$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: pxW/geJybw51QRCcZWRjMzmJF7CpZF0+ckUwWQyuYzE= Subject key identifier: 56:D0:31:91:CB:8E:82:DD:14:73:96:E6:2E:41:48:58:2C:3E:94:15 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0B0E Signing time: Tue 04 Nov 2025 19:32:59 +0000 Manifest this update: Tue 04 Nov 2025 19:32:58 +0000 Manifest next update: Tue 11 Nov 2025 19:32:58 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: imKg8+/TSuxpPGxvSo4Cl/WFeV0LtrKBpAmfPE0ZCik=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: WeaTbMf7BP2O/+pSf493EUl2h+/ILCKWUynSWVLQ+8w=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: 5Zn/NXgpFmO6vwefOP5YQZGHnsLFk/qGC1rRCPIC8NI=) 4: CA726EB27D6411F0A526106EC4F9AE02.roa (hash: 5eFto7Xbd6SIdBIgHT1gzsw1kP93cMF3mG+IAAtdNqA=) 5: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: +GeY+3nzfxfGGtkbBKDt2xX2WXjnwHUxE0t1JDRZXWg=) 6: 121EADE62F7011EF82514126C4F9AE02.roa (hash: Ggk4L4L5OqKbvJnFw7W1rW5JJcN5Zt+SHJCIjJMSok0=) 7: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 6RbxNEp3aAcRY9ABgjcNbqmStmri8VA4rw2gNzJyQ34=) 8: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: R6+4ss6mJMA2fcEMrX15U2Fp8fbdxhbZt9mRr5DW3z8=) 9: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: day2QfsK2GhqNsQUlv32u5aYAMW/wnELuNVvZR1uSgU=) 10: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: DeDkGdsN3N2xX3gJk6DxRPzTQe+BgFZ1qo1jOWYyHBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2920 (0xb68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Nov 4 19:32:58 2025 GMT Not After : Nov 11 19:32:58 2025 GMT Subject: CN=690a54ea-267c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:f4:3a:a1:fb:09:2e:da:7b:7c:ad:2a:de: 47:39:e3:70:36:4f:89:12:d2:c1:80:3a:4c:0f:6a: c2:10:d1:30:68:9c:00:93:3d:38:da:e5:28:8e:68: 67:dc:af:40:5a:fa:b2:42:f0:1e:ee:32:ef:78:c3: 8f:8a:67:57:be:96:22:21:60:ab:71:5b:20:06:4c: 11:62:0c:b8:e1:c6:50:80:52:82:08:f6:38:38:db: 5b:57:6a:a2:74:8f:fb:a5:34:81:b4:63:ef:3b:2f: 8a:b8:32:8e:b3:9c:84:d7:cb:6a:8b:19:40:96:3c: cc:95:8c:dd:8d:c6:e9:b3:bb:48:cc:ac:61:0e:73: 01:ef:d6:93:08:96:c8:ce:87:60:45:be:0e:07:60: 94:1a:63:ce:24:d1:f6:5a:60:47:1d:dc:2f:92:fb: f2:f8:da:bf:1f:40:16:42:50:6d:3d:ab:78:b6:7a: 80:dc:c4:14:31:88:b6:e1:fc:1f:71:16:68:c6:d7: 8d:35:a4:f7:0f:0c:49:f4:32:1e:be:ee:5c:d4:86: 62:5b:cd:73:96:e4:ea:cc:0c:9f:e8:bf:05:b7:d0: 0f:dc:db:e0:48:5d:f7:55:76:d7:23:31:94:8d:21: 98:41:9d:22:e6:2c:89:28:d8:eb:b0:11:92:5b:3b: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D0:31:91:CB:8E:82:DD:14:73:96:E6:2E:41:48:58:2C:3E:94:15 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:36:70:7e:90:be:c1:99:43:fd:48:6c:f5:ec:14:54:94:a3: 9e:82:69:d4:ee:1c:0a:4a:e7:79:fa:a8:f3:4f:a9:43:cb:ab: 76:d9:52:8a:00:5f:b3:7b:be:48:99:a2:b6:59:9a:40:a8:66: ce:46:04:fa:1c:63:07:2b:3b:ae:12:a1:26:ee:9c:81:8f:0f: 9b:67:e9:16:70:db:fc:1b:49:a0:76:da:21:6b:7b:14:13:9d: bb:a8:6c:d9:c6:bf:f6:a1:f8:1f:d2:6d:54:d5:4e:1c:04:3e: f3:ab:d7:1a:d4:89:02:36:98:6a:d6:d1:29:49:84:4f:62:d0: 27:b7:ee:cc:22:31:23:f8:d0:e2:cb:86:ed:dd:e6:33:54:cf: 8b:e3:8b:d8:f5:12:ac:08:92:69:f1:c2:75:7e:93:9b:a8:5a: 72:ad:fc:95:d5:c2:71:07:23:e0:33:a9:ec:aa:18:45:45:08: 95:0b:10:73:0e:e4:98:ce:4a:43:2b:e1:95:06:bb:4d:8e:0a: e6:68:35:4d:0e:63:1a:a2:ae:f1:7d:86:34:86:1c:9c:8c:78: 1a:aa:ee:72:e8:35:b6:f2:75:1a:8c:5d:39:27:47:ca:0b:1e: e1:dd:ae:ed:0a:6c:20:77:93:c0:e7:b5:e3:47:14:ea:5a:87: df:ce:76:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUxMTA0MTkzMjU4WhcNMjUxMTExMTkzMjU4WjAYMRYwFAYD VQQDEw02OTBhNTRlYS0yNjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3j0OqH7CS7ae3ytKt5HOeNwNk+JEtLBgDpMD2rCENEwaJwAkz042uUojmhn 3K9AWvqyQvAe7jLveMOPimdXvpYiIWCrcVsgBkwRYgy44cZQgFKCCPY4ONtbV2qi dI/7pTSBtGPvOy+KuDKOs5yE18tqixlAljzMlYzdjcbps7tIzKxhDnMB79aTCJbI zodgRb4OB2CUGmPOJNH2WmBHHdwvkvvy+Nq/H0AWQlBtPat4tnqA3MQUMYi24fwf cRZoxteNNaT3DwxJ9DIevu5c1IZiW81zluTqzAyf6L8Ft9AP3NvgSF33VXbXIzGU jSGYQZ0i5iyJKNjrsBGSWzvDnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbQMZHL joLdFHOW5i5BSFgsPpQVMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENnB+kL7BmUP9SGz17BRUlKOegmnU7hwKSud5+qjzT6lDy6t22VKK AF+ze75ImaK2WZpAqGbORgT6HGMHKzuuEqEm7pyBjw+bZ+kWcNv8G0mgdtoha3sU E527qGzZxr/2ofgf0m1U1U4cBD7zq9ca1IkCNphq1tEpSYRPYtAnt+7MIjEj+NDi y4bt3eYzVM+L44vY9RKsCJJp8cJ1fpObqFpyrfyV1cJxByPgM6nsqhhFRQiVCxBz DuSYzkpDK+GVBrtNjgrmaDVNDmMaoq7xfYY0hhycjHgaqu5y6DW28nUajF05J0fK Cx7h3a7tCmwgd5PA57XjRxTqWoffznZt -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:20 2025 by rpki-client