$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: z3aD030T/p8HCs0f2xFfgEEyVLJush9/bm2P/58Dql4= Subject key identifier: F0:E2:0D:DD:B7:18:35:75:2D:F3:86:38:BF:4D:04:9C:0F:94:A9:C6 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07D7 Signing time: Thu 04 Sep 2025 21:26:29 +0000 Manifest this update: Thu 04 Sep 2025 21:26:29 +0000 Manifest next update: Thu 11 Sep 2025 21:26:29 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: YR1CBCjZM/lQRJ5a+X006KHawz0KABRHdOah8W95CKM=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 21:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2034 (0x7f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Sep 4 21:26:29 2025 GMT Not After : Sep 11 21:26:29 2025 GMT Subject: CN=68ba0405-5ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:40:80:80:44:1b:a4:67:f3:7a:de:54:3b: 85:f3:02:96:7b:80:49:01:a1:cb:eb:47:d7:26:18: a1:6f:e1:f0:14:c6:51:3a:be:f6:c2:86:fc:7d:04: 1b:2d:ba:da:f9:02:de:f5:75:ac:51:82:e8:e7:17: a2:5d:30:4f:25:e8:b9:ae:57:80:d0:ce:bd:36:a1: fd:7c:13:af:a9:aa:d2:a3:db:12:33:c4:4b:f5:0c: 10:8d:fb:53:4c:b6:b9:a6:d2:21:40:a0:22:2b:48: 70:5b:5d:ac:d8:02:95:fa:b2:8b:63:00:77:2d:9c: e8:8f:fc:78:51:53:b0:57:8c:6b:72:63:ea:0f:20: b9:45:ab:6d:ea:30:b4:90:f9:bc:88:3a:a7:19:38: 35:5d:ea:bc:65:0c:d2:40:d7:e7:a2:27:39:7f:e6: 16:ea:2f:fd:2e:aa:73:e8:e3:35:33:de:2e:5a:3f: 49:ab:02:e3:24:82:1f:ee:8b:94:ef:e6:61:32:30: 8d:05:fe:08:d7:8d:0a:1b:cf:6d:3f:70:b6:ce:aa: 5a:d4:23:99:fe:da:f5:f1:46:32:8d:a4:1d:33:0a: 61:d8:8e:a0:72:93:d0:24:b7:93:0c:8b:c1:1b:7e: 9d:2c:c7:70:95:ee:92:d1:7c:c1:1b:df:5f:20:c8: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:0D:DD:B7:18:35:75:2D:F3:86:38:BF:4D:04:9C:0F:94:A9:C6 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:41:7b:33:a1:a1:bb:7c:92:3f:5d:60:55:c1:22:38:60:54: 12:fd:30:34:eb:9e:f5:ab:a4:df:ba:de:54:6e:cb:1a:9c:3f: d4:4d:b6:1e:ca:ff:45:4e:7f:02:77:31:a6:97:dc:1e:04:c8: 61:d9:c3:de:30:9b:d5:ec:04:13:29:53:35:c0:97:b8:0e:14: 5e:94:e7:1d:40:ab:7e:66:2a:ee:e6:ba:93:89:f6:2b:21:c4: e2:c4:1a:c9:b7:8c:c5:cc:14:1b:48:2f:51:8d:7a:9b:02:25: b3:fe:36:4d:44:0b:98:e2:a7:73:67:74:bb:37:29:62:c7:56: 7a:4b:31:c0:eb:be:40:ed:b3:8d:7a:af:84:36:6a:a7:06:82: 3f:fb:34:2c:04:45:c7:f1:51:7b:f4:49:f7:e3:d4:b4:13:77: 82:ca:53:aa:7c:b6:4c:0c:b6:6d:dd:ca:fb:8c:8d:2c:cd:21: 0a:ba:29:b2:53:cf:2c:3d:4d:e6:e4:14:7d:45:61:33:26:96: 81:bc:09:57:36:3d:da:05:7b:81:7d:b5:07:0d:73:f4:26:02: 7e:2e:f2:03:d8:5e:6b:a5:f3:d0:88:47:31:89:27:56:6b:c0: 37:82:e0:a9:8b:7f:c7:81:1a:b3:f3:ef:b2:51:d0:12:f1:e4: 69:0b:19:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwOTA0MjEyNjI5WhcNMjUwOTExMjEyNjI5WjAYMRYwFAYD VQQDEw02OGJhMDQwNS01ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumxAgIBEG6Rn83reVDuF8wKWe4BJAaHL60fXJhihb+HwFMZROr72wob8fQQb Lbra+QLe9XWsUYLo5xeiXTBPJei5rleA0M69NqH9fBOvqarSo9sSM8RL9QwQjftT TLa5ptIhQKAiK0hwW12s2AKV+rKLYwB3LZzoj/x4UVOwV4xrcmPqDyC5Ratt6jC0 kPm8iDqnGTg1Xeq8ZQzSQNfnoic5f+YW6i/9Lqpz6OM1M94uWj9JqwLjJIIf7ouU 7+ZhMjCNBf4I140KG89tP3C2zqpa1COZ/tr18UYyjaQdMwph2I6gcpPQJLeTDIvB G36dLMdwle6S0XzBG99fIMhYCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDiDd23 GDV1LfOGOL9NBJwPlKnGMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqQXszoaG7fJI/XWBVwSI4YFQS/TA06571q6Tfut5UbssanD/UTbYe yv9FTn8CdzGml9weBMhh2cPeMJvV7AQTKVM1wJe4DhRelOcdQKt+Ziru5rqTifYr IcTixBrJt4zFzBQbSC9RjXqbAiWz/jZNRAuY4qdzZ3S7Nylix1Z6SzHA675A7bON eq+ENmqnBoI/+zQsBEXH8VF79En349S0E3eCylOqfLZMDLZt3cr7jI0szSEKuimy U88sPU3m5BR9RWEzJpaBvAlXNj3aBXuBfbUHDXP0JgJ+LvID2F5rpfPQiEcxiSdW a8A3guCpi3/HgRqz8++yUdAS8eRpCxl/ -----END CERTIFICATE-----Generated at Sat Sep 6 12:06:42 2025 by rpki-client