$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: 4EalxgvUCPXMtB5aR2oDUdu/IZc1rxIDZPiXU1ojzfQ= Subject key identifier: 0D:F6:C1:16:06:82:93:65:D2:76:50:A2:BC:17:82:90:73:63:22:2E Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 0200 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 01FC Signing time: Mon 11 Aug 2025 02:28:14 +0000 Manifest this update: Mon 11 Aug 2025 02:28:14 +0000 Manifest next update: Mon 18 Aug 2025 02:28:14 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: JykHzoNZBUa0j+RWo7nTFRMUP0jOFftm7bUhDzPJ9aU=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 512 (0x200) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Aug 11 02:28:14 2025 GMT Not After : Aug 18 02:28:14 2025 GMT Subject: CN=6899553e-f735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:2d:42:81:80:ab:0a:7a:7b:d7:7a:b6:ad: 9c:7f:df:0a:9f:4d:9c:15:c0:fa:d4:83:85:d3:ed: f0:f1:90:ed:d8:86:01:e2:b5:f8:11:a0:7b:b7:19: 06:3a:a6:f7:0c:bb:e1:90:4d:65:c3:41:88:91:79: 71:17:2e:2c:c0:68:2f:25:c4:75:b5:ec:a2:90:2f: 77:63:c8:06:31:ed:3d:65:8a:f9:74:c6:b1:ca:0e: aa:cc:b5:05:0e:96:cb:bf:c4:19:78:44:47:50:ab: cc:b7:a0:cf:9d:eb:d3:4c:8f:2e:a1:96:c5:e6:43: 68:84:5c:b4:e1:6a:72:56:d5:d3:09:48:1b:fe:24: 4c:fc:6f:c6:9d:e9:4a:76:63:22:7b:9c:85:b7:f4: 26:22:c8:b6:0a:49:3e:a2:f2:c4:2d:f4:47:a3:b1: e7:e6:01:e8:a6:65:64:98:21:6e:bb:64:4b:54:56: 4d:b5:d1:90:21:8b:6c:dd:be:e7:05:1d:8c:d9:b3: 54:79:e9:af:5c:63:fc:6c:ae:1b:72:90:c7:f8:b5: 74:f4:5b:42:c3:a6:29:01:b9:5a:48:b8:4b:fa:a2: 2a:6b:9b:50:49:7e:f4:25:f0:a8:1e:bc:84:ed:88: 97:d3:47:fe:42:bd:8b:dd:da:76:a9:7b:8f:74:03: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F6:C1:16:06:82:93:65:D2:76:50:A2:BC:17:82:90:73:63:22:2E X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:61:fe:6d:5d:f4:95:ad:79:96:1b:92:fd:94:1e:8c:0d:42: 13:4e:ac:90:b3:26:bf:fa:2a:47:59:d1:0a:3e:5f:9a:1a:b5: 0a:74:73:5f:30:b6:36:19:80:89:14:d9:1f:4e:b8:e5:57:3a: 02:b7:e5:6a:71:4e:71:b2:b6:c4:25:b6:4b:31:0b:e0:74:39: 1d:d0:0e:b9:1b:c7:bd:54:cf:e7:cc:b7:ce:b8:14:44:02:a8: ec:0a:9b:b6:5c:8f:99:4a:16:a0:da:66:c6:0c:f9:b2:6a:b4: 0f:23:8f:9d:ff:f4:18:dc:91:86:c5:cd:ce:c2:69:36:dc:97: fe:67:7b:0f:0f:05:85:a6:29:0b:9d:37:c2:33:34:7d:14:4e: bc:ce:cd:52:9b:32:8e:1c:82:77:b0:04:73:c0:4c:f2:ca:c7: de:dc:3a:44:a3:cf:83:e6:6a:32:21:1e:58:5f:4b:17:ec:61: f1:59:55:48:27:2a:69:aa:ad:e5:4c:35:df:be:30:e5:9e:35: 5e:07:c2:9c:0d:a7:ad:d2:9e:75:1e:92:9c:fc:ad:55:0a:c2: 49:5c:0f:fe:81:95:2d:a5:4a:e3:76:01:16:f0:85:06:8b:5c: a2:fb:94:26:7a:46:8d:68:85:fc:7e:93:9a:2e:d6:dd:e0:2d: 1d:d2:eb:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwODExMDIyODE0WhcNMjUwODE4MDIyODE0WjAYMRYwFAYD VQQDEw02ODk5NTUzZS1mNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5AtQoGAqwp6e9d6tq2cf98Kn02cFcD61IOF0+3w8ZDt2IYB4rX4EaB7txkG Oqb3DLvhkE1lw0GIkXlxFy4swGgvJcR1teyikC93Y8gGMe09ZYr5dMaxyg6qzLUF DpbLv8QZeERHUKvMt6DPnevTTI8uoZbF5kNohFy04WpyVtXTCUgb/iRM/G/GnelK dmMie5yFt/QmIsi2Ckk+ovLELfRHo7Hn5gHopmVkmCFuu2RLVFZNtdGQIYts3b7n BR2M2bNUeemvXGP8bK4bcpDH+LV09FtCw6YpAblaSLhL+qIqa5tQSX70JfCoHryE 7YiX00f+Qr2L3dp2qXuPdAOAlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA32wRYG gpNl0nZQorwXgpBzYyIuMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWYf5tXfSVrXmWG5L9lB6MDUITTqyQsya/+ipHWdEKPl+aGrUKdHNf MLY2GYCJFNkfTrjlVzoCt+VqcU5xsrbEJbZLMQvgdDkd0A65G8e9VM/nzLfOuBRE AqjsCpu2XI+ZShag2mbGDPmyarQPI4+d//QY3JGGxc3Owmk23Jf+Z3sPDwWFpikL nTfCMzR9FE68zs1SmzKOHIJ3sARzwEzyysfe3DpEo8+D5moyIR5YX0sX7GHxWVVI Jyppqq3lTDXfvjDlnjVeB8KcDaet0p51HpKc/K1VCsJJXA/+gZUtpUrjdgEW8IUG i1yi+5QmekaNaIX8fpOaLtbd4C0d0utu -----END CERTIFICATE-----Generated at Mon Aug 11 13:03:27 2025 by rpki-client