$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: K1N4mZE4x6qXi2vA1BDxhL4Pt9meRcLn6OnJoCOlO4k= Subject key identifier: 93:B2:4E:7D:15:85:64:5B:94:DD:E1:28:5B:42:B8:57:3E:CB:B0:21 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 0795 Signing time: Sat 26 Apr 2025 21:05:00 +0000 Manifest this update: Sat 26 Apr 2025 21:05:00 +0000 Manifest next update: Sat 03 May 2025 21:05:00 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: Bssbo9LT1wXQGJebva7xl3FOD5NTHM06WHz+lq0Fja4=) 2: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: LYuOqPaDkw5mKuhcKAX19MsCPgBHmSMLx9T8kZNgMmQ=) 3: DE7018487BA711EF91F1C185C4F9AE02.roa (hash: K1bqkflk7X5C/+OtNrLecnHF0EnPW22Gae6n9sY4dac=) 4: 27E3EC16172211EEB3A9C124C4F9AE02.roa (hash: xIUp/K7HaAAwhXqcWrPN96OnpJfubTh9krItEeWiaFk=) 5: 4F9206BCF83511EF806C6D48C4F9AE02.roa (hash: doAb9os8UNFIdddSh7NdOjLO/AGIReHHcJtJLomJGmg=) 6: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: u/ET7C8XDOzIIbrRzEHNrt7NzDBjNyIiOiJQgKADUOo=) 7: 4FAE4CDC7C2711EDA3A0B816C4F9AE02.roa (hash: fMj7crW4R5RPIlCOH3tNOXH/vyldBu0GWTnBC3/M2z8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:12:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Apr 26 21:05:00 2025 GMT Not After : May 3 21:05:00 2025 GMT Subject: CN=680d4a7c-381e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:28:21:ed:eb:5a:11:68:a9:30:b4:7a:ac:11: 68:0c:bb:89:1d:18:19:9d:8d:27:ec:ea:b4:57:f7: c2:6f:6c:cc:a7:ec:fa:46:27:f4:19:92:cc:6b:5b: 40:5e:1d:e9:a8:70:68:77:6a:43:10:14:bf:c1:77: b7:58:63:0b:b3:5b:8e:03:85:74:6b:d0:0d:1c:93: 8a:30:5f:0f:d7:69:b1:0b:b1:cf:70:f1:d8:8d:9a: 2b:de:70:8c:5f:00:07:e3:be:c1:58:6c:5f:32:d6: 05:53:8a:99:d6:f3:0b:75:93:59:77:a1:00:50:cf: 93:c7:06:4f:01:b2:fd:ff:c9:12:d4:6a:45:c1:ad: e7:d6:d6:51:d2:dc:eb:9b:f9:18:f3:e9:18:11:52: 0b:d8:41:13:69:0e:70:3b:d8:ba:e9:15:b6:e3:a9: 80:b3:f0:5f:eb:d9:4b:34:59:61:24:32:97:51:cc: 7d:c7:ce:7c:b6:3c:e3:d1:0e:d8:e7:03:11:52:ec: 72:e3:4e:1c:d3:ef:94:13:bf:65:58:45:17:2a:0d: 33:8a:b0:46:53:a4:d0:18:6c:85:c7:51:b5:43:f0: 9f:4c:4f:3d:32:ef:be:b8:13:a1:7d:57:9c:88:32: 08:e3:55:b0:48:e8:41:ed:81:79:1c:84:4e:c9:b4: 84:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B2:4E:7D:15:85:64:5B:94:DD:E1:28:5B:42:B8:57:3E:CB:B0:21 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b5:47:fb:b1:f1:d0:66:90:ec:e9:fd:7f:e1:00:c1:2f:54: 8d:b7:05:2c:22:5f:59:75:a7:a8:a9:e3:ca:94:03:b5:28:30: ee:2c:85:84:7b:ea:17:aa:90:7a:2a:47:d9:09:80:f1:e4:94: 4b:a6:22:26:87:53:72:21:1d:00:31:9f:0a:9d:e4:75:50:94: ba:3c:c0:c9:f3:51:27:19:50:74:47:68:4c:ee:94:e2:a0:fc: 23:23:0f:c3:c6:58:bf:33:b9:4c:4a:06:bc:91:74:5c:51:06: b7:a0:c6:a4:3a:fd:b6:f4:8c:73:09:42:25:9d:66:c0:cd:99: f1:26:29:6e:18:a4:c1:8b:45:05:44:4c:d0:f8:5f:ca:ac:73: 1a:a9:9b:a4:0a:62:f2:2e:00:78:11:95:0e:93:76:6f:2f:28: e4:20:58:ca:a7:a1:9f:12:d7:91:e0:41:66:d5:dc:cd:49:1a: 7f:bd:8e:bf:c8:a0:60:51:71:bd:71:0d:36:1b:7f:92:f6:be: c3:d1:fe:1e:54:eb:0d:95:45:7e:8b:61:72:ac:d8:aa:33:7f: 44:07:1d:a1:eb:1e:5e:53:88:13:99:05:35:89:be:1f:7d:aa: 80:d8:96:ab:d3:55:3c:47:f5:b9:5c:db:c4:bf:96:ed:a5:0f: ef:c7:4a:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjUwNDI2MjEwNTAwWhcNMjUwNTAzMjEwNTAwWjAYMRYwFAYD VQQDEw02ODBkNGE3Yy0zODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCgh7etaEWipMLR6rBFoDLuJHRgZnY0n7Oq0V/fCb2zMp+z6Rif0GZLMa1tA Xh3pqHBod2pDEBS/wXe3WGMLs1uOA4V0a9ANHJOKMF8P12mxC7HPcPHYjZor3nCM XwAH477BWGxfMtYFU4qZ1vMLdZNZd6EAUM+TxwZPAbL9/8kS1GpFwa3n1tZR0tzr m/kY8+kYEVIL2EETaQ5wO9i66RW246mAs/Bf69lLNFlhJDKXUcx9x858tjzj0Q7Y 5wMRUuxy404c0++UE79lWEUXKg0zirBGU6TQGGyFx1G1Q/CfTE89Mu++uBOhfVec iDII41WwSOhB7YF5HIROybSErQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOyTn0V hWRblN3hKFtCuFc+y7AhMB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBntUf7sfHQZpDs6f1/4QDBL1SNtwUsIl9ZdaeoqePKlAO1KDDuLIWE e+oXqpB6KkfZCYDx5JRLpiImh1NyIR0AMZ8KneR1UJS6PMDJ81EnGVB0R2hM7pTi oPwjIw/Dxli/M7lMSga8kXRcUQa3oMakOv229IxzCUIlnWbAzZnxJiluGKTBi0UF REzQ+F/KrHMaqZukCmLyLgB4EZUOk3ZvLyjkIFjKp6GfEteR4EFm1dzNSRp/vY6/ yKBgUXG9cQ02G3+S9r7D0f4eVOsNlUV+i2FyrNiqM39EBx2h6x5eU4gTmQU1ib4f faqA2Jar01U8R/W5XNvEv5btpQ/vx0o8 -----END CERTIFICATE-----Generated at Sun Apr 27 00:14:00 2025 by rpki-client on console.sobornost.net