$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: bN1QQbrg6lTeqzXU6/erg0ZIxp/fARmbqyk2E9kibGw= Subject key identifier: 7F:8C:AD:1A:17:0E:8C:64:BC:BD:1C:2D:7D:99:AA:EB:D0:35:05:D1 Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 8A Signing time: Sun 05 Apr 2026 06:55:57 +0000 Manifest this update: Sun 05 Apr 2026 06:55:57 +0000 Manifest next update: Sun 12 Apr 2026 06:55:57 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: jUZ5ZGo2cIDAWaFxCdqXLillGZd9Vq0oySdHX6gHxyI=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Apr 5 06:55:57 2026 GMT Not After : Apr 12 06:55:57 2026 GMT Subject: CN=69d2077d-c443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:09:e3:34:c5:93:59:ee:00:1d:0b:b7:ee:80: 2a:70:42:c9:4d:79:df:79:1c:ae:bd:06:9f:46:36: 15:b9:b9:78:e3:e7:5d:85:54:be:c5:6c:a5:0e:62: 87:a7:97:f2:02:55:75:56:cf:cb:e1:5c:f1:48:2a: 54:be:1c:97:ac:7e:3d:b1:bc:32:d2:03:54:24:81: 6b:9b:a2:a5:4e:91:69:c0:9f:78:66:12:7f:7a:56: 0c:3c:3e:00:5d:fe:18:73:5b:a2:ad:dc:82:cd:41: c7:72:82:a9:e1:f8:4c:12:ca:eb:42:1b:8b:b9:9a: 74:36:f5:55:30:9f:c1:95:64:36:12:37:42:c1:29: 7c:e0:8b:19:cf:df:4a:a5:4f:d0:c2:ac:a4:dd:bc: 87:c8:1c:19:0a:01:a6:7c:3b:88:ef:2a:94:a5:8f: 96:dd:98:b1:25:d3:19:d8:6b:b0:5d:fa:7b:a0:e7: bb:1b:83:e7:aa:2e:85:33:93:51:13:b3:b3:d9:ff: f1:06:49:f4:7d:61:15:71:99:fc:b9:46:1d:25:63: a7:e4:34:e9:d9:59:83:da:f3:a4:20:fa:2c:8c:db: 30:f5:ca:0e:23:07:3f:62:8d:21:0c:28:3f:5d:0d: 4b:b9:72:26:60:97:24:b8:52:1a:bd:43:50:63:0e: 01:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8C:AD:1A:17:0E:8C:64:BC:BD:1C:2D:7D:99:AA:EB:D0:35:05:D1 X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:3d:6b:70:4d:b3:63:1d:c8:58:86:e8:bc:cb:59:ea:39:23: 08:a5:56:35:dd:22:fa:b1:5d:a9:81:0f:cd:23:7f:92:76:4b: da:01:62:a8:c3:fe:22:e1:5b:1e:e8:ec:10:bb:78:b6:d2:65: 78:09:a8:df:12:1b:cd:4f:d3:09:75:14:c9:ed:0f:46:c3:94: 74:c1:a0:65:6a:5f:0e:28:1c:d4:2e:a5:79:e8:cb:11:00:74: 38:8b:1b:88:89:96:aa:c7:c6:73:a4:6c:47:ac:94:73:0d:e3: b8:96:91:06:55:ca:d4:b1:f7:40:b6:7a:b5:a8:71:66:29:6f: 53:b2:1e:dc:48:08:9c:a8:25:b7:0e:d2:c2:16:64:1d:da:41: 67:e5:c5:3e:c3:8d:75:e5:86:5e:75:43:30:c2:1d:c8:bc:8e: 93:06:c7:22:99:a3:6c:94:e2:20:c7:0c:5a:d7:60:c6:1e:21: 3b:a0:9a:15:fb:f0:e0:fe:12:0c:8c:80:f8:9a:e9:90:17:80: f3:77:a6:55:a0:91:e3:c6:64:60:85:6c:4c:bf:bb:1e:68:cf: ce:b9:14:0f:29:f5:b8:46:76:e5:f8:0d:0d:18:c6:c8:87:43: b1:45:24:f4:88:c0:e1:e7:3b:51:6f:6d:50:fc:da:6d:ce:4e: cf:49:06:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRDUxMTAvBgNVBAUTKDZDNDJGMDRGODBCQjA2OEVDMjQ2Q0U2ODg3MTc3RUYx N0M4NkNGMzMwHhcNMjYwNDA1MDY1NTU3WhcNMjYwNDEyMDY1NTU3WjAYMRYwFAYD VQQDEw02OWQyMDc3ZC1jNDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgnjNMWTWe4AHQu37oAqcELJTXnfeRyuvQafRjYVubl44+ddhVS+xWylDmKH p5fyAlV1Vs/L4VzxSCpUvhyXrH49sbwy0gNUJIFrm6KlTpFpwJ94ZhJ/elYMPD4A Xf4Yc1uirdyCzUHHcoKp4fhMEsrrQhuLuZp0NvVVMJ/BlWQ2EjdCwSl84IsZz99K pU/Qwqyk3byHyBwZCgGmfDuI7yqUpY+W3ZixJdMZ2GuwXfp7oOe7G4Pnqi6FM5NR E7Oz2f/xBkn0fWEVcZn8uUYdJWOn5DTp2VmD2vOkIPosjNsw9coOIwc/Yo0hDCg/ XQ1LuXImYJckuFIavUNQYw4BNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+MrRoX DoxkvL0cLX2ZquvQNQXRMB8GA1UdIwQYMBaAFGxC8E+AuwaOwkbOaIcXfvF8hs8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NENS82NkMzMzIwRTVG QTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9iRUx3VDRDN0JvN0NSczVvaHhkLThYeUd6 ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0NENS82NkMzMzIwRTVGQTgxMUYwQjU5NzhDMkNDNEY5QUUwMi9iRUx3VDRDN0Jv N0NSczVvaHhkLThYeUd6ek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAET1rcE2zYx3IWIbovMtZ6jkjCKVWNd0i+rFdqYEPzSN/knZL2gFiqMP+IuFb HujsELt4ttJleAmo3xIbzU/TCXUUye0PRsOUdMGgZWpfDigc1C6leejLEQB0OIsb iImWqsfGc6RsR6yUcw3juJaRBlXK1LH3QLZ6tahxZilvU7Ie3EgInKgltw7SwhZk HdpBZ+XFPsONdeWGXnVDMMIdyLyOkwbHIpmjbJTiIMcMWtdgxh4hO6CaFfvw4P4S DIyA+JrpkBeA83emVaCR48ZkYIVsTL+7HmjPzrkUDyn1uEZ25fgNDRjGyIdDsUUk 9IjA4ec7UW9tUPzabc5Oz0kG8w== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:52 2026 by rpki-client