$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: aaIXwHFtLjqLH2a1vd6VWaQIdPG7XxUA0RwTBFBk46k= Subject key identifier: F7:8E:AE:F7:47:6D:49:48:0E:1C:C1:A9:1C:FC:AF:78:B4:AA:F2:CA Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 1F Signing time: Sun 07 Sep 2025 08:23:38 +0000 Manifest this update: Sun 07 Sep 2025 08:23:37 +0000 Manifest next update: Sun 14 Sep 2025 08:23:37 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: UnBsMsVQwq1Ycsto+T6KbrVwSgfAwrHsSuSOu/qd/78=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Sep 7 08:23:37 2025 GMT Not After : Sep 14 08:23:37 2025 GMT Subject: CN=68bd410a-3272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:7d:ad:58:eb:02:39:1a:e0:90:c6:6b:85: 1f:63:2c:ca:9d:09:ab:e5:b4:86:69:0b:9d:f4:ac: 25:91:32:b7:28:32:5b:6a:a1:dc:99:15:d1:87:51: cb:d6:85:ee:76:3b:07:3b:c2:dd:90:a8:ce:cc:c5: 1c:d0:c1:10:a2:fa:47:4e:0f:b2:b5:f3:3e:bb:49: be:14:24:85:19:b6:3e:65:bf:f0:28:9e:3d:a8:42: 0a:9e:3b:c1:1f:82:18:f7:85:35:e9:c3:c5:57:f1: 7d:fa:72:54:51:7e:8a:90:9d:a3:5c:31:78:96:1f: 4a:43:76:1f:d1:cd:dc:6b:7d:bd:fc:cd:b6:c6:65: f8:bd:e1:ce:a7:00:5d:41:61:e5:f6:74:f0:e1:20: 65:81:50:aa:d7:15:ba:fa:9b:8d:b6:d8:99:26:de: 95:e3:13:60:1c:77:10:1b:e0:1b:7e:03:6d:d7:c5: 99:a6:6e:5c:c3:ef:14:1d:26:a5:09:35:16:c4:50: f2:89:41:53:6b:4e:a2:17:fd:9e:42:b4:92:9c:c5: f5:01:25:fd:fd:e3:34:6c:26:96:99:f7:cf:0f:f1: fd:e6:8a:ed:f4:cf:10:f6:b6:04:7a:e3:d8:23:82: 15:ab:85:5d:1e:76:9c:3c:de:82:ef:37:ac:59:10: de:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8E:AE:F7:47:6D:49:48:0E:1C:C1:A9:1C:FC:AF:78:B4:AA:F2:CA X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:0a:0f:e4:da:97:e5:e1:2b:e8:14:cc:8b:37:2d:39:e4:f3: 55:18:80:d4:c9:2b:bd:01:82:c5:50:fa:f1:e2:a1:d0:ad:56: 4f:23:d8:b8:d1:8b:2c:67:02:e6:f3:31:1f:f1:2d:5a:66:fc: a5:9f:1f:d2:a5:9c:0d:55:18:2a:21:08:3f:b9:e0:79:75:17: aa:aa:bb:cb:e3:88:ee:57:5b:7a:62:6a:0c:a1:a8:fa:b7:cd: 47:4b:fe:1f:07:91:df:c2:99:a1:85:22:f6:6c:fd:1f:0e:01: b6:60:dc:ec:4c:64:e6:5f:a8:72:89:8c:18:02:79:fd:c3:99: 04:5d:9c:31:84:df:2d:80:e7:a1:a8:66:a8:77:4c:d3:33:37: 4f:b8:01:97:66:45:4c:f7:79:31:e2:d9:e9:b9:b7:9a:86:3e: b6:4a:50:3f:07:a1:ba:e6:65:e7:c5:c7:bd:1a:8c:d3:f1:c2: c3:51:ee:3f:12:b3:59:1a:00:cd:7c:ec:ba:d0:44:68:22:41: d5:8c:e6:7d:83:77:3d:a9:58:90:3a:c2:66:c7:48:16:2b:ff: 11:b5:b1:94:c3:ef:e7:0e:1a:12:f6:46:5c:2b:99:99:e1:cd: 72:00:c9:7c:ea:9b:a5:0a:37:9e:11:00:49:11:59:ac:49:1c: 82:37:bc:6f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTA5MDcwODIzMzdaFw0yNTA5MTQwODIzMzdaMBgxFjAUBgNV BAMTDTY4YmQ0MTBhLTMyNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA7H2tWOsCORrgkMZrhR9jLMqdCavltIZpC530rCWRMrcoMltqodyZFdGHUcvW he52Owc7wt2QqM7MxRzQwRCi+kdOD7K18z67Sb4UJIUZtj5lv/Aonj2oQgqeO8Ef ghj3hTXpw8VX8X36clRRfoqQnaNcMXiWH0pDdh/Rzdxrfb38zbbGZfi94c6nAF1B YeX2dPDhIGWBUKrXFbr6m4222Jkm3pXjE2AcdxAb4Bt+A23XxZmmblzD7xQdJqUJ NRbEUPKJQVNrTqIX/Z5CtJKcxfUBJf394zRsJpaZ988P8f3miu30zxD2tgR649gj ghWrhV0edpw83oLvN6xZEN7BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU946u90dt SUgOHMGpHPyveLSq8sowHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ4KD+Tal+XhK+gUzIs3LTnk81UYgNTJK70BgsVQ+vHiodCtVk8j2LjR iyxnAubzMR/xLVpm/KWfH9KlnA1VGCohCD+54Hl1F6qqu8vjiO5XW3piagyhqPq3 zUdL/h8Hkd/CmaGFIvZs/R8OAbZg3OxMZOZfqHKJjBgCef3DmQRdnDGE3y2A56Go Zqh3TNMzN0+4AZdmRUz3eTHi2em5t5qGPrZKUD8HobrmZefFx70ajNPxwsNR7j8S s1kaAM187LrQRGgiQdWM5n2Ddz2pWJA6wmbHSBYr/xG1sZTD7+cOGhL2RlwrmZnh zXIAyXzqm6UKN54RAEkRWaxJHII3vG8= -----END CERTIFICATE-----Generated at Mon Sep 8 17:42:26 2025 by rpki-client