: keyid:06:BB:11:A3:28:4D:E1:EE:CE:26:FB:AF:BC:EB:3B:4C:D2:35:DC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BrsRoyhN4e7OJvuvvOs7TNI13Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158015/F6DA0F1CF90311EB9E122D7AC4F9AE02/BrsRoyhN4e7OJvuvvOs7TNI13Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:55:7b:3a:17:4d:b0:61:d3:1d:ec:d7:19:ca:1f:c1:8a:bf: fb:96:25:a8:1e:d1:1b:14:be:bc:6b:4e:b3:26:9b:36:83:dc: e8:b6:ed:ab:c0:dd:84:d7:11:c7:2f:eb:3f:87:96:64:3c:27: 33:89:fd:ba:d3:11:f1:35:f7:cb:3b:7f:5b:9e:f4:e6:77:13: 39:24:b1:61:f8:94:a1:11:5d:96:81:c3:e4:6d:91:f3:4d:1e: 06:86:39:4d:f7:fe:23:ce:96:dc:ae:c9:25:8b:7c:1a:06:aa: 10:5e:c7:71:7e:b1:b5:9b:13:62:0a:c9:b9:3e:a6:ce:cd:1b: ff:05:8a:cc:1b:c1:75:35:fb:cc:9f:88:68:48:a4:4b:49:bb: 62:9c:16:0c:91:a5:a5:4e:be:21:e5:b8:6e:99:cf:71:e6:50: bb:e3:64:58:e2:95:97:15:2c:0c:2c:84:c2:5c:7b:da:55:9d: b8:1a:54:e6:e3:78:33:9f:26:4a:26:a9:6a:a8:0f:9d:77:c8: 4d:ce:fd:b8:4b:b0:30:43:d7:ac:e4:ff:60:07:6c:05:9a:0d: dd:ff:cb:2f:60:9f:28:9a:5a:2c:59:8c:7e:77:6e:8d:6f:51: e6:56:2a:6b:e9:b2:ae:77:41:85:33:8c:26:1a:42:9d:39:e9: af:05:73:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgwMTUxMTAvBgNVBAUTKDA2QkIxMUEzMjg0REUxRUVDRTI2RkJBRkJDRUIzQjRD RDIzNURDNDgwHhcNMjUwNDI0MjMxOTI2WhcNMjUwNTAxMjMxOTI2WjAYMRYwFAYD VQQDEw02ODBhYzZmZS1hNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq6IXncJ6vogywgXHWQ9sRyNYaeIDvYkH8PkA/W2Y3GPBpTKAnIR4nlwiruv l5r65enAMRxWVZhVHeQP/93+QqDqvvDBIW4nPPOOLzOu0MEa9/qRnRYtzJGi2BFC 77rr8Y4Q8pylczM8Wr8TGJGOer952VD0amPewRQT7tvnl9tlzUzqzvKIM1QnEQxR rsaaFYh756Xhtwx3+i5AcuRRZdBQwtqkTjtajxWHb4mheHxkYAx15AQ5db2nUClx UR99WQxUwVbjE+OvpBOABnC8kFiTWXwEqyu28Bs4djgj3hZ5lwZx1H55tsPDl+fB XyVR5EJiF8rWjmppPOLFL9O7LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATkD0Zf 8A3ieLuyfC1iLeL13hiQMB8GA1UdIwQYMBaAFAa7EaMoTeHuzib7r7zrO0zSNdxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODAxNS9GNkRBMEYxQ0Y5 MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRlN09KdnV2dk9zN1ROSTEz RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Jyc1JveWhONGU3T0p2dXZ2T3M3VE5JMTNFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODAxNS9GNkRBMEYxQ0Y5MDMxMUVCOUUxMjJEN0FDNEY5QUUwMi9CcnNSb3loTjRl N09KdnV2dk9zN1ROSTEzRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbVXs6F02wYdMd7NcZyh/Bir/7liWoHtEbFL68a06zJps2g9zotu2r wN2E1xHHL+s/h5ZkPCczif260xHxNffLO39bnvTmdxM5JLFh+JShEV2WgcPkbZHz TR4GhjlN9/4jzpbcrskli3waBqoQXsdxfrG1mxNiCsm5PqbOzRv/BYrMG8F1NfvM n4hoSKRLSbtinBYMkaWlTr4h5bhumc9x5lC742RY4pWXFSwMLITCXHvaVZ24GlTm 43gznyZKJqlqqA+dd8hNzv24S7AwQ9es5P9gB2wFmg3d/8svYJ8omlosWYx+d26N b1HmVipr6bKud0GFM4wmGkKdOemvBXNz -----END CERTIFICATE-----Generated at Sat Apr 26 05:06:50 2025 by rpki-client