$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: GSTNk0Aihj6bB0DhE2SV0K66H9eEZfsYpaqbzmfpvxQ= Subject key identifier: 29:D7:E3:07:64:A6:30:FB:7A:9A:1C:D9:8E:1A:52:97:16:7C:EC:57 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 1251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1225 Signing time: Thu 04 Sep 2025 17:17:23 +0000 Manifest this update: Thu 04 Sep 2025 17:17:23 +0000 Manifest next update: Thu 11 Sep 2025 17:17:23 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: 3DnULZJEAkCFWaNk+0/ffuzo2lbxTA90wIRi6XlIsrE=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: ohFbFlY5GdHO0sok1ss9rmMPw9mFXb448pHih68yHjg=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 17:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4689 (0x1251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Sep 4 17:17:23 2025 GMT Not After : Sep 11 17:17:23 2025 GMT Subject: CN=68b9c9a3-43d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:10:66:b5:64:53:64:08:0d:90:4f:ec:6e: b8:79:48:94:ea:43:48:a6:37:55:6a:3a:f8:e0:d8: 77:c0:a0:2c:1f:99:69:71:6a:39:cf:2a:80:1f:be: 6f:7a:d5:fe:da:84:37:c3:b5:22:52:d6:fd:64:93: 5b:b1:c5:5f:28:fd:74:01:69:c2:3e:6d:8d:3a:0f: ef:3d:14:be:30:b0:d0:70:db:88:1b:fb:ab:60:f8: b2:9a:a5:4a:45:f1:40:d2:46:da:62:9c:a3:0d:68: 5f:61:2f:fc:b3:a7:85:fc:40:38:38:90:46:fe:30: 22:7e:9d:c3:ce:b1:7f:44:a0:7b:73:77:70:c8:02: e6:88:f3:96:f1:3f:ac:48:f9:1b:f5:9e:53:73:ec: da:15:c5:c5:36:df:8e:d3:c5:ea:e9:6a:95:c5:de: 23:86:48:41:69:2b:e2:ce:b3:da:d7:fe:79:d1:dd: 90:52:57:57:24:42:b4:aa:b3:b2:00:d3:19:e2:3b: 24:bb:59:a7:cc:b1:b9:0c:70:5f:81:b1:07:b7:33: d5:05:59:65:63:ff:af:18:e2:30:fa:83:d8:d5:de: 5d:3e:17:4a:e2:79:82:b2:a4:3d:e2:92:d2:cc:30: 72:43:b6:24:f3:7a:75:1a:ff:30:30:9a:d5:cc:81: d5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D7:E3:07:64:A6:30:FB:7A:9A:1C:D9:8E:1A:52:97:16:7C:EC:57 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:eb:3e:86:1d:cf:e5:c0:68:fa:de:a4:52:a6:b5:54:76:e9: b1:15:fe:96:90:e3:b8:7c:99:f9:73:30:30:81:b8:0d:98:c8: 73:48:89:7d:da:23:85:fa:c6:c0:e6:b9:f0:9b:40:c6:68:c3: 8a:da:b5:66:d0:90:02:2e:27:5b:0a:3f:95:cb:30:60:c6:bf: 75:4b:7a:c8:1c:da:fd:2f:b2:01:28:7b:37:18:c4:d7:77:c5: 79:cc:ed:76:47:be:38:02:b3:9f:df:9d:01:db:f6:1a:d1:5d: ac:7a:9a:66:a9:4e:9c:a8:7d:9d:69:2a:f5:c3:90:9f:88:4e: 8c:fd:09:a9:00:78:d8:e5:63:ea:a0:13:ba:0d:58:a3:28:45: bb:a6:49:68:d6:56:bc:2e:ef:58:85:5e:15:84:6e:ee:1f:fd: 64:e5:a4:58:3a:47:ee:7d:05:3e:aa:11:4d:92:f7:e1:66:ab: 00:e1:95:d3:af:34:5f:33:4f:4e:fd:d6:21:0d:fa:6f:8a:0b: 56:a7:10:be:b3:9c:3b:b4:0b:08:10:2a:d6:48:c8:97:9e:c5: 27:c9:3f:3c:cc:cf:0e:d8:57:e6:40:4e:3a:f0:77:4b:96:d8: 53:1f:a2:2d:58:8a:c2:58:68:a8:d4:fa:6d:70:c7:b3:d8:25: 9e:77:0e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwOTA0MTcxNzIzWhcNMjUwOTExMTcxNzIzWjAYMRYwFAYD VQQDEw02OGI5YzlhMy00M2Q0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyAQZrVkU2QIDZBP7G64eUiU6kNIpjdVajr44Nh3wKAsH5lpcWo5zyqAH75v etX+2oQ3w7UiUtb9ZJNbscVfKP10AWnCPm2NOg/vPRS+MLDQcNuIG/urYPiymqVK RfFA0kbaYpyjDWhfYS/8s6eF/EA4OJBG/jAifp3DzrF/RKB7c3dwyALmiPOW8T+s SPkb9Z5Tc+zaFcXFNt+O08Xq6WqVxd4jhkhBaSvizrPa1/550d2QUldXJEK0qrOy ANMZ4jsku1mnzLG5DHBfgbEHtzPVBVllY/+vGOIw+oPY1d5dPhdK4nmCsqQ94pLS zDByQ7Yk83p1Gv8wMJrVzIHVuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnX4wdk pjD7epoc2Y4aUpcWfOxXMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi6z6GHc/lwGj63qRSprVUdumxFf6WkOO4fJn5czAwgbgNmMhzSIl9 2iOF+sbA5rnwm0DGaMOK2rVm0JACLidbCj+VyzBgxr91S3rIHNr9L7IBKHs3GMTX d8V5zO12R744ArOf350B2/Ya0V2seppmqU6cqH2daSr1w5CfiE6M/QmpAHjY5WPq oBO6DVijKEW7pklo1la8Lu9YhV4VhG7uH/1k5aRYOkfufQU+qhFNkvfhZqsA4ZXT rzRfM09O/dYhDfpvigtWpxC+s5w7tAsIECrWSMiXnsUnyT88zM8O2FfmQE468HdL lthTH6ItWIrCWGio1PptcMez2CWedw54 -----END CERTIFICATE-----Generated at Sat Sep 6 13:47:11 2025 by rpki-client