$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: 28+jwPk9WtpPuR0XRXKxSzUvPzCMUpLvH0rNzehPm+Y= Subject key identifier: FA:DA:49:F0:C1:83:B4:B6:8E:FA:05:62:02:68:77:64:AC:EF:38:90 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0790 Signing time: Wed 16 Apr 2025 21:07:08 +0000 Manifest this update: Wed 16 Apr 2025 21:07:08 +0000 Manifest next update: Wed 23 Apr 2025 21:07:08 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: 1NqYh1IRwFRxoGF7dEqvaaYcL+NI2Br0er/F9lHOpwE=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Apr 16 21:07:08 2025 GMT Not After : Apr 23 21:07:08 2025 GMT Subject: CN=68001bfc-37eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:ec:c8:45:3f:84:d2:aa:fa:cc:df:ee:f9: 44:75:a3:19:bb:b0:b6:57:2c:e7:6e:5b:12:9e:f5: 9a:f6:ab:9d:fd:e5:c4:9d:f7:8f:4a:87:12:20:68: b0:39:71:4f:3e:1c:2f:59:9f:2e:6b:5c:df:3f:c9: 70:c1:5e:52:37:56:cb:ff:b5:ea:2d:57:14:d4:f2: 85:ce:65:1a:ae:88:30:ce:47:73:44:35:5c:be:c0: 86:ab:76:32:37:97:03:34:88:ff:7d:79:d8:e8:ef: 8e:ba:02:6e:17:7b:0c:d5:dd:74:14:b0:c3:36:d6: 56:e3:4d:d8:f1:2f:62:83:b2:a2:2c:a5:91:d8:b2: cd:41:6f:5f:b5:66:ea:8f:19:09:3e:75:80:2a:ad: 27:19:99:81:72:6c:a4:47:00:dd:7b:c0:38:c9:32: fa:91:60:cb:bd:d0:6d:87:67:58:4d:44:cc:bf:f7: ae:28:33:0f:01:ff:19:8e:70:c1:02:be:91:46:87: 92:c6:cf:c9:6e:4f:24:13:dc:af:5e:75:e7:bb:ff: ba:4a:a7:49:79:29:ca:92:50:b1:e5:eb:47:6b:6f: 56:1c:f5:94:c3:db:1a:03:bf:bd:20:78:f8:c7:8e: 2b:e7:b7:9f:15:67:ca:65:ea:3f:8e:a0:f7:61:31: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DA:49:F0:C1:83:B4:B6:8E:FA:05:62:02:68:77:64:AC:EF:38:90 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:75:b3:fd:62:5c:dd:1f:bd:f3:d7:f0:49:31:ee:77:0c:45: 6c:1e:ec:04:01:45:8b:ad:6f:22:f7:fe:1d:0f:a0:c6:9e:b5: 8a:2d:b5:9d:01:78:f6:9e:a2:8c:6c:c9:33:33:59:1a:14:53: 5f:00:76:7f:21:f4:84:64:09:5e:00:b2:06:6c:7e:3c:b3:2e: 65:dd:cd:5f:3f:71:fb:7f:34:8b:b4:04:81:80:39:8c:7f:a5: 13:9a:43:b1:5d:b2:67:f9:37:9a:db:35:bb:db:b6:9b:ed:69: 56:f2:09:e1:32:bc:59:43:bf:65:f6:cf:26:0a:22:90:65:49: 02:76:01:23:b7:4b:e2:56:a9:da:71:90:a8:31:98:c8:3a:b1: bb:62:b9:53:16:e3:8e:e3:8b:28:1c:b7:a4:88:a7:0d:c7:42: cb:38:b2:a2:ac:64:b3:82:62:ab:1d:9f:9c:a1:74:b1:39:00: d5:fb:1d:1c:a2:d5:9f:12:ea:b5:84:a0:26:61:ff:97:af:e0: 67:bc:26:65:84:02:90:3d:8d:b2:46:ef:27:91:fa:79:65:ca: c5:00:0d:21:70:5d:f5:8e:d8:17:35:af:2e:30:3f:8b:aa:e3: 51:f7:bb:e2:82:9c:fe:63:fa:7c:e2:00:09:ce:f5:74:bf:ac: dd:87:8d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwNDE2MjEwNzA4WhcNMjUwNDIzMjEwNzA4WjAYMRYwFAYD VQQDEw02ODAwMWJmYy0zN2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzTsyEU/hNKq+szf7vlEdaMZu7C2VyznblsSnvWa9qud/eXEnfePSocSIGiw OXFPPhwvWZ8ua1zfP8lwwV5SN1bL/7XqLVcU1PKFzmUarogwzkdzRDVcvsCGq3Yy N5cDNIj/fXnY6O+OugJuF3sM1d10FLDDNtZW403Y8S9ig7KiLKWR2LLNQW9ftWbq jxkJPnWAKq0nGZmBcmykRwDde8A4yTL6kWDLvdBth2dYTUTMv/euKDMPAf8ZjnDB Ar6RRoeSxs/Jbk8kE9yvXnXnu/+6SqdJeSnKklCx5etHa29WHPWUw9saA7+9IHj4 x44r57efFWfKZeo/jqD3YTGsqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPraSfDB g7S2jvoFYgJod2Ss7ziQMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcdbP9YlzdH73z1/BJMe53DEVsHuwEAUWLrW8i9/4dD6DGnrWKLbWd AXj2nqKMbMkzM1kaFFNfAHZ/IfSEZAleALIGbH48sy5l3c1fP3H7fzSLtASBgDmM f6UTmkOxXbJn+Tea2zW727ab7WlW8gnhMrxZQ79l9s8mCiKQZUkCdgEjt0viVqna cZCoMZjIOrG7YrlTFuOO44soHLekiKcNx0LLOLKirGSzgmKrHZ+coXSxOQDV+x0c otWfEuq1hKAmYf+Xr+BnvCZlhAKQPY2yRu8nkfp5ZcrFAA0hcF31jtgXNa8uMD+L quNR97vigpz+Y/p84gAJzvV0v6zdh42T -----END CERTIFICATE-----Generated at Thu Apr 17 10:08:53 2025 by rpki-client