$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json) Hash identifier: zDiZIZ5Dw4uGcuWzX+lI6YH8eCnIXHZ78ijoy2+mimE= Subject key identifier: C6:79:9D:34:1B:D3:29:0E:9B:FE:A7:EA:EF:2E:F5:81:E6:82:C0:BE Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft Manifest number: 0104 Signing time: Sun 19 Oct 2025 08:05:16 +0000 Manifest this update: Sun 19 Oct 2025 08:05:15 +0000 Manifest next update: Sun 26 Oct 2025 08:05:15 +0000 Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: aqSNtayzLUaMCSNjNXxOZTSIb0exJ0zdtO9MWLxXsjY=) 2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: OMBfI+nHRaL8yyAWZKMqye5oo33aQnkkup2yUiK7Glg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Validity Not Before: Oct 19 08:05:15 2025 GMT Not After : Oct 26 08:05:15 2025 GMT Subject: CN=68f49bbb-68da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:70:cd:98:6e:1c:74:56:04:16:e0:8f:a1: 14:24:30:72:1e:e3:cd:19:8b:4e:3e:d7:2d:67:a9: 2f:cc:83:5f:38:70:0e:e5:85:ce:3a:e7:98:88:60: 44:13:78:ef:ad:8f:b9:9b:9a:43:0d:e5:e0:65:46: 10:43:48:0c:25:34:3e:f6:a5:67:16:57:c4:e4:a4: 2d:19:c9:09:72:8b:9c:6d:8b:a7:c9:ff:1f:f5:7f: 6d:ee:3c:c0:4b:31:a0:87:7e:c7:81:0e:79:f3:41: 5a:f1:90:de:5f:06:97:50:f9:c9:6d:9e:a0:19:85: c9:28:11:be:90:0b:f0:06:f3:a5:58:92:7b:9b:97: f9:e3:e0:d6:28:22:f8:46:bc:86:10:07:a3:0d:0b: a9:b0:81:73:1d:d6:d4:96:11:8c:79:22:8b:e6:73: 8c:9f:be:69:65:8d:98:18:1c:0e:66:94:9a:53:f0: 7d:4b:0e:31:81:9b:20:3d:84:d5:2d:c4:e2:a6:e1: 05:ba:ce:30:13:cc:97:84:85:ac:a2:fd:d3:b2:12: 5f:2c:b4:52:6e:e2:ea:31:71:69:92:d4:a5:dc:33: c3:3b:08:3a:f6:44:d9:75:09:63:ff:5a:ff:91:ff: fc:32:26:a1:97:6c:2a:92:8d:9f:5b:a8:29:a0:f3: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:79:9D:34:1B:D3:29:0E:9B:FE:A7:EA:EF:2E:F5:81:E6:82:C0:BE X509v3 Authority Key Identifier: keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:cf:64:36:eb:a6:17:13:9c:5d:51:73:a4:49:43:96:3e:cf: 1a:84:0a:ae:a7:cf:65:c4:db:13:33:90:36:b7:02:ac:e1:7d: 1b:5e:6b:dc:cd:b4:a2:4e:9c:48:2a:97:f5:a4:29:43:c0:cd: 8b:f9:86:20:ca:e7:be:c0:d2:b0:48:20:fa:61:ed:fa:8b:49: a5:2b:5e:c1:75:fa:45:c6:e2:b5:19:15:c5:40:9e:2f:b4:7f: b3:b5:ba:ed:2b:25:f7:80:1b:b7:73:b6:94:04:73:ca:ec:8b: 83:45:80:0b:2f:94:19:2e:90:88:13:d4:35:3d:2a:72:70:c2: 9b:17:65:59:f4:d2:31:b2:4e:08:f2:3e:60:52:84:b5:f2:69: 31:cc:1d:ff:c5:7f:62:a9:e0:38:b8:9d:4d:3f:e5:9a:65:69: db:4e:63:ac:d9:41:1d:6d:e3:b3:93:b2:18:15:95:4a:6f:31: 16:af:1f:03:6b:3d:da:8f:8c:6b:fb:fe:69:a0:ff:48:a2:b4: 43:bc:d0:84:0a:e5:86:e7:56:ae:57:00:b2:9e:7a:fe:b4:a4: 2f:a4:7b:34:41:a4:9c:50:84:95:c5:5d:47:56:fe:2d:12:4a: 76:01:f1:0a:11:31:be:ba:be:a0:26:08:70:4f:e9:c7:46:37: 25:1d:90:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKDNDMzU4N0RDM0FGMkU5MzdFQ0RCNjVBODM4OTI3NTlB NDFDODg1MEIwHhcNMjUxMDE5MDgwNTE1WhcNMjUxMDI2MDgwNTE1WjAYMRYwFAYD VQQDEw02OGY0OWJiYi02OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59xwzZhuHHRWBBbgj6EUJDByHuPNGYtOPtctZ6kvzINfOHAO5YXOOueYiGBE E3jvrY+5m5pDDeXgZUYQQ0gMJTQ+9qVnFlfE5KQtGckJcoucbYunyf8f9X9t7jzA SzGgh37HgQ5580Fa8ZDeXwaXUPnJbZ6gGYXJKBG+kAvwBvOlWJJ7m5f54+DWKCL4 RryGEAejDQupsIFzHdbUlhGMeSKL5nOMn75pZY2YGBwOZpSaU/B9Sw4xgZsgPYTV LcTipuEFus4wE8yXhIWsov3TshJfLLRSbuLqMXFpktSl3DPDOwg69kTZdQlj/1r/ kf/8Miahl2wqko2fW6gpoPOIIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZ5nTQb 0ykOm/6n6u8u9YHmgsC+MB8GA1UdIwQYMBaAFDw1h9w68uk37NtlqDiSdZpByIUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FMjY0OTlBMjJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZUZnMyMldvT0pKMW1rSElo UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BEV0gzRHJ5NlRmczIyV29PSkoxbWtISWhRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FMjY0OTlBMjJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZU ZnMyMldvT0pKMW1rSEloUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9z2Q266YXE5xdUXOkSUOWPs8ahAqup89lxNsTM5A2twKs4X0bXmvc zbSiTpxIKpf1pClDwM2L+YYgyue+wNKwSCD6Ye36i0mlK17BdfpFxuK1GRXFQJ4v tH+ztbrtKyX3gBu3c7aUBHPK7IuDRYALL5QZLpCIE9Q1PSpycMKbF2VZ9NIxsk4I 8j5gUoS18mkxzB3/xX9iqeA4uJ1NP+WaZWnbTmOs2UEdbeOzk7IYFZVKbzEWrx8D az3aj4xr+/5poP9IorRDvNCECuWG51auVwCynnr+tKQvpHs0QaScUISVxV1HVv4t Ekp2AfEKETG+ur6gJghwT+nHRjclHZCL -----END CERTIFICATE-----Generated at Tue Oct 21 01:38:13 2025 by rpki-client