$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: lnorgEfkliLkSigG4xa8j2w+vjd8dZ7QUAyt1e3ahF4= Subject key identifier: F7:BE:EE:89:91:F3:45:94:CB:C0:4A:42:B7:95:3A:9C:49:EE:AC:8F Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 086B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0843 Signing time: Mon 16 Mar 2026 20:31:38 +0000 Manifest this update: Mon 16 Mar 2026 20:31:38 +0000 Manifest next update: Mon 23 Mar 2026 20:31:38 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: X8AhT0WGy9w8++sPlG3SBSml7zLLHs+P27EAWZp1sL0=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: eALHohqPfF3ui0TiL12I+B5Q/UX/lWH/VW8crfpvj7o=) 3: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (hash: 4MuAY4it4gTEQIf5LMe2RPCt6I2j4k+IMBFAYSXEFv8=) 4: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: GMNbFj5OMAYQTJHJmZ3/lLnrwOgYll7c/asD4WCaS0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 20:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2155 (0x86b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Mar 16 20:31:38 2026 GMT Not After : Mar 23 20:31:38 2026 GMT Subject: CN=69b868aa-7f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:5e:ac:6e:0f:d5:15:eb:ae:35:88:5e:5d: b7:c6:22:8f:21:34:30:e0:ef:f0:7f:c7:3c:28:97: 60:3d:29:b6:b9:22:c6:eb:91:1a:7f:0c:b5:f4:bf: cc:be:8d:53:d8:03:27:b2:bd:ba:59:8d:6c:99:f4: ac:ab:2e:b3:ca:c1:98:7b:8b:ab:6b:e0:cc:91:bf: ec:c7:59:e4:6e:e9:9a:98:8f:a9:d8:4e:64:5f:91: 3b:3e:7f:6e:a2:57:c1:d0:81:74:65:5f:26:fd:0b: 59:7c:9c:94:1d:a5:c1:a8:9b:c6:5e:2c:f4:77:1c: 29:a6:2c:fa:19:ee:61:48:04:8e:a3:34:ea:a7:b4: 38:ab:40:17:d5:cb:30:9b:4a:a9:99:86:75:5f:ee: 63:0c:2e:f8:b7:0d:12:8c:dd:b8:a9:f0:99:f5:75: 03:a4:91:67:de:13:fe:32:af:60:7e:ec:c2:73:c8: 74:b4:c0:fc:1f:19:44:60:38:58:4b:6c:9f:f7:91: 24:8c:d9:88:fa:fc:6e:e5:7f:91:f9:0f:94:77:f8: 86:2c:f7:bf:a4:02:3a:f2:d9:81:e4:7e:69:f9:37: 6e:27:02:aa:56:b3:2e:52:d6:79:8c:e6:18:57:11: 5b:8c:4f:7f:81:10:90:00:eb:06:7d:50:9e:e2:0b: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BE:EE:89:91:F3:45:94:CB:C0:4A:42:B7:95:3A:9C:49:EE:AC:8F X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:57:27:6d:e3:c7:93:f4:04:3d:cc:9a:5d:44:4e:50:fc:a4: ca:da:9b:fa:4f:4f:75:5c:4f:fa:cc:da:1d:dc:87:9c:05:e0: 51:99:8e:90:32:7b:58:6d:9b:0a:2c:44:41:b6:ea:f3:ce:59: 7d:34:eb:6e:a2:6f:fc:a5:a8:b6:32:d2:14:60:a8:c5:b1:c3: 72:a6:b2:d6:65:3a:46:79:cc:80:a0:0c:71:7c:1a:fb:e6:27: a6:45:69:ac:63:14:5d:1d:d8:c7:77:b5:89:f1:5b:cc:3c:0e: 6f:a1:4b:f4:0c:08:a9:d5:a7:12:51:a7:f7:2a:ac:04:a8:71: 7a:ca:c9:ab:24:6f:27:d5:6b:53:4f:cf:9e:ca:c1:df:d2:9a: c1:fb:e4:13:14:32:2a:6f:55:68:cf:51:d3:51:a3:9e:97:7d: f7:d3:9e:3e:b6:f3:03:40:8c:d6:76:d4:2a:4e:46:1f:e6:4f: 30:13:eb:dc:4d:92:cb:0f:4d:8f:38:e2:33:35:9f:32:89:20: ec:f7:4e:c7:5e:2e:2d:fb:8d:26:6c:7b:b3:04:fb:ef:23:66: 8a:4a:9e:95:a7:7b:1e:ba:e9:72:a6:13:38:2c:70:f0:69:d7: ed:1c:ca:5f:5d:3c:fa:92:37:1a:34:0e:6f:9b:4d:5d:5d:3f: 59:0d:39:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYwMzE2MjAzMTM4WhcNMjYwMzIzMjAzMTM4WjAYMRYwFAYD VQQDEw02OWI4NjhhYS03ZjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNZerG4P1RXrrjWIXl23xiKPITQw4O/wf8c8KJdgPSm2uSLG65Eafwy19L/M vo1T2AMnsr26WY1smfSsqy6zysGYe4ura+DMkb/sx1nkbumamI+p2E5kX5E7Pn9u olfB0IF0ZV8m/QtZfJyUHaXBqJvGXiz0dxwppiz6Ge5hSASOozTqp7Q4q0AX1csw m0qpmYZ1X+5jDC74tw0SjN24qfCZ9XUDpJFn3hP+Mq9gfuzCc8h0tMD8HxlEYDhY S2yf95EkjNmI+vxu5X+R+Q+Ud/iGLPe/pAI68tmB5H5p+TduJwKqVrMuUtZ5jOYY VxFbjE9/gRCQAOsGfVCe4gvM3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPe+7omR 80WUy8BKQreVOpxJ7qyPMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATVcnbePHk/QEPcyaXUROUPykytqb+k9PdVxP+szaHdyHnAXgUZmOkDJ7WG2b CixEQbbq885ZfTTrbqJv/KWotjLSFGCoxbHDcqay1mU6RnnMgKAMcXwa++YnpkVp rGMUXR3Yx3e1ifFbzDwOb6FL9AwIqdWnElGn9yqsBKhxesrJqyRvJ9VrU0/PnsrB 39KawfvkExQyKm9VaM9R01Gjnpd999OePrbzA0CM1nbUKk5GH+ZPMBPr3E2Syw9N jzjiMzWfMokg7PdOx14uLfuNJmx7swT77yNmikqelad7HrrpcqYTOCxw8GnX7RzK X108+pI3GjQOb5tNXV0/WQ05UQ== -----END CERTIFICATE-----Generated at Tue Mar 17 18:45:33 2026 by rpki-client