$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: BX4c/vphw3EKVmhuoJ23JKDVsio1ivozW27i39g4fwE= Subject key identifier: 45:13:85:B9:38:F2:F3:97:A3:62:47:0D:E9:B0:F9:00:7E:52:DC:6F Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0223 Signing time: Mon 20 Oct 2025 03:37:42 +0000 Manifest this update: Mon 20 Oct 2025 03:37:42 +0000 Manifest next update: Mon 27 Oct 2025 03:37:42 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: nKCIyyfnjE/DG/mfooBuZwby+hoMpI5jTzCMZYP/08Q=) 2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: mJp++FSkSB9vBV5hzPsikmtxWjCOi95icFKxEtibOls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 03:37:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Oct 20 03:37:42 2025 GMT Not After : Oct 27 03:37:42 2025 GMT Subject: CN=68f5ae86-2c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:73:c0:22:f2:7a:28:c6:ec:e9:43:62:a1: 70:2e:f4:b9:0a:e5:df:d9:75:49:7f:00:2c:27:0b: 8d:1e:dc:d5:c9:c6:7b:51:2c:ea:9e:18:f0:cc:82: ff:7e:ce:ea:7e:da:42:be:fb:f1:02:33:43:20:ae: fb:ea:02:2d:f3:8d:96:13:c6:4a:98:25:89:2c:b2: 54:5d:6b:69:f5:8c:41:aa:2a:b8:f6:96:84:3c:00: 24:4d:ac:42:b4:29:2c:7e:64:44:cb:2f:f9:60:ed: 5c:1d:80:e6:db:58:9e:55:12:4c:c0:06:a0:3b:34: d5:5c:28:6b:4b:32:3c:d7:d7:d9:84:4b:24:6f:4c: 7d:01:af:af:b8:b9:24:83:7f:4a:8b:1f:3e:bc:fb: 50:c7:29:c3:ad:8a:6c:e0:63:7e:d8:a3:50:69:34: b4:a5:fe:8f:37:38:a6:c5:9e:d2:56:8c:a2:f1:ec: d0:a6:e8:57:ee:75:ea:0c:1a:31:6a:d1:1a:7b:53: 65:2d:44:5f:c2:ee:3b:62:96:ac:a9:68:83:83:70: ee:3a:7b:c3:8c:96:8b:2e:03:b0:53:eb:9f:9e:05: 14:5c:72:9c:f4:ad:87:69:9a:6b:c0:2c:44:f3:49: f8:2c:82:2d:b8:e2:fe:31:69:ad:32:fc:47:86:8e: 7e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:13:85:B9:38:F2:F3:97:A3:62:47:0D:E9:B0:F9:00:7E:52:DC:6F X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:1f:ff:2b:0e:1a:7e:e5:fc:94:73:3c:0a:b5:9b:8d:e2:0b: 03:61:e7:cd:61:63:81:44:5f:d6:23:bb:61:3c:5f:8e:df:db: f9:52:61:ea:24:a9:c2:87:27:e5:86:e6:c5:2b:93:09:4b:d9: 0c:73:2b:3d:f1:b4:56:e5:a8:36:07:85:a2:ce:15:f2:12:a7: 65:e7:ba:47:c4:13:32:5e:74:9c:be:5c:0e:ec:84:bc:69:58: eb:b9:8a:83:63:8b:14:5b:fb:fd:f7:a0:52:2a:03:36:5d:42: 36:74:fd:0d:37:3d:28:89:2c:1e:2e:27:3e:e2:bf:34:4b:ce: ec:3e:a1:ac:6b:11:ab:c8:90:27:92:42:8f:a7:5d:07:3b:18: c1:5d:96:73:8f:6d:b1:c3:71:fb:ca:29:ad:60:db:ca:55:59: ab:cd:17:9a:28:2c:c1:01:d9:44:5d:ca:08:d3:8c:70:6e:f8: 71:45:e4:d4:14:07:48:2d:3b:9f:74:9e:2d:f6:73:b4:e2:25: 8b:e2:62:3a:9e:ee:70:c1:31:96:c2:8b:5f:1d:1d:6c:fe:45: 68:f7:08:6a:a1:50:b6:99:e6:33:2a:95:dc:cd:74:df:71:77: 81:52:31:55:8e:6f:f0:e4:a9:de:7e:c6:6e:d1:37:57:d4:91: a4:b5:71:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUxMDIwMDMzNzQyWhcNMjUxMDI3MDMzNzQyWjAYMRYwFAYD VQQDEw02OGY1YWU4Ni0yYzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nBzwCLyeijG7OlDYqFwLvS5CuXf2XVJfwAsJwuNHtzVycZ7USzqnhjwzIL/ fs7qftpCvvvxAjNDIK776gIt842WE8ZKmCWJLLJUXWtp9YxBqiq49paEPAAkTaxC tCksfmREyy/5YO1cHYDm21ieVRJMwAagOzTVXChrSzI819fZhEskb0x9Aa+vuLkk g39Kix8+vPtQxynDrYps4GN+2KNQaTS0pf6PNzimxZ7SVoyi8ezQpuhX7nXqDBox atEae1NlLURfwu47YpasqWiDg3DuOnvDjJaLLgOwU+ufngUUXHKc9K2HaZprwCxE 80n4LIItuOL+MWmtMvxHho5+iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUThbk4 8vOXo2JHDemw+QB+UtxvMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIH/8rDhp+5fyUczwKtZuN4gsDYefNYWOBRF/WI7thPF+O39v5UmHq JKnChyflhubFK5MJS9kMcys98bRW5ag2B4WizhXyEqdl57pHxBMyXnScvlwO7IS8 aVjruYqDY4sUW/v996BSKgM2XUI2dP0NNz0oiSweLic+4r80S87sPqGsaxGryJAn kkKPp10HOxjBXZZzj22xw3H7yimtYNvKVVmrzReaKCzBAdlEXcoI04xwbvhxReTU FAdILTufdJ4t9nO04iWL4mI6nu5wwTGWwotfHR1s/kVo9whqoVC2meYzKpXczXTf cXeBUjFVjm/w5KnefsZu0TdX1JGktXF/ -----END CERTIFICATE-----Generated at Tue Oct 21 02:54:41 2025 by rpki-client