$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: J1zw9R1e5gwaVzdaFhcDpD9XP1b7hdKcCN1vTKrqyFA= Subject key identifier: D4:39:D8:EA:24:B5:E7:C6:1F:00:17:06:D1:B2:CB:D0:FB:52:C9:E3 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 01E8 Signing time: Thu 03 Jul 2025 02:39:52 +0000 Manifest this update: Thu 03 Jul 2025 02:39:52 +0000 Manifest next update: Thu 10 Jul 2025 02:39:52 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: HzPnqmjskkjtRsWavADVaRnA9fXU2ptSFxXdZr42C0E=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Jul 3 02:39:52 2025 GMT Not After : Jul 10 02:39:52 2025 GMT Subject: CN=6865ed78-dd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:22:43:3e:a7:d9:8b:03:c3:ec:b1:2d:c4:f9: 7e:ff:ae:da:47:92:d6:f5:d4:bf:2d:c2:b7:d8:73: fe:49:fb:79:35:90:71:3a:6d:64:b1:ad:ce:e2:a3: 85:fb:2b:49:60:6a:fa:8a:6b:29:9b:34:09:0f:f9: 0b:d3:af:b6:e1:bc:bd:c9:16:31:b4:4a:63:71:be: c0:53:c5:06:f8:3d:d3:d5:bb:98:00:b2:a0:a5:8f: 82:24:1b:91:2b:8c:f2:68:d9:fa:92:b4:53:c3:66: 18:d4:43:d1:26:e6:e6:44:3c:4e:41:9d:b1:78:8b: 27:a3:13:d7:3a:77:80:60:4e:c3:14:c0:74:85:10: f2:08:44:a1:47:f7:32:6e:6d:e9:54:b1:f3:77:45: 43:43:a0:5d:82:27:10:70:44:3d:33:ef:66:21:cb: 0e:94:a4:dd:15:e9:91:2e:5c:e3:40:a3:05:c5:15: b7:25:0e:89:57:5c:c0:ba:c4:5a:33:05:09:e2:1b: 99:33:d2:22:1a:6b:23:c1:b5:61:cc:7c:01:9c:8c: ae:89:5f:9b:f6:76:34:26:3c:b0:ea:74:6f:ee:83: 15:4d:3e:59:3c:d0:26:d6:0f:ae:e4:2d:eb:a0:11: c6:2e:ae:55:f8:a8:a5:d6:52:0c:ee:b9:84:21:54: 48:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:39:D8:EA:24:B5:E7:C6:1F:00:17:06:D1:B2:CB:D0:FB:52:C9:E3 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fe:4f:c1:fc:f1:13:b0:bb:23:d1:5a:1e:7d:01:a3:5d:be: 04:0a:5b:0e:fe:fc:e8:91:17:d6:7a:64:57:5a:b7:f2:b9:03: 5e:93:9d:ab:f1:62:a2:00:8e:fc:ae:be:e6:78:f0:c5:d9:28: c9:55:22:58:ba:a1:0e:42:7e:03:23:58:13:e1:57:5d:ab:57: 3c:ff:27:d6:63:fb:1a:8e:3d:3b:bd:a5:62:d8:ec:aa:6e:14: bb:4c:9d:1b:1f:d9:7d:82:83:fb:29:d0:c7:25:fa:b6:e0:5e: 08:1f:ad:35:1f:1d:4e:42:10:42:ee:12:60:b0:4a:b9:b6:b5: 48:77:37:bf:48:8a:8f:24:20:a0:ae:95:68:f9:8b:a9:d9:e3: 07:7b:2f:cf:84:45:b1:53:1e:10:1d:b9:46:11:b7:04:fc:3a: 08:78:6e:28:19:5f:49:d9:39:6a:21:c2:0c:df:6f:8b:d6:62: 90:35:28:54:b6:94:c5:da:57:3c:9d:b8:ad:c5:bc:fc:20:ee: 79:1d:5c:d9:bf:fd:e0:2f:df:11:0d:b1:ef:33:65:0e:e1:7c: 53:49:4f:00:13:5c:ce:fb:a3:90:63:53:71:9c:f7:38:8c:14: 82:c9:11:8c:01:bd:31:a0:91:b9:25:de:29:3e:ef:4b:c6:5c: 82:04:7e:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwNzAzMDIzOTUyWhcNMjUwNzEwMDIzOTUyWjAYMRYwFAYD VQQDEw02ODY1ZWQ3OC1kZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyJDPqfZiwPD7LEtxPl+/67aR5LW9dS/LcK32HP+Sft5NZBxOm1ksa3O4qOF +ytJYGr6imspmzQJD/kL06+24by9yRYxtEpjcb7AU8UG+D3T1buYALKgpY+CJBuR K4zyaNn6krRTw2YY1EPRJubmRDxOQZ2xeIsnoxPXOneAYE7DFMB0hRDyCEShR/cy bm3pVLHzd0VDQ6BdgicQcEQ9M+9mIcsOlKTdFemRLlzjQKMFxRW3JQ6JV1zAusRa MwUJ4huZM9IiGmsjwbVhzHwBnIyuiV+b9nY0Jjyw6nRv7oMVTT5ZPNAm1g+u5C3r oBHGLq5V+Kil1lIM7rmEIVRI2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQ52Ook tefGHwAXBtGyy9D7UsnjMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj/k/B/PETsLsj0VoefQGjXb4EClsO/vzokRfWemRXWrfyuQNek52r 8WKiAI78rr7mePDF2SjJVSJYuqEOQn4DI1gT4Vddq1c8/yfWY/sajj07vaVi2Oyq bhS7TJ0bH9l9goP7KdDHJfq24F4IH601Hx1OQhBC7hJgsEq5trVIdze/SIqPJCCg rpVo+Yup2eMHey/PhEWxUx4QHblGEbcE/DoIeG4oGV9J2TlqIcIM32+L1mKQNShU tpTF2lc8nbitxbz8IO55HVzZv/3gL98RDbHvM2UO4XxTSU8AE1zO+6OQY1NxnPc4 jBSCyRGMAb0xoJG5Jd4pPu9LxlyCBH68 -----END CERTIFICATE-----Generated at Thu Jul 3 12:21:58 2025 by rpki-client