$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: T8YEH0D68IdG5gjRymHqGrVu/vljcaSGAUdqi+gYDbc= Subject key identifier: 70:8C:CB:2E:88:A0:ED:D3:1F:5A:12:6A:BE:63:B9:58:BF:69:EF:E7 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 1235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 120A Signing time: Fri 18 Jul 2025 17:19:08 +0000 Manifest this update: Fri 18 Jul 2025 17:19:07 +0000 Manifest next update: Fri 25 Jul 2025 17:19:07 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: z7Y7MlbNTqsMpQeUjTPs5HuClMMO13+3LsLRNuDVth8=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4661 (0x1235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Jul 18 17:19:07 2025 GMT Not After : Jul 25 17:19:07 2025 GMT Subject: CN=687a820b-584c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:2d:c1:82:76:82:c0:5f:bc:a6:d2:85:52: 7e:50:be:67:d2:c7:c6:f6:de:73:a0:01:8a:f3:98: 5c:3f:8c:b1:fb:dd:22:66:54:6d:e8:2b:46:f6:08: b9:4f:05:b6:f6:2e:ca:ee:71:9a:5b:b0:e0:a8:71: af:c7:19:9b:fb:08:de:c7:b6:1a:97:6d:df:11:b3: 2b:92:53:37:8e:4f:0a:70:fb:ca:ca:34:2d:8b:4e: 3e:7d:fa:29:76:e7:99:19:73:9e:0a:9d:88:1c:e8: 2a:f2:2a:ef:47:be:ae:66:ad:15:2c:eb:a7:33:c2: 07:dc:e7:8c:c6:11:04:85:1e:91:0b:e8:9f:db:95: d8:63:cd:cf:c8:0f:d6:cb:c3:c0:37:fa:b8:96:81: a4:6a:c5:16:8f:0f:0b:10:83:23:2e:cb:19:45:9c: 39:23:4e:94:4f:77:9e:95:6b:58:d3:0c:12:ac:3f: dc:2d:7c:8e:c8:ce:50:71:6a:cd:b5:74:64:7a:fe: de:a6:f7:a0:3f:e0:25:cb:b7:f1:55:6d:90:68:f3: e1:2b:03:1c:68:38:35:9a:1b:ac:dd:87:06:a1:92: 33:6f:cd:1c:04:1b:fa:ea:53:a4:b0:2d:40:b5:be: e3:55:64:fa:6f:2e:31:f4:b2:3d:72:0d:f9:00:52: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8C:CB:2E:88:A0:ED:D3:1F:5A:12:6A:BE:63:B9:58:BF:69:EF:E7 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:bc:6c:68:a4:9c:36:91:a0:6e:20:5a:ab:38:dc:84:6b:bf: d5:3e:aa:c3:9d:6f:2b:6c:d3:30:74:31:f8:bb:27:8c:27:c5: 86:9f:7e:29:0a:65:6e:39:a3:88:b5:93:24:02:76:d2:fe:b4: ec:c9:9d:80:32:48:86:4d:08:80:02:9f:80:53:55:31:80:e4: 84:b1:20:da:a6:d5:94:ff:1a:39:b6:53:37:46:e6:ca:bd:6e: c4:c7:ea:47:bf:f1:bd:94:be:b9:17:74:05:a5:0f:0e:dd:c7: 44:6f:2b:81:21:d6:01:58:4f:71:7f:7f:e6:b0:d8:bc:46:dc: 0f:6f:e9:9f:f4:92:1d:e4:2e:96:85:23:d8:22:e0:f1:14:0c: 77:11:11:a7:69:98:2d:a8:56:8f:10:7c:c4:27:e8:1c:06:67: 3d:00:f0:c3:91:96:33:a1:dd:ae:20:49:df:88:5e:0d:09:86: 31:c7:ab:61:85:85:56:af:66:c7:a7:c9:07:02:a9:d8:21:ed: e6:73:47:d4:1d:77:79:60:c0:57:f7:e9:ca:33:b0:eb:3f:2b: 5e:2a:b7:6f:57:8e:fc:5b:c1:ea:75:2b:05:c0:c0:71:52:ba: 5f:d5:25:4e:bc:b9:2b:aa:b0:7e:5e:e0:23:09:89:b8:93:31: 3e:29:8a:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwNzE4MTcxOTA3WhcNMjUwNzI1MTcxOTA3WjAYMRYwFAYD VQQDEw02ODdhODIwYi01ODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LMtwYJ2gsBfvKbShVJ+UL5n0sfG9t5zoAGK85hcP4yx+90iZlRt6CtG9gi5 TwW29i7K7nGaW7DgqHGvxxmb+wjex7Yal23fEbMrklM3jk8KcPvKyjQti04+ffop dueZGXOeCp2IHOgq8irvR76uZq0VLOunM8IH3OeMxhEEhR6RC+if25XYY83PyA/W y8PAN/q4loGkasUWjw8LEIMjLssZRZw5I06UT3eelWtY0wwSrD/cLXyOyM5QcWrN tXRkev7epvegP+Aly7fxVW2QaPPhKwMcaDg1mhus3YcGoZIzb80cBBv66lOksC1A tb7jVWT6by4x9LI9cg35AFLh1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCMyy6I oO3TH1oSar5juVi/ae/nMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTvGxopJw2kaBuIFqrONyEa7/VPqrDnW8rbNMwdDH4uyeMJ8WGn34p CmVuOaOItZMkAnbS/rTsyZ2AMkiGTQiAAp+AU1UxgOSEsSDaptWU/xo5tlM3RubK vW7Ex+pHv/G9lL65F3QFpQ8O3cdEbyuBIdYBWE9xf3/msNi8RtwPb+mf9JId5C6W hSPYIuDxFAx3ERGnaZgtqFaPEHzEJ+gcBmc9APDDkZYzod2uIEnfiF4NCYYxx6th hYVWr2bHp8kHAqnYIe3mc0fUHXd5YMBX9+nKM7DrPyteKrdvV478W8HqdSsFwMBx Urpf1SVOvLkrqrB+XuAjCYm4kzE+KYoO -----END CERTIFICATE-----Generated at Sun Jul 20 09:59:28 2025 by rpki-client