$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: n0IdqbpGGZysuPGSZGpdCzOpt+oWRWkp0lgZ7PP1ANk= Subject key identifier: 83:76:E6:AE:5F:E6:84:5E:98:E2:0D:E0:F3:D2:34:3F:EA:83:67:2E Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 7B Signing time: Mon 03 Nov 2025 06:47:56 +0000 Manifest this update: Mon 03 Nov 2025 06:47:55 +0000 Manifest next update: Mon 10 Nov 2025 06:47:55 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: Wl96jaLYR6xhcbVfa8oRW+KALX2TMeTXoZsIL+TPOXI=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Nov 3 06:47:55 2025 GMT Not After : Nov 10 06:47:55 2025 GMT Subject: CN=6908501c-d913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:a9:45:ff:7e:30:04:1f:29:fd:79:5d:c7: 29:dc:93:a5:28:ba:56:7c:ec:e5:e8:9a:4f:21:e2: 1d:41:ba:97:c4:79:b4:59:f0:3f:97:bf:e4:56:9e: be:8e:f7:e9:13:98:f2:5f:1c:b3:d9:a7:a0:30:54: 34:3d:fc:68:c9:81:2a:ff:d3:7f:c8:fb:b2:c5:07: 48:9f:fe:6b:64:65:da:78:2c:d4:4c:0c:7f:95:32: eb:b5:f1:81:7d:7c:62:a3:03:84:30:f6:0a:a6:2d: 08:18:cb:ff:df:a5:80:03:ec:9e:16:7f:21:52:f7: 6e:44:a9:36:a8:46:25:70:91:19:9d:76:cc:03:f3: cd:f7:b3:79:32:af:08:31:98:b1:79:96:e9:ae:b4: 66:1a:84:9a:af:2a:38:f1:0e:89:6e:35:38:a8:23: 00:88:c8:79:a1:ff:78:cf:b7:60:5a:c8:cd:9e:11: cf:d4:1f:32:bf:ca:97:bc:46:cb:b6:9a:ba:25:8c: 5b:63:82:f3:24:68:e3:f9:37:4c:6f:82:56:21:d3: 04:f9:66:70:53:c4:18:7f:12:50:69:28:ff:ac:34: 05:66:79:30:d7:4a:6f:0b:8f:f0:77:79:b7:f0:75: 39:48:ab:c3:47:d2:96:50:55:9d:b5:f8:d2:17:f9: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:76:E6:AE:5F:E6:84:5E:98:E2:0D:E0:F3:D2:34:3F:EA:83:67:2E X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:1d:03:8a:04:7b:f6:05:ed:14:39:16:84:59:8d:a9:36:a6: 64:a1:9e:8e:db:fe:a3:de:72:df:de:96:fa:1f:c6:e4:b7:f6: 88:4f:e9:49:ec:92:14:be:66:af:dc:78:55:25:46:c7:2d:5e: b1:97:d6:77:3f:e0:71:41:3a:c8:06:69:36:b7:02:b1:0f:42: 32:d7:07:7f:30:85:3b:79:90:ac:59:cf:41:6c:df:9f:43:0c: 8b:fb:d4:98:12:e0:84:b1:c1:9a:26:d7:4b:0b:1e:12:2e:2e: 02:eb:ed:c2:41:17:94:e3:6c:74:41:40:4f:ab:9d:91:66:ef: be:6a:82:8e:cb:eb:48:19:a1:ca:8c:7b:39:23:bc:ce:6f:96: fd:ad:34:13:e6:0c:37:82:c5:cb:a8:53:b8:4b:23:ff:07:b8: 07:6d:d0:3a:f1:5f:ce:37:9b:dd:e5:b4:b9:f2:75:91:ab:69: 37:dc:b3:81:df:a8:b4:ab:bd:c1:8b:94:82:09:97:23:fd:20: 8e:20:34:57:6e:dd:71:47:0c:ba:77:f3:2f:20:c8:eb:ef:d7: 9d:49:99:a1:b7:4e:6e:85:90:89:0e:b4:13:bf:44:1e:fe:c2: 76:90:e7:93:da:fd:d2:dd:2d:db:08:ff:c0:b1:c2:96:fb:0e: 58:2c:f8:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTExMDMwNjQ3NTVaFw0yNTExMTAwNjQ3NTVaMBgxFjAUBgNV BAMTDTY5MDg1MDFjLWQ5MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkpalF/34wBB8p/Xldxynck6UoulZ87OXomk8h4h1BupfEebRZ8D+Xv+RWnr6O 9+kTmPJfHLPZp6AwVDQ9/GjJgSr/03/I+7LFB0if/mtkZdp4LNRMDH+VMuu18YF9 fGKjA4Qw9gqmLQgYy//fpYAD7J4WfyFS925EqTaoRiVwkRmddswD8833s3kyrwgx mLF5lumutGYahJqvKjjxDoluNTioIwCIyHmh/3jPt2BayM2eEc/UHzK/ype8Rsu2 mroljFtjgvMkaOP5N0xvglYh0wT5ZnBTxBh/ElBpKP+sNAVmeTDXSm8Lj/B3ebfw dTlIq8NH0pZQVZ21+NIX+TH5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUg3bmrl/m hF6Y4g3g89I0P+qDZy4wHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC0dA4oEe/YF7RQ5FoRZjak2pmShno7b/qPect/elvofxuS39ohP6Uns khS+Zq/ceFUlRsctXrGX1nc/4HFBOsgGaTa3ArEPQjLXB38whTt5kKxZz0Fs359D DIv71JgS4ISxwZom10sLHhIuLgLr7cJBF5TjbHRBQE+rnZFm775qgo7L60gZocqM ezkjvM5vlv2tNBPmDDeCxcuoU7hLI/8HuAdt0DrxX843m93ltLnydZGraTfcs4Hf qLSrvcGLlIIJlyP9II4gNFdu3XFHDLp38y8gyOvv151JmaG3Tm6FkIkOtBO/RB7+ wnaQ55Pa/dLdLdsI/8Cxwpb7Dlgs+Ig= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:13 2025 by rpki-client