$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: fmFy6FPiE1FYwojnvtUfpU6LtrFcNL0WjlOiCjQvIp8= Subject key identifier: C5:3B:1A:DE:7E:15:DC:58:F7:21:3E:5E:95:1B:49:EF:FE:87:E6:65 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07F7 Signing time: Tue 04 Nov 2025 21:12:49 +0000 Manifest this update: Tue 04 Nov 2025 21:12:49 +0000 Manifest next update: Tue 11 Nov 2025 21:12:49 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: qmSUN8pAYC1IwCckiLbzUf3gOAC7sbsTq16Xdm9kdcA=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: dvnOEo+3N790+AtnbaRMi3nEBY3/eARCboXR6RYFGJE=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: ZAkZWxi9iVmr7wQCEzSoCxNK0Au02yJMhUs1rCvTa90=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: QKy+yDyTF6g62EY3bgPWj6sy2X1Ene+DoWLEXnukIpU=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: IHRPH+u7VFxrTmFB+qLBi+OAvW2oUN7SaTd3KPzYAYU=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: 5NqgNIsXa19amtn4HMMc6db3EBMX1bO+m+WZsJmO+bs=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: GIddXA9sYUEfN5WLsupKecM8a75FJ27s2s/7v+F4VUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Nov 4 21:12:49 2025 GMT Not After : Nov 11 21:12:49 2025 GMT Subject: CN=690a6c51-7bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ef:f5:52:5c:f2:e3:f1:6b:36:01:b6:f6:f2: 56:25:55:bc:55:8e:69:40:04:01:6d:ed:14:49:90: d5:a2:c7:2a:9a:38:46:56:76:e7:a4:35:0a:91:cb: f1:31:e1:3d:e8:39:f9:7e:43:2c:61:c8:ce:96:05: 5e:7c:7f:9f:b0:06:88:0f:4b:fe:8a:b7:42:f5:61: 4d:46:83:3e:5f:76:d1:d8:78:39:cd:4e:84:1f:32: e3:bd:d5:7a:67:6f:22:87:d8:8d:e2:12:40:90:cd: 45:cf:ef:09:5b:f5:9f:72:1c:19:a8:de:00:fe:38: 43:e4:13:20:46:d3:40:81:67:ab:56:e4:37:0b:d0: 0f:67:f3:0f:a6:73:41:21:44:c9:03:5c:b4:89:b5: 9b:31:0d:5f:d7:0d:c6:36:68:f1:a9:e4:d6:3b:9c: 8c:32:24:15:50:27:23:77:bc:f7:74:4c:12:03:b0: a5:96:c5:8c:be:2a:8d:81:10:43:cb:7a:ef:dc:b2: fd:3b:ac:33:c6:ff:4a:3b:e9:d8:9e:b6:71:de:32: c2:a5:4c:40:02:64:19:0e:67:0f:de:ca:df:04:5f: 23:3c:0a:90:2a:01:80:b0:35:c4:a5:0d:50:b5:ae: 41:71:79:59:75:32:21:6b:02:04:6d:d0:2a:ed:8d: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3B:1A:DE:7E:15:DC:58:F7:21:3E:5E:95:1B:49:EF:FE:87:E6:65 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:a9:0f:15:d2:6f:37:15:48:2a:a6:28:f8:7a:29:56:c1:08: 39:9d:53:e1:0f:e7:f6:6f:bd:4b:e1:17:31:33:1b:5c:d7:d1: b2:ce:25:94:9a:20:7d:ea:91:87:9f:19:d6:55:9a:73:90:2a: 89:c6:07:71:ce:cf:bb:27:e5:8c:1b:df:bc:c3:60:9b:f8:53: bf:9c:03:74:12:d8:70:61:cd:78:05:e2:b9:2d:38:7e:8e:c3: c3:86:5a:bf:4b:eb:91:7c:66:3e:ff:c5:b2:df:1c:e5:fa:59: 05:44:09:e9:29:73:c6:b4:27:3e:67:67:d7:d2:af:2c:6b:30: 31:47:ac:fa:14:fd:13:92:bb:fb:ab:ff:1e:7e:a7:48:bf:1c: 31:43:03:27:c3:bb:2f:b2:f9:3b:e7:01:1e:cc:15:1a:af:dc: 36:d4:bd:9e:d6:d7:d0:15:8e:d7:99:a7:48:f1:59:29:a7:af: 26:d6:2c:ec:41:e4:b1:5b:09:9e:4c:c1:97:65:62:09:47:c0: ed:ae:e6:80:04:9c:d7:7b:63:74:f4:09:b8:78:dc:45:b2:eb: ea:14:de:76:2a:a0:bf:ac:a6:f1:b7:57:29:e2:dd:e7:1c:40: fc:3b:65:3b:db:14:de:30:42:fd:e4:ec:cd:91:68:c9:0e:a2: 45:04:10:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUxMTA0MjExMjQ5WhcNMjUxMTExMjExMjQ5WjAYMRYwFAYD VQQDEw02OTBhNmM1MS03YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu/1Ulzy4/FrNgG29vJWJVW8VY5pQAQBbe0USZDVoscqmjhGVnbnpDUKkcvx MeE96Dn5fkMsYcjOlgVefH+fsAaID0v+irdC9WFNRoM+X3bR2Hg5zU6EHzLjvdV6 Z28ih9iN4hJAkM1Fz+8JW/WfchwZqN4A/jhD5BMgRtNAgWerVuQ3C9APZ/MPpnNB IUTJA1y0ibWbMQ1f1w3GNmjxqeTWO5yMMiQVUCcjd7z3dEwSA7CllsWMviqNgRBD y3rv3LL9O6wzxv9KO+nYnrZx3jLCpUxAAmQZDmcP3srfBF8jPAqQKgGAsDXEpQ1Q ta5BcXlZdTIhawIEbdAq7Y1bTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU7Gt5+ FdxY9yE+XpUbSe/+h+ZlMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQqQ8V0m83FUgqpij4eilWwQg5nVPhD+f2b71L4RcxMxtc19GyziWU miB96pGHnxnWVZpzkCqJxgdxzs+7J+WMG9+8w2Cb+FO/nAN0EthwYc14BeK5LTh+ jsPDhlq/S+uRfGY+/8Wy3xzl+lkFRAnpKXPGtCc+Z2fX0q8sazAxR6z6FP0Tkrv7 q/8efqdIvxwxQwMnw7svsvk75wEezBUar9w21L2e1tfQFY7XmadI8Vkpp68m1izs QeSxWwmeTMGXZWIJR8DtruaABJzXe2N09Am4eNxFsuvqFN52KqC/rKbxt1cp4t3n HED8O2U72xTeMEL95OzNkWjJDqJFBBD4 -----END CERTIFICATE-----Generated at Wed Nov 5 06:20:20 2025 by rpki-client