$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: EdMtSfQS+K47ITcN7XFeRReeoy/S0aU60Gd/PUkDjjA= Subject key identifier: FA:86:82:AB:9C:BF:41:AE:42:61:93:EC:C9:BE:E1:2E:41:A6:98:3B Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 02:06:57 +0000 Manifest this update: Fri 25 Apr 2025 02:06:56 +0000 Manifest next update: Fri 02 May 2025 02:06:56 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: dpS04bkv6dDtbU4cmGHitv0VbXOAR9VwBqDSRc1r//A=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Apr 25 02:06:56 2025 GMT Not After : May 2 02:06:56 2025 GMT Subject: CN=680aee41-4a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:12:a9:70:7a:38:b5:8b:9b:ab:fd:70:f0:dd: ae:d6:a4:69:f2:e5:05:80:4a:2b:dd:e9:17:ae:fd: f2:3b:02:c6:08:2a:99:91:93:f9:3d:aa:56:68:ff: 27:25:2e:96:6e:f0:91:c6:d5:41:8e:5c:8e:c9:09: 8a:22:b0:55:c2:5b:40:f1:a8:81:60:18:a9:8b:16: 02:7a:26:58:5b:9e:3f:9e:69:bd:51:31:10:ea:ea: 9a:85:0c:7b:85:e6:f0:82:7b:39:a0:94:c1:09:03: cb:49:d1:f6:21:e2:76:49:47:b8:5e:fc:a5:09:b5: bf:b2:b9:b2:41:24:30:e8:40:20:ba:94:f5:c8:36: 4e:52:12:5a:e5:95:69:15:ce:d3:5d:41:47:84:f5: d5:9d:ea:66:08:48:fa:78:32:a5:6d:b4:45:35:7d: 92:2f:97:9d:a8:05:14:94:55:85:66:ef:5e:f1:d4: 6c:c0:67:3e:fc:b1:b7:95:93:6f:0b:5a:c8:1d:fc: db:42:6f:c1:c6:0b:12:15:45:f3:70:8b:82:c6:37: 3f:f5:1f:9c:ce:84:99:3b:f5:88:35:db:c9:0c:fb: 85:91:bd:98:f4:5c:e1:f9:60:1a:8c:02:16:ee:70: 2f:ad:17:2e:dc:3a:c7:39:3d:81:19:6c:22:25:3e: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:82:AB:9C:BF:41:AE:42:61:93:EC:C9:BE:E1:2E:41:A6:98:3B X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:48:44:b4:c8:83:12:75:d3:22:97:d5:cb:d5:e6:0d:f2:91: c6:87:58:7d:59:09:5c:49:1f:47:c8:cb:cd:e1:e4:67:5f:4b: 6b:f4:c4:0f:64:7c:94:84:4f:cb:78:b6:7f:2c:1a:da:72:ab: d9:7f:f7:36:b1:97:bf:ba:ba:da:c7:d7:db:76:f0:a9:05:8d: f0:f0:6c:0f:1d:03:cb:06:30:19:e9:09:b3:11:65:00:45:5d: c0:6f:87:a6:ed:55:2b:e8:5e:b0:f9:dd:22:e3:1e:a5:2c:4e: 6e:33:43:c7:1f:89:c7:27:9d:e3:f7:54:52:5b:93:50:93:8e: 19:84:4d:77:6d:e2:48:b6:4a:68:2e:79:43:6e:3f:05:4f:90: 72:12:fd:02:aa:99:b0:17:db:14:da:54:98:fa:af:e5:54:ee: ab:2e:d2:ed:b2:3c:4c:59:c8:f7:5c:61:24:00:35:90:0b:4e: 4a:c4:6b:04:9d:50:0c:d6:b4:5b:2e:a9:a7:1f:92:78:f9:65: 2a:04:7a:4d:1a:ee:c8:2c:f0:1b:9e:ea:28:76:b9:ea:b5:b4: 54:cd:b4:00:f6:f1:1e:36:bb:35:46:f3:93:46:84:68:ff:f9: 66:8f:e0:24:75:0b:1b:80:8e:16:f8:36:6f:b9:1a:4e:1c:82: 2d:a6:ee:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwNDI1MDIwNjU2WhcNMjUwNTAyMDIwNjU2WjAYMRYwFAYD VQQDEw02ODBhZWU0MS00YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4xKpcHo4tYubq/1w8N2u1qRp8uUFgEor3ekXrv3yOwLGCCqZkZP5PapWaP8n JS6WbvCRxtVBjlyOyQmKIrBVwltA8aiBYBipixYCeiZYW54/nmm9UTEQ6uqahQx7 hebwgns5oJTBCQPLSdH2IeJ2SUe4XvylCbW/srmyQSQw6EAgupT1yDZOUhJa5ZVp Fc7TXUFHhPXVnepmCEj6eDKlbbRFNX2SL5edqAUUlFWFZu9e8dRswGc+/LG3lZNv C1rIHfzbQm/BxgsSFUXzcIuCxjc/9R+czoSZO/WINdvJDPuFkb2Y9Fzh+WAajAIW 7nAvrRcu3DrHOT2BGWwiJT4zwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqGgquc v0GuQmGT7Mm+4S5Bppg7MB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApSES0yIMSddMil9XL1eYN8pHGh1h9WQlcSR9HyMvN4eRnX0tr9MQP ZHyUhE/LeLZ/LBracqvZf/c2sZe/urrax9fbdvCpBY3w8GwPHQPLBjAZ6QmzEWUA RV3Ab4em7VUr6F6w+d0i4x6lLE5uM0PHH4nHJ53j91RSW5NQk44ZhE13beJItkpo LnlDbj8FT5ByEv0CqpmwF9sU2lSY+q/lVO6rLtLtsjxMWcj3XGEkADWQC05KxGsE nVAM1rRbLqmnH5J4+WUqBHpNGu7ILPAbnuoodrnqtbRUzbQA9vEeNrs1RvOTRoRo //lmj+AkdQsbgI4W+DZvuRpOHIItpu4y -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:47 2025 by rpki-client