$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json) Hash identifier: 9sTuqujD5WlqmowP9vI3LIztMinL01mn20ZX4xN1Z3s= Subject key identifier: 9E:03:B4:B9:75:C2:11:C3:F8:D8:45:AA:F9:F5:42:FF:FF:7E:6E:25 Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft Manifest number: E7 Signing time: Sat 23 Aug 2025 05:38:52 +0000 Manifest this update: Sat 23 Aug 2025 05:38:52 +0000 Manifest next update: Sat 30 Aug 2025 05:38:52 +0000 Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: DdjjvUxrcKu+lJnI6GpKlV3fOG98NGTKseBCveNFuM0=) 2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: OMBfI+nHRaL8yyAWZKMqye5oo33aQnkkup2yUiK7Glg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Validity Not Before: Aug 23 05:38:52 2025 GMT Not After : Aug 30 05:38:52 2025 GMT Subject: CN=68a953ec-fd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:06:32:0b:e0:78:2b:db:6f:88:f6:80:3f: 7f:9b:0e:48:05:34:14:18:ac:72:18:de:8b:eb:75: ea:b9:40:41:7d:08:6f:0e:59:8c:28:0d:66:3a:f3: a7:4f:bb:15:be:07:49:4d:31:e4:ce:47:98:80:a9: 42:a3:03:35:74:18:e4:94:2d:2c:cb:7e:76:99:38: 8c:06:e0:46:16:87:2c:31:01:cb:89:9c:62:34:e3: 80:37:88:b3:c5:44:74:0c:6f:dc:1d:45:6a:5a:94: a2:f1:37:08:27:71:bd:a8:e6:cc:ce:2f:e2:57:93: 1a:93:ef:17:2d:b5:67:5c:3b:d1:fa:c5:c4:c7:31: 01:44:c8:c3:25:35:ac:d9:c8:bc:68:6d:4d:df:37: 3e:99:b5:75:29:88:d2:be:af:12:ea:3d:6d:54:7e: 60:70:d3:60:8a:45:0f:5d:78:dd:16:2e:48:48:04: cc:c4:bc:bc:d5:96:2b:96:6d:63:b0:c7:95:73:8d: ad:93:a6:16:21:9a:e4:e6:b5:b0:8b:30:e2:e4:66: 07:e4:77:d6:78:2f:52:94:67:6a:66:04:ca:15:70: ca:62:7c:5b:42:e9:1e:be:a7:57:34:7e:46:3d:6c: 64:0d:ed:c8:cd:4f:6b:1f:81:33:ba:02:da:c6:1b: 7d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:03:B4:B9:75:C2:11:C3:F8:D8:45:AA:F9:F5:42:FF:FF:7E:6E:25 X509v3 Authority Key Identifier: keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8c:a0:e6:a6:fd:6c:23:f4:b4:5c:7f:39:6a:22:9c:d2:18: 47:eb:e8:19:dd:6f:b6:de:39:1e:8d:be:06:bc:6b:2f:48:a8: 28:2c:b0:96:52:ae:d5:8d:b8:c3:16:8f:6e:3f:fc:77:3c:41: bf:c7:09:38:db:92:6d:d0:11:1d:1d:23:d7:e3:1e:62:26:6b: cb:82:9f:13:69:95:7a:84:3e:77:f2:fb:7a:16:f0:ad:64:2b: 28:af:91:ca:c6:6e:e2:57:4e:97:26:e6:6e:53:30:21:84:6d: af:f3:ea:3e:fd:2e:7f:b3:94:dd:70:b5:de:af:40:d7:63:e2: dd:89:cc:05:30:86:ca:46:6a:21:22:cb:01:13:50:81:ff:a8: df:56:94:98:c7:92:a2:8a:ef:d2:dd:03:b6:b5:ed:d3:fb:f8: ed:46:70:03:c7:34:f4:76:14:87:e5:d6:78:c7:72:3b:1c:8b: 63:d6:e5:f8:b3:70:b9:71:f5:8d:bd:74:c4:e0:0d:e8:34:70: a8:06:97:4a:24:c7:91:21:a5:dc:8f:70:e2:6c:8e:2a:ba:b5: 84:da:4b:b8:f8:25:85:3a:11:25:a6:7f:eb:85:43:69:94:4d: 0c:d0:d6:6d:2c:98:00:3c:13:d3:fc:45:83:3d:d4:d7:4b:f7: 01:54:3a:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKDNDMzU4N0RDM0FGMkU5MzdFQ0RCNjVBODM4OTI3NTlB NDFDODg1MEIwHhcNMjUwODIzMDUzODUyWhcNMjUwODMwMDUzODUyWjAYMRYwFAYD VQQDEw02OGE5NTNlYy1mZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbYGMgvgeCvbb4j2gD9/mw5IBTQUGKxyGN6L63XquUBBfQhvDlmMKA1mOvOn T7sVvgdJTTHkzkeYgKlCowM1dBjklC0sy352mTiMBuBGFocsMQHLiZxiNOOAN4iz xUR0DG/cHUVqWpSi8TcIJ3G9qObMzi/iV5Mak+8XLbVnXDvR+sXExzEBRMjDJTWs 2ci8aG1N3zc+mbV1KYjSvq8S6j1tVH5gcNNgikUPXXjdFi5ISATMxLy81ZYrlm1j sMeVc42tk6YWIZrk5rWwizDi5GYH5HfWeC9SlGdqZgTKFXDKYnxbQukevqdXNH5G PWxkDe3IzU9rH4EzugLaxht9vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4DtLl1 whHD+NhFqvn1Qv//fm4lMB8GA1UdIwQYMBaAFDw1h9w68uk37NtlqDiSdZpByIUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FMjY0OTlBMjJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZUZnMyMldvT0pKMW1rSElo UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BEV0gzRHJ5NlRmczIyV29PSkoxbWtISWhRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FMjY0OTlBMjJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZU ZnMyMldvT0pKMW1rSEloUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOjKDmpv1sI/S0XH85aiKc0hhH6+gZ3W+23jkejb4GvGsvSKgoLLCW Uq7VjbjDFo9uP/x3PEG/xwk425Jt0BEdHSPX4x5iJmvLgp8TaZV6hD538vt6FvCt ZCsor5HKxm7iV06XJuZuUzAhhG2v8+o+/S5/s5TdcLXer0DXY+LdicwFMIbKRmoh IssBE1CB/6jfVpSYx5Kiiu/S3QO2te3T+/jtRnADxzT0dhSH5dZ4x3I7HItj1uX4 s3C5cfWNvXTE4A3oNHCoBpdKJMeRIaXcj3DibI4qurWE2ku4+CWFOhElpn/rhUNp lE0M0NZtLJgAPBPT/EWDPdTXS/cBVDrR -----END CERTIFICATE-----Generated at Sun Aug 24 00:11:04 2025 by rpki-client