$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: VjSF2go5sL8pNBquCMpmKFHs09ojupyKXcv+HfDHkNQ= Subject key identifier: 53:51:26:96:3A:E9:3D:07:95:A5:9C:0A:D0:2D:72:AD:0F:D5:11:ED Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 3C Signing time: Wed 05 Nov 2025 07:41:11 +0000 Manifest this update: Wed 05 Nov 2025 07:41:10 +0000 Manifest next update: Wed 12 Nov 2025 07:41:10 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: 914pZeKMLTz+1jEZlPtKCcOXFMGyUSvo/bGqAAOK+70=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:41:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Nov 5 07:41:10 2025 GMT Not After : Nov 12 07:41:10 2025 GMT Subject: CN=690aff96-d193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:b8:37:f2:3b:6f:0e:51:d4:a4:51:c1:61: db:04:45:b4:df:71:1d:c1:91:7c:13:2a:87:97:92: 72:9e:42:de:73:90:aa:ad:52:72:1e:46:4b:13:0b: 12:4b:c2:34:3c:6c:6f:8e:dc:37:60:a0:cb:d5:5e: a4:7b:84:1f:63:86:25:0d:6d:32:2f:c5:cb:76:c5: 64:4c:12:47:22:b5:c9:4d:9b:91:1b:65:77:19:8b: ac:72:a4:b7:f3:a7:54:54:78:d7:fc:1a:b9:e5:df: a8:43:12:ea:c7:01:75:8d:24:a1:6b:60:b7:81:57: 2c:7e:b2:39:88:b4:e8:b8:28:89:0e:5e:db:cd:d6: 4c:aa:b9:95:46:f2:cb:4f:0b:31:da:67:bb:98:dd: 32:5c:2a:d0:0c:0c:19:a6:ec:5d:78:ac:b2:83:8f: ea:b3:df:4a:c3:d8:85:ab:b7:0e:d4:9b:93:ec:5c: fa:cc:12:75:06:e9:1d:27:2b:34:2c:fb:05:03:bf: 4b:85:3f:95:aa:76:ab:93:7e:9f:85:79:1d:9a:32: e6:54:31:61:9c:e5:f3:82:e3:d3:38:cc:33:8b:34: 39:24:0e:43:00:81:79:ef:49:3f:eb:91:e1:44:56: cd:51:b1:cf:1d:07:f4:92:37:c2:02:64:c7:7a:96: 09:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:26:96:3A:E9:3D:07:95:A5:9C:0A:D0:2D:72:AD:0F:D5:11:ED X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a2:bf:00:a8:31:63:00:c7:48:3f:46:79:50:08:b5:05:3a: 4c:9c:67:db:2c:56:7f:f9:3e:80:d3:a9:04:55:c8:4d:13:0b: 67:77:ce:95:36:9a:7e:04:8f:4a:0a:5a:e9:97:54:17:73:1f: d6:60:92:1b:35:3d:eb:03:71:2f:2d:d4:d2:9e:38:ff:c6:35: fa:ec:53:88:a7:2d:0d:97:d5:4a:ab:ab:af:af:5c:08:cc:ec: cb:aa:5b:41:f7:a3:8c:64:5b:e3:33:91:4a:95:f5:b0:95:6c: 29:24:0a:12:99:81:e1:33:fe:4c:11:d2:9a:44:25:35:f8:09: 92:e3:6a:1b:0a:07:99:10:81:d1:3d:2e:8b:2e:b4:c2:f2:13: 6c:8f:59:46:fd:74:56:cf:1b:05:2d:08:86:0a:6c:3f:6b:97: bf:a6:c3:65:ab:cb:9d:18:10:98:a0:cc:e3:a5:0f:a0:7f:d4: 57:5c:3b:98:9e:e4:c5:9f:8e:bf:3d:94:4b:f6:47:bc:d1:8a: 62:3f:e3:5d:69:7d:58:7f:cd:40:8e:9f:fd:81:21:84:99:89: 25:d5:71:b8:7f:bf:ea:cf:5f:22:d3:f8:3d:aa:37:5d:0e:32: 19:e7:2a:85:ce:c7:74:dc:6c:7c:88:8a:35:b7:8c:ae:d8:db: e4:45:bf:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTExMDUwNzQxMTBaFw0yNTExMTIwNzQxMTBaMBgxFjAUBgNV BAMTDTY5MGFmZjk2LWQxOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4V7g38jtvDlHUpFHBYdsERbTfcR3BkXwTKoeXknKeQt5zkKqtUnIeRksTCxJL wjQ8bG+O3DdgoMvVXqR7hB9jhiUNbTIvxct2xWRMEkcitclNm5EbZXcZi6xypLfz p1RUeNf8Grnl36hDEurHAXWNJKFrYLeBVyx+sjmItOi4KIkOXtvN1kyquZVG8stP CzHaZ7uY3TJcKtAMDBmm7F14rLKDj+qz30rD2IWrtw7Um5PsXPrMEnUG6R0nKzQs +wUDv0uFP5WqdquTfp+FeR2aMuZUMWGc5fOC49M4zDOLNDkkDkMAgXnvST/rkeFE Vs1Rsc8dB/SSN8ICZMd6lgnRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUU1Emljrp PQeVpZwK0C1yrQ/VEe0wHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALGivwCoMWMAx0g/RnlQCLUFOkycZ9ssVn/5PoDTqQRVyE0TC2d3zpU2 mn4Ej0oKWumXVBdzH9Zgkhs1PesDcS8t1NKeOP/GNfrsU4inLQ2X1Uqrq6+vXAjM 7MuqW0H3o4xkW+MzkUqV9bCVbCkkChKZgeEz/kwR0ppEJTX4CZLjahsKB5kQgdE9 LosutMLyE2yPWUb9dFbPGwUtCIYKbD9rl7+mw2Wry50YEJigzOOlD6B/1FdcO5ie 5MWfjr89lEv2R7zRimI/411pfVh/zUCOn/2BIYSZiSXVcbh/v+rPXyLT+D2qN10O MhnnKoXOx3TcbHyIijW3jK7Y2+RFv+I= -----END CERTIFICATE-----Generated at Wed Nov 5 21:16:53 2025 by rpki-client