$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json) Hash identifier: 9btJpHZkmTgT5PWjSBH2sgasFWjQDBZBPHmxHJa3ZYM= Subject key identifier: 99:98:58:44:5A:12:C2:20:8A:80:91:27:FC:4D:FD:F4:22:8A:93:68 Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft Manifest number: 89 Signing time: Sat 05 Jul 2025 06:50:49 +0000 Manifest this update: Sat 05 Jul 2025 06:50:49 +0000 Manifest next update: Sat 12 Jul 2025 06:50:49 +0000 Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: mtZj9PqGMx2xCtvSC75i42K0fI8DRqqewogr0pEc6QI=) 2: 0C2CCB529B6D11EF9DC26822C4F9AE02.roa (hash: 3dvjbuMT8Y0qb48SF6bJUwqEnOmDrnVR3qZ9bmDelg8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: Jul 5 06:50:49 2025 GMT Not After : Jul 12 06:50:49 2025 GMT Subject: CN=6868cb49-d48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:e0:6e:7c:ac:2a:d5:ad:8e:0e:fa:93:59: 37:97:60:8a:c4:d8:0c:89:a1:2a:e3:38:27:7d:10: e4:b1:a9:06:71:aa:e9:96:17:b6:35:fa:ce:c5:b6: 14:46:57:f9:36:24:3a:40:ca:cb:24:3a:86:1f:7b: ed:32:9b:32:1c:12:95:2b:d8:20:4d:3a:cd:92:e9: 8b:72:21:c3:5d:80:54:aa:5f:72:2b:d6:c9:1e:5c: ab:67:34:67:dd:6d:db:76:af:91:f5:86:f7:9d:d2: 5f:c8:f7:6c:31:d3:62:0d:d2:90:fa:6e:35:8c:4d: 8d:e2:35:0a:32:07:d5:82:3d:5b:a9:a6:4e:68:a6: 6e:68:ef:3c:ad:e2:8b:6f:3d:a8:64:67:62:b2:43: 6d:09:ef:50:28:fc:88:0b:8c:4c:86:37:b5:88:0f: 18:30:e5:71:02:5e:b8:6a:c6:cf:01:c1:22:d1:40: fa:7f:15:31:61:7f:65:48:34:a4:1b:db:1c:34:c5: 39:1c:e8:f3:87:1d:78:04:50:45:8d:c0:50:6e:a9: 57:b0:fc:61:5d:df:8e:18:93:83:e9:f3:48:31:58: e6:94:ae:67:2c:46:0f:e3:b3:30:01:bd:0b:19:d0: aa:16:f0:b8:bb:93:91:5c:b5:b4:e4:14:b5:4c:36: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:98:58:44:5A:12:C2:20:8A:80:91:27:FC:4D:FD:F4:22:8A:93:68 X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:0a:9b:8e:da:67:72:34:25:07:7c:cf:21:32:c3:63:8e:da: af:bd:1a:13:9e:33:ee:e8:95:b4:e6:ee:5a:0f:09:f2:1e:f5: 53:1f:4b:93:76:cd:13:dd:5f:3e:dd:d3:35:48:04:99:5c:3a: a6:b0:a4:5e:55:41:14:e3:e2:ba:f1:5b:7e:68:fa:51:03:94: 35:f3:33:14:1a:57:92:6f:20:f7:00:8d:05:14:6d:6d:3b:a8: a8:72:2c:55:09:29:f2:57:23:d0:da:24:84:ce:06:2f:5c:3f: f3:01:02:d2:cb:3e:d1:6f:03:73:b0:8a:cd:d2:d3:5b:d7:59: 27:39:c5:90:39:73:e4:a1:76:ea:be:b2:55:70:17:0f:5c:71: f3:99:fe:93:42:5f:9b:e3:ee:54:50:a1:07:25:69:40:9b:34: 10:56:70:f4:27:43:21:d1:83:98:6a:07:ab:5e:b6:05:45:33: 08:21:22:f0:03:ae:3e:ba:c7:d4:56:ad:2e:3d:7f:3a:97:d2: 1c:35:58:eb:2f:5a:a3:57:e7:21:39:a2:4a:63:c5:77:c7:e6: fa:e6:e6:25:d6:d0:d9:85:83:9c:1d:f9:76:9d:15:0e:70:a1: 74:73:cf:a0:ea:06:05:c3:21:42:7a:b7:1f:1e:7b:10:c2:64: eb:18:74:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy NzREMDY2Q0IwHhcNMjUwNzA1MDY1MDQ5WhcNMjUwNzEyMDY1MDQ5WjAYMRYwFAYD VQQDEw02ODY4Y2I0OS1kNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve/gbnysKtWtjg76k1k3l2CKxNgMiaEq4zgnfRDksakGcarplhe2NfrOxbYU Rlf5NiQ6QMrLJDqGH3vtMpsyHBKVK9ggTTrNkumLciHDXYBUql9yK9bJHlyrZzRn 3W3bdq+R9Yb3ndJfyPdsMdNiDdKQ+m41jE2N4jUKMgfVgj1bqaZOaKZuaO88reKL bz2oZGdiskNtCe9QKPyIC4xMhje1iA8YMOVxAl64asbPAcEi0UD6fxUxYX9lSDSk G9scNMU5HOjzhx14BFBFjcBQbqlXsPxhXd+OGJOD6fNIMVjmlK5nLEYP47MwAb0L GdCqFvC4u5ORXLW05BS1TDbeLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmYWERa EsIgioCRJ/xN/fQiipNoMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5 RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM4OC9FMEU3MzYwQTg5RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rx b3BhR1ozVHFZdlluVFFac3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3CpuO2mdyNCUHfM8hMsNjjtqvvRoTnjPu6JW05u5aDwnyHvVTH0uT ds0T3V8+3dM1SASZXDqmsKReVUEU4+K68Vt+aPpRA5Q18zMUGleSbyD3AI0FFG1t O6iocixVCSnyVyPQ2iSEzgYvXD/zAQLSyz7RbwNzsIrN0tNb11knOcWQOXPkoXbq vrJVcBcPXHHzmf6TQl+b4+5UUKEHJWlAmzQQVnD0J0Mh0YOYagerXrYFRTMIISLw A64+usfUVq0uPX86l9IcNVjrL1qjV+chOaJKY8V3x+b65uYl1tDZhYOcHfl2nRUO cKF0c8+g6gYFwyFCercfHnsQwmTrGHQA -----END CERTIFICATE-----Generated at Sat Jul 5 22:38:30 2025 by rpki-client