$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: qH6yjGJANB9n7dlbt/GxAlb6Ymlc8aQjCQ7jttKm8i4= Subject key identifier: 2D:0B:D5:B7:0F:14:8A:F8:21:FE:47:82:53:11:F2:C4:1C:FF:80:74 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07D0 Signing time: Fri 22 Aug 2025 21:21:14 +0000 Manifest this update: Fri 22 Aug 2025 21:21:13 +0000 Manifest next update: Fri 29 Aug 2025 21:21:13 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: WoQKFGVXQC8gzp9fxbTPF1UyTBA9mO3WY2BwzfxdVno=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2027 (0x7eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Aug 22 21:21:13 2025 GMT Not After : Aug 29 21:21:13 2025 GMT Subject: CN=68a8df49-f1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:de:40:af:12:fc:9a:45:ef:27:b4:90:23:f7: 62:cd:09:2d:7a:5a:95:b0:a8:0b:e9:4d:20:d7:bc: d0:ca:4f:6b:95:35:46:fc:30:43:90:52:67:73:19: 78:05:f7:99:6c:87:9a:55:ba:9c:a5:6d:f9:1a:9c: 65:cc:f8:8c:d1:12:2b:40:d0:8f:56:c0:ce:8b:58: 20:a4:20:8b:82:ac:d1:2a:e9:37:16:33:17:7e:95: eb:98:a5:39:f7:b3:69:62:cd:36:51:34:39:76:3a: da:09:31:4a:02:44:d8:bd:cc:af:aa:ca:f4:99:1d: 19:fe:c8:5c:77:96:cb:63:2f:16:e3:dd:51:43:7d: 01:d7:7e:13:95:51:43:32:07:4f:cc:38:71:22:49: 1b:a8:d6:a3:9f:d6:7b:f0:08:9b:cf:12:c8:2f:ad: ce:06:0a:0c:bf:92:3f:01:ff:11:a5:ac:32:f0:67: 52:ce:be:b9:52:50:44:ab:3b:2e:c4:84:37:63:d5: 24:65:85:c4:e8:4a:f7:44:6d:e2:c9:5a:bf:4e:b6: 60:26:85:34:e9:47:62:eb:69:39:96:21:4c:2e:98: 74:d9:81:f8:14:8f:df:27:f8:08:5d:17:7f:5a:e3: 66:96:91:7e:68:d3:26:e9:08:56:e7:64:6b:2f:1c: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:0B:D5:B7:0F:14:8A:F8:21:FE:47:82:53:11:F2:C4:1C:FF:80:74 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:5f:2e:75:04:3d:47:9d:94:cb:af:51:1d:4e:78:11:aa:60: 57:16:ea:40:f8:ae:d2:2f:85:55:62:50:96:68:dc:d9:ec:f8: 91:e1:53:b5:99:cf:1c:fb:83:ec:67:1b:54:de:83:ea:07:3c: b6:68:4c:f2:ab:4d:8b:13:e1:52:f2:5a:41:f6:19:2e:b5:11: f7:b4:c0:92:d2:cc:44:13:72:80:4c:64:e0:0f:57:e8:81:89: 65:b0:b6:88:ed:e0:a6:0f:aa:78:d3:c1:1a:b0:0f:45:f3:01: c1:f1:45:11:2b:72:d9:6a:17:1f:22:ba:0b:8a:ae:91:0b:06: 09:c7:f4:fa:9e:8b:f1:32:ce:3f:25:51:bc:5a:61:6d:88:dd: 16:83:4d:fa:a5:10:67:0e:fc:78:4f:e2:c6:6a:07:12:fa:a0: d5:06:41:fc:c1:87:0e:c1:c8:af:93:a6:2e:88:b9:31:c6:fe: bb:82:04:2e:40:3f:cb:c9:b0:e0:94:76:39:78:2f:09:f3:81: 48:1d:ae:bd:ff:71:3a:17:17:62:60:2f:76:a3:7a:91:c6:54: e1:17:8a:64:e3:dd:ed:ea:07:1e:b5:59:1d:6e:40:bd:45:76: b2:6a:f3:bf:2c:28:14:6f:b0:05:12:77:11:f0:5e:d8:0d:52: 68:93:d9:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwODIyMjEyMTEzWhcNMjUwODI5MjEyMTEzWjAYMRYwFAYD VQQDEw02OGE4ZGY0OS1mMWM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy95ArxL8mkXvJ7SQI/dizQktelqVsKgL6U0g17zQyk9rlTVG/DBDkFJncxl4 BfeZbIeaVbqcpW35GpxlzPiM0RIrQNCPVsDOi1ggpCCLgqzRKuk3FjMXfpXrmKU5 97NpYs02UTQ5djraCTFKAkTYvcyvqsr0mR0Z/shcd5bLYy8W491RQ30B134TlVFD MgdPzDhxIkkbqNajn9Z78AibzxLIL63OBgoMv5I/Af8Rpawy8GdSzr65UlBEqzsu xIQ3Y9UkZYXE6Er3RG3iyVq/TrZgJoU06Udi62k5liFMLph02YH4FI/fJ/gIXRd/ WuNmlpF+aNMm6QhW52RrLxz44QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0L1bcP FIr4If5HglMR8sQc/4B0MB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJXy51BD1HnZTLr1EdTngRqmBXFupA+K7SL4VVYlCWaNzZ7PiR4VO1 mc8c+4PsZxtU3oPqBzy2aEzyq02LE+FS8lpB9hkutRH3tMCS0sxEE3KATGTgD1fo gYllsLaI7eCmD6p408EasA9F8wHB8UURK3LZahcfIroLiq6RCwYJx/T6novxMs4/ JVG8WmFtiN0Wg036pRBnDvx4T+LGagcS+qDVBkH8wYcOwcivk6YuiLkxxv67ggQu QD/LybDglHY5eC8J84FIHa69/3E6FxdiYC92o3qRxlThF4pk493t6gcetVkdbkC9 RXayavO/LCgUb7AFEncR8F7YDVJok9mr -----END CERTIFICATE-----Generated at Sat Aug 23 21:01:17 2025 by rpki-client