$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: JMa2UZv5FQR4YTOETVRI0UxjmptMOfFJSS8mrHnElfQ= Subject key identifier: C5:23:FC:D4:CB:B8:77:95:70:DC:B2:55:00:E9:81:74:5C:64:4C:B1 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0853 Signing time: Thu 16 Apr 2026 20:49:08 +0000 Manifest this update: Thu 16 Apr 2026 20:49:07 +0000 Manifest next update: Thu 23 Apr 2026 20:49:07 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: gKuCzoK0bhaBwzfuxGETksQLHSP4dfX5ozVx+qyNhuw=) 2: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: GMNbFj5OMAYQTJHJmZ3/lLnrwOgYll7c/asD4WCaS0E=) 3: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: eALHohqPfF3ui0TiL12I+B5Q/UX/lWH/VW8crfpvj7o=) 4: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (hash: 4MuAY4it4gTEQIf5LMe2RPCt6I2j4k+IMBFAYSXEFv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Apr 16 20:49:07 2026 GMT Not After : Apr 23 20:49:07 2026 GMT Subject: CN=69e14b43-2954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:01:40:03:6f:48:1a:81:53:04:12:17:cf: 10:47:c5:10:a2:8d:f8:71:38:51:32:c2:c9:10:d0: 69:99:e1:1b:b4:f4:0a:26:73:93:95:9c:3a:b7:70: 45:95:d9:63:09:ba:10:19:c6:5f:52:53:71:1c:40: 04:1e:08:c1:9d:aa:7a:e5:77:de:af:6d:72:3a:15: f4:21:8e:b1:61:4d:fa:73:41:d7:18:a8:81:ed:f3: 29:fe:8e:45:af:5c:f2:32:55:6f:db:89:e2:78:48: 60:29:10:70:01:ab:80:30:cb:8c:ba:8c:e6:1c:dd: cc:26:4e:ae:63:44:35:98:6e:0e:b2:c2:71:53:42: 25:6b:ab:71:a8:04:6c:20:c9:d3:20:e8:64:93:14: 8e:e7:f7:ba:15:6f:65:eb:6c:1e:29:31:b8:90:f3: 17:2c:48:fb:30:52:eb:b5:e6:4c:1e:40:10:15:34: 85:70:99:f0:54:e7:6f:8b:1b:0e:1c:4b:e7:ff:70: 41:92:5b:60:12:e0:b8:ed:b6:2d:b8:09:54:0d:87: 19:4d:0f:86:06:7a:e0:9a:01:3f:a8:2d:50:b3:c6: cb:b1:b2:e2:44:80:5e:a7:9c:71:ca:0f:bb:bc:74: a9:a4:0b:8f:fa:6a:a1:5e:93:c3:48:5d:18:21:b9: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:23:FC:D4:CB:B8:77:95:70:DC:B2:55:00:E9:81:74:5C:64:4C:B1 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:24:fd:c4:fa:64:4f:0f:39:da:c6:1d:30:9f:1d:2e:7c:b3: 03:ca:f5:ea:92:84:40:48:2a:68:bc:6c:6e:34:eb:48:78:17: e7:e1:2f:41:43:89:07:b8:a8:e3:94:4b:3d:b7:e3:0a:48:ce: 40:77:95:46:7d:b6:9b:9e:6b:db:b5:62:c6:26:81:6e:e1:a8: da:33:6d:bb:9c:23:eb:91:be:4d:8f:08:95:bb:f4:5d:f2:ce: fc:6f:30:e6:36:5c:bb:b8:d0:82:de:b4:b9:56:84:e6:3e:b6: 6b:ae:99:ad:b0:e2:99:85:30:ca:4e:cb:f5:4d:54:ea:af:c8: e7:db:0d:b3:ca:bc:89:9a:e5:6a:b1:4e:ec:de:6f:43:cb:52: 5a:e0:77:14:1d:da:d9:2e:de:93:04:5a:5b:22:bd:cf:a1:c5: 0d:49:6b:e4:1e:58:8a:87:7d:f3:e7:ee:55:9a:d3:b4:e0:4d: 79:2c:17:39:9a:19:4c:4c:1f:0a:3e:2c:c5:15:9d:82:77:41: fe:1b:6f:17:71:63:72:61:da:f7:65:8f:c5:2e:46:86:e2:e2: ee:7b:5f:c6:5b:c9:36:04:61:fb:66:0c:0b:fe:cb:3d:db:dd: ff:7e:87:71:d3:44:fd:70:af:21:42:eb:ae:16:b9:73:db:7a: c3:ff:ba:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYwNDE2MjA0OTA3WhcNMjYwNDIzMjA0OTA3WjAYMRYwFAYD VQQDEw02OWUxNGI0My0yOTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe4BQANvSBqBUwQSF88QR8UQoo34cThRMsLJENBpmeEbtPQKJnOTlZw6t3BF ldljCboQGcZfUlNxHEAEHgjBnap65Xfer21yOhX0IY6xYU36c0HXGKiB7fMp/o5F r1zyMlVv24nieEhgKRBwAauAMMuMuozmHN3MJk6uY0Q1mG4OssJxU0Ila6txqARs IMnTIOhkkxSO5/e6FW9l62weKTG4kPMXLEj7MFLrteZMHkAQFTSFcJnwVOdvixsO HEvn/3BBkltgEuC47bYtuAlUDYcZTQ+GBnrgmgE/qC1Qs8bLsbLiRIBep5xxyg+7 vHSppAuP+mqhXpPDSF0YIbnUwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUj/NTL uHeVcNyyVQDpgXRcZEyxMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOCT9xPpkTw852sYdMJ8dLnyzA8r16pKEQEgqaLxsbjTrSHgX5+EvQUOJB7io 45RLPbfjCkjOQHeVRn22m55r27VixiaBbuGo2jNtu5wj65G+TY8Ilbv0XfLO/G8w 5jZcu7jQgt60uVaE5j62a66ZrbDimYUwyk7L9U1U6q/I59sNs8q8iZrlarFO7N5v Q8tSWuB3FB3a2S7ekwRaWyK9z6HFDUlr5B5Yiod98+fuVZrTtOBNeSwXOZoZTEwf Cj4sxRWdgndB/htvF3FjcmHa92WPxS5GhuLi7ntfxlvJNgRh+2YMC/7LPdvd/36H cdNE/XCvIULrrha5c9t6w/+6xQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:58:13 2026 by rpki-client