$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json) Hash identifier: UrGW36u9u6SGGNg6gywqXGNijx6mBFKv4GqbcSWXcfA= Subject key identifier: FA:C0:A9:43:3D:21:CB:39:D2:96:9C:A1:74:42:20:4F:22:30:E0:4F Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft Manifest number: A6 Signing time: Sat 23 Aug 2025 06:28:28 +0000 Manifest this update: Sat 23 Aug 2025 06:28:27 +0000 Manifest next update: Sat 30 Aug 2025 06:28:27 +0000 Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: YLt7IbCJ52Jeykfqh8d71k5sMuYgWogDRCRXrw8AgnU=) 2: A3472C78743711F088C1E956C4F9AE02.roa (hash: LV6X80L3ccxBK4v6DA6N8RMZNVJ1B9qUcxOULyULswY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: Aug 23 06:28:27 2025 GMT Not After : Aug 30 06:28:27 2025 GMT Subject: CN=68a95f8c-e7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:57:8d:ee:cc:03:bf:72:a4:f6:1d:c3:64:0c: e9:a8:02:7e:aa:46:ab:e3:cf:db:5c:d1:48:5c:cc: 63:9d:11:3b:a4:6d:42:4c:53:49:2e:ef:73:e3:39: 8a:13:60:75:e3:ca:1c:e4:63:1d:a2:f0:3b:e2:d4: c4:92:d5:69:64:68:04:f6:48:a0:6a:eb:ad:37:8e: 22:c5:06:bb:c6:12:3c:9e:30:f5:b2:ae:a6:36:5c: b8:bb:e9:44:0e:ff:e1:dd:6e:e8:f3:58:e8:a6:a3: 33:c8:1d:b7:7d:c7:8d:1f:20:16:13:7e:34:48:d2: 20:00:75:e0:0b:72:5f:2c:3d:52:42:c5:1b:24:93: 22:02:3d:69:15:f4:e8:4a:84:0f:27:2e:66:ff:5c: 4e:9c:9c:99:cb:8b:46:ae:8e:f0:14:c5:e1:7e:4b: 7a:0d:d4:c0:a1:75:0f:99:0d:f8:21:d9:49:98:c5: a3:c7:d9:f1:42:52:7c:4a:f0:b4:84:11:e1:bc:ec: f4:52:32:81:ef:56:bc:12:41:33:3e:bd:77:c8:4b: c2:d8:58:7a:cc:9e:cc:8a:e3:97:22:c9:97:da:6b: db:4a:21:44:92:93:1d:38:63:be:4f:01:11:93:74: 59:4c:12:c4:02:5d:6a:d1:25:2a:41:1c:3d:b3:cf: 75:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:A9:43:3D:21:CB:39:D2:96:9C:A1:74:42:20:4F:22:30:E0:4F X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:97:a3:2b:76:62:25:92:08:6d:1a:7f:e4:a1:f9:7e:e5:79: 6d:42:3d:20:0b:88:5f:56:7b:fb:96:c7:61:fb:35:d5:4e:6a: 8d:3d:20:3d:f5:43:3b:06:37:6e:76:a5:05:d7:f4:5a:54:51: f8:12:fc:73:a6:76:22:7b:7b:fe:a6:09:a9:16:2f:fc:92:f6: 0d:80:54:ae:92:66:fb:db:f7:e9:2b:b5:6f:b5:5a:04:05:4e: 6e:46:84:34:9d:a7:48:25:1e:6d:26:f2:21:e7:61:a8:c1:5a: 86:1d:a7:bf:59:a4:16:55:ae:fc:83:4d:c4:b1:d9:78:ad:16: 30:1e:cc:92:6d:23:60:90:ff:b9:d6:02:b5:8a:e6:8d:7d:13: 04:d8:69:8b:bc:81:fb:e7:93:25:28:2c:b4:b0:d5:bb:9e:f0: 0d:39:8e:66:d7:8f:34:ad:c5:e3:58:24:2a:af:da:43:6a:13: f5:67:b3:88:52:9e:c6:a7:b2:45:49:a4:2f:2c:4b:03:47:ce: 2a:3f:90:02:4f:1d:bb:06:23:1a:e7:f2:58:c7:55:f1:bd:7d: ff:51:4f:12:d0:84:b4:56:f6:4a:3b:05:f1:e6:d6:ed:e3:61: 5b:57:88:ed:f7:61:df:88:db:1d:69:45:51:0c:f1:d3:b3:94: f2:41:21:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy NzREMDY2Q0IwHhcNMjUwODIzMDYyODI3WhcNMjUwODMwMDYyODI3WjAYMRYwFAYD VQQDEw02OGE5NWY4Yy1lN2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11eN7swDv3Kk9h3DZAzpqAJ+qkar48/bXNFIXMxjnRE7pG1CTFNJLu9z4zmK E2B148oc5GMdovA74tTEktVpZGgE9kigauutN44ixQa7xhI8njD1sq6mNly4u+lE Dv/h3W7o81jopqMzyB23fceNHyAWE340SNIgAHXgC3JfLD1SQsUbJJMiAj1pFfTo SoQPJy5m/1xOnJyZy4tGro7wFMXhfkt6DdTAoXUPmQ34IdlJmMWjx9nxQlJ8SvC0 hBHhvOz0UjKB71a8EkEzPr13yEvC2Fh6zJ7MiuOXIsmX2mvbSiFEkpMdOGO+TwER k3RZTBLEAl1q0SUqQRw9s8917wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPrAqUM9 Ics50pacoXRCIE8iMOBPMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5 RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM4OC9FMEU3MzYwQTg5RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rx b3BhR1ozVHFZdlluVFFac3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQl6MrdmIlkghtGn/kofl+5XltQj0gC4hfVnv7lsdh+zXVTmqNPSA9 9UM7BjdudqUF1/RaVFH4EvxzpnYie3v+pgmpFi/8kvYNgFSukmb72/fpK7VvtVoE BU5uRoQ0nadIJR5tJvIh52GowVqGHae/WaQWVa78g03Esdl4rRYwHsySbSNgkP+5 1gK1iuaNfRME2GmLvIH755MlKCy0sNW7nvANOY5m1480rcXjWCQqr9pDahP1Z7OI Up7Gp7JFSaQvLEsDR84qP5ACTx27BiMa5/JYx1XxvX3/UU8S0IS0VvZKOwXx5tbt 42FbV4jt92HfiNsdaUVRDPHTs5TyQSEI -----END CERTIFICATE-----Generated at Sun Aug 24 00:50:26 2025 by rpki-client