$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: P75SGeuG7XxBtpv38p1smPHGefNbQ/kze9hKbudZiCo= Subject key identifier: 61:1C:6B:43:EA:4F:F4:80:84:81:5A:58:36:E8:E2:F0:BD:03:92:B4 Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 55 Signing time: Tue 19 Aug 2025 07:45:23 +0000 Manifest this update: Tue 19 Aug 2025 07:45:22 +0000 Manifest next update: Tue 26 Aug 2025 07:45:22 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: o6El9zqeWGEsvubaKZD3rhO+MoNXSiXq76CALRRipf4=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Aug 19 07:45:22 2025 GMT Not After : Aug 26 07:45:22 2025 GMT Subject: CN=68a42b93-ea95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0e:41:f1:44:b5:ee:ee:59:95:b7:d6:f3:b9: 37:2f:4a:28:8f:a7:62:45:1a:71:51:0d:39:70:78: 6e:c8:e7:94:42:91:85:98:1d:a9:f1:72:26:92:aa: ec:99:88:c1:f9:c2:06:9a:54:ad:03:07:2c:ce:0d: b5:cb:1f:b2:a9:a7:88:0b:e1:c4:40:86:db:b7:d9: fa:02:66:01:41:95:bf:ea:74:0c:0b:87:43:56:08: 00:d9:ec:97:98:4d:1f:c8:23:0f:fc:60:8b:c5:15: f4:30:c0:93:59:40:c8:60:cc:60:d4:b4:03:71:fa: 39:57:a5:b3:52:46:57:30:24:e9:60:11:4a:8a:44: d4:1a:75:95:90:98:92:ca:72:05:05:19:d7:dc:c0: a2:03:58:c9:95:9a:d0:52:53:4e:10:0b:17:97:3e: f4:dc:b3:68:2a:20:c5:6b:55:a6:52:3a:6a:b5:76: e6:88:b3:75:63:70:e9:0e:9e:cf:ba:66:8c:9e:28: 2f:fc:a8:0a:cb:c7:25:ad:7b:1d:c2:05:52:61:1d: 6f:00:a2:fd:ec:5f:28:4a:dc:fb:fa:a5:ef:98:6d: f4:31:77:69:bc:1b:01:bd:68:13:f1:8a:35:16:12: f6:47:29:a1:66:55:ed:41:f3:e8:e4:f9:9c:78:3c: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1C:6B:43:EA:4F:F4:80:84:81:5A:58:36:E8:E2:F0:BD:03:92:B4 X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a4:f9:84:5f:40:bb:67:dd:ab:51:66:be:f8:c8:8e:4d:4a: 68:5f:cb:04:09:f2:5e:fc:96:42:c9:7e:2f:1e:49:09:35:b0: 71:44:97:ed:90:1e:00:fd:0c:40:d0:d0:03:c6:53:9b:bf:02: 0e:5d:37:e3:a4:c1:f7:34:d9:8a:55:cd:f5:f8:e4:d0:bc:ed: 69:50:11:de:c2:3c:26:4b:5b:48:84:80:11:a1:00:b4:64:42: 19:95:d7:fc:82:09:e1:68:03:ae:49:63:bc:73:23:1f:e3:6e: 2c:9b:3b:ed:c2:34:cc:02:1b:2f:4f:c7:06:96:f6:3c:a5:7b: 2d:db:f6:c3:68:c6:8c:43:dc:6d:00:75:cb:04:a3:9c:47:2c: c6:d8:ca:fb:ba:57:79:a3:bf:a7:94:f0:f1:b9:19:84:07:e8: bd:7c:ae:fb:e1:14:89:fe:42:8a:a6:37:c6:ad:8a:c5:80:42: de:1e:21:4e:09:15:73:21:68:3a:e4:91:95:a4:08:27:6f:24: 09:6d:50:c8:c8:e5:7d:3d:2e:65:93:bb:0b:c8:2a:a5:a9:f2: 33:84:e1:ab:89:e4:7e:e8:3f:69:23:a8:bf:41:4b:a1:98:8f: a0:61:57:9e:ae:72:33:2a:7a:15:4f:e9:60:46:f7:9c:46:9b: d7:16:85:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA4MTkwNzQ1MjJaFw0yNTA4MjYwNzQ1MjJaMBgxFjAUBgNV BAMTDTY4YTQyYjkzLWVhOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClDkHxRLXu7lmVt9bzuTcvSiiPp2JFGnFRDTlweG7I55RCkYWYHanxciaSquyZ iMH5wgaaVK0DByzODbXLH7Kpp4gL4cRAhtu32foCZgFBlb/qdAwLh0NWCADZ7JeY TR/IIw/8YIvFFfQwwJNZQMhgzGDUtANx+jlXpbNSRlcwJOlgEUqKRNQadZWQmJLK cgUFGdfcwKIDWMmVmtBSU04QCxeXPvTcs2gqIMVrVaZSOmq1duaIs3VjcOkOns+6 ZoyeKC/8qArLxyWtex3CBVJhHW8Aov3sXyhK3Pv6pe+YbfQxd2m8GwG9aBPxijUW EvZHKaFmVe1B8+jk+Zx4PE3lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYRxrQ+pP 9ICEgVpYNuji8L0DkrQwHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIqk+YRfQLtn3atRZr74yI5NSmhfywQJ8l78lkLJfi8eSQk1sHFEl+2Q HgD9DEDQ0APGU5u/Ag5dN+Okwfc02YpVzfX45NC87WlQEd7CPCZLW0iEgBGhALRk QhmV1/yCCeFoA65JY7xzIx/jbiybO+3CNMwCGy9PxwaW9jyley3b9sNoxoxD3G0A dcsEo5xHLMbYyvu6V3mjv6eU8PG5GYQH6L18rvvhFIn+QoqmN8atisWAQt4eIU4J FXMhaDrkkZWkCCdvJAltUMjI5X09LmWTuwvIKqWp8jOE4auJ5H7oP2kjqL9BS6GY j6BhV56ucjMqehVP6WBG95xGm9cWhYM= -----END CERTIFICATE-----Generated at Thu Aug 21 01:45:42 2025 by rpki-client