$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: +iyvS863Q6wOXBMt0NEoh63dnK5H8JNboPftgGqN9RQ= Subject key identifier: 87:01:BA:4C:31:49:F8:40:C4:FD:5E:12:4B:49:AE:FF:8E:A1:40:F5 Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:19:38 +0000 Manifest this update: Sat 31 May 2025 07:19:38 +0000 Manifest next update: Sat 07 Jun 2025 07:19:38 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: +w+JqrtbqvHfrMES81huTnOd2m22d1FZfuQGpbWX7AQ=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: May 31 07:19:38 2025 GMT Not After : Jun 7 07:19:38 2025 GMT Subject: CN=683aad8a-3ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:f2:fb:50:12:e8:7e:53:1a:ec:3f:e6:fb: 62:10:c1:ce:62:6a:5c:59:91:22:b2:28:af:8f:21: da:da:ac:60:bb:1a:38:2b:a7:58:87:b0:5b:13:b3: fb:05:64:b3:f8:02:9a:31:61:cf:a4:21:a3:3a:63: e3:5d:7a:ca:6f:ab:07:4a:79:e6:d4:53:78:9b:49: 9d:d8:ba:6a:57:76:cc:b0:29:7d:d1:f2:06:09:f9: 6c:dc:7c:bf:18:14:bc:01:31:1e:03:44:ed:de:de: 6c:5b:a6:0b:ef:fb:b1:4f:f3:4b:71:0a:a5:94:c7: 6f:6b:c4:55:7b:44:05:15:77:ff:83:bc:bd:1a:3c: 17:92:47:4c:36:48:50:cd:07:f7:0f:09:97:87:2e: 2f:45:a2:85:75:2d:e9:e7:f7:0e:9e:7e:a8:de:06: 7c:59:28:ba:e1:cd:e5:21:f1:5c:94:0a:9e:fa:74: ef:aa:13:b4:a8:0b:f5:08:3c:b9:35:af:65:0e:e2: 12:2a:0e:7e:96:26:db:cf:bb:0a:d1:57:82:12:ad: 8f:0b:17:7c:9c:65:2d:59:97:0a:3f:af:3a:2b:50: 5b:4c:d3:64:ae:56:71:8e:61:22:70:b8:35:84:6c: fa:0c:28:99:e3:da:79:b5:05:ce:b8:39:4d:f7:f5: 47:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:01:BA:4C:31:49:F8:40:C4:FD:5E:12:4B:49:AE:FF:8E:A1:40:F5 X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:fd:b7:33:8b:b9:b9:87:1c:c8:84:15:a2:f6:86:af:6a:3a: 9f:69:8f:d1:b3:15:0f:c5:af:0a:6f:ea:bc:15:1a:bf:16:69: 51:fe:22:47:ae:db:46:97:44:eb:74:71:fd:f9:11:95:fd:5e: 00:f0:a6:13:c8:4c:d9:a0:98:e3:16:f3:97:cb:6c:19:eb:df: 35:a5:ee:1b:f2:6f:ca:8f:19:3f:aa:12:b1:ca:a0:55:f6:7a: 40:c9:4a:d6:44:e1:c8:1b:da:c5:1b:ff:c5:aa:aa:52:1c:0e: a7:15:92:9b:2a:f5:8c:a3:6e:b7:3e:e7:d6:ed:c7:6d:46:e3: bd:b1:d7:e3:6b:c8:7c:23:8a:b6:3c:cc:bc:7a:4a:79:b7:a5: 50:03:37:2b:04:a7:ea:7f:13:f8:0f:53:44:1f:fc:03:ba:11: c0:ba:39:c9:17:2f:5c:b8:19:01:63:2d:db:c1:06:1c:3a:83: 5b:21:08:5a:9a:b2:03:62:b0:3b:51:a2:dc:76:85:63:78:d0: 9e:28:f0:0a:ee:d8:08:6c:c2:ad:24:ed:ad:85:48:dd:2a:d4: 8a:13:83:37:a2:5c:14:6f:40:a5:0e:11:ba:0d:65:21:b5:9d: 4e:3b:9f:c1:c1:af:ab:74:c1:a0:64:ae:14:83:48:de:17:09: bd:88:28:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA1MzEwNzE5MzhaFw0yNTA2MDcwNzE5MzhaMBgxFjAUBgNV BAMTDTY4M2FhZDhhLTNhZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClwPL7UBLoflMa7D/m+2IQwc5ialxZkSKyKK+PIdrarGC7Gjgrp1iHsFsTs/sF ZLP4ApoxYc+kIaM6Y+NdespvqwdKeebUU3ibSZ3YumpXdsywKX3R8gYJ+WzcfL8Y FLwBMR4DRO3e3mxbpgvv+7FP80txCqWUx29rxFV7RAUVd/+DvL0aPBeSR0w2SFDN B/cPCZeHLi9FooV1Lenn9w6efqjeBnxZKLrhzeUh8VyUCp76dO+qE7SoC/UIPLk1 r2UO4hIqDn6WJtvPuwrRV4ISrY8LF3ycZS1Zlwo/rzorUFtM02SuVnGOYSJwuDWE bPoMKJnj2nm1Bc64OU339UcfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhwG6TDFJ +EDE/V4SS0mu/46hQPUwHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMn9tzOLubmHHMiEFaL2hq9qOp9pj9GzFQ/Frwpv6rwVGr8WaVH+Ikeu 20aXROt0cf35EZX9XgDwphPITNmgmOMW85fLbBnr3zWl7hvyb8qPGT+qErHKoFX2 ekDJStZE4cgb2sUb/8WqqlIcDqcVkpsq9Yyjbrc+59btx21G472x1+NryHwjirY8 zLx6Snm3pVADNysEp+p/E/gPU0Qf/AO6EcC6OckXL1y4GQFjLdvBBhw6g1shCFqa sgNisDtRotx2hWN40J4o8Aru2Ahswq0k7a2FSN0q1IoTgzeiXBRvQKUOEboNZSG1 nU47n8HBr6t0waBkrhSDSN4XCb2IKGo= -----END CERTIFICATE-----Generated at Sat May 31 14:53:20 2025 by rpki-client