$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: VHgZJRFh/+a12UiCFVtYmQxGmZmUKbiE8yUS1X+eb3o= Subject key identifier: D0:A3:DA:5A:89:97:47:E4:52:66:44:02:EF:79:68:50:C6:B6:78:1F Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 07 Signing time: Wed 23 Jul 2025 08:32:07 +0000 Manifest this update: Wed 23 Jul 2025 08:32:07 +0000 Manifest next update: Wed 30 Jul 2025 08:32:07 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: /Q8V8MjlXBvWjW3a3rQg7cI9co1HOrJg4qABN10gs0A=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 08:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Jul 23 08:32:07 2025 GMT Not After : Jul 30 08:32:07 2025 GMT Subject: CN=68809e07-eea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:9b:40:4c:df:8b:e8:5b:08:65:a5:b6:e7: 83:cf:e6:d1:8b:62:c6:c9:87:d2:f2:11:4d:0e:06: 3c:67:48:9e:ef:59:e1:30:a9:fd:a4:5a:c8:c4:8a: ed:50:01:90:ae:ea:e2:af:e4:4e:e8:fb:66:bd:8a: 61:68:73:76:38:eb:8b:6c:ab:a5:95:35:2c:4c:8d: fa:a4:06:da:d3:01:00:d4:99:20:ce:ae:ec:09:b9: 0a:96:5a:83:f0:6a:6f:4d:ae:d3:c3:ca:dc:d3:65: de:e4:ff:17:ab:bb:56:10:0f:40:28:5e:be:92:c5: 32:4a:12:af:02:04:4a:78:8e:00:86:61:bf:f7:5e: 85:02:7a:00:f5:5c:ca:56:58:e8:48:8d:94:6f:52: 04:e6:3f:c1:7f:0a:18:83:8e:21:55:1d:6c:8a:72: 37:7d:94:bd:f7:ae:e6:e8:7c:d9:ff:b3:af:77:f3: 5a:82:3c:ab:b0:05:a9:35:42:44:84:ee:b7:db:8e: 64:ca:82:7f:c5:ac:6a:52:87:20:bf:49:ac:ff:f3: 0f:c3:b2:3c:26:d6:fd:28:04:1b:31:3d:99:0e:28: 3e:01:63:42:d9:1b:f8:5a:2d:95:34:7d:09:aa:af: 31:72:cc:23:aa:ad:eb:62:c8:f2:41:db:ec:9e:f3: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A3:DA:5A:89:97:47:E4:52:66:44:02:EF:79:68:50:C6:B6:78:1F X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:42:b3:0e:78:50:60:49:7a:f1:ff:42:f2:2e:6d:53:47:d9: 83:2e:26:e5:7e:d1:fe:33:5d:a8:3a:7c:d6:1e:7b:4f:db:f7: 43:2e:c6:f2:5c:c0:94:56:67:de:b1:ee:67:9f:7d:52:69:9b: 78:0b:e9:db:90:6a:42:a0:52:a9:99:15:36:f2:66:45:ba:40: da:be:38:c1:e6:e4:ee:38:a3:2d:24:c0:51:df:67:70:18:a6: bc:4b:77:e8:9d:e8:75:72:0f:b2:2b:f5:c1:4a:be:e6:8a:14: 5f:c9:80:ee:a2:65:68:1f:9b:75:2d:39:6b:5b:f7:56:f1:73: ca:47:63:b3:40:98:be:f8:5b:4a:78:62:3c:d3:eb:64:ec:7a: 20:e1:ac:a0:54:6d:36:b6:ac:e8:01:f8:fb:30:db:6b:b6:91: 7c:e8:3c:49:12:ea:3a:e6:f3:cf:6b:2a:87:f3:c8:8e:21:07: dd:8f:d9:a7:b0:bf:5c:f7:d3:f9:05:99:5c:21:d1:71:a3:d0: 08:5b:04:19:68:c0:0b:9f:f3:15:0a:46:40:e9:52:2f:8f:42: 62:c3:26:a5:e6:57:9a:12:70:18:dc:21:7d:72:be:7d:43:a8: 64:ce:73:45:b6:6e:58:78:38:51:4b:62:7c:4c:74:a8:d8:12: 0d:c4:16:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTA3MjMwODMyMDdaFw0yNTA3MzAwODMyMDdaMBgxFjAUBgNV BAMTDTY4ODA5ZTA3LWVlYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC19ptATN+L6FsIZaW254PP5tGLYsbJh9LyEU0OBjxnSJ7vWeEwqf2kWsjEiu1Q AZCu6uKv5E7o+2a9imFoc3Y464tsq6WVNSxMjfqkBtrTAQDUmSDOruwJuQqWWoPw am9NrtPDytzTZd7k/xeru1YQD0AoXr6SxTJKEq8CBEp4jgCGYb/3XoUCegD1XMpW WOhIjZRvUgTmP8F/ChiDjiFVHWyKcjd9lL33rubofNn/s69381qCPKuwBak1QkSE 7rfbjmTKgn/FrGpShyC/Saz/8w/Dsjwm1v0oBBsxPZkOKD4BY0LZG/haLZU0fQmq rzFyzCOqretiyPJB2+ye8wOBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0KPaWomX R+RSZkQC73loUMa2eB8wHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEJCsw54UGBJevH/QvIubVNH2YMuJuV+0f4zXag6fNYee0/b90MuxvJc wJRWZ96x7meffVJpm3gL6duQakKgUqmZFTbyZkW6QNq+OMHm5O44oy0kwFHfZ3AY prxLd+id6HVyD7Ir9cFKvuaKFF/JgO6iZWgfm3UtOWtb91bxc8pHY7NAmL74W0p4 YjzT62TseiDhrKBUbTa2rOgB+Psw22u2kXzoPEkS6jrm889rKofzyI4hB92P2aew v1z30/kFmVwh0XGj0AhbBBlowAuf8xUKRkDpUi+PQmLDJqXmV5oScBjcIX1yvn1D qGTOc0W2blh4OFFLYnxMdKjYEg3EFgg= -----END CERTIFICATE-----Generated at Thu Jul 24 20:38:50 2025 by rpki-client