$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: zTAr6e8rEWo4tVn/WQ1idd8zDXgY42nEXg46zhetEU4= Subject key identifier: FE:D9:26:85:8C:87:D7:AD:A5:28:44:64:4B:2D:FB:07:76:E6:77:8F Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:12:21 +0000 Manifest this update: Sat 23 Aug 2025 08:12:20 +0000 Manifest next update: Sat 30 Aug 2025 08:12:20 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: jdXnOxouRukNRtQvjw9OD/QQcK5aB674YQJV9LbAQgs=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Aug 23 08:12:20 2025 GMT Not After : Aug 30 08:12:20 2025 GMT Subject: CN=68a977e5-f0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c5:a1:55:9d:55:77:04:ce:f4:9f:2f:3e:bf: 12:4f:9b:4b:99:f4:3c:9b:7c:06:9c:a5:b6:3c:52: 5f:be:d4:6e:79:66:ff:04:97:a7:93:30:11:78:bd: 80:91:1b:d9:94:bf:34:19:af:69:0a:e7:de:bd:fc: 2b:e4:e3:4d:1f:08:14:39:62:32:74:17:67:2b:ec: 55:57:87:68:e5:33:73:f5:85:9b:43:9f:29:96:3e: 7c:fc:d3:d3:b8:b3:09:8c:35:dd:9a:85:e5:c8:01: 04:3c:d2:59:c5:ee:4a:05:73:23:c2:e0:ff:24:d6: b4:96:18:ed:9f:2f:01:f5:46:64:3b:aa:2c:c4:41: c4:13:fc:0f:93:7f:e6:57:91:1f:17:8d:6c:27:33: f4:0e:78:f9:2f:b9:f2:9e:23:1d:e1:69:b2:b2:54: 89:46:3f:bb:a6:81:0c:48:2e:43:54:1f:ce:e8:ad: 47:af:3c:37:52:67:de:bd:81:b0:7f:d4:02:0c:66: 57:ed:a0:4d:d7:24:e0:eb:75:c5:7a:13:85:55:22: 36:bc:93:06:ab:b7:5f:f3:d5:3d:7e:17:ea:57:53: 13:55:fc:b0:6c:d5:fe:1a:ef:52:1b:f6:9e:7e:12: 73:92:b8:7c:82:9b:40:7e:ba:32:5c:89:d3:9c:73: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D9:26:85:8C:87:D7:AD:A5:28:44:64:4B:2D:FB:07:76:E6:77:8F X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:be:e1:81:1d:46:5d:49:4f:32:7e:af:3e:c1:d8:a5:c5:34: 8f:c0:8b:ed:3c:48:26:48:be:83:7b:d5:e9:07:f4:c4:20:b6: 08:86:7b:cd:a3:f0:1d:f7:e6:ee:f4:9e:c3:d8:94:e8:f4:07: d8:7b:9f:ec:dc:ed:cd:53:28:54:ed:bd:58:fa:03:2d:90:e3: 4e:7d:6f:37:85:91:54:d2:bd:b1:d6:64:d7:fd:27:92:f9:a3: 86:2e:45:b6:87:1e:a1:1e:94:30:e1:ce:f4:03:75:3b:78:ce: 91:79:e1:7a:a4:2b:c6:d9:7a:e2:33:c7:37:1a:84:0d:b3:68: 51:38:b2:e3:58:27:6a:bf:5c:58:b7:e7:19:c7:30:3f:65:06: 30:6e:32:7e:20:81:2f:85:6c:f3:53:ec:50:44:68:93:8e:e6: 05:fa:d1:38:a0:cf:7a:a5:99:17:3e:5c:2c:3b:7e:3a:18:3b: 53:c3:15:ed:35:69:f2:fb:f9:12:3f:24:02:99:59:ab:49:a7: 8c:84:75:c9:2a:5c:d5:0a:6e:33:4b:cb:31:a0:be:0f:a1:9b: d0:66:5a:cb:42:93:ac:97:38:b9:51:98:2e:e1:a5:45:3a:9d: 18:f7:a5:69:db:5c:47:42:c1:e6:32:20:33:4c:53:05:ae:78: 55:96:ab:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTA4MjMwODEyMjBaFw0yNTA4MzAwODEyMjBaMBgxFjAUBgNV BAMTDTY4YTk3N2U1LWYwZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMxaFVnVV3BM70ny8+vxJPm0uZ9DybfAacpbY8Ul++1G55Zv8El6eTMBF4vYCR G9mUvzQZr2kK5969/Cvk400fCBQ5YjJ0F2cr7FVXh2jlM3P1hZtDnymWPnz809O4 swmMNd2aheXIAQQ80lnF7koFcyPC4P8k1rSWGO2fLwH1RmQ7qizEQcQT/A+Tf+ZX kR8XjWwnM/QOePkvufKeIx3habKyVIlGP7umgQxILkNUH87orUevPDdSZ969gbB/ 1AIMZlftoE3XJODrdcV6E4VVIja8kwart1/z1T1+F+pXUxNV/LBs1f4a71Ib9p5+ EnOSuHyCm0B+ujJcidOccwdfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/tkmhYyH 162lKERkSy37B3bmd48wHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKq+4YEdRl1JTzJ+rz7B2KXFNI/Ai+08SCZIvoN71ekH9MQgtgiGe82j 8B335u70nsPYlOj0B9h7n+zc7c1TKFTtvVj6Ay2Q4059bzeFkVTSvbHWZNf9J5L5 o4YuRbaHHqEelDDhzvQDdTt4zpF54XqkK8bZeuIzxzcahA2zaFE4suNYJ2q/XFi3 5xnHMD9lBjBuMn4ggS+FbPNT7FBEaJOO5gX60Tigz3qlmRc+XCw7fjoYO1PDFe01 afL7+RI/JAKZWatJp4yEdckqXNUKbjNLyzGgvg+hm9BmWstCk6yXOLlRmC7hpUU6 nRj3pWnbXEdCweYyIDNMUwWueFWWq5c= -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:27 2025 by rpki-client