$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: qTyCmKeG3ddVR03HzXc9JANglSRHCdmaPf0XAqSPRp4= Subject key identifier: 8B:DF:9B:0E:3B:52:65:86:AB:ED:A0:61:52:A1:59:E6:D9:B2:EF:DB Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 07C7 Signing time: Mon 04 Aug 2025 21:34:07 +0000 Manifest this update: Mon 04 Aug 2025 21:34:07 +0000 Manifest next update: Mon 11 Aug 2025 21:34:07 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: 9EEIylioB8QR3ohctgy+hJqWhHcqr8rbX2e2sCRaACE=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Aug 4 21:34:07 2025 GMT Not After : Aug 11 21:34:07 2025 GMT Subject: CN=6891274f-ac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:c8:25:03:6c:5f:75:93:99:6c:0d:2e:80: 40:12:f6:4b:a8:83:87:b4:d5:3b:2f:54:00:00:61: f8:89:de:9f:94:11:1d:30:5f:9d:e9:4d:5e:8f:91: 0a:14:30:6c:8b:e4:8a:5b:25:be:94:44:e7:e0:77: 71:79:f9:c2:6f:c3:ee:25:4d:6e:37:c4:6b:66:ee: 95:34:6f:22:2e:15:f3:3b:8a:e2:91:5e:9d:f8:0a: b2:cc:55:88:85:11:92:39:79:5b:0b:d0:19:79:f0: d5:a1:3d:56:b1:1f:23:a3:fd:22:cf:c0:48:eb:71: 8a:9d:01:94:db:25:5f:e4:b6:90:12:7f:97:d4:81: a4:93:f9:95:28:05:df:30:40:99:b8:a0:e8:12:5f: 8a:98:f3:b0:ec:e6:1b:6b:15:32:14:6c:1c:64:8b: 0e:f5:76:a6:71:10:b7:10:1d:d8:b5:ba:14:91:5b: 22:4c:29:0c:f7:8e:85:84:f1:0c:44:ab:ca:16:93: 65:52:ab:43:f3:bd:03:69:30:d3:cd:67:7f:93:67: 3a:a8:e8:8a:2d:c6:0d:e3:f3:50:d8:39:75:c1:7e: 74:dc:59:4a:4d:0b:fa:c0:6e:ca:01:64:f0:6e:b5: 0b:c7:5d:d7:87:eb:aa:bf:fe:b5:18:bc:fb:40:0c: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DF:9B:0E:3B:52:65:86:AB:ED:A0:61:52:A1:59:E6:D9:B2:EF:DB X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:28:8c:2a:5e:3a:56:ea:83:4b:91:07:aa:17:8b:4a:ef:e0: 58:43:b9:08:44:8e:f5:c5:e4:5d:11:ab:3d:12:51:54:b9:8d: 4f:ea:46:cd:eb:39:1b:aa:22:c9:bd:25:b1:55:04:92:56:d5: d1:d8:89:4d:fa:de:db:de:63:46:bf:c1:8e:3b:e4:16:a3:83: 8f:9d:29:03:20:64:60:2b:dc:97:80:9e:d0:97:22:b4:91:f1: 3d:89:06:ce:6e:88:bf:49:ef:2c:83:49:2a:0b:31:ab:4d:9b: 8a:a4:fe:16:71:50:c0:09:40:75:67:62:ed:46:88:13:27:28: 39:85:09:d6:43:9e:31:7d:cb:f1:ab:b3:9c:f4:4e:79:78:e3: 15:ad:a5:b7:f3:4b:f7:34:d0:81:27:cd:31:b9:86:d6:95:19: ac:cd:72:c3:04:12:9d:d2:22:a0:96:9f:02:44:99:c6:f6:b6: 49:65:76:9f:81:cc:d2:b5:3c:02:bc:df:f2:1d:4d:c8:33:cd: f1:70:cc:7f:6f:b9:88:58:16:70:20:e5:a4:02:69:26:69:1d: 7c:55:7c:08:6b:45:e5:a1:b5:35:49:4a:8c:af:cf:40:43:4d: 93:40:37:0d:ec:a4:6a:4b:a4:40:62:81:bf:b1:b9:19:c4:0a: 9d:d1:fd:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwODA0MjEzNDA3WhcNMjUwODExMjEzNDA3WjAYMRYwFAYD VQQDEw02ODkxMjc0Zi1hYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuLIJQNsX3WTmWwNLoBAEvZLqIOHtNU7L1QAAGH4id6flBEdMF+d6U1ej5EK FDBsi+SKWyW+lETn4HdxefnCb8PuJU1uN8RrZu6VNG8iLhXzO4rikV6d+AqyzFWI hRGSOXlbC9AZefDVoT1WsR8jo/0iz8BI63GKnQGU2yVf5LaQEn+X1IGkk/mVKAXf MECZuKDoEl+KmPOw7OYbaxUyFGwcZIsO9XamcRC3EB3YtboUkVsiTCkM946FhPEM RKvKFpNlUqtD870DaTDTzWd/k2c6qOiKLcYN4/NQ2Dl1wX503FlKTQv6wG7KAWTw brULx13Xh+uqv/61GLz7QAyVXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvfmw47 UmWGq+2gYVKhWebZsu/bMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYKIwqXjpW6oNLkQeqF4tK7+BYQ7kIRI71xeRdEas9ElFUuY1P6kbN 6zkbqiLJvSWxVQSSVtXR2IlN+t7b3mNGv8GOO+QWo4OPnSkDIGRgK9yXgJ7QlyK0 kfE9iQbOboi/Se8sg0kqCzGrTZuKpP4WcVDACUB1Z2LtRogTJyg5hQnWQ54xfcvx q7Oc9E55eOMVraW380v3NNCBJ80xuYbWlRmszXLDBBKd0iKglp8CRJnG9rZJZXaf gczStTwCvN/yHU3IM83xcMx/b7mIWBZwIOWkAmkmaR18VXwIa0XlobU1SUqMr89A Q02TQDcN7KRqS6RAYoG/sbkZxAqd0f03 -----END CERTIFICATE-----Generated at Wed Aug 6 13:18:08 2025 by rpki-client