$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: 2+eQogBBPtYkTsivxTTY+znvvwqMxdLkUdtXoafA9RI= Subject key identifier: 70:48:FC:E9:4A:F5:4B:6E:22:09:47:A8:68:A3:16:8F:03:AB:3C:94 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 01F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 01F0 Signing time: Sat 19 Jul 2025 02:41:00 +0000 Manifest this update: Sat 19 Jul 2025 02:41:00 +0000 Manifest next update: Sat 26 Jul 2025 02:41:00 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: bfBp+sr/WR9vRZ04RFqDwEm9cpsqTcsQrIKzwSyYqrg=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:40:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 500 (0x1f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Jul 19 02:41:00 2025 GMT Not After : Jul 26 02:41:00 2025 GMT Subject: CN=687b05bc-b3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:67:e5:a2:99:40:40:de:d3:62:b2:83:99: fe:a1:c5:aa:68:b2:0a:58:f9:24:10:71:91:e2:3e: bf:39:ca:41:98:b2:16:c3:31:5f:d4:bd:d3:6d:c1: ed:0e:ef:d8:aa:b8:d3:22:ca:36:52:e4:98:9b:77: 54:4b:a0:f9:ae:3a:50:93:99:d0:53:92:75:53:0f: a8:7d:8f:d4:66:ee:91:e3:08:44:3d:95:8a:15:fb: 3e:60:19:1c:5c:75:df:a5:43:f4:d3:cb:1a:c1:1f: 77:1c:71:70:36:12:05:ab:b2:a8:19:a5:1c:bc:5c: 94:1e:09:ae:9c:db:c9:b4:9f:3a:d6:c6:9b:aa:4b: 6d:b5:60:00:c5:1a:3d:67:ab:cb:ca:3f:b5:86:bb: 2d:49:1b:1d:cd:55:95:ac:12:2f:c8:e0:49:a4:0e: b5:9b:2e:f3:79:9c:d4:1a:b1:54:88:06:26:67:11: c6:38:e1:bd:9f:a8:f6:d2:81:b8:07:5d:68:88:59: eb:a6:cf:15:02:11:79:bd:7c:b4:d3:a6:89:cf:f7: 0b:0e:4d:e3:fb:a7:ee:f2:37:12:39:19:a1:47:65: 5d:00:2c:ee:b9:5e:ab:05:fc:85:4b:ab:70:45:66: b9:cd:71:f4:b3:58:5a:10:03:33:27:5d:27:28:93: f9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:48:FC:E9:4A:F5:4B:6E:22:09:47:A8:68:A3:16:8F:03:AB:3C:94 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9b:54:fe:95:e9:b6:0f:d5:c5:54:b6:e4:49:b6:ba:11:21: 70:d2:30:ec:b9:3c:84:ba:22:0e:2d:41:6b:94:6b:c7:ff:10: aa:9e:05:10:8c:37:2c:e6:e4:0a:c7:39:14:15:f7:12:aa:12: 9b:36:cb:4c:25:4b:43:d0:1c:17:a8:81:ed:44:1e:e8:ca:0e: 27:1d:89:3f:2e:a6:40:5d:a2:1b:b7:38:c0:77:1f:e3:ec:8f: 89:91:c8:2d:7f:74:15:ce:df:26:76:53:c5:a6:be:25:53:f6: e8:f6:1c:ad:ee:1c:fd:56:f6:99:9d:7b:00:17:28:4b:2c:30: d2:fa:27:13:7f:56:0e:00:d9:09:e0:e6:95:75:bb:a0:87:9c: 82:e6:f1:6c:5f:3b:d0:2e:ad:ee:32:98:ec:06:4c:8e:f1:63: 00:ab:51:ee:3e:90:6f:31:62:6d:be:41:a7:b3:31:0c:93:1d: cd:90:15:5d:ca:d4:8d:24:9e:bf:7b:bb:d7:9e:13:48:d7:87: 5f:80:ee:d4:64:e3:bf:89:80:09:86:d4:98:aa:4d:32:c2:d6: c6:8f:38:48:01:31:52:9b:a1:be:38:ae:1f:68:13:08:d5:21: d3:3f:6b:c2:3a:47:0b:89:f3:f7:a6:2c:d0:c7:98:46:35:a9: 98:45:26:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwNzE5MDI0MTAwWhcNMjUwNzI2MDI0MTAwWjAYMRYwFAYD VQQDEw02ODdiMDViYy1iM2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaJn5aKZQEDe02Kyg5n+ocWqaLIKWPkkEHGR4j6/OcpBmLIWwzFf1L3TbcHt Du/YqrjTIso2UuSYm3dUS6D5rjpQk5nQU5J1Uw+ofY/UZu6R4whEPZWKFfs+YBkc XHXfpUP008sawR93HHFwNhIFq7KoGaUcvFyUHgmunNvJtJ861sabqktttWAAxRo9 Z6vLyj+1hrstSRsdzVWVrBIvyOBJpA61my7zeZzUGrFUiAYmZxHGOOG9n6j20oG4 B11oiFnrps8VAhF5vXy006aJz/cLDk3j+6fu8jcSORmhR2VdACzuuV6rBfyFS6tw RWa5zXH0s1haEAMzJ10nKJP5JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBI/OlK 9UtuIglHqGijFo8DqzyUMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLm1T+lem2D9XFVLbkSba6ESFw0jDsuTyEuiIOLUFrlGvH/xCqngUQ jDcs5uQKxzkUFfcSqhKbNstMJUtD0BwXqIHtRB7oyg4nHYk/LqZAXaIbtzjAdx/j 7I+Jkcgtf3QVzt8mdlPFpr4lU/bo9hyt7hz9VvaZnXsAFyhLLDDS+icTf1YOANkJ 4OaVdbugh5yC5vFsXzvQLq3uMpjsBkyO8WMAq1HuPpBvMWJtvkGnszEMkx3NkBVd ytSNJJ6/e7vXnhNI14dfgO7UZOO/iYAJhtSYqk0ywtbGjzhIATFSm6G+OK4faBMI 1SHTP2vCOkcLifP3pizQx5hGNamYRSZx -----END CERTIFICATE-----Generated at Sun Jul 20 14:38:38 2025 by rpki-client