$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: rO1SB3CmEEIAJirhaesuBh2GneHGwUVpVlkpdGAC2gY= Subject key identifier: B2:97:4A:49:5A:99:04:B1:03:E3:2C:83:8A:02:27:90:50:94:50:DB Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 34 Signing time: Sun 19 Oct 2025 11:04:37 +0000 Manifest this update: Sun 19 Oct 2025 11:04:36 +0000 Manifest next update: Sun 26 Oct 2025 11:04:36 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: N7nXtW3ZuHAAFvgLy2dQpH+E9VFgsrHE++oEz3KDOOY=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Oct 19 11:04:36 2025 GMT Not After : Oct 26 11:04:36 2025 GMT Subject: CN=68f4c5c4-973b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:03:18:dd:fa:d4:b4:8d:ac:0c:85:58:21: f3:69:86:5f:40:25:21:ad:3e:d2:75:ff:c3:4a:6d: fe:d8:0e:fb:05:ba:4d:08:70:93:49:ad:32:d8:b2: 59:d3:34:aa:94:30:1b:3b:45:d9:15:32:a7:42:c0: 4b:11:10:d0:1e:eb:d9:45:e3:a6:b0:54:2c:d5:12: bb:40:4b:1c:43:c4:a1:90:34:7d:5e:48:7e:4a:80: 0b:16:1f:9f:2a:69:0a:45:f3:62:8c:42:67:a2:9e: 2a:5f:5e:46:73:c1:75:01:89:d5:58:80:28:cd:e6: 26:6f:d0:4a:90:c2:a8:aa:47:a8:01:aa:27:e1:4c: f2:b4:82:eb:57:eb:78:b0:1e:d6:69:ef:0b:a0:ff: 13:c4:de:7c:31:37:5a:4b:25:61:66:04:4d:47:4e: b6:de:3e:38:ce:08:0e:54:4a:fb:1c:d6:2d:bd:74: e5:97:c0:88:a2:81:ff:95:ff:77:bc:c7:46:aa:64: b8:5e:39:4a:44:f8:db:2c:60:c1:3c:2d:a5:ef:7a: 90:40:e9:7d:b2:8e:64:3b:2b:f0:49:63:d1:c9:28: c3:e1:7b:5f:d2:41:18:40:f9:18:6e:4c:eb:88:1d: 47:29:3e:21:25:27:2f:cc:6c:a3:9f:8b:f1:f3:2d: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:97:4A:49:5A:99:04:B1:03:E3:2C:83:8A:02:27:90:50:94:50:DB X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:b1:12:f6:a0:9d:06:2d:76:57:e3:8b:75:50:ad:86:cd:26: e0:7f:0b:78:75:60:3a:36:15:16:95:3f:dc:11:a8:4e:3b:70: 7b:22:a5:f7:70:c6:b6:13:ca:5e:76:ee:32:e9:30:d1:e0:93: 95:0b:20:e8:74:ea:e7:43:be:7d:91:28:8a:ba:03:fc:76:61: 2a:fe:6d:45:ae:03:c5:a1:8d:f3:9f:86:e0:6d:82:8d:54:f6: 48:33:b1:bb:8f:fd:5e:ab:b4:2e:c5:0b:0b:4d:5c:d5:f5:2f: 43:60:d3:39:d0:e0:d4:e9:9d:66:6d:99:4f:be:86:62:72:5f: 42:ac:7b:77:e6:71:fa:7d:42:bf:f7:a7:0a:5a:fa:1c:0e:2a: 09:2c:17:a4:03:52:9a:96:e5:99:9e:bb:b7:2c:90:83:f3:78: f7:0c:f3:93:ba:62:c1:c7:3a:b8:47:77:01:d8:76:da:1d:dd: 3e:3b:d7:e7:09:af:b8:4f:3d:6f:a3:7c:13:cb:f3:24:47:e9: f2:6e:67:c6:4c:af:31:5c:50:d6:23:5c:1c:9b:1f:aa:71:5d: f6:8d:08:0c:85:dc:89:da:ee:b0:61:11:4e:e2:b7:7c:58:45: 5c:5b:43:9c:e3:16:69:58:c4:0f:5a:bd:12:ee:31:bf:f8:2c: 01:d6:71:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTEwMTkxMTA0MzZaFw0yNTEwMjYxMTA0MzZaMBgxFjAUBgNV BAMTDTY4ZjRjNWM0LTk3M2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZhAMY3frUtI2sDIVYIfNphl9AJSGtPtJ1/8NKbf7YDvsFuk0IcJNJrTLYslnT NKqUMBs7RdkVMqdCwEsRENAe69lF46awVCzVErtASxxDxKGQNH1eSH5KgAsWH58q aQpF82KMQmeinipfXkZzwXUBidVYgCjN5iZv0EqQwqiqR6gBqifhTPK0gutX63iw HtZp7wug/xPE3nwxN1pLJWFmBE1HTrbePjjOCA5USvsc1i29dOWXwIiigf+V/3e8 x0aqZLheOUpE+NssYME8LaXvepBA6X2yjmQ7K/BJY9HJKMPhe1/SQRhA+RhuTOuI HUcpPiElJy/MbKOfi/HzLVAfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUspdKSVqZ BLED4yyDigInkFCUUNswHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEixEvagnQYtdlfji3VQrYbNJuB/C3h1YDo2FRaVP9wRqE47cHsipfdw xrYTyl527jLpMNHgk5ULIOh06udDvn2RKIq6A/x2YSr+bUWuA8WhjfOfhuBtgo1U 9kgzsbuP/V6rtC7FCwtNXNX1L0Ng0znQ4NTpnWZtmU++hmJyX0Kse3fmcfp9Qr/3 pwpa+hwOKgksF6QDUpqW5Zmeu7cskIPzePcM85O6YsHHOrhHdwHYdtod3T471+cJ r7hPPW+jfBPL8yRH6fJuZ8ZMrzFcUNYjXBybH6pxXfaNCAyF3Ina7rBhEU7it3xY RVxbQ5zjFmlYxA9avRLuMb/4LAHWcfE= -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:33 2025 by rpki-client