$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: S3FgqIXviJkmv4qiVMLfYkMxUFC9QP5Ok4yGCts/C4s= Subject key identifier: 38:17:6D:03:BA:A4:04:67:00:8E:BC:BB:87:16:9E:66:41:A5:DE:F0 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07AE Signing time: Mon 16 Jun 2025 21:03:41 +0000 Manifest this update: Mon 16 Jun 2025 21:03:40 +0000 Manifest next update: Mon 23 Jun 2025 21:03:40 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: JunNLitf5VRxmUuL6c9GFVzciW7uaB9ySepUDLiI2Ss=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 21:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1993 (0x7c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Jun 16 21:03:40 2025 GMT Not After : Jun 23 21:03:40 2025 GMT Subject: CN=685086ac-bd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:25:f6:9b:ef:8e:2a:e3:73:f8:d1:13:3c:ee: 8a:7a:df:a8:a2:7b:cb:e5:5d:1c:eb:40:fa:1e:e5: 1d:9d:d1:98:6a:b1:09:54:d1:50:03:52:80:b6:bb: 08:7b:8c:b7:1a:73:ea:2c:e1:04:10:0e:ec:48:6b: 80:a6:88:c3:0e:ba:95:7e:19:ce:84:42:10:a2:83: f7:09:5f:e9:b8:76:7e:9e:54:b3:dd:4e:13:43:8d: a2:95:41:f8:9c:ce:a7:94:09:bf:b4:b0:f8:53:9a: 82:4e:31:7f:2c:e4:22:b9:93:24:b5:5b:90:61:98: cc:11:7f:c2:76:d8:df:c2:47:2c:77:81:af:4a:8d: dc:aa:2f:a2:51:5b:7b:b4:2d:ad:11:65:ed:47:d2: 63:95:bb:14:d3:9a:17:01:32:40:72:8a:52:4e:be: a8:3d:c3:42:ac:44:6d:bc:24:0e:62:27:69:d8:7a: 7a:70:ff:1c:0e:28:41:29:67:1c:43:af:f0:e3:e9: 01:56:e3:fc:65:82:bf:6c:34:e6:13:a7:67:dd:ea: d5:c4:15:1d:38:82:81:c5:fd:60:69:0a:a1:a3:99: 55:26:7b:1e:22:f1:ba:0d:b3:78:c4:25:9b:e6:dc: e0:45:6f:3a:01:f1:33:75:b1:02:55:1b:0c:bf:02: b1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:17:6D:03:BA:A4:04:67:00:8E:BC:BB:87:16:9E:66:41:A5:DE:F0 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d7:b1:92:2d:2d:fe:53:f9:f9:4e:19:80:da:2c:40:aa:6b: 8c:de:6c:07:6f:42:ed:94:3f:00:80:d0:f4:25:1c:1a:d3:df: ad:45:92:6f:49:56:0e:3c:57:b0:c5:30:0a:91:90:aa:66:d1: 61:6f:40:f2:41:91:e3:a6:e5:8d:f0:ef:03:43:a0:a3:52:f3: 49:57:8e:30:58:fc:5c:37:54:3f:2e:1d:70:60:b8:e1:5f:bf: 3c:19:b4:8a:c6:d5:d0:7f:c6:53:c9:0c:c9:6f:0f:00:4c:eb: 63:a4:67:c3:91:4e:75:b3:e2:9f:30:c5:25:c4:6f:72:bb:cf: d1:57:09:0d:23:93:ab:18:e2:9e:7c:5d:08:4a:1a:0f:57:65: 3a:4e:98:dc:f0:c3:46:87:80:d6:d2:fe:34:c3:41:b0:64:07: d0:c6:9a:13:a3:99:19:47:44:14:ea:7d:ff:8d:ad:5d:04:ef: 13:e6:a6:c0:1e:a8:cf:95:39:a1:65:76:10:ab:e3:4a:ce:56: ee:96:67:6a:d4:97:e2:63:76:8e:23:23:7d:9f:8f:18:5d:74: 3b:68:fd:9b:de:3f:59:eb:a4:20:b7:3d:55:88:ce:4a:4f:04: 32:16:9c:f1:0c:8f:ad:30:14:03:5e:c8:b9:14:50:4e:4c:fc: 24:be:38:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwNjE2MjEwMzQwWhcNMjUwNjIzMjEwMzQwWjAYMRYwFAYD VQQDEw02ODUwODZhYy1iZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiX2m++OKuNz+NETPO6Ket+oonvL5V0c60D6HuUdndGYarEJVNFQA1KAtrsI e4y3GnPqLOEEEA7sSGuApojDDrqVfhnOhEIQooP3CV/puHZ+nlSz3U4TQ42ilUH4 nM6nlAm/tLD4U5qCTjF/LOQiuZMktVuQYZjMEX/Cdtjfwkcsd4GvSo3cqi+iUVt7 tC2tEWXtR9JjlbsU05oXATJAcopSTr6oPcNCrERtvCQOYidp2Hp6cP8cDihBKWcc Q6/w4+kBVuP8ZYK/bDTmE6dn3erVxBUdOIKBxf1gaQqho5lVJnseIvG6DbN4xCWb 5tzgRW86AfEzdbECVRsMvwKxpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgXbQO6 pARnAI68u4cWnmZBpd7wMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM17GSLS3+U/n5ThmA2ixAqmuM3mwHb0LtlD8AgND0JRwa09+tRZJv SVYOPFewxTAKkZCqZtFhb0DyQZHjpuWN8O8DQ6CjUvNJV44wWPxcN1Q/Lh1wYLjh X788GbSKxtXQf8ZTyQzJbw8ATOtjpGfDkU51s+KfMMUlxG9yu8/RVwkNI5OrGOKe fF0IShoPV2U6Tpjc8MNGh4DW0v40w0GwZAfQxpoTo5kZR0QU6n3/ja1dBO8T5qbA HqjPlTmhZXYQq+NKzlbulmdq1JfiY3aOIyN9n48YXXQ7aP2b3j9Z66Qgtz1ViM5K TwQyFpzxDI+tMBQDXsi5FFBOTPwkvji2 -----END CERTIFICATE-----Generated at Tue Jun 17 00:30:35 2025 by rpki-client