$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft File: bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft (raw, json) Hash identifier: 4H91YVJ4vXRgWh0l/QjQGkk01wvFqP89CemplcOJz0Q= Subject key identifier: 6A:B6:FC:7C:7E:88:8E:E6:34:80:3D:C9:A5:62:5F:95:3C:B3:F5:50 Authority key identifier: 6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 Certificate issuer: /CN=A9117CD5/serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft Manifest number: 78 Signing time: Sun 01 Mar 2026 09:06:33 +0000 Manifest this update: Sun 01 Mar 2026 09:06:33 +0000 Manifest next update: Sun 08 Mar 2026 09:06:33 +0000 Files and hashes: 1: bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl (hash: oUc0bHJrT9AlfTBAMFgOg1QWvuxfQtktd5i96y6+BzM=) 2: 0BC2889A5FA911F0BE187C31C4F9AE02.roa (hash: f1UUKk9+4mpBrjo6aq4pvsFyFPqGlKiCEdavWTpQG0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:06:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CD5, serialNumber=6C42F04F80BB068EC246CE6887177EF17C86CF33 Validity Not Before: Mar 1 09:06:33 2026 GMT Not After : Mar 8 09:06:33 2026 GMT Subject: CN=69a40199-5f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:49:51:1c:fc:ea:ea:d6:af:82:1b:e0:ea: a2:21:57:ef:79:a8:17:25:05:bc:09:af:c4:58:82: 2e:9a:6f:9c:13:6c:03:84:c7:98:d8:73:79:c4:d7: 0f:57:3a:6e:9b:cb:42:57:69:68:23:f0:3f:71:a5: 76:0c:70:e4:9e:1e:3f:fd:62:a5:9c:81:3a:4b:15: cc:d2:b8:88:c4:e9:6a:82:2c:2b:0d:fe:6c:a2:09: 37:07:7b:ac:82:3f:da:c3:df:70:78:cc:b2:e6:75: e5:ba:2b:b8:34:2c:c1:69:81:a1:84:9c:b1:6d:28: aa:d4:59:82:28:ff:df:b1:ab:8f:24:e2:a9:6e:39: 3a:cd:3e:93:28:cc:50:6c:c9:03:a2:9e:01:b2:51: d1:b5:d1:f9:ec:68:29:5c:42:b1:41:d9:0d:6f:32: 4b:d4:25:74:15:11:18:90:c9:59:89:4d:32:05:5f: 24:11:e1:b3:93:c1:69:92:5f:7c:9f:1c:af:b6:be: 09:ec:69:cf:fb:ff:9a:51:52:a2:e0:04:3b:38:5c: de:00:f2:5c:6b:62:45:3a:da:5c:5b:be:9e:47:4c: a6:89:34:22:68:67:54:70:f0:e0:e4:ea:05:29:4a: 7b:1d:bf:c1:05:50:cc:30:c5:1f:b8:54:90:f1:b6: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B6:FC:7C:7E:88:8E:E6:34:80:3D:C9:A5:62:5F:95:3C:B3:F5:50 X509v3 Authority Key Identifier: keyid:6C:42:F0:4F:80:BB:06:8E:C2:46:CE:68:87:17:7E:F1:7C:86:CF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bELwT4C7Bo7CRs5ohxd-8XyGzzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CD5/66C3320E5FA811F0B5978C2CC4F9AE02/bELwT4C7Bo7CRs5ohxd-8XyGzzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:0b:13:68:d6:d0:9f:91:b1:d9:87:4f:46:0b:91:be:1e:76: b0:23:18:d3:d2:35:15:c8:61:cd:9e:b4:1b:fa:9c:f0:da:8e: 6c:ae:60:6d:ea:7d:96:f1:76:a4:12:57:31:8b:63:07:08:f9: 96:30:dc:1a:da:2e:ca:cc:49:cd:ef:86:d1:ad:68:a1:06:b6: 52:92:48:41:40:da:8c:b4:6b:1f:51:d2:c7:07:8c:fa:65:35: 60:ff:16:f8:ad:cc:94:c8:b0:45:1a:be:70:44:52:08:ce:c4: 78:89:66:6c:2c:21:b3:5c:b1:ea:47:4d:30:79:d3:a2:57:a1: 52:de:54:f9:a8:57:88:08:78:2d:5a:01:ef:da:79:f8:88:87: c9:79:b7:e8:c5:e9:e8:d4:f4:b0:89:eb:e0:09:6f:94:ce:03: 04:65:ca:ee:fb:98:51:9e:04:aa:1e:da:59:95:5c:e3:3d:17: 20:1c:70:d9:58:c9:77:4f:6d:4a:96:ec:53:03:16:7e:24:6a: 32:c1:6b:d2:0f:35:19:66:c5:7d:bd:51:4d:85:61:25:76:69: e1:2f:ce:27:91:ed:be:0d:57:1e:fd:f9:23:09:3d:81:16:2b: aa:85:b9:11:9f:37:97:b4:71:26:4c:32:39:3e:25:61:4c:e8: e7:76:90:8c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx N0NENTExMC8GA1UEBRMoNkM0MkYwNEY4MEJCMDY4RUMyNDZDRTY4ODcxNzdFRjE3 Qzg2Q0YzMzAeFw0yNjAzMDEwOTA2MzNaFw0yNjAzMDgwOTA2MzNaMBgxFjAUBgNV BAMTDTY5YTQwMTk5LTVmNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoTElRHPzq6tavghvg6qIhV+95qBclBbwJr8RYgi6ab5wTbAOEx5jYc3nE1w9X Om6by0JXaWgj8D9xpXYMcOSeHj/9YqWcgTpLFczSuIjE6WqCLCsN/myiCTcHe6yC P9rD33B4zLLmdeW6K7g0LMFpgaGEnLFtKKrUWYIo/9+xq48k4qluOTrNPpMozFBs yQOingGyUdG10fnsaClcQrFB2Q1vMkvUJXQVERiQyVmJTTIFXyQR4bOTwWmSX3yf HK+2vgnsac/7/5pRUqLgBDs4XN4A8lxrYkU62lxbvp5HTKaJNCJoZ1Rw8ODk6gUp Snsdv8EFUMwwxR+4VJDxtsR9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUarb8fH6I juY0gD3JpWJflTyz9VAwHwYDVR0jBBgwFoAUbELwT4C7Bo7CRs5ohxd+8XyGzzMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3Q0Q1LzY2QzMzMjBFNUZB ODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83Q1JzNW9oeGQtOFh5R3p6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkVMd1Q0QzdCbzdDUnM1b2h4ZC04WHlHenpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 Q0Q1LzY2QzMzMjBFNUZBODExRjBCNTk3OEMyQ0M0RjlBRTAyL2JFTHdUNEM3Qm83 Q1JzNW9oeGQtOFh5R3p6TS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB2CxNo1tCfkbHZh09GC5G+HnawIxjT0jUVyGHNnrQb+pzw2o5srmBt6n2W8Xak Elcxi2MHCPmWMNwa2i7KzEnN74bRrWihBrZSkkhBQNqMtGsfUdLHB4z6ZTVg/xb4 rcyUyLBFGr5wRFIIzsR4iWZsLCGzXLHqR00wedOiV6FS3lT5qFeICHgtWgHv2nn4 iIfJebfoxeno1PSwievgCW+UzgMEZcru+5hRngSqHtpZlVzjPRcgHHDZWMl3T21K luxTAxZ+JGoywWvSDzUZZsV9vVFNhWEldmnhL84nke2+DVce/fkjCT2BFiuqhbkR nzeXtHEmTDI5PiVhTOjndpCM -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:21 2026 by rpki-client