$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: awg+5TeOTavhsns63iXZ/TbAnZRNdcDBC52jUny+I4E= Subject key identifier: AE:1E:EA:10:85:39:82:48:4B:E9:34:43:57:55:C1:DE:26:42:9A:B5 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0AEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0AA2 Signing time: Thu 24 Apr 2025 19:31:38 +0000 Manifest this update: Thu 24 Apr 2025 19:31:38 +0000 Manifest next update: Thu 01 May 2025 19:31:38 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: Bls1vyDB0zuaZ0Fg4QIhIWPScP1dowI5iMXz3fbA7Cs=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 5: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 7: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: gjOpVTIrCg/GRDI2g0j816CEONXvKaN06KAW+xe46vM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2799 (0xaef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Apr 24 19:31:38 2025 GMT Not After : May 1 19:31:38 2025 GMT Subject: CN=680a919a-a4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:5a:66:8b:c1:eb:84:bb:c7:44:5f:f6:ce: 8a:c6:c3:32:b1:ae:54:d7:36:e4:77:1d:4a:11:7f: fb:78:3d:9c:f3:2a:77:e6:c1:9a:ca:64:0e:a9:19: 71:a4:b8:ac:57:6f:0a:0e:29:e3:f9:f8:d7:be:5f: 77:7a:3b:f1:ad:f6:d8:bc:8d:b4:8f:a8:e6:8e:15: 3b:89:37:62:91:82:d2:6d:51:56:83:de:12:1b:51: 03:8e:b7:c7:5f:45:6a:dd:75:23:b8:27:97:9e:65: 6a:b9:ee:65:b6:7a:6f:26:e4:30:bf:c8:df:d3:e5: f7:51:c3:6f:a7:35:f7:dd:6f:05:b2:b0:75:d4:96: d0:33:e5:77:6d:cf:5e:ed:b2:59:15:30:45:a2:f6: 45:78:62:10:76:19:90:e6:e4:1d:cf:bf:ec:87:00: 9b:68:97:ef:24:c3:65:3a:03:e2:c7:a4:21:6d:80: b3:38:8e:b5:c8:42:1a:24:03:13:f8:a1:3b:12:8d: 7a:d4:db:4b:8e:b2:b0:06:d9:93:c6:48:27:2b:6a: 66:fe:de:b9:9e:be:20:7f:1c:fc:87:b4:4d:27:bc: 99:15:2d:c7:56:4a:37:37:c7:66:e5:22:f4:c0:53: 4a:6e:96:09:f2:53:8f:95:fa:9c:e3:14:76:ce:7b: e6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1E:EA:10:85:39:82:48:4B:E9:34:43:57:55:C1:DE:26:42:9A:B5 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ae:0a:75:81:98:22:6c:55:7c:e2:4b:ff:d8:84:a8:98:f4: 6a:f8:9f:f2:18:0b:2a:54:6b:fd:fe:7f:a2:b8:fa:cc:07:3d: c3:4b:8a:ea:f1:23:5d:60:d3:04:75:d7:b6:c0:06:c6:26:49: f5:d0:4d:31:1a:1a:af:d7:63:b9:9c:ec:2b:48:6e:5d:e0:9b: d1:b4:66:f0:d2:ad:5a:93:bc:8b:92:71:69:d6:f7:22:c2:66: a1:b4:53:17:b6:13:57:1b:b6:ba:99:0f:80:12:4e:df:a9:d4: 61:5d:98:9f:f4:28:70:d0:59:c9:ac:a3:d2:09:c4:81:69:56: 63:a9:38:74:cf:e4:32:e9:dc:5f:68:87:bc:09:5d:8a:2d:df: b3:17:2c:17:f0:03:e9:59:17:d0:2a:2d:be:7f:0b:80:30:fe: be:18:a8:09:6f:df:45:e5:60:0d:67:f1:19:b3:50:bd:c4:af: f8:d1:e9:aa:de:d4:37:fc:4a:1f:17:09:3b:66:78:a7:25:13: 18:ca:2c:80:63:7e:cd:b5:6c:28:e2:dc:d9:96:d5:ca:90:a5: b9:d5:9d:03:10:c6:74:c9:4c:71:70:cd:35:64:c8:f1:60:35: f1:4b:cb:dd:de:55:e7:cb:c5:be:49:17:e5:89:28:9b:3c:c8: 28:5a:a4:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUwNDI0MTkzMTM4WhcNMjUwNTAxMTkzMTM4WjAYMRYwFAYD VQQDEw02ODBhOTE5YS1hNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T1aZovB64S7x0Rf9s6KxsMysa5U1zbkdx1KEX/7eD2c8yp35sGaymQOqRlx pLisV28KDinj+fjXvl93ejvxrfbYvI20j6jmjhU7iTdikYLSbVFWg94SG1EDjrfH X0Vq3XUjuCeXnmVque5ltnpvJuQwv8jf0+X3UcNvpzX33W8FsrB11JbQM+V3bc9e 7bJZFTBFovZFeGIQdhmQ5uQdz7/shwCbaJfvJMNlOgPix6QhbYCzOI61yEIaJAMT +KE7Eo161NtLjrKwBtmTxkgnK2pm/t65nr4gfxz8h7RNJ7yZFS3HVko3N8dm5SL0 wFNKbpYJ8lOPlfqc4xR2znvmWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4e6hCF OYJIS+k0Q1dVwd4mQpq1MB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVrgp1gZgibFV84kv/2ISomPRq+J/yGAsqVGv9/n+iuPrMBz3DS4rq 8SNdYNMEdde2wAbGJkn10E0xGhqv12O5nOwrSG5d4JvRtGbw0q1ak7yLknFp1vci wmahtFMXthNXG7a6mQ+AEk7fqdRhXZif9Chw0FnJrKPSCcSBaVZjqTh0z+Qy6dxf aIe8CV2KLd+zFywX8APpWRfQKi2+fwuAMP6+GKgJb99F5WANZ/EZs1C9xK/40emq 3tQ3/EofFwk7ZninJRMYyiyAY37NtWwo4tzZltXKkKW51Z0DEMZ0yUxxcM01ZMjx YDXxS8vd3lXny8W+SRfliSibPMgoWqQD -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:25 2025 by rpki-client