$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft File: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft (raw, json) Hash identifier: AE8MXY4GB2fglOOAg3uRSUAHbG8Pvg0bdhRGXwvqg5k= Subject key identifier: 73:EB:61:5D:BA:82:82:B4:CE:30:5B:DF:99:B9:F0:D2:FE:FB:B5:82 Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft Manifest number: E0 Signing time: Sat 09 Aug 2025 05:59:10 +0000 Manifest this update: Sat 09 Aug 2025 05:59:10 +0000 Manifest next update: Sat 16 Aug 2025 05:59:10 +0000 Files and hashes: 1: PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl (hash: 3zEfIhpxDTYruzzFEdaYO8FUWH9ry35MujzUyhyolZY=) 2: A63B6120238711F08D2B4460C4F9AE02.roa (hash: OMBfI+nHRaL8yyAWZKMqye5oo33aQnkkup2yUiK7Glg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Validity Not Before: Aug 9 05:59:10 2025 GMT Not After : Aug 16 05:59:10 2025 GMT Subject: CN=6896e3ae-6b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:90:f7:24:de:b1:5f:f2:08:47:dd:b7:62: e2:e4:d5:94:12:e5:40:d2:21:17:43:d8:ab:68:28: 12:0b:2a:af:f9:2a:b7:c2:58:f1:98:01:1b:9d:42: c0:c9:76:e8:82:0d:cf:cc:77:78:ec:60:0c:ef:d7: 20:f5:23:4a:61:86:13:df:73:8f:a8:9a:62:42:9f: 63:b6:9e:99:70:12:05:41:17:08:03:e0:e6:cc:cd: 5e:e5:4d:36:9d:55:6a:41:50:ee:ec:34:83:63:f3: e7:97:6a:66:b4:ee:25:2a:8c:03:39:ad:c1:a6:23: 07:46:60:95:eb:96:80:1d:63:cd:d0:2f:a7:f6:4a: f0:b9:c3:2e:fa:62:97:dc:ce:7e:48:85:62:d5:de: 5e:df:af:e6:f2:37:a6:42:52:a0:cf:2b:4d:fc:10: 3f:c8:06:92:22:ac:1d:85:c3:e3:1f:1b:b7:56:b5: d4:b1:6a:8d:dc:e3:17:f9:17:50:73:5d:5f:4b:9e: 3e:5b:f9:8e:15:6e:3d:7f:97:49:00:02:1d:de:c3: 2f:40:46:40:fb:e1:c6:67:02:af:ee:17:e7:88:15: eb:73:d2:9d:8a:72:c2:d9:f5:44:b9:7e:82:7c:55: d1:17:0f:ab:aa:c7:07:2e:51:74:1e:8f:2b:4d:05: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EB:61:5D:BA:82:82:B4:CE:30:5B:DF:99:B9:F0:D2:FE:FB:B5:82 X509v3 Authority Key Identifier: keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:6c:22:39:a1:38:3e:00:89:7c:3f:c8:5c:a6:c1:c7:6f:8f: 0e:05:50:26:8d:fc:6d:9f:e3:43:bb:88:55:69:b0:9e:89:77: b6:31:0b:ab:4d:b7:7a:47:7a:68:60:1b:86:11:7e:bf:4a:af: df:7a:f0:ce:ba:c6:1a:90:39:71:c5:e2:7f:8d:ac:a2:ef:7d: 08:eb:01:db:9a:04:be:d9:47:23:77:3a:3a:5d:ff:5e:95:94: 71:53:aa:83:82:1c:c3:0d:26:a0:c7:7e:2f:ae:e0:de:d7:58: f3:62:f6:ab:4a:e3:0e:31:fe:1b:98:89:02:56:17:87:ea:79: da:97:0c:67:4a:ce:ed:af:10:17:f8:02:fe:d4:7b:91:ef:67: 76:72:3f:7c:24:d4:8f:8b:a9:7b:9d:48:4f:0e:07:a9:99:74: 81:65:71:80:96:f9:f3:b1:af:a9:4d:e0:f4:74:77:c2:6c:7a: 62:df:63:2e:8d:0a:dd:f7:0b:7c:47:63:42:25:f2:3f:1c:b4: f6:0a:41:b2:22:d1:5b:0d:d3:0a:c0:c7:f8:e8:d2:8b:ea:dd: a7:7d:3f:2b:ec:1c:99:ec:f0:5d:f2:69:44:4d:7d:d4:b2:ac: a9:cb:f7:d3:3e:52:da:19:df:0f:e4:7a:c1:91:b4:5e:f1:ca: c3:95:8d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKDNDMzU4N0RDM0FGMkU5MzdFQ0RCNjVBODM4OTI3NTlB NDFDODg1MEIwHhcNMjUwODA5MDU1OTEwWhcNMjUwODE2MDU1OTEwWjAYMRYwFAYD VQQDEw02ODk2ZTNhZS02YjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIeQ9yTesV/yCEfdt2Li5NWUEuVA0iEXQ9iraCgSCyqv+Sq3wljxmAEbnULA yXbogg3PzHd47GAM79cg9SNKYYYT33OPqJpiQp9jtp6ZcBIFQRcIA+DmzM1e5U02 nVVqQVDu7DSDY/Pnl2pmtO4lKowDOa3BpiMHRmCV65aAHWPN0C+n9krwucMu+mKX 3M5+SIVi1d5e36/m8jemQlKgzytN/BA/yAaSIqwdhcPjHxu3VrXUsWqN3OMX+RdQ c11fS54+W/mOFW49f5dJAAId3sMvQEZA++HGZwKv7hfniBXrc9KdinLC2fVEuX6C fFXRFw+rqscHLlF0Ho8rTQXk5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPrYV26 goK0zjBb35m58NL++7WCMB8GA1UdIwQYMBaAFDw1h9w68uk37NtlqDiSdZpByIUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FMjY0OTlBMjJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZUZnMyMldvT0pKMW1rSElo UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BEV0gzRHJ5NlRmczIyV29PSkoxbWtISWhRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEI0QS9FMjY0OTlBMjJGODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZU ZnMyMldvT0pKMW1rSEloUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqbCI5oTg+AIl8P8hcpsHHb48OBVAmjfxtn+NDu4hVabCeiXe2MQur Tbd6R3poYBuGEX6/Sq/fevDOusYakDlxxeJ/jayi730I6wHbmgS+2Ucjdzo6Xf9e lZRxU6qDghzDDSagx34vruDe11jzYvarSuMOMf4bmIkCVheH6nnalwxnSs7trxAX +AL+1HuR72d2cj98JNSPi6l7nUhPDgepmXSBZXGAlvnzsa+pTeD0dHfCbHpi32Mu jQrd9wt8R2NCJfI/HLT2CkGyItFbDdMKwMf46NKL6t2nfT8r7ByZ7PBd8mlETX3U sqypy/fTPlLaGd8P5HrBkbRe8crDlY2H -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:41 2025 by rpki-client