$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: u6eykh/8gIEUbONyaNEKlCgx/hilnsq1FjQ58WXbm7c= Subject key identifier: 37:8E:82:E1:6E:64:DA:2E:85:3C:C5:F3:47:17:84:96:6E:5B:02:5D Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 0E Signing time: Thu 03 Apr 2025 07:22:23 +0000 Manifest this update: Thu 03 Apr 2025 07:22:23 +0000 Manifest next update: Thu 10 Apr 2025 07:22:23 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: GAgKWFAM5eyTOYuowZNi0Xcx2yDhNSShgx715opwMcQ=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: FLLpHbBTqnDBs40y47ZsimY2UyQLa+Oyfs+4Y2gV/9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2 Validity Not Before: Apr 3 07:22:23 2025 GMT Not After : Apr 10 07:22:23 2025 GMT Subject: CN=67ee372f-b622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:3f:f9:ba:25:13:f6:69:71:52:c6:a7:fa: 78:8c:cd:12:15:b5:57:07:ce:0e:b0:c6:d2:da:4b: ed:86:69:0f:1d:e0:ec:dd:46:1b:14:d7:19:3c:d4: b4:5f:58:7d:aa:82:18:d1:65:e6:49:ee:01:7b:5c: 95:3f:54:ed:0e:84:79:c3:97:b5:52:bd:0a:71:f9: 49:7f:28:ba:ba:79:0f:c3:f7:a3:2b:e9:94:18:0f: cd:49:9d:26:aa:91:fb:b8:51:d3:d8:db:22:53:35: 70:ec:8d:12:28:ef:26:59:a5:22:1b:fc:3f:20:fb: d7:19:a7:d1:76:9d:f6:1b:d8:fd:50:1b:0a:08:60: 83:52:24:10:17:6b:e9:e1:e5:8e:29:1e:71:87:1f: 2f:35:bf:c8:20:bf:43:6d:81:62:dd:45:ae:dc:9e: c5:52:4a:b8:2c:f3:e9:38:1e:ce:1d:a5:e6:86:c1: e7:76:22:f3:c4:e7:b9:58:14:3c:7b:ba:db:4b:33: 74:7f:d5:e8:71:73:ab:9c:8f:ad:2d:19:98:0d:a4: ad:8e:8b:71:25:08:0b:58:ef:89:30:32:0e:4e:62: 46:66:95:27:d9:2d:73:f8:b6:58:57:89:c7:96:0e: 23:bc:c9:74:70:b2:75:ba:06:f5:7f:14:b9:f1:f6: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8E:82:E1:6E:64:DA:2E:85:3C:C5:F3:47:17:84:96:6E:5B:02:5D X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:c5:40:9f:89:fc:56:5c:a9:86:93:5d:eb:0b:c5:0f:0d:0f: ad:ff:7a:98:f7:e4:96:a3:9e:f9:a5:d2:7e:96:d7:de:f6:c5: 20:0c:98:21:40:03:ab:92:56:72:e9:f5:c9:73:3e:55:4c:44: 28:76:e9:57:83:9f:ff:27:2a:31:cd:a6:d7:c3:f6:6a:0b:24: 3d:e4:2b:61:13:b7:ec:06:10:0d:da:f5:07:0d:7a:1d:0e:a0: 9a:77:1a:c6:da:9e:3d:aa:45:96:b6:95:55:b8:95:b7:59:8f: 3f:dd:ab:a3:e9:96:96:db:0c:f3:73:30:9c:44:0e:2f:03:6c: 71:1b:71:5f:4f:ea:50:9d:d7:59:08:fe:fc:f1:a5:32:3d:21: a3:48:1b:66:df:ed:47:5f:43:a5:8c:4a:62:13:c3:6c:d6:e9: e1:7e:4d:30:a0:24:30:83:be:6e:60:48:5a:80:c4:ba:8a:06: 44:3f:4a:49:a2:bb:d1:a9:64:4f:cb:e4:02:58:1e:8a:2d:53: 56:6f:e4:34:b3:7d:34:2c:c1:90:f0:5e:5e:4c:20:b9:db:1b: f9:82:20:c2:8e:6b:d1:a7:85:f7:27:fd:f7:7f:d4:88:c8:97: 7b:5e:17:0e:36:7a:a4:71:e2:50:28:b7:09:9c:35:83:51:da: 7c:1b:91:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA0MDMwNzIyMjNaFw0yNTA0MTAwNzIyMjNaMBgxFjAUBgNV BAMTDTY3ZWUzNzJmLWI2MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZMT/5uiUT9mlxUsan+niMzRIVtVcHzg6wxtLaS+2GaQ8d4OzdRhsU1xk81LRf WH2qghjRZeZJ7gF7XJU/VO0OhHnDl7VSvQpx+Ul/KLq6eQ/D96Mr6ZQYD81JnSaq kfu4UdPY2yJTNXDsjRIo7yZZpSIb/D8g+9cZp9F2nfYb2P1QGwoIYINSJBAXa+nh 5Y4pHnGHHy81v8ggv0NtgWLdRa7cnsVSSrgs8+k4Hs4dpeaGwed2IvPE57lYFDx7 uttLM3R/1ehxc6ucj60tGZgNpK2Oi3ElCAtY74kwMg5OYkZmlSfZLXP4tlhXiceW DiO8yXRwsnW6BvV/FLnx9nsVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUN46C4W5k 2i6FPMXzRxeElm5bAl0wHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMbFQJ+J/FZcqYaTXesLxQ8ND63/epj35Jajnvml0n6W1972xSAMmCFA A6uSVnLp9clzPlVMRCh26VeDn/8nKjHNptfD9moLJD3kK2ETt+wGEA3a9QcNeh0O oJp3Gsbanj2qRZa2lVW4lbdZjz/dq6PplpbbDPNzMJxEDi8DbHEbcV9P6lCd11kI /vzxpTI9IaNIG2bf7UdfQ6WMSmITw2zW6eF+TTCgJDCDvm5gSFqAxLqKBkQ/Skmi u9GpZE/L5AJYHootU1Zv5DSzfTQswZDwXl5MILnbG/mCIMKOa9Gnhfcn/fd/1IjI l3teFw42eqRx4lAotwmcNYNR2nwbkQ8= -----END CERTIFICATE-----Generated at Fri Apr 4 21:47:24 2025 by rpki-client