$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: V0f5ZIOQaN6zUXyArCvka10ImTj/8LeYVJb7uoyjqmo= Subject key identifier: A3:F9:79:4F:2D:63:30:D6:66:82:7B:18:91:FA:17:81:36:F1:A4:8C Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 077E Signing time: Wed 12 Mar 2025 21:06:44 +0000 Manifest this update: Wed 12 Mar 2025 21:06:43 +0000 Manifest next update: Wed 19 Mar 2025 21:06:43 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: nTBBv3MpG8mx1+rMBcVEx4fWYzkN4UP03Xpyg0N9F0A=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 21:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18 Validity Not Before: Mar 12 21:06:43 2025 GMT Not After : Mar 19 21:06:43 2025 GMT Subject: CN=67d1f763-b9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:5d:6e:1d:0c:ac:91:e7:88:12:80:4b:07: 98:d9:57:e5:d6:6c:13:f5:db:e6:c8:32:dc:f7:a1: 5d:fc:ce:cd:2f:42:f1:c7:c1:4c:80:3f:18:6c:66: 0b:fa:8f:99:c0:a5:e3:03:8d:16:fe:bc:09:69:9c: 3c:28:20:db:49:29:a4:da:df:5d:a9:39:22:f0:ab: 6c:6b:b0:21:52:d0:f0:7a:c9:22:2b:69:6c:86:c1: 72:da:d2:7e:fe:e3:5e:8c:4b:04:e7:c1:d2:00:e5: 1c:9f:01:51:62:47:ff:91:5c:be:1d:70:53:62:c5: b7:f0:a8:bc:ab:33:24:b9:ec:9c:96:f1:74:70:71: a5:85:e2:0f:0f:d4:24:ad:b8:81:27:01:d5:de:2a: 9e:cf:52:33:a6:8f:8d:2e:17:c8:94:68:08:1a:e1: ac:53:6a:26:76:65:80:cd:5a:77:ed:36:3c:2a:81: c5:3b:2b:9e:aa:6c:35:9c:e8:cf:8e:fc:cc:87:4c: 5c:f1:66:f0:6d:ea:dd:ac:3b:3f:00:6c:ab:cd:e7: 59:26:58:01:98:3c:55:71:c7:85:27:11:e4:90:5d: 41:50:e4:97:2d:6c:56:35:aa:8f:1e:3f:8d:e8:40: 63:97:f4:79:13:88:a9:66:1a:43:ad:1f:df:21:6a: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F9:79:4F:2D:63:30:D6:66:82:7B:18:91:FA:17:81:36:F1:A4:8C X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:2d:db:69:7f:df:4b:49:cf:9c:40:73:b4:ac:3a:f0:35:cd: 6f:07:9b:c4:f2:98:34:09:26:e6:41:c0:f6:37:5a:97:a3:d8: 4c:fe:18:fa:ea:46:10:77:f3:ed:29:23:f9:04:0f:b4:d6:86: 59:45:a3:c0:08:ba:c2:f8:35:5b:6b:14:bf:0c:34:5e:79:1c: 34:85:58:e8:63:7a:27:51:02:b9:5c:4c:a8:97:70:19:07:3d: fd:fa:59:f8:23:b5:d1:09:01:0c:73:0a:62:0f:88:1d:09:c5: 72:7c:30:67:3d:f1:a8:63:76:12:d2:47:c8:8a:e8:e0:46:15: 3b:f0:e3:41:58:20:f1:ad:8c:5e:cf:42:95:4f:b3:a5:96:a6: 0b:06:9b:20:9e:18:a6:34:fd:39:c2:3e:0b:67:48:fc:56:09: b2:ab:d5:fd:ee:0b:0c:34:8e:3c:4a:12:7d:d1:70:49:5d:7b: cf:4e:7a:65:0b:fa:cf:4b:3f:02:99:da:70:4b:d7:43:25:b5: 2c:23:5a:35:f1:67:0a:66:1c:87:c6:30:8b:0b:8c:13:f7:6e: b3:70:c0:3b:79:f8:2a:99:60:bb:75:48:44:d7:84:d2:ff:ba: a1:59:39:fe:20:4a:27:79:80:a1:51:6a:af:4f:72:05:aa:59: 0a:6e:13:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwMzEyMjEwNjQzWhcNMjUwMzE5MjEwNjQzWjAYMRYwFAYD VQQDEw02N2QxZjc2My1iOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DZdbh0MrJHniBKASweY2Vfl1mwT9dvmyDLc96Fd/M7NL0Lxx8FMgD8YbGYL +o+ZwKXjA40W/rwJaZw8KCDbSSmk2t9dqTki8Ktsa7AhUtDweskiK2lshsFy2tJ+ /uNejEsE58HSAOUcnwFRYkf/kVy+HXBTYsW38Ki8qzMkueyclvF0cHGlheIPD9Qk rbiBJwHV3iqez1Izpo+NLhfIlGgIGuGsU2omdmWAzVp37TY8KoHFOyueqmw1nOjP jvzMh0xc8WbwberdrDs/AGyrzedZJlgBmDxVcceFJxHkkF1BUOSXLWxWNaqPHj+N 6EBjl/R5E4ipZhpDrR/fIWqZGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKP5eU8t YzDWZoJ7GJH6F4E28aSMMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFLdtpf99LSc+cQHO0rDrwNc1vB5vE8pg0CSbmQcD2N1qXo9hM/hj6 6kYQd/PtKSP5BA+01oZZRaPACLrC+DVbaxS/DDReeRw0hVjoY3onUQK5XEyol3AZ Bz39+ln4I7XRCQEMcwpiD4gdCcVyfDBnPfGoY3YS0kfIiujgRhU78ONBWCDxrYxe z0KVT7OllqYLBpsgnhimNP05wj4LZ0j8Vgmyq9X97gsMNI48ShJ90XBJXXvPTnpl C/rPSz8CmdpwS9dDJbUsI1o18WcKZhyHxjCLC4wT926zcMA7efgqmWC7dUhE14TS /7qhWTn+IEoneYChUWqvT3IFqlkKbhPv -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:55 2025 by rpki-client