$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: 2mi5srmAk8mgNdgbbIW5TP6jX/+xRYIZ8Xrk/vzePss= Subject key identifier: 71:FE:F0:20:E7:DE:3E:BE:08:0D:3B:DB:3C:01:04:69:2C:15:D6:26 Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 01CB Signing time: Sat 19 Jul 2025 03:08:09 +0000 Manifest this update: Sat 19 Jul 2025 03:08:09 +0000 Manifest next update: Sat 26 Jul 2025 03:08:09 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: p8PZq3b7erSCSf91rGGURT8hnFuy4kK/7AzysnFaw44=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Jul 19 03:08:09 2025 GMT Not After : Jul 26 03:08:09 2025 GMT Subject: CN=687b0c19-0e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:b2:8b:18:89:fe:9f:a9:00:12:2d:f0:5e: 01:11:d3:a1:27:13:d3:4b:47:09:6b:c1:dc:97:1d: 3c:96:2e:8e:cb:e8:0b:82:66:17:82:62:e5:dc:c4: 0c:53:46:a0:4e:cb:56:0f:29:8e:fa:5f:30:fb:5f: 14:ac:8a:fc:d7:8d:e8:c2:31:3c:44:9e:e1:c0:a5: fe:de:d2:bd:fd:8c:0f:f2:42:44:4a:7f:a2:95:a9: 7a:34:f4:f6:0b:45:be:3d:d1:93:5a:87:a2:af:db: a9:f7:90:de:29:b9:ac:94:5f:ec:8f:c0:a3:55:80: 76:5e:9d:b2:0a:c8:2c:b4:b4:8b:c4:4e:be:0f:0e: 34:2f:9b:46:35:d8:62:bf:0f:8c:68:cf:e0:c6:b6: 47:59:b5:21:ea:ef:5e:4f:63:bc:a5:9f:f4:4c:1f: 0e:13:05:ab:e6:0f:7f:dc:7f:b5:ca:39:a4:75:a5: 81:a1:c1:de:b6:a0:cd:10:70:6c:9c:31:ca:26:e3: 8f:00:aa:3c:85:29:d6:53:06:8d:45:63:5a:de:73: ca:ad:47:cc:32:96:db:69:8d:62:d5:59:b9:39:39: ce:81:af:66:ad:a2:29:a2:f1:4c:f7:a6:1f:05:0a: e7:a4:5c:11:fc:c6:c4:32:6a:fb:c5:06:5a:db:71: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FE:F0:20:E7:DE:3E:BE:08:0D:3B:DB:3C:01:04:69:2C:15:D6:26 X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:cf:1a:dd:54:ec:02:23:c4:3b:d2:e9:95:b2:be:70:81:80: 49:7e:30:38:99:54:b6:88:b9:e9:af:9e:57:0a:a6:37:e6:a4: fc:a0:a9:3e:cc:41:25:f1:f1:06:af:66:b5:b4:49:78:e6:1a: c4:aa:f9:92:a7:7b:a8:38:e2:90:07:aa:69:f9:15:6a:fa:76: cd:77:1e:56:28:59:a1:bc:d4:cb:e1:05:0b:c6:1d:e7:ee:63: 05:e4:af:5f:4b:af:21:12:e4:fb:a5:ee:88:24:5c:15:5b:eb: 23:68:ab:ae:84:25:a4:d1:6c:3f:c0:f2:ac:19:b7:36:ae:42: 15:af:d6:92:3b:b5:6c:e7:5a:d6:4c:5c:f9:81:fa:f0:3e:a0: 77:c0:36:e7:c9:6d:6b:a1:f5:59:29:a2:9a:a3:35:63:ce:75: 75:84:b5:cd:39:b7:62:96:b8:bb:29:93:7c:43:0d:6b:8e:75: cb:ce:15:30:50:02:e7:1b:dc:06:46:84:42:16:d5:53:e3:46: 1e:d4:a1:14:62:10:0b:e9:3f:68:cd:e1:7d:ae:e3:f2:b5:39: 54:ea:2f:1b:ba:13:81:e6:a5:d5:20:9f:28:39:78:ae:c2:97: a7:72:16:a5:0c:a2:a8:31:b4:1a:8a:76:22:f4:9a:af:1e:3e: 32:86:5e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUwNzE5MDMwODA5WhcNMjUwNzI2MDMwODA5WjAYMRYwFAYD VQQDEw02ODdiMGMxOS0wZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9ayixiJ/p+pABIt8F4BEdOhJxPTS0cJa8Hclx08li6Oy+gLgmYXgmLl3MQM U0agTstWDymO+l8w+18UrIr8143owjE8RJ7hwKX+3tK9/YwP8kJESn+ilal6NPT2 C0W+PdGTWoeir9up95DeKbmslF/sj8CjVYB2Xp2yCsgstLSLxE6+Dw40L5tGNdhi vw+MaM/gxrZHWbUh6u9eT2O8pZ/0TB8OEwWr5g9/3H+1yjmkdaWBocHetqDNEHBs nDHKJuOPAKo8hSnWUwaNRWNa3nPKrUfMMpbbaY1i1Vm5OTnOga9mraIpovFM96Yf BQrnpFwR/MbEMmr7xQZa23F/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHH+8CDn 3j6+CA072zwBBGksFdYmMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVzxrdVOwCI8Q70umVsr5wgYBJfjA4mVS2iLnpr55XCqY35qT8oKk+ zEEl8fEGr2a1tEl45hrEqvmSp3uoOOKQB6pp+RVq+nbNdx5WKFmhvNTL4QULxh3n 7mMF5K9fS68hEuT7pe6IJFwVW+sjaKuuhCWk0Ww/wPKsGbc2rkIVr9aSO7Vs51rW TFz5gfrwPqB3wDbnyW1rofVZKaKaozVjznV1hLXNObdilri7KZN8Qw1rjnXLzhUw UALnG9wGRoRCFtVT40Ye1KEUYhAL6T9ozeF9ruPytTlU6i8buhOB5qXVIJ8oOXiu wpenchalDKKoMbQainYi9JqvHj4yhl71 -----END CERTIFICATE-----Generated at Sun Jul 20 11:36:19 2025 by rpki-client