$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: YcY3AWhQ99ac65rmsREWskW0ewlsRT1db0OkbHF+jBk= Subject key identifier: 1D:7A:77:2E:BD:BD:3F:8C:57:B8:45:F9:3D:4D:05:46:74:89:A8:B3 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 083B Signing time: Mon 02 Mar 2026 00:45:01 +0000 Manifest this update: Mon 02 Mar 2026 00:44:59 +0000 Manifest next update: Mon 09 Mar 2026 00:44:59 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: 7YPIYMPIGaKDqyusMFpd7MqbBrkRrgzIR67Bh8Uebu0=) 2: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (hash: 4MuAY4it4gTEQIf5LMe2RPCt6I2j4k+IMBFAYSXEFv8=) 3: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: GMNbFj5OMAYQTJHJmZ3/lLnrwOgYll7c/asD4WCaS0E=) 4: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: eALHohqPfF3ui0TiL12I+B5Q/UX/lWH/VW8crfpvj7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2147 (0x863) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Mar 2 00:44:59 2026 GMT Not After : Mar 9 00:44:59 2026 GMT Subject: CN=69a4dd8c-ec2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:21:3d:ce:cc:fa:a7:ef:cd:a3:8a:78:a4:31: 1d:e2:5a:f5:e1:63:ca:d9:3c:c4:c3:18:86:eb:9d: dc:0d:e8:43:7c:7a:01:9c:ac:a7:f6:8b:df:ce:17: c6:96:2e:00:60:85:d5:c9:34:93:57:94:33:7d:96: 3f:4e:b2:21:cc:57:48:57:90:28:5d:fb:e4:3a:fe: 2e:d5:ec:e9:ae:0a:11:ea:2e:7b:6c:ab:63:92:70: 3f:5c:66:40:8e:e8:9d:1f:87:cd:31:4b:0b:a6:f6: f0:34:c3:20:d3:6c:6b:c6:49:5c:73:3a:f6:0c:24: ea:12:c3:25:ca:7d:62:b2:a0:46:07:b5:f1:5f:da: 15:f8:71:a5:88:a4:7e:07:fb:26:1a:32:d4:5b:9b: d6:e8:37:e0:72:e4:52:8a:df:8c:12:90:b9:e4:61: 45:39:58:f1:47:d7:57:77:75:1d:fc:de:06:72:3d: 0e:23:62:5e:b5:fb:2f:c7:25:42:f5:da:e6:f8:12: 36:2d:4e:d6:f2:e4:9a:a7:15:fe:0b:35:a8:f2:ae: 3e:c9:3f:8d:29:cd:56:3f:cc:12:0b:95:7d:aa:fd: 9b:88:9b:d0:2a:2b:b7:7f:64:12:b1:92:fd:21:26: 0e:d0:0d:49:12:15:eb:f6:d4:e4:1a:52:c9:68:ba: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:77:2E:BD:BD:3F:8C:57:B8:45:F9:3D:4D:05:46:74:89:A8:B3 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:06:ad:3d:75:eb:b8:c4:75:de:07:19:2d:b5:8d:52:e1:78: 5b:30:ff:eb:8c:19:15:97:8f:17:88:09:62:a8:35:af:57:9c: 0e:1f:68:5c:73:49:c9:cd:ed:0a:d3:bb:ad:cd:3d:a5:a7:36: e7:a8:33:22:ea:b9:c5:23:0e:ea:03:57:80:d6:8b:78:71:06: dd:9b:1c:e6:74:a2:cb:88:5c:6d:58:e9:1d:2a:5e:50:30:08: 57:cc:37:7c:63:6a:a2:9b:b0:bd:18:82:f2:88:cc:6f:30:e6: 6e:22:0a:5b:c9:6c:26:73:2d:ab:5d:0d:e0:f1:fa:fa:13:9e: 77:9f:8d:e9:26:2b:77:56:7e:6e:e8:bc:0c:8a:e3:65:75:c2: 4b:c0:88:e9:9d:67:8f:1f:0a:ad:03:fa:7e:36:88:70:55:3a: 5e:dd:6e:8b:ef:1b:63:e1:4f:b9:d7:f2:16:e8:22:f0:ff:0c: 29:28:4e:90:22:95:26:c0:f0:63:98:d7:d3:c4:88:f5:08:0a: 84:2d:e1:06:3b:29:7a:60:38:5d:c0:62:e6:54:99:b7:e0:61: 73:ae:b1:71:79:85:ad:0e:8b:71:e2:3f:26:f5:ef:5b:fc:8d: 45:74:9d:17:02:aa:fd:96:91:a4:d4:11:c2:94:e7:bf:b4:e9: 71:ef:a2:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYwMzAyMDA0NDU5WhcNMjYwMzA5MDA0NDU5WjAYMRYwFAYD VQQDEw02OWE0ZGQ4Yy1lYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiiE9zsz6p+/No4p4pDEd4lr14WPK2TzEwxiG653cDehDfHoBnKyn9ovfzhfG li4AYIXVyTSTV5QzfZY/TrIhzFdIV5AoXfvkOv4u1ezprgoR6i57bKtjknA/XGZA juidH4fNMUsLpvbwNMMg02xrxklcczr2DCTqEsMlyn1isqBGB7XxX9oV+HGliKR+ B/smGjLUW5vW6DfgcuRSit+MEpC55GFFOVjxR9dXd3Ud/N4Gcj0OI2JetfsvxyVC 9drm+BI2LU7W8uSapxX+CzWo8q4+yT+NKc1WP8wSC5V9qv2biJvQKiu3f2QSsZL9 ISYO0A1JEhXr9tTkGlLJaLqLwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB16dy69 vT+MV7hF+T1NBUZ0iaizMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfAatPXXruMR13gcZLbWNUuF4WzD/64wZFZePF4gJYqg1r1ecDh9oXHNJyc3t CtO7rc09pac256gzIuq5xSMO6gNXgNaLeHEG3Zsc5nSiy4hcbVjpHSpeUDAIV8w3 fGNqopuwvRiC8ojMbzDmbiIKW8lsJnMtq10N4PH6+hOed5+N6SYrd1Z+bui8DIrj ZXXCS8CI6Z1njx8KrQP6fjaIcFU6Xt1ui+8bY+FPudfyFugi8P8MKShOkCKVJsDw Y5jX08SI9QgKhC3hBjspemA4XcBi5lSZt+Bhc66xcXmFrQ6LceI/JvXvW/yNRXSd FwKq/ZaRpNQRwpTnv7Tpce+iNQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:21:23 2026 by rpki-client