$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: tbe4vYLs++lKyCn1Yuo90R587tWFR9MH4ZEjkfo8m2s= Subject key identifier: C9:B3:FE:76:30:17:8A:48:0C:13:CB:62:02:88:D6:E0:FA:B7:F3:4D Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07B5 Signing time: Mon 30 Jun 2025 21:30:18 +0000 Manifest this update: Mon 30 Jun 2025 21:30:18 +0000 Manifest next update: Mon 07 Jul 2025 21:30:18 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: mdEY46r8aQYlg7SSDTfjO82Eqo56yrukKDcDDsBNbCs=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Jun 30 21:30:18 2025 GMT Not After : Jul 7 21:30:18 2025 GMT Subject: CN=686301ea-cbf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:bf:17:69:bd:83:dc:8d:a5:21:88:2e:29: 01:2e:9a:d2:cc:eb:74:c6:7a:71:ae:06:dd:61:e1: 10:88:32:82:d6:9b:1c:94:a7:07:b3:43:7e:c6:aa: b5:79:a3:f8:4c:40:71:ea:92:86:da:5c:d5:68:e5: a8:5b:82:5e:0e:70:58:32:22:c1:cc:29:19:13:6c: 47:ec:07:13:3f:da:79:1b:c5:c9:f1:48:b5:b8:80: 03:65:b9:26:c5:22:14:2a:89:b9:b0:70:7e:58:12: e6:15:4d:aa:2f:1d:69:b6:e8:45:f2:3b:75:76:f4: 06:b1:8c:e5:dc:87:4c:9b:e1:72:11:ff:78:a1:e3: 33:78:3f:18:ab:72:ba:68:03:23:f3:68:2d:ad:df: 9b:e2:d6:49:be:c3:91:5a:c6:34:b3:59:39:d5:e0: d7:63:54:64:c5:e5:da:67:77:83:08:ff:55:df:7a: e0:9a:0b:f4:12:db:35:b5:58:c1:dd:94:67:ce:70: 74:ab:57:c0:9b:95:8e:05:ab:12:5d:f4:f5:78:7f: cd:cb:c7:59:69:5b:34:8f:c2:28:80:da:ef:0e:52: 8a:51:f5:96:9a:6b:a4:1d:1e:ee:a5:81:4a:8e:45: 36:20:79:7d:12:c0:d0:b8:fc:dc:f0:9f:87:16:32: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B3:FE:76:30:17:8A:48:0C:13:CB:62:02:88:D6:E0:FA:B7:F3:4D X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ac:4e:53:c4:44:ac:df:62:2e:3e:53:dc:8f:89:55:cc:73: 1d:8c:6f:1a:ff:c4:55:2d:c2:b3:9a:b0:16:f5:26:4d:7a:82: 65:c8:9e:c4:3a:be:f8:c0:70:9b:e8:33:c0:1e:fd:46:b1:86: 90:9c:ba:21:d6:bd:7a:7b:fa:20:fc:7f:d3:45:d6:56:23:4f: 84:c7:b9:53:7d:4b:84:61:4a:b2:1e:8b:e3:f6:98:06:ed:9a: 09:ae:2e:c3:70:3c:e0:9d:2c:cf:a1:07:b8:1d:00:7b:97:5d: e2:b4:9b:4f:1c:c0:94:2f:4d:71:03:8b:41:70:ce:7f:70:b4: c6:f3:66:e5:27:8b:ec:8e:86:b0:69:31:ba:f1:e7:61:02:c9: d5:89:aa:d0:78:5c:a3:73:f1:70:0b:f3:e3:42:dc:5f:51:a8: c3:d0:ca:79:7d:e8:43:9e:94:63:f2:e9:0b:58:77:57:b6:6d: e4:af:b3:d7:36:ff:3a:28:84:0d:2c:c6:af:02:aa:12:0c:7c: 30:aa:57:26:b9:f3:2c:0d:ab:86:7a:dc:0e:21:c5:f1:bc:9b: 08:d2:09:dd:fa:b4:be:ee:5f:89:d6:fd:d7:d6:5a:de:ce:c1: 6c:6c:24:f7:11:41:97:7b:c8:dd:70:58:ac:22:46:52:57:a2: bf:28:96:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwNjMwMjEzMDE4WhcNMjUwNzA3MjEzMDE4WjAYMRYwFAYD VQQDEw02ODYzMDFlYS1jYmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOu/F2m9g9yNpSGILikBLprSzOt0xnpxrgbdYeEQiDKC1psclKcHs0N+xqq1 eaP4TEBx6pKG2lzVaOWoW4JeDnBYMiLBzCkZE2xH7AcTP9p5G8XJ8Ui1uIADZbkm xSIUKom5sHB+WBLmFU2qLx1ptuhF8jt1dvQGsYzl3IdMm+FyEf94oeMzeD8Yq3K6 aAMj82gtrd+b4tZJvsORWsY0s1k51eDXY1RkxeXaZ3eDCP9V33rgmgv0Ets1tVjB 3ZRnznB0q1fAm5WOBasSXfT1eH/Ny8dZaVs0j8IogNrvDlKKUfWWmmukHR7upYFK jkU2IHl9EsDQuPzc8J+HFjIX7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmz/nYw F4pIDBPLYgKI1uD6t/NNMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfrE5TxESs32IuPlPcj4lVzHMdjG8a/8RVLcKzmrAW9SZNeoJlyJ7E Or74wHCb6DPAHv1GsYaQnLoh1r16e/og/H/TRdZWI0+Ex7lTfUuEYUqyHovj9pgG 7ZoJri7DcDzgnSzPoQe4HQB7l13itJtPHMCUL01xA4tBcM5/cLTG82blJ4vsjoaw aTG68edhAsnViarQeFyjc/FwC/PjQtxfUajD0Mp5fehDnpRj8ukLWHdXtm3kr7PX Nv86KIQNLMavAqoSDHwwqlcmufMsDauGetwOIcXxvJsI0gnd+rS+7l+J1v3X1lre zsFsbCT3EUGXe8jdcFisIkZSV6K/KJZ9 -----END CERTIFICATE-----Generated at Wed Jul 2 14:41:17 2025 by rpki-client