$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: 762SDuZIvdOLPIqgZHv156RJz3nfb/E3+S+XEK2fFT4= Subject key identifier: A0:9E:7C:F0:6C:48:1D:A9:CA:21:C3:81:C7:17:11:B1:64:0D:F7:06 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0202 Signing time: Sat 23 Aug 2025 02:25:22 +0000 Manifest this update: Sat 23 Aug 2025 02:25:21 +0000 Manifest next update: Sat 30 Aug 2025 02:25:21 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: UgdHYclPdk7kw2g3eTAq+RNsM0FfGuY4ygcVs25DI2Q=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Aug 23 02:25:21 2025 GMT Not After : Aug 30 02:25:21 2025 GMT Subject: CN=68a92691-e834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:b1:1d:81:1b:89:22:7f:c8:2b:03:25:34: 3d:12:26:81:2c:3b:7a:73:fc:ed:49:c4:40:aa:b7: 77:77:7d:da:2d:78:4e:e7:73:82:5d:9f:7b:2f:fb: f4:e7:fa:31:b3:7b:e5:8f:fb:0b:b7:4e:18:04:78: d5:bd:32:b4:e4:26:57:88:62:d2:61:68:30:b8:c8: 8b:71:0f:c7:e3:e2:10:8c:c7:2d:03:dc:eb:66:9c: df:4b:9d:15:f5:d6:fd:5b:9e:08:6f:90:21:d1:98: 1e:9d:ec:4d:8c:04:03:b7:a5:60:ab:cf:7a:4c:cc: 12:ad:c2:1b:24:62:69:d8:e3:83:26:c4:b3:9f:1b: 75:61:5d:19:28:72:61:32:96:1e:7e:6b:5e:d9:48: 6c:3e:a5:ab:ff:ac:4b:26:e2:9c:c5:1a:5f:15:35: 19:86:08:a3:a2:86:a1:b5:0a:3f:d8:b8:c5:12:b5: 19:a6:56:6e:4f:a2:1d:4a:ed:a1:a5:05:11:3a:6f: 72:85:48:ce:f1:fd:b4:59:ae:66:48:b6:b1:e1:eb: e1:3e:8c:27:22:7c:af:7e:56:c5:e7:fe:13:e3:32: 25:49:d2:03:89:28:2c:b3:c1:0b:9e:08:54:eb:0b: b2:17:01:62:0b:ac:d7:e6:da:77:a6:40:f0:db:1f: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:7C:F0:6C:48:1D:A9:CA:21:C3:81:C7:17:11:B1:64:0D:F7:06 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c3:b6:04:0c:ed:42:50:a5:f5:43:83:d5:eb:03:66:25:95: 4f:0f:f2:64:8b:71:34:82:9a:32:ea:cc:10:a5:31:2f:59:0a: ea:56:30:5a:8f:9f:5d:73:a2:61:82:20:c8:2a:46:d4:a4:b0: c9:f7:da:33:8b:d8:a6:e6:0d:77:db:a2:2d:06:04:32:d1:c8: fd:07:0f:38:af:db:69:0d:d0:f8:48:24:a4:81:e9:13:d7:ac: e1:68:ac:d8:ec:d7:46:4f:86:e7:e3:bd:54:0e:37:ce:0a:13: 84:88:bf:26:ee:dd:b6:50:f6:46:df:be:60:c0:7c:4a:82:d7: 9d:77:a2:07:93:56:e5:52:75:33:40:95:40:ac:3a:9d:ac:d5: e6:57:d3:79:e1:96:d3:58:6d:13:43:b5:0c:25:55:47:a4:1d: b9:80:98:85:c6:5b:99:62:bc:d4:14:41:9e:a8:50:c7:79:d6: 16:83:fa:cf:70:4f:c5:2e:da:f1:b8:7e:93:fc:0d:5c:2d:cb: 98:50:f4:92:73:84:fc:4d:0c:1c:a7:8d:6b:5e:3e:2e:69:78: a7:0f:ee:bd:57:c0:4d:be:0a:b1:e9:de:96:8c:e2:3d:bb:12: 77:51:0f:b8:8b:3b:dc:d1:65:7e:48:8c:f3:a1:16:05:b6:dc: 96:42:e7:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwODIzMDIyNTIxWhcNMjUwODMwMDIyNTIxWjAYMRYwFAYD VQQDEw02OGE5MjY5MS1lODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ6xHYEbiSJ/yCsDJTQ9EiaBLDt6c/ztScRAqrd3d33aLXhO53OCXZ97L/v0 5/oxs3vlj/sLt04YBHjVvTK05CZXiGLSYWgwuMiLcQ/H4+IQjMctA9zrZpzfS50V 9db9W54Ib5Ah0ZgenexNjAQDt6Vgq896TMwSrcIbJGJp2OODJsSznxt1YV0ZKHJh MpYefmte2UhsPqWr/6xLJuKcxRpfFTUZhgijooahtQo/2LjFErUZplZuT6IdSu2h pQUROm9yhUjO8f20Wa5mSLax4evhPownInyvflbF5/4T4zIlSdIDiSgss8ELnghU 6wuyFwFiC6zX5tp3pkDw2x+D8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCefPBs SB2pyiHDgccXEbFkDfcGMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbw7YEDO1CUKX1Q4PV6wNmJZVPD/Jki3E0gpoy6swQpTEvWQrqVjBa j59dc6JhgiDIKkbUpLDJ99ozi9im5g1326ItBgQy0cj9Bw84r9tpDdD4SCSkgekT 16zhaKzY7NdGT4bn471UDjfOChOEiL8m7t22UPZG375gwHxKgtedd6IHk1blUnUz QJVArDqdrNXmV9N54ZbTWG0TQ7UMJVVHpB25gJiFxluZYrzUFEGeqFDHedYWg/rP cE/FLtrxuH6T/A1cLcuYUPSSc4T8TQwcp41rXj4uaXinD+69V8BNvgqx6d6WjOI9 uxJ3UQ+4izvc0WV+SIzzoRYFttyWQudU -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:16 2025 by rpki-client