$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: el8gcloVskbXdzVmeduaczqKB5fLcVepXhNqB2JRIsQ= Subject key identifier: 5F:D5:49:66:9D:EC:7A:97:D5:63:A5:B9:A2:C5:C3:02:7E:1F:F7:79 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 126F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1240 Signing time: Wed 22 Oct 2025 17:31:39 +0000 Manifest this update: Wed 22 Oct 2025 17:31:38 +0000 Manifest next update: Wed 29 Oct 2025 17:31:38 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: 8NKjiJebMJlu/v2yT7pJcEJbuLfDdYIAJmpuV5SoGiw=) 2: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: kZ4GgJLH7ahXqbmiBHxFsJ+6YPh6PTbR5F95p4EP+tg=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: gIfrHvYhUG2Gl5XcrG0jaQjZFDq9QfoPF3cQ+mbSIDM=) 7: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 17:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4719 (0x126f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Oct 22 17:31:38 2025 GMT Not After : Oct 29 17:31:38 2025 GMT Subject: CN=68f914fb-fed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:ba:27:44:96:b5:23:49:a7:45:94:19:22: 59:10:32:27:2c:dd:04:cc:7a:30:0a:ef:c2:ed:58: 30:9d:60:6f:45:c5:1c:a5:7c:5f:8f:bf:47:d4:81: df:41:29:1e:fc:19:f5:2b:35:63:1d:9f:b2:02:44: 6e:06:c9:ee:31:7f:a8:12:06:9c:5b:d8:c5:cc:5c: c5:e1:6d:47:11:72:6f:b9:41:ec:51:51:d4:5f:1e: 3d:6a:8e:95:88:ab:33:dd:b6:5f:5f:94:38:54:f8: e0:d4:14:0e:68:d2:97:52:ac:16:ee:b1:6e:14:89: 4c:e8:a8:12:dd:c1:d6:29:07:e0:62:43:3b:c4:07: f5:cc:a4:3b:7e:0b:97:81:03:24:c5:eb:96:bd:e2: d6:81:8b:ff:f5:4b:de:d7:b0:2f:55:07:6a:18:f4: 6c:f9:fb:40:15:ea:6c:40:e3:5e:62:7f:17:a1:88: 8e:d9:d2:15:00:44:db:fe:79:c1:a1:6b:82:44:73: b8:ed:5d:b5:e5:fb:44:01:1b:a9:9e:31:4c:6f:8f: ae:85:20:14:e2:1b:f3:98:01:3c:84:31:d5:f1:61: 89:52:fa:6f:e9:a4:b4:95:11:7e:51:d2:42:37:bf: e0:f3:0b:0f:65:ad:4d:4d:01:44:dc:ea:c2:17:00: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:49:66:9D:EC:7A:97:D5:63:A5:B9:A2:C5:C3:02:7E:1F:F7:79 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:53:9e:32:38:18:de:13:ce:03:48:a3:39:10:d5:a7:26:f0: 6d:c0:a7:47:e0:06:4f:ae:d5:ab:81:16:16:2e:1f:34:2e:66: 77:0d:e6:b4:bb:62:9b:63:53:1b:ad:e3:09:d0:57:77:b6:d9: 7a:86:1c:ad:bf:93:d1:dc:06:40:56:6b:2e:33:c0:df:fc:17: 3a:73:fb:3c:c0:0b:b6:e3:08:99:03:52:b8:c9:7c:71:ed:38: 81:18:e2:7a:69:bc:4c:dc:82:ee:60:60:5d:be:c9:7b:e2:a4: 7b:a7:be:59:d9:8a:a5:70:41:6e:5c:4f:bb:16:f5:a2:0f:9e: b4:44:f0:24:19:00:32:02:2b:8e:42:a6:1f:c2:57:4b:b7:73: ee:23:ba:e9:a9:8a:3e:75:c1:c7:5a:f1:15:98:68:d8:e6:89: 48:75:81:01:c2:31:13:76:57:51:f8:27:90:34:43:72:5f:93: 41:98:9b:54:97:aa:0a:49:98:0e:53:5d:76:c9:6e:3e:d3:fe: 56:9e:1e:9e:8c:50:bb:43:e4:42:1c:63:9a:2b:63:4f:78:27: 7b:a1:6e:df:16:24:57:00:05:af:68:f0:49:de:6f:92:e0:0b: 45:24:0d:8e:db:8d:84:be:a2:80:f3:4f:f7:f6:77:8e:17:c4: 4c:6f:35:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUxMDIyMTczMTM4WhcNMjUxMDI5MTczMTM4WjAYMRYwFAYD VQQDEw02OGY5MTRmYi1mZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPS6J0SWtSNJp0WUGSJZEDInLN0EzHowCu/C7VgwnWBvRcUcpXxfj79H1IHf QSke/Bn1KzVjHZ+yAkRuBsnuMX+oEgacW9jFzFzF4W1HEXJvuUHsUVHUXx49ao6V iKsz3bZfX5Q4VPjg1BQOaNKXUqwW7rFuFIlM6KgS3cHWKQfgYkM7xAf1zKQ7fguX gQMkxeuWveLWgYv/9Uve17AvVQdqGPRs+ftAFepsQONeYn8XoYiO2dIVAETb/nnB oWuCRHO47V215ftEARupnjFMb4+uhSAU4hvzmAE8hDHV8WGJUvpv6aS0lRF+UdJC N7/g8wsPZa1NTQFE3OrCFwCBIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/VSWad 7HqX1WOluaLFwwJ+H/d5MB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzU54yOBjeE84DSKM5ENWnJvBtwKdH4AZPrtWrgRYWLh80LmZ3Dea0 u2KbY1MbreMJ0Fd3ttl6hhytv5PR3AZAVmsuM8Df/Bc6c/s8wAu24wiZA1K4yXxx 7TiBGOJ6abxM3ILuYGBdvsl74qR7p75Z2YqlcEFuXE+7FvWiD560RPAkGQAyAiuO QqYfwldLt3PuI7rpqYo+dcHHWvEVmGjY5olIdYEBwjETdldR+CeQNENyX5NBmJtU l6oKSZgOU112yW4+0/5Wnh6ejFC7Q+RCHGOaK2NPeCd7oW7fFiRXAAWvaPBJ3m+S 4AtFJA2O242EvqKA80/39neOF8RMbzXQ -----END CERTIFICATE-----Generated at Wed Oct 22 21:43:12 2025 by rpki-client