$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: kqW2XYODx6ggTMRthiH4U8fTllp5XxEc/JjowaZ3e0o= Subject key identifier: 84:CE:95:88:32:F4:51:8F:2F:2E:60:33:4C:9E:94:45:E0:31:D4:A6 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07BE Signing time: Fri 18 Jul 2025 21:31:36 +0000 Manifest this update: Fri 18 Jul 2025 21:31:36 +0000 Manifest next update: Fri 25 Jul 2025 21:31:36 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: ikBnSoWoRkAkm/fRw2bcykG7A3Z7dHa+IGH7/7Dnclw=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:31:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Jul 18 21:31:36 2025 GMT Not After : Jul 25 21:31:36 2025 GMT Subject: CN=687abd38-2583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:2a:55:44:dd:04:cc:0a:5f:b5:13:51:d3: c1:83:ab:0e:2c:7f:ca:ed:c0:37:9e:f7:23:93:21: 3a:71:a7:ab:4e:ca:4e:a9:3b:35:99:47:3c:dd:d5: 4f:49:28:90:ef:85:de:8e:4d:96:1d:bc:5a:e7:c3: d8:6b:04:77:76:ab:11:af:33:07:0a:bf:71:32:74: be:42:9f:44:31:de:f6:2c:f2:19:8d:31:25:a7:cf: bb:fd:d1:b9:2e:ed:9a:bf:63:3e:4e:e6:d9:52:bc: a8:2e:36:34:cd:f8:37:62:f1:8d:73:5e:fe:a7:f3: 9c:23:51:6f:54:a7:b5:54:cc:dc:5d:4b:96:52:8e: 43:fd:20:46:04:cd:49:78:24:40:f4:ea:32:d3:61: 35:98:3b:28:ac:26:dc:05:1e:8e:b1:d5:7c:e5:76: 88:4c:5d:d8:14:46:c4:b8:2b:8f:53:80:6d:7e:bf: b8:08:93:e6:0f:29:2b:90:78:51:38:a0:3e:47:44: f3:a0:c6:2f:aa:4a:d4:3a:f9:b9:87:3f:53:69:17: 59:03:54:cf:b4:26:74:4f:39:91:e8:71:11:aa:69: 3b:d7:e5:a6:43:3c:3d:bd:77:dd:13:cc:63:83:37: 91:77:a7:5a:7b:71:af:92:19:36:73:26:8d:a3:9d: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CE:95:88:32:F4:51:8F:2F:2E:60:33:4C:9E:94:45:E0:31:D4:A6 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8e:8b:ae:33:87:98:80:0c:63:e2:8b:ed:57:ce:16:12:53: bd:a2:96:af:30:94:d7:a4:4c:f5:e7:0a:8e:7d:be:6e:aa:d7: 8f:d5:26:fa:3d:68:29:99:6f:9b:8d:04:ef:46:67:08:95:88: 34:d3:7a:b4:ee:8e:25:6a:0b:89:87:7a:42:d3:8d:51:66:77: c7:72:b8:2f:96:5f:37:2a:38:c7:2c:5e:fe:44:71:c6:48:e9: 39:a0:2e:29:1e:d5:da:ed:e5:03:4c:3c:77:7b:64:c8:b9:da: 33:c4:05:5e:a1:db:eb:62:50:ef:89:88:0c:51:18:b2:d9:21: 4e:83:1f:44:cc:86:4c:ec:1d:bd:62:fe:34:54:f9:b7:b5:98: 04:a8:ff:00:b9:93:12:b2:56:7e:22:5f:09:10:01:c3:4f:63: ae:7e:67:c7:c0:d3:89:48:ac:49:11:96:45:db:0e:94:37:9b: d4:05:f7:0d:92:9a:03:7d:75:1f:f2:5e:ec:1f:ff:1a:f4:8a: 07:3f:18:c3:7b:ec:50:7a:f6:10:fe:6e:9a:a3:47:86:82:a8: 32:f1:28:c7:ca:c4:60:9e:8a:b0:c8:dc:b9:a2:d4:86:08:74: 0f:f2:cb:44:5e:c1:77:0e:b2:0a:7f:5a:b3:ec:c8:51:ae:14: 8c:ae:39:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwNzE4MjEzMTM2WhcNMjUwNzI1MjEzMTM2WjAYMRYwFAYD VQQDEw02ODdhYmQzOC0yNTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf8qVUTdBMwKX7UTUdPBg6sOLH/K7cA3nvcjkyE6caerTspOqTs1mUc83dVP SSiQ74Xejk2WHbxa58PYawR3dqsRrzMHCr9xMnS+Qp9EMd72LPIZjTElp8+7/dG5 Lu2av2M+TubZUryoLjY0zfg3YvGNc17+p/OcI1FvVKe1VMzcXUuWUo5D/SBGBM1J eCRA9Ooy02E1mDsorCbcBR6OsdV85XaITF3YFEbEuCuPU4Btfr+4CJPmDykrkHhR OKA+R0TzoMYvqkrUOvm5hz9TaRdZA1TPtCZ0TzmR6HERqmk71+WmQzw9vXfdE8xj gzeRd6dae3Gvkhk2cyaNo53giwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITOlYgy 9FGPLy5gM0yelEXgMdSmMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBajouuM4eYgAxj4ovtV84WElO9opavMJTXpEz15wqOfb5uqteP1Sb6 PWgpmW+bjQTvRmcIlYg003q07o4laguJh3pC041RZnfHcrgvll83KjjHLF7+RHHG SOk5oC4pHtXa7eUDTDx3e2TIudozxAVeodvrYlDviYgMURiy2SFOgx9EzIZM7B29 Yv40VPm3tZgEqP8AuZMSslZ+Il8JEAHDT2OufmfHwNOJSKxJEZZF2w6UN5vUBfcN kpoDfXUf8l7sH/8a9IoHPxjDe+xQevYQ/m6ao0eGgqgy8SjHysRgnoqwyNy5otSG CHQP8stEXsF3DrIKf1qz7MhRrhSMrjnO -----END CERTIFICATE-----Generated at Sun Jul 20 16:23:33 2025 by rpki-client