$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: IdRHY8bNYlFEoDr32+9CFUOuztW/8o79cBktf3QkjLE= Subject key identifier: E9:EA:95:6B:51:D3:87:9A:B1:E3:F3:1E:C4:13:29:2F:A7:CA:29:7E Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 086F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0847 Signing time: Tue 24 Mar 2026 20:41:23 +0000 Manifest this update: Tue 24 Mar 2026 20:41:22 +0000 Manifest next update: Tue 31 Mar 2026 20:41:22 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: HYXlbXPVtAvqHuEePD0dyALRqPvAqp5ht0tq34TaQTY=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: eALHohqPfF3ui0TiL12I+B5Q/UX/lWH/VW8crfpvj7o=) 3: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: GMNbFj5OMAYQTJHJmZ3/lLnrwOgYll7c/asD4WCaS0E=) 4: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (hash: 4MuAY4it4gTEQIf5LMe2RPCt6I2j4k+IMBFAYSXEFv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2159 (0x86f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Mar 24 20:41:22 2026 GMT Not After : Mar 31 20:41:22 2026 GMT Subject: CN=69c2f6f2-dd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:66:2e:87:de:51:41:4b:c7:d8:bb:4b:f6: 8a:a0:4a:2c:3e:34:f1:76:0a:a9:f8:04:48:e3:ec: 69:a2:0c:48:6e:ec:76:f8:d0:3a:34:9e:ba:e6:47: 1b:d3:95:f6:30:4f:3f:af:02:d1:67:c8:56:40:1e: ab:f1:59:07:cc:29:39:62:36:63:ee:83:07:90:9c: 60:48:d5:75:8e:be:3a:f3:cf:bc:54:73:58:b5:f5: 8e:28:fd:cd:6a:c1:56:eb:cd:de:73:d8:29:60:b3: 95:e0:02:d6:f8:32:6a:11:ab:59:92:37:85:de:b6: 7b:60:71:2e:03:7f:76:b1:c7:11:be:58:b6:96:22: 17:6b:d4:3d:b7:d9:6e:10:a1:ec:c1:de:ac:f4:24: 89:78:3e:cf:b9:bc:2c:9f:c1:87:51:c7:e8:26:3a: e0:14:34:30:ce:c6:38:d5:1a:01:df:a6:3f:86:70: 83:86:b9:59:e3:83:70:ab:11:0a:6d:17:c0:f2:c4: e9:12:02:b8:82:b1:a7:d7:5d:68:87:4e:55:87:cc: fc:02:29:7d:91:86:e5:88:c8:39:f4:de:5c:1d:10: 28:19:57:6b:1d:2c:e2:75:2d:33:a5:99:73:ef:6e: 91:e3:76:b4:68:09:34:95:6a:b9:14:d2:d1:fb:27: 55:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EA:95:6B:51:D3:87:9A:B1:E3:F3:1E:C4:13:29:2F:A7:CA:29:7E X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:45:77:7e:32:57:81:06:b2:1c:77:3c:23:b7:24:ae:aa:86: 40:08:6f:66:fb:9f:f0:72:03:36:47:9d:c7:94:18:62:23:67: cc:61:81:1b:e9:01:2a:bb:c5:be:cb:04:97:49:61:66:1d:55: bb:fd:8e:9f:7d:c3:f9:9e:cd:55:18:71:10:48:81:51:4d:e3: 14:dc:a2:11:e2:92:b2:bf:f7:21:84:a6:b7:96:9e:97:f2:bf: 24:f4:db:07:96:6c:90:9d:de:e6:7b:fe:49:79:dd:ef:bc:6c: 06:f8:b8:02:06:da:df:e0:bf:9c:8c:92:39:e1:b3:20:80:07: ab:37:7a:83:27:27:25:c9:3a:37:02:61:e9:32:2e:9e:d7:73: bf:32:ff:2b:1c:23:47:9c:09:d5:fd:07:7e:58:3e:02:ae:15: 9f:51:be:85:57:de:56:bf:83:d8:a9:29:11:2f:f5:69:01:49: 19:3a:48:02:d6:24:d7:7b:91:e6:df:ad:c4:75:0c:52:97:29: 64:47:0a:a6:ef:cf:09:b9:fe:b5:0d:17:00:d6:68:ee:fb:48: 92:d6:08:43:65:06:88:38:40:99:d5:8d:75:96:78:66:f3:b9: b8:9f:9a:3b:c3:30:b0:64:50:36:d5:2a:f8:4d:13:07:2f:9d: 1b:84:ed:26 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYwMzI0MjA0MTIyWhcNMjYwMzMxMjA0MTIyWjAYMRYwFAYD VQQDEw02OWMyZjZmMi1kZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1xmLofeUUFLx9i7S/aKoEosPjTxdgqp+ARI4+xpogxIbux2+NA6NJ665kcb 05X2ME8/rwLRZ8hWQB6r8VkHzCk5YjZj7oMHkJxgSNV1jr4688+8VHNYtfWOKP3N asFW683ec9gpYLOV4ALW+DJqEatZkjeF3rZ7YHEuA392sccRvli2liIXa9Q9t9lu EKHswd6s9CSJeD7Pubwsn8GHUcfoJjrgFDQwzsY41RoB36Y/hnCDhrlZ44NwqxEK bRfA8sTpEgK4grGn111oh05Vh8z8Ail9kYbliMg59N5cHRAoGVdrHSzidS0zpZlz 726R43a0aAk0lWq5FNLR+ydVxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOnqlWtR 04easePzHsQTKS+nyil+MB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVUV3fjJXgQayHHc8I7ckrqqGQAhvZvuf8HIDNkedx5QYYiNnzGGBG+kBKrvF vssEl0lhZh1Vu/2On33D+Z7NVRhxEEiBUU3jFNyiEeKSsr/3IYSmt5ael/K/JPTb B5ZskJ3e5nv+SXnd77xsBvi4Agba3+C/nIySOeGzIIAHqzd6gycnJck6NwJh6TIu ntdzvzL/KxwjR5wJ1f0Hflg+Aq4Vn1G+hVfeVr+D2KkpES/1aQFJGTpIAtYk13uR 5t+txHUMUpcpZEcKpu/PCbn+tQ0XANZo7vtIktYIQ2UGiDhAmdWNdZZ4ZvO5uJ+a O8MwsGRQNtUq+E0TBy+dG4TtJg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:57 2026 by rpki-client