$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: pIrazhBOynLOpx2chCoE3s/CR+3UAs3cApqxapG3cqI= Subject key identifier: F8:55:02:81:41:28:ED:0D:F2:9D:32:A3:10:31:0E:45:10:C0:91:6D Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 0209 Signing time: Fri 05 Sep 2025 02:31:31 +0000 Manifest this update: Fri 05 Sep 2025 02:31:30 +0000 Manifest next update: Fri 12 Sep 2025 02:31:30 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: v9XCzggEMXMNzFL2SGcMmkNVz+JsDb/p3tiBXUDqgws=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: Sep 5 02:31:30 2025 GMT Not After : Sep 12 02:31:30 2025 GMT Subject: CN=68ba4b82-57b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:cd:4c:bd:06:66:f4:2c:59:dd:0b:58:e0: 83:6f:f1:78:12:d0:0a:8a:fc:93:a6:38:dc:c3:56: fe:af:fb:04:16:fb:58:47:1c:57:cf:79:1d:31:25: 4a:ef:63:0f:c7:86:ed:4a:30:dd:0c:d2:96:b0:1c: de:55:ec:14:02:76:85:53:1d:b9:87:a9:25:25:2d: fd:16:bf:8d:2a:f3:cf:9b:9b:ba:a9:b5:7f:a3:e2: 01:d7:cb:de:22:e5:fa:6c:0b:5c:cf:61:0d:df:5e: 3f:a4:4a:0d:a7:0e:21:70:f7:9c:3c:cc:0b:65:85: 53:6c:dd:2e:b7:56:37:27:98:b8:90:48:7e:7a:ef: b6:99:2d:64:b1:54:33:6c:66:85:a4:ba:4f:b9:af: 72:52:93:6f:f6:1d:d7:4e:fa:b8:95:09:70:10:f8: 84:52:23:e5:79:d8:9d:a8:47:e7:e4:a4:b8:c9:a1: a1:2b:8f:65:e1:4d:b9:98:17:b8:13:9b:a2:eb:7d: 56:26:c1:f3:ce:a7:13:96:9a:bd:ba:fc:d3:ec:74: 57:a8:a7:24:da:75:25:fc:5d:9d:5b:cb:4a:78:be: 56:71:6e:d4:5f:2e:1f:b1:71:a6:f8:f7:70:45:e7: 3f:6b:91:ec:e3:a7:27:3b:6e:c1:0c:86:38:de:04: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:02:81:41:28:ED:0D:F2:9D:32:A3:10:31:0E:45:10:C0:91:6D X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cd:1e:84:57:fa:0e:e4:ab:ff:a7:65:6d:7f:cf:26:f1:df: b0:b3:5e:0f:b5:a7:8a:2f:a5:bf:13:99:0f:b4:58:7c:f3:d7: b7:0f:33:f4:fd:a6:46:21:61:78:66:7a:45:c4:f2:0c:cb:32: 4c:2f:d4:df:e0:16:45:40:b3:c6:87:d0:51:33:6f:24:e3:a4: 12:94:ae:de:84:8d:15:c5:2a:92:47:8d:ae:73:d4:6e:0e:ab: 7b:a9:a4:51:60:d5:cb:ac:c0:e2:f7:64:eb:69:a6:c1:84:6c: f6:ad:7e:78:6c:a3:76:33:68:87:1b:28:00:24:e0:60:5a:cb: 5a:d9:4d:7b:b7:f9:a8:d2:4d:bb:9c:a1:c6:33:bb:48:f2:43: 38:d2:43:f0:77:98:2a:4d:51:6e:01:30:df:e1:83:6e:c7:39: 43:4e:53:4e:a4:a7:26:32:73:e4:c1:cc:0f:f9:30:ff:0e:71: e3:27:50:a9:43:b1:c3:e4:f8:f3:80:f5:1a:8c:6a:f0:11:0e: 00:96:e7:48:91:be:02:e5:fe:0c:4d:ec:68:16:36:fd:7f:2e: 38:76:10:11:77:3d:6c:b2:25:bb:21:e1:c8:93:7e:d9:51:75: 7e:be:6f:cf:86:af:20:5d:ae:73:be:f5:15:a5:df:9f:0d:74: 36:da:32:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwOTA1MDIzMTMwWhcNMjUwOTEyMDIzMTMwWjAYMRYwFAYD VQQDEw02OGJhNGI4Mi01N2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TTNTL0GZvQsWd0LWOCDb/F4EtAKivyTpjjcw1b+r/sEFvtYRxxXz3kdMSVK 72MPx4btSjDdDNKWsBzeVewUAnaFUx25h6klJS39Fr+NKvPPm5u6qbV/o+IB18ve IuX6bAtcz2EN314/pEoNpw4hcPecPMwLZYVTbN0ut1Y3J5i4kEh+eu+2mS1ksVQz bGaFpLpPua9yUpNv9h3XTvq4lQlwEPiEUiPledidqEfn5KS4yaGhK49l4U25mBe4 E5ui631WJsHzzqcTlpq9uvzT7HRXqKck2nUl/F2dW8tKeL5WcW7UXy4fsXGm+Pdw Rec/a5Hs46cnO27BDIY43gQvdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhVAoFB KO0N8p0yoxAxDkUQwJFtMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdzR6EV/oO5Kv/p2Vtf88m8d+ws14PtaeKL6W/E5kPtFh889e3DzP0 /aZGIWF4ZnpFxPIMyzJML9Tf4BZFQLPGh9BRM28k46QSlK7ehI0VxSqSR42uc9Ru Dqt7qaRRYNXLrMDi92TraabBhGz2rX54bKN2M2iHGygAJOBgWsta2U17t/mo0k27 nKHGM7tI8kM40kPwd5gqTVFuATDf4YNuxzlDTlNOpKcmMnPkwcwP+TD/DnHjJ1Cp Q7HD5PjzgPUajGrwEQ4AludIkb4C5f4MTexoFjb9fy44dhARdz1ssiW7IeHIk37Z UXV+vm/Phq8gXa5zvvUVpd+fDXQ22jJr -----END CERTIFICATE-----Generated at Sat Sep 6 11:54:04 2025 by rpki-client