$ rpki-client -vvf rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft File: PDd12fh_DqopaGZ3TqYvYnTQZss.mft (raw, json) Hash identifier: QoVqShSXzY20Ur8jo9H35M+2EmqZwhQu2TkOIrXP+F4= Subject key identifier: 72:96:7B:F3:FD:27:67:BF:FA:C2:E5:2A:6A:09:79:88:62:69:D2:32 Authority key identifier: 3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB Certificate issuer: /CN=A9193388/serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft Manifest number: 0133 Signing time: Thu 21 May 2026 05:39:20 +0000 Manifest this update: Thu 21 May 2026 05:39:20 +0000 Manifest next update: Thu 28 May 2026 05:39:20 +0000 Files and hashes: 1: PDd12fh_DqopaGZ3TqYvYnTQZss.crl (hash: tgXt3nrnLtywzUM2bX9r1uP4JUjNweecpkuYt1Mx/2o=) 2: 02B9688489EF11F0850AA959C4F9AE02.roa (hash: g6Ap4btn5Dr6jvAfzwN9O4vlhSQj8j0AjLOLHcxiHRE=) 3: 6234F532486011F1BE722C61A2833773.roa (hash: ZNIM657eK6Sl+F8NWwjV3R3GlH5ddc6QhKZmeceW07c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 May 2026 05:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193388, serialNumber=3C3775D9F87F0EAA296866774EA62F6274D066CB Validity Not Before: May 21 05:39:20 2026 GMT Not After : May 28 05:39:20 2026 GMT Subject: CN=6a0e9a88-9374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:ba:3b:16:65:8f:06:02:00:b0:64:0b:e9: 29:18:04:ca:2f:ea:62:95:80:74:6d:83:8d:ac:d6: 95:04:81:50:8d:b1:b2:b8:46:c9:ff:4d:88:23:96: 31:19:93:5d:5c:af:aa:a5:ae:b8:8f:6d:dd:c2:82: 30:67:27:08:59:a8:92:d2:69:21:c8:76:01:93:ef: cb:16:a2:6a:1c:f4:0c:3b:e9:b0:1f:87:cd:7a:c5: 18:32:cf:8e:73:bd:98:95:de:0c:30:c2:54:76:43: 63:20:05:8f:bb:bd:4f:62:f9:62:79:df:a3:e8:ca: e1:1e:21:18:72:2b:39:2d:fa:cc:ee:c8:7d:b9:8c: 09:41:94:93:7e:a9:0d:b9:a4:2b:bd:d9:f0:f9:b0: bd:57:77:2d:7a:1c:c7:44:86:01:b3:e6:42:f7:12: e1:2e:a4:96:44:ad:cf:71:d7:f7:76:1c:fc:f9:ad: eb:f2:a0:a9:ff:e9:da:af:38:bb:c7:9f:e3:45:57: 14:2e:9e:d3:3b:18:20:d0:7e:4a:bd:86:dd:e8:5f: 30:f1:6d:28:ce:3b:f5:51:92:38:7c:ce:09:b0:0d: 44:ed:85:0c:19:ee:d3:2d:26:52:40:5f:51:0f:f1: f7:e2:f2:9e:cb:25:45:29:56:ec:ae:8a:71:06:7c: 71:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:7B:F3:FD:27:67:BF:FA:C2:E5:2A:6A:09:79:88:62:69:D2:32 X509v3 Authority Key Identifier: keyid:3C:37:75:D9:F8:7F:0E:AA:29:68:66:77:4E:A6:2F:62:74:D0:66:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PDd12fh_DqopaGZ3TqYvYnTQZss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193388/E0E7360A89F411EFA913B952C4F9AE02/PDd12fh_DqopaGZ3TqYvYnTQZss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:38:1c:6f:fd:84:8e:25:10:e4:40:9c:d8:f0:b5:b4:a7:57: 0b:9a:d0:9b:95:f1:7a:9b:7e:33:f2:f8:67:99:b5:9c:d3:6a: 7d:40:a9:ce:f9:43:a7:27:81:bf:8a:a9:03:a2:05:22:c7:12: 58:ce:7e:5a:ea:c0:93:91:c5:42:37:ca:a3:9f:46:91:5f:2e: 91:cf:dd:e9:6f:db:67:fb:33:47:4d:2f:2c:ae:08:4d:05:cc: a2:6f:d5:7c:c6:90:2a:cb:eb:e7:0e:7e:31:32:31:f0:3e:aa: 49:dd:00:00:34:b0:5d:32:38:a4:44:bb:f1:6d:fe:3c:ed:88: a8:f4:9b:80:d8:a0:dc:f4:b9:e6:a5:7a:95:e9:13:2a:5c:ac: fe:c6:12:45:52:85:c4:d4:78:c9:95:b9:21:c0:aa:f9:af:46: 29:c8:46:5b:ae:0c:68:05:01:02:71:68:dd:86:0e:c4:9d:14: 8a:fa:8e:e0:c3:54:2d:57:5b:e6:98:36:c7:da:cf:63:84:3a: 69:65:4f:f2:4e:2b:e9:81:b6:a9:9f:52:e5:7b:1c:bf:f4:c3: b8:02:6a:95:ba:ea:ed:c7:69:53:bd:3f:a9:e5:fd:fd:41:92: a1:91:32:6b:4f:ec:85:60:3d:d6:1f:9b:13:be:7f:5e:f2:65: 93:c7:d9:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMzODgxMTAvBgNVBAUTKDNDMzc3NUQ5Rjg3RjBFQUEyOTY4NjY3NzRFQTYyRjYy NzREMDY2Q0IwHhcNMjYwNTIxMDUzOTIwWhcNMjYwNTI4MDUzOTIwWjAYMRYwFAYD VQQDEw02YTBlOWE4OC05Mzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkjW6OxZljwYCALBkC+kpGATKL+pilYB0bYONrNaVBIFQjbGyuEbJ/02II5Yx GZNdXK+qpa64j23dwoIwZycIWaiS0mkhyHYBk+/LFqJqHPQMO+mwH4fNesUYMs+O c72Yld4MMMJUdkNjIAWPu71PYvlied+j6MrhHiEYcis5LfrM7sh9uYwJQZSTfqkN uaQrvdnw+bC9V3ctehzHRIYBs+ZC9xLhLqSWRK3Pcdf3dhz8+a3r8qCp/+narzi7 x5/jRVcULp7TOxgg0H5KvYbd6F8w8W0ozjv1UZI4fM4JsA1E7YUMGe7TLSZSQF9R D/H34vKeyyVFKVbsropxBnxxRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHKWe/P9 J2e/+sLlKmoJeYhiadIyMB8GA1UdIwQYMBaAFDw3ddn4fw6qKWhmd06mL2J00GbL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzM4OC9FMEU3MzYwQTg5 RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rxb3BhR1ozVHFZdlluVFFa c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BEZDEyZmhfRHFvcGFHWjNUcVl2WW5UUVpzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzM4OC9FMEU3MzYwQTg5RjQxMUVGQTkxM0I5NTJDNEY5QUUwMi9QRGQxMmZoX0Rx b3BhR1ozVHFZdlluVFFac3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsTgcb/2EjiUQ5ECc2PC1tKdXC5rQm5Xxept+M/L4Z5m1nNNqfUCpzvlDpyeB v4qpA6IFIscSWM5+WurAk5HFQjfKo59GkV8ukc/d6W/bZ/szR00vLK4ITQXMom/V fMaQKsvr5w5+MTIx8D6qSd0AADSwXTI4pES78W3+PO2IqPSbgNig3PS55qV6lekT Klys/sYSRVKFxNR4yZW5IcCq+a9GKchGW64MaAUBAnFo3YYOxJ0UivqO4MNULVdb 5pg2x9rPY4Q6aWVP8k4r6YG2qZ9S5Xscv/TDuAJqlbrq7cdpU70/qeX9/UGSoZEy a0/shWA91h+bE75/XvJlk8fZog== -----END CERTIFICATE-----Generated at Thu May 21 09:38:58 2026 by rpki-client