$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft File: 86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json) Hash identifier: uFDeJ/3ML2NSsxyEAgPzNrEbyesm42/fG/96FuxCmzs= Subject key identifier: A6:62:0F:A9:AF:0F:F7:F9:05:60:80:52:7C:A5:0C:85:E0:3B:C7:65 Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C Certificate issuer: /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft Manifest number: 01D7 Signing time: Sat 31 May 2025 02:29:21 +0000 Manifest this update: Sat 31 May 2025 02:29:20 +0000 Manifest next update: Sat 07 Jun 2025 02:29:20 +0000 Files and hashes: 1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: RBb01nzaGU5orlfPFdCXtYUAiWsOvbXCwyhv6rcwlXU=) 2: C7E21B026AED11ED97121F2BC4F9AE02.roa (hash: qsaIGRiFRWstbJ88ir6bwAs/8uMjkIf/J02kliFht7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C Validity Not Before: May 31 02:29:20 2025 GMT Not After : Jun 7 02:29:20 2025 GMT Subject: CN=683a6981-f547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:f1:4c:33:b4:0b:b5:06:8f:15:33:92:1f: c1:48:85:10:52:86:f9:35:cb:1d:88:0e:3b:7f:b1: 3d:33:42:b1:41:f6:3a:43:0f:ec:cc:d6:7f:6a:34: 7e:07:60:4a:b3:a9:d6:e0:64:b2:0b:bc:01:6d:4e: c7:dd:36:d6:a4:62:84:97:bb:58:0f:44:2a:11:fd: 4b:a2:12:2c:38:e1:5b:d4:5b:41:d2:f2:68:92:a6: bf:cc:6c:0a:02:8b:59:da:41:d3:c3:c5:9c:ea:9d: 21:93:0f:2c:a1:05:02:ca:9f:67:ce:bc:21:97:7d: d5:08:99:3b:05:74:38:b1:c1:aa:ba:a1:bb:a6:b7: ba:15:7b:31:6b:ad:cb:60:8b:e7:75:62:8e:b1:b8: 27:52:ee:6e:71:f3:ac:bc:00:99:b2:89:3a:ca:6e: 05:f2:79:14:d1:8e:41:78:5b:bd:58:be:dc:0d:4c: c3:72:82:cd:11:0d:50:3b:30:8c:80:68:36:8e:a2: d3:a9:41:68:e1:59:53:92:20:8c:cb:86:2b:af:2d: ba:c8:81:fc:20:b5:cc:78:05:eb:ff:d2:72:b9:c9: 17:5d:18:07:0d:48:43:65:e1:b2:66:f4:bb:73:c4: 00:e0:88:99:14:d8:05:ae:dd:88:f3:aa:f7:92:da: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:62:0F:A9:AF:0F:F7:F9:05:60:80:52:7C:A5:0C:85:E0:3B:C7:65 X509v3 Authority Key Identifier: keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:26:97:35:2e:b8:33:f9:6b:07:cf:81:42:a6:12:98:db:a8: 92:f1:e0:50:c5:ce:f1:38:ce:07:72:55:c7:86:ee:4b:e6:17: f5:0d:87:d2:4f:f4:28:23:85:e3:fa:30:a3:30:a1:ff:9a:91: 4b:4c:2f:62:c1:bb:7d:2a:fb:f5:5b:93:09:14:7d:fd:fe:5e: 8b:7b:63:ea:50:f3:96:77:85:8f:e6:c6:33:4c:a6:5d:50:63: e4:fc:ac:1d:d5:f8:34:d6:3d:a9:63:31:b6:24:8f:e3:95:ae: b2:ae:6a:ce:79:a9:e1:71:45:d8:ad:f2:4d:14:97:0d:24:37: 90:f2:2f:bc:04:78:b3:93:b6:78:8b:84:57:c8:a5:9f:78:93: 0f:0e:49:fe:06:7d:cc:2b:47:d7:78:24:00:85:f5:a3:a0:07: e2:d4:cb:c0:cc:f2:0b:f7:1a:75:c3:0f:cc:08:75:33:02:f0: 9f:46:f7:24:74:ab:b3:67:1e:82:d4:a3:bc:b3:37:9c:d8:28: 02:33:5a:d5:c5:fe:a3:34:b1:27:50:69:46:72:03:5e:55:6f: 7a:19:80:d3:e4:73:1f:56:1c:e3:b1:b1:83:f1:67:67:32:b9: 38:ee:b9:e6:17:aa:a0:0d:5f:2a:8e:1e:4f:3f:c9:eb:a6:d0: 5f:cd:54:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUzOTUxMTAvBgNVBAUTKEYzQTBENzJENjMzMEQ3MjE1NkEwMEQ5RjQ2RUFCMEM5 RkM5M0JDOEMwHhcNMjUwNTMxMDIyOTIwWhcNMjUwNjA3MDIyOTIwWjAYMRYwFAYD VQQDEw02ODNhNjk4MS1mNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA153xTDO0C7UGjxUzkh/BSIUQUob5NcsdiA47f7E9M0KxQfY6Qw/szNZ/ajR+ B2BKs6nW4GSyC7wBbU7H3TbWpGKEl7tYD0QqEf1LohIsOOFb1FtB0vJokqa/zGwK AotZ2kHTw8Wc6p0hkw8soQUCyp9nzrwhl33VCJk7BXQ4scGquqG7pre6FXsxa63L YIvndWKOsbgnUu5ucfOsvACZsok6ym4F8nkU0Y5BeFu9WL7cDUzDcoLNEQ1QOzCM gGg2jqLTqUFo4VlTkiCMy4Yrry26yIH8ILXMeAXr/9JyuckXXRgHDUhDZeGyZvS7 c8QA4IiZFNgFrt2I86r3ktpxNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZiD6mv D/f5BWCAUnylDIXgO8dlMB8GA1UdIwQYMBaAFPOg1y1jMNchVqANn0bqsMn8k7yM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTM5NS81N0UxRDE4NDZB RTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5RldvQTJmUnVxd3lmeVR2 SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg2RFhMV013MXlGV29BMmZSdXF3eWZ5VHZJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTM5NS81N0UxRDE4NDZBRTkxMUVEQkNEQUFFMjJDNEY5QUUwMi84NkRYTFdNdzF5 RldvQTJmUnVxd3lmeVR2SXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUJpc1Lrgz+WsHz4FCphKY26iS8eBQxc7xOM4HclXHhu5L5hf1DYfS T/QoI4Xj+jCjMKH/mpFLTC9iwbt9Kvv1W5MJFH39/l6Le2PqUPOWd4WP5sYzTKZd UGPk/Kwd1fg01j2pYzG2JI/jla6yrmrOeanhcUXYrfJNFJcNJDeQ8i+8BHizk7Z4 i4RXyKWfeJMPDkn+Bn3MK0fXeCQAhfWjoAfi1MvAzPIL9xp1ww/MCHUzAvCfRvck dKuzZx6C1KO8szec2CgCM1rVxf6jNLEnUGlGcgNeVW96GYDT5HMfVhzjsbGD8Wdn Mrk47rnmF6qgDV8qjh5PP8nrptBfzVQX -----END CERTIFICATE-----Generated at Sat May 31 17:57:52 2025 by rpki-client