$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: muEBNJ/5yOlo5apeZq+iC4xxyjKlp5Aeea0yRdp5seg= Subject key identifier: 46:C5:C5:51:75:04:0C:0E:02:C3:63:96:EE:AA:9E:89:3E:9C:69:E0 Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:34:44 +0000 Manifest this update: Sat 09 Aug 2025 08:34:44 +0000 Manifest next update: Sat 16 Aug 2025 08:34:44 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: P1u8iUfQnZMTmOVeSteRE9N0wIvYbNjz1WDdWavz6jU=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: J+H6csOZmYsW7V01nBKq8FR/OiHNtxdZOxR4C+LUEPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Aug 9 08:34:44 2025 GMT Not After : Aug 16 08:34:44 2025 GMT Subject: CN=68970824-3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:c6:da:9b:15:d5:57:bc:85:f1:99:c8:98: 6d:ed:b2:c8:23:16:1b:f3:4b:ee:48:09:7c:a6:36: 48:de:31:73:9f:ac:bf:11:dd:f2:82:9d:db:e6:31: 7d:d0:7c:7c:1a:32:65:52:f4:ad:e2:ed:4b:c1:ba: ea:ad:c8:e7:b0:82:7e:f9:f8:70:bd:f8:ec:58:45: 31:4f:8c:82:1b:7f:21:d4:a5:7e:9f:37:f4:96:ba: ee:7b:b6:72:d1:dc:fa:85:f1:ef:4c:b6:29:07:b2: e3:38:95:e0:ca:4b:5c:a0:e5:6d:21:b2:ae:4f:2e: bb:9f:76:66:20:5a:a8:b6:18:a0:8b:d0:7e:06:54: 48:4b:f8:2b:f9:bb:a9:e3:d1:d4:d4:13:78:62:b2: fb:d2:7c:48:6d:76:72:aa:b0:7e:fd:72:8b:14:4b: ea:47:f4:12:35:c2:18:41:39:f7:59:9e:a3:40:10: ac:95:64:e4:4f:d6:cb:d3:cf:0c:cf:f7:f5:b5:4d: f9:1b:a1:31:2e:0e:7a:e6:95:a2:40:ed:22:e8:ad: c9:9e:4d:9f:3e:d0:7c:9e:ac:94:4a:5a:1d:eb:32: 24:02:e5:4a:85:83:23:fd:55:f4:6d:ea:7f:d2:04: e2:53:93:17:73:20:7f:f7:cf:40:89:dd:4a:a0:32: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C5:C5:51:75:04:0C:0E:02:C3:63:96:EE:AA:9E:89:3E:9C:69:E0 X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d0:e3:2e:15:d6:fe:bd:13:d1:e2:9d:c6:aa:0e:c5:6a:f9: e4:2d:fa:ae:86:a2:1e:dc:bf:f1:57:bd:38:be:38:b2:fd:0d: fd:c1:99:66:93:88:06:3b:7d:a1:3a:c7:f8:ec:69:a7:5d:2f: b9:9a:b6:33:c3:eb:f8:18:b9:94:45:c0:70:50:95:77:23:e8: df:9d:ff:54:15:0b:e0:63:fd:4e:75:ef:c1:62:e1:a6:ab:be: be:37:00:82:41:98:02:28:24:47:f1:7a:64:c5:55:e3:9f:fa: c8:18:48:cf:6a:3a:9b:72:9a:a3:db:9e:a3:25:9e:6b:2e:a3: 3a:80:76:f4:92:2b:36:07:a9:13:ef:72:ca:34:3c:f3:8e:15: 55:2e:03:09:c7:47:e1:32:d9:b6:03:d2:b8:e9:71:33:d2:11: 73:e9:e5:17:0a:79:dd:61:1f:5f:cb:e2:52:4a:76:cc:87:ff: 2d:2c:50:88:24:96:52:b9:c0:94:07:ae:6f:78:98:e3:63:00: 7e:b4:fc:3f:55:2c:af:2a:7d:42:33:f7:f4:e0:8c:5e:82:48: 2c:7d:22:4e:96:53:7d:e5:78:71:63:2e:c4:57:2f:a9:4d:68: 92:2b:56:f7:5c:a0:ff:a4:68:97:ed:f2:f9:11:83:93:7f:fb: 8a:92:8d:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNTA4MDkwODM0NDRaFw0yNTA4MTYwODM0NDRaMBgxFjAUBgNV BAMTDTY4OTcwODI0LTNjMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1PMbamxXVV7yF8ZnImG3tssgjFhvzS+5ICXymNkjeMXOfrL8R3fKCndvmMX3Q fHwaMmVS9K3i7UvBuuqtyOewgn75+HC9+OxYRTFPjIIbfyHUpX6fN/SWuu57tnLR 3PqF8e9MtikHsuM4leDKS1yg5W0hsq5PLrufdmYgWqi2GKCL0H4GVEhL+Cv5u6nj 0dTUE3hisvvSfEhtdnKqsH79cosUS+pH9BI1whhBOfdZnqNAEKyVZORP1svTzwzP 9/W1TfkboTEuDnrmlaJA7SLorcmeTZ8+0HyerJRKWh3rMiQC5UqFgyP9VfRt6n/S BOJTkxdzIH/3z0CJ3UqgMnFhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURsXFUXUE DA4Cw2OW7qqeiT6caeAwHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADnQ4y4V1v69E9HincaqDsVq+eQt+q6Goh7cv/FXvTi+OLL9Df3BmWaT iAY7faE6x/jsaaddL7matjPD6/gYuZRFwHBQlXcj6N+d/1QVC+Bj/U5178Fi4aar vr43AIJBmAIoJEfxemTFVeOf+sgYSM9qOptymqPbnqMlnmsuozqAdvSSKzYHqRPv cso0PPOOFVUuAwnHR+Ey2bYD0rjpcTPSEXPp5RcKed1hH1/L4lJKdsyH/y0sUIgk llK5wJQHrm94mONjAH60/D9VLK8qfUIz9/TgjF6CSCx9Ik6WU33leHFjLsRXL6lN aJIrVvdcoP+kaJft8vkRg5N/+4qSjRA= -----END CERTIFICATE-----Generated at Sun Aug 10 16:06:03 2025 by rpki-client