$ rpki-client -vvf rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft File: br06JpeFEjrcP0lmOa7fsQ8w1hg.mft (raw, json) Hash identifier: qLrI70kRe03wEsiTDCIRGbfzscDoE35mbMLU2myZCZo= Subject key identifier: 91:AC:F2:AB:A0:DF:68:B0:50:4B:67:4B:8F:9E:24:CA:71:C2:0F:99 Authority key identifier: 6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 Certificate issuer: /CN=A91EECAF/serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Certificate serial: 0B27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft Manifest number: 0AD8 Signing time: Sat 02 Aug 2025 19:48:54 +0000 Manifest this update: Sat 02 Aug 2025 19:48:53 +0000 Manifest next update: Sat 09 Aug 2025 19:48:53 +0000 Files and hashes: 1: br06JpeFEjrcP0lmOa7fsQ8w1hg.crl (hash: TC7d3CvKzBowBmMdTBE2COybYX4+5VwnEe0XKo9yYF4=) 2: 3061606C730211EE89A20645C4F9AE02.roa (hash: FXx7Bk+LSYPn2DbNqZNWdevC6/zZKAPhSGR/vJ/qik0=) 3: 829DF1C85EA811EAA1DC5284C4F9AE02.roa (hash: iknqna89TW/HbAaXthnpwwg5JkeF8vXOwE4qxXSZgG4=) 4: D2A2964A0CAE11EDA6E8C661C4F9AE02.roa (hash: CABbTp6UNgoFkAnkzoRiqNqMk0AS+9bRSopXP3S0HFg=) 5: 121EADE62F7011EF82514126C4F9AE02.roa (hash: ihD/TP8wzm3AP+GWZyveI05SPhzXY8QK3k8hlGMiXlk=) 6: 64EF221EC29D11EBBAF29939C4F9AE02.roa (hash: 1qHYObrYudiYgibzrU8KwyfeamtYSWUG4T63izo1hCM=) 7: DE5B4B680B8411EFBE929A1DC4F9AE02.roa (hash: PcYIKOUqdNO/bkxZAwgmcGO1UnW7FmUMUSGrGsMq3X8=) 8: CB9407D62F6F11EF9E2E8C25C4F9AE02.roa (hash: eid23pnQ82EhRmvjGDSr110fGHDISGgFAGu/Ig0F0Z4=) 9: 53CAA3B2023811EBA421D755C4F9AE02.roa (hash: Ri1dXeOFxDR/7l+L35yanQI8/jxsp+el2wPepBX2c9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2855 (0xb27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EECAF, serialNumber=6EBD3A269785123ADC3F496639AEDFB10F30D618 Validity Not Before: Aug 2 19:48:53 2025 GMT Not After : Aug 9 19:48:53 2025 GMT Subject: CN=688e6ba5-3864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:0e:21:c5:6c:af:90:44:14:99:b3:46:f4: 94:f4:c6:e1:66:c2:3f:50:e4:a5:6a:da:ac:b3:40: 59:c7:99:1d:14:ff:0a:64:e1:1d:11:d8:7a:61:65: f7:2d:23:8a:d8:8b:e8:50:3a:fc:c7:82:71:55:7b: c1:b1:8b:ad:56:91:6e:35:25:3f:6a:8e:e6:58:7d: 4a:c2:76:11:0a:5e:2f:73:0c:a2:6b:f8:48:65:86: 7c:99:e8:48:18:79:ba:74:1f:fd:d3:57:89:cc:5c: 03:34:61:74:59:90:22:11:e9:33:15:a9:ae:e7:e2: 46:e7:c1:23:ce:2b:46:05:e1:74:fc:47:c2:31:51: 71:49:84:f2:6f:6f:37:fd:0a:72:62:fc:61:e0:76: d1:6c:5b:3d:4e:98:a5:e4:4f:96:52:96:57:ce:e9: 9e:88:b4:ef:fc:3e:3f:63:f7:00:5e:d8:6b:22:db: 6b:fd:ec:7a:a0:fd:e6:1a:65:f5:12:d9:1c:83:41: 49:90:24:95:fe:58:a7:fc:c5:18:38:48:89:8a:20: 01:42:a5:84:42:1e:08:a3:39:fb:d0:93:36:07:3f: 4e:10:21:58:64:18:6f:3c:22:37:d0:d3:4c:5e:1f: df:f9:e4:75:90:57:60:99:87:0f:62:b6:a5:98:3c: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AC:F2:AB:A0:DF:68:B0:50:4B:67:4B:8F:9E:24:CA:71:C2:0F:99 X509v3 Authority Key Identifier: keyid:6E:BD:3A:26:97:85:12:3A:DC:3F:49:66:39:AE:DF:B1:0F:30:D6:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/br06JpeFEjrcP0lmOa7fsQ8w1hg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EECAF/EEFDFEA45EA711EAA5E83184C4F9AE02/br06JpeFEjrcP0lmOa7fsQ8w1hg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:02:0b:0b:89:30:6f:1f:53:32:bc:90:0e:ee:99:b7:c8:75: 63:18:fb:83:44:ee:9a:3c:cc:93:57:45:ef:93:fa:5e:22:51: 14:84:ea:5e:2d:c6:9a:53:a8:f0:98:35:29:1a:f9:bc:60:46: ec:5e:da:1a:ea:b5:8b:a5:38:8f:f1:22:be:15:99:96:e4:8a: 14:ed:ed:19:71:f8:a4:1d:82:82:e6:93:cc:84:f4:46:df:41: 45:a9:8a:da:9e:51:fc:0c:57:1f:2e:e1:05:e1:74:2f:a0:c3: c2:b0:a7:88:b8:b2:22:cf:71:e1:72:2b:36:f6:50:fb:0b:2d: 61:73:85:f6:a5:0c:fe:d6:a8:65:5a:f2:61:21:8f:33:a4:69: 13:6a:cc:bb:00:3f:39:ed:54:0a:57:5c:30:27:76:87:15:a9: 8a:7c:32:f1:9e:4f:c8:ab:ba:9f:26:b0:e4:d0:0a:93:46:b5: 1a:4e:e8:7f:1d:b1:9b:cd:40:56:f2:6e:1f:01:29:87:94:71: be:c3:0a:5b:f1:be:a7:b4:ed:cc:ed:29:28:2d:92:17:a8:20: c3:93:28:c9:91:e2:7e:18:6f:2d:a5:1f:39:ee:80:a8:3c:4b: ba:87:d1:54:c0:34:94:ff:dc:c4:21:6c:c3:a0:8b:80:38:7f: 93:87:c0:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCycwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDQUYxMTAvBgNVBAUTKDZFQkQzQTI2OTc4NTEyM0FEQzNGNDk2NjM5QUVERkIx MEYzMEQ2MTgwHhcNMjUwODAyMTk0ODUzWhcNMjUwODA5MTk0ODUzWjAYMRYwFAYD VQQDEw02ODhlNmJhNS0zODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7EYOIcVsr5BEFJmzRvSU9MbhZsI/UOSlatqss0BZx5kdFP8KZOEdEdh6YWX3 LSOK2IvoUDr8x4JxVXvBsYutVpFuNSU/ao7mWH1KwnYRCl4vcwyia/hIZYZ8mehI GHm6dB/901eJzFwDNGF0WZAiEekzFamu5+JG58EjzitGBeF0/EfCMVFxSYTyb283 /QpyYvxh4HbRbFs9Tpil5E+WUpZXzumeiLTv/D4/Y/cAXthrIttr/ex6oP3mGmX1 Etkcg0FJkCSV/lin/MUYOEiJiiABQqWEQh4Iozn70JM2Bz9OECFYZBhvPCI30NNM Xh/f+eR1kFdgmYcPYralmDycDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGs8qug 32iwUEtnS4+eJMpxwg+ZMB8GA1UdIwQYMBaAFG69OiaXhRI63D9JZjmu37EPMNYY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUNBRi9FRUZERkVBNDVF QTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVqcmNQMGxtT2E3ZnNROHcx aGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JyMDZKcGVGRWpyY1AwbG1PYTdmc1E4dzFoZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUNBRi9FRUZERkVBNDVFQTcxMUVBQTVFODMxODRDNEY5QUUwMi9icjA2SnBlRkVq cmNQMGxtT2E3ZnNROHcxaGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKAgsLiTBvH1MyvJAO7pm3yHVjGPuDRO6aPMyTV0Xvk/peIlEUhOpe LcaaU6jwmDUpGvm8YEbsXtoa6rWLpTiP8SK+FZmW5IoU7e0ZcfikHYKC5pPMhPRG 30FFqYranlH8DFcfLuEF4XQvoMPCsKeIuLIiz3Hhcis29lD7Cy1hc4X2pQz+1qhl WvJhIY8zpGkTasy7AD857VQKV1wwJ3aHFamKfDLxnk/Iq7qfJrDk0AqTRrUaTuh/ HbGbzUBW8m4fASmHlHG+wwpb8b6ntO3M7SkoLZIXqCDDkyjJkeJ+GG8tpR857oCo PEu6h9FUwDSU/9zEIWzDoIuAOH+Th8AH -----END CERTIFICATE-----Generated at Mon Aug 4 14:57:01 2025 by rpki-client