$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: B0+qxxv2Rb9Y3wjrkGK8llYOzbT01fZvsuqHh0LZSk4= Subject key identifier: DB:A8:45:02:E7:AF:6A:E1:9D:13:9A:9A:ED:59:77:FA:E5:6C:CE:1A Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0799 Signing time: Sun 04 May 2025 21:04:50 +0000 Manifest this update: Sun 04 May 2025 21:04:50 +0000 Manifest next update: Sun 11 May 2025 21:04:50 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: IHFSg3P4a2DD3qegibuJTJymgdn31gPgBvCmruO7fyM=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:04:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1972 (0x7b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: May 4 21:04:50 2025 GMT Not After : May 11 21:04:50 2025 GMT Subject: CN=6817d672-4e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:21:fa:ec:36:cc:52:d8:50:f2:83:d0:15:0b: 62:d6:87:10:ac:f4:4d:26:95:25:94:df:b8:2f:c7: 5f:7c:df:54:04:d4:74:09:13:a2:c2:f1:60:f0:a6: d4:da:2f:f2:d6:d4:b0:75:6d:76:70:e0:3e:0f:3b: 7a:dd:6b:7e:c6:df:ac:76:9c:89:da:19:2b:b8:78: 32:66:84:68:0d:44:65:e9:51:a6:1c:91:c1:2c:50: ce:01:76:60:78:08:7c:57:22:c9:51:ff:4f:28:79: b2:19:4a:40:f5:a5:d3:f8:b8:3d:8c:85:1f:38:83: b9:5d:62:62:f7:d3:47:e7:99:bf:ab:84:e2:c8:df: ba:65:26:56:65:25:aa:53:75:d7:d9:69:e8:2b:9f: fb:bb:df:91:06:49:46:a0:0a:ae:3c:55:f7:f1:51: a5:60:a7:1c:db:14:f8:b9:dd:d5:dc:29:d1:f6:78: 79:b5:86:3e:9e:06:7a:38:62:36:11:02:ad:89:32: dc:1d:14:a0:39:ab:bc:11:21:ee:54:28:46:6c:2f: 91:c9:ea:00:1f:a9:3a:ac:13:54:d2:90:02:e7:8f: 0a:fa:5a:65:b0:7d:f2:a8:f4:d2:10:1d:73:dd:0e: b9:97:f7:db:96:2a:ea:f1:b4:b3:64:7e:ea:c5:a9: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A8:45:02:E7:AF:6A:E1:9D:13:9A:9A:ED:59:77:FA:E5:6C:CE:1A X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:9c:cd:a3:b5:e9:48:11:24:77:07:f4:e7:78:ed:c6:9e:db: 6c:18:66:74:10:94:20:c4:c1:ae:7e:7c:85:f3:b7:13:0b:07: 5e:e1:0b:73:30:2f:fc:b2:80:10:b0:ae:d1:71:fb:42:e8:f4: 7a:46:cd:45:f2:e2:2f:41:7e:f2:5c:d0:45:61:88:fa:c9:d7: f1:b7:fd:ab:5f:b0:e3:46:4e:b3:13:b2:2e:e8:16:95:47:4c: 86:7e:41:45:a6:98:ff:20:18:28:ee:31:6a:c9:87:f2:c7:72: 49:15:44:45:21:ca:6a:ab:9a:6a:51:84:a0:85:7b:fb:ad:85: 46:ab:11:f9:e4:6b:50:fe:e9:e5:f9:88:09:7c:dd:5e:4e:30: 08:b0:6a:74:53:67:6f:28:e7:d9:fa:07:bb:04:cb:f5:90:d0: 28:c8:d9:53:f4:45:f9:ac:45:9c:27:d2:b9:46:3e:47:f2:03: e0:88:d3:e7:79:91:0d:3f:b9:60:cf:75:bf:d7:2a:4e:32:08: 73:fb:57:ed:5b:db:2b:49:e4:bb:5e:e2:5d:0f:a8:4e:c7:e4: 57:46:9e:13:bb:f4:62:88:dd:52:f3:cf:9a:f6:4c:3a:98:fb: 72:d4:d1:aa:02:5a:3b:3e:35:96:10:42:f1:93:1b:a2:03:9c: b2:7d:40:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwNTA0MjEwNDUwWhcNMjUwNTExMjEwNDUwWjAYMRYwFAYD VQQDEw02ODE3ZDY3Mi00ZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiH67DbMUthQ8oPQFQti1ocQrPRNJpUllN+4L8dffN9UBNR0CROiwvFg8KbU 2i/y1tSwdW12cOA+Dzt63Wt+xt+sdpyJ2hkruHgyZoRoDURl6VGmHJHBLFDOAXZg eAh8VyLJUf9PKHmyGUpA9aXT+Lg9jIUfOIO5XWJi99NH55m/q4TiyN+6ZSZWZSWq U3XX2WnoK5/7u9+RBklGoAquPFX38VGlYKcc2xT4ud3V3CnR9nh5tYY+ngZ6OGI2 EQKtiTLcHRSgOau8ESHuVChGbC+RyeoAH6k6rBNU0pAC548K+lplsH3yqPTSEB1z 3Q65l/fblirq8bSzZH7qxamu8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNuoRQLn r2rhnROamu1Zd/rlbM4aMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFnM2jtelIESR3B/TneO3GnttsGGZ0EJQgxMGufnyF87cTCwde4Qtz MC/8soAQsK7RcftC6PR6Rs1F8uIvQX7yXNBFYYj6ydfxt/2rX7DjRk6zE7Iu6BaV R0yGfkFFppj/IBgo7jFqyYfyx3JJFURFIcpqq5pqUYSghXv7rYVGqxH55GtQ/unl +YgJfN1eTjAIsGp0U2dvKOfZ+ge7BMv1kNAoyNlT9EX5rEWcJ9K5Rj5H8gPgiNPn eZENP7lgz3W/1ypOMghz+1ftW9srSeS7XuJdD6hOx+RXRp4Tu/RiiN1S88+a9kw6 mPty1NGqAlo7PjWWEELxkxuiA5yyfUDw -----END CERTIFICATE-----Generated at Mon May 5 02:57:49 2025 by rpki-client