$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: JJmFC75Itwr8sw5N2LS9WDqZbmwRgJdlBrsFyCSGGi0= Subject key identifier: 81:76:AE:8C:04:F7:FC:49:61:06:11:BC:E4:33:53:6A:72:61:D2:24 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 1201 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 11D6 Signing time: Fri 04 Apr 2025 17:16:45 +0000 Manifest this update: Fri 04 Apr 2025 17:16:45 +0000 Manifest next update: Fri 11 Apr 2025 17:16:45 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: 6Y5T4l9cX3mi0ZvWrTh7D9VfxqsYQhcnhsUHfVX5sk8=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4609 (0x1201) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73 Validity Not Before: Apr 4 17:16:45 2025 GMT Not After : Apr 11 17:16:45 2025 GMT Subject: CN=67f013fd-713e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:f1:d8:c0:c2:2c:ff:21:d5:b3:51:7a:6f: 2e:d4:56:b9:ea:02:84:5e:69:db:05:65:98:41:85: 78:6d:20:ae:7a:19:3b:75:9b:99:99:1d:a2:32:ee: 5b:54:5d:98:d7:2f:4a:f0:51:37:79:6c:56:7e:48: a3:19:8c:84:b0:7c:8f:f1:b8:ee:f8:1d:40:54:70: e0:1b:fd:52:42:e7:17:40:27:ea:91:98:d7:94:1f: 8e:66:10:80:84:80:2d:9c:da:aa:c2:4a:bb:c2:0c: 0d:06:66:62:32:aa:4f:25:b1:90:d4:d9:5d:c1:c6: 98:7d:8c:64:a5:e9:c2:25:00:a7:d5:18:4f:a1:14: 9d:40:83:7c:df:f7:b4:01:0b:a8:9d:e2:7f:b9:c5: 6f:01:d5:a8:58:06:1c:bb:2d:f0:1c:38:3c:c8:24: f5:61:68:1e:10:68:4f:c1:9e:d9:ed:a1:d0:ad:af: ba:05:54:f3:2b:79:0c:01:87:c3:9b:a3:62:cd:d9: 10:3d:37:f2:fa:85:75:21:9f:7f:96:57:8c:23:73: d5:d2:26:82:ba:63:8d:80:93:dd:10:7a:44:5e:ce: 15:18:c5:06:3e:17:e9:7d:83:be:34:1f:70:b8:2e: 87:db:01:8a:6c:70:3f:d7:f8:2a:6c:82:89:19:62: a0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:76:AE:8C:04:F7:FC:49:61:06:11:BC:E4:33:53:6A:72:61:D2:24 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:82:e3:4e:34:37:91:eb:c8:0e:9b:89:cf:d0:d8:4b:70:6a: 5a:40:6f:4e:54:db:b1:e6:2b:e9:cb:08:90:fb:24:27:4c:47: 65:fe:a6:46:25:5b:b6:08:94:e3:b0:9b:1c:64:c9:3f:36:d1: ba:e0:5c:38:61:ff:08:c1:de:22:03:b3:45:41:1b:a0:ff:06: 3f:ff:b3:78:96:5b:d3:e8:90:c0:8a:b5:f5:05:52:2d:3b:55: d0:93:3d:bc:67:00:27:5a:0c:03:92:52:1e:84:8e:da:61:a8: 4d:73:df:24:d0:bb:1c:5c:c7:0d:b5:c4:55:f8:36:40:0c:c3: 4d:36:8f:f0:90:5b:c4:14:5e:82:e4:1d:1c:2f:8c:58:98:da: d9:31:d7:3e:03:a2:32:0f:fb:3d:3a:b6:8b:43:1f:4f:7f:26: fb:10:8d:8f:5e:53:45:61:46:37:a9:1b:74:e6:44:26:dc:63: bc:a2:26:b0:67:d2:f1:2e:81:a2:06:2d:f1:9f:f5:2e:77:07: ba:f2:fd:ef:84:51:61:c9:e5:20:2e:ab:2c:29:85:b1:ed:44: 74:8c:9b:a8:c4:f8:d7:9c:18:f4:f2:07:98:40:e8:e2:cc:15: 2e:9a:79:02:5f:97:a1:25:a2:f7:6e:6a:7a:e1:4d:09:c3:1e: 0f:86:ee:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwNDA0MTcxNjQ1WhcNMjUwNDExMTcxNjQ1WjAYMRYwFAYD VQQDEw02N2YwMTNmZC03MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxLx2MDCLP8h1bNRem8u1Fa56gKEXmnbBWWYQYV4bSCuehk7dZuZmR2iMu5b VF2Y1y9K8FE3eWxWfkijGYyEsHyP8bju+B1AVHDgG/1SQucXQCfqkZjXlB+OZhCA hIAtnNqqwkq7wgwNBmZiMqpPJbGQ1NldwcaYfYxkpenCJQCn1RhPoRSdQIN83/e0 AQuoneJ/ucVvAdWoWAYcuy3wHDg8yCT1YWgeEGhPwZ7Z7aHQra+6BVTzK3kMAYfD m6NizdkQPTfy+oV1IZ9/lleMI3PV0iaCumONgJPdEHpEXs4VGMUGPhfpfYO+NB9w uC6H2wGKbHA/1/gqbIKJGWKgmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIF2rowE 9/xJYQYRvOQzU2pyYdIkMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACguNONDeR68gOm4nP0NhLcGpaQG9OVNux5ivpywiQ+yQnTEdl/qZG JVu2CJTjsJscZMk/NtG64Fw4Yf8Iwd4iA7NFQRug/wY//7N4llvT6JDAirX1BVIt O1XQkz28ZwAnWgwDklIehI7aYahNc98k0LscXMcNtcRV+DZADMNNNo/wkFvEFF6C 5B0cL4xYmNrZMdc+A6IyD/s9OraLQx9Pfyb7EI2PXlNFYUY3qRt05kQm3GO8oiaw Z9LxLoGiBi3xn/Uudwe68v3vhFFhyeUgLqssKYWx7UR0jJuoxPjXnBj08geYQOji zBUumnkCX5ehJaL3bmp64U0Jwx4Phu5x -----END CERTIFICATE-----Generated at Sat Apr 5 19:17:52 2025 by rpki-client