$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: EktmuHN8q1N8g9YTUTAQnR4GZBt8I2Vxqvkp9DIfBN8= Subject key identifier: 28:15:23:1C:2C:47:03:B1:7E:F8:17:54:36:3A:D1:B5:00:30:CE:49 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 121C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 11F1 Signing time: Fri 30 May 2025 17:21:22 +0000 Manifest this update: Fri 30 May 2025 17:21:22 +0000 Manifest next update: Fri 06 Jun 2025 17:21:22 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: jY1lf9YSLZrlk0XXi5D0fsexw4fBISWH3dBZAT7r0YY=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:21:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4636 (0x121c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: May 30 17:21:22 2025 GMT Not After : Jun 6 17:21:22 2025 GMT Subject: CN=6839e912-897b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:6a:dc:a3:98:3b:ec:ac:4c:e7:2a:06:06: 47:13:4e:40:10:d1:8e:9c:eb:65:eb:e5:0f:1c:53: da:fe:fe:ec:8f:b1:0b:b3:cc:46:6f:c4:72:b1:0e: 89:2f:42:ea:18:dc:c0:29:21:46:7a:48:a6:27:0a: e5:77:e1:31:52:a5:31:bb:c0:af:92:b1:71:ca:dd: 2a:11:c4:70:67:b4:1e:ce:5b:f4:e9:12:83:f8:02: df:23:de:1a:d9:89:6d:dd:d9:91:77:a5:6a:fa:18: 32:45:c6:ab:5a:67:07:8d:b5:da:60:2d:6a:bf:47: ee:1f:53:21:50:e1:52:3f:ea:6a:8c:b3:cf:d0:27: 59:5f:ef:88:b6:80:a7:bc:67:35:4d:f9:a3:f3:8d: d6:2f:e1:2e:e3:99:65:90:9c:50:8b:a2:aa:e9:c0: e3:1d:c8:09:c8:05:f6:39:24:08:4a:2e:31:69:d9: 90:92:f0:7f:1a:a6:f3:2d:78:8d:3b:0a:c7:51:b7: 3b:15:b2:0c:5c:b3:88:03:f3:90:67:63:1f:d5:7b: b3:8c:70:0d:a7:1a:0d:91:2b:78:ce:c5:7e:73:04: 62:b7:96:d6:67:94:dc:2c:13:69:b6:92:23:bd:6c: ab:b9:b6:4b:08:76:2b:57:df:92:49:ec:a3:03:50: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:23:1C:2C:47:03:B1:7E:F8:17:54:36:3A:D1:B5:00:30:CE:49 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e7:f5:b8:c3:35:40:6b:a9:e3:c0:07:a8:e5:7a:8a:f5:7b: ce:b7:68:4f:36:17:5f:94:5d:f8:dc:9e:8c:92:15:5c:0a:34: 61:91:95:e5:06:be:fd:14:65:cf:7d:77:65:bc:7d:62:e3:bd: 25:6d:0c:4c:28:e1:af:02:b9:90:52:53:99:aa:75:2c:81:ec: b5:bd:2a:34:43:85:ef:f7:4d:90:39:80:94:98:37:9a:cc:6d: 1e:0b:94:c9:be:46:d6:0f:7d:ef:17:f6:5f:72:a8:ad:a0:32: 1f:b1:d3:3f:28:4f:25:ea:52:07:da:c9:ac:af:73:af:43:fc: be:d7:54:7b:f9:97:f2:9f:cb:31:92:67:cb:bc:4d:e1:a0:26: fd:20:5b:1c:a3:27:1b:4d:2b:47:02:70:03:a5:88:03:eb:41: 0a:2f:a5:21:ca:e2:ee:b0:6a:8e:a8:eb:93:6a:b0:4d:a2:af: dd:8d:55:7c:d0:ba:ff:1a:92:c4:6d:44:38:0b:04:63:f4:e0: 78:4d:56:85:43:8d:d2:83:76:3f:32:93:6b:4b:c9:65:5b:07: 5a:0c:69:5b:41:dd:a6:05:f6:1d:fb:cb:40:6d:b1:ab:55:7d: 78:c9:46:5a:81:2e:6d:d0:a8:b1:bc:0d:da:1c:f2:78:3c:6d: 53:38:b1:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwNTMwMTcyMTIyWhcNMjUwNjA2MTcyMTIyWjAYMRYwFAYD VQQDEw02ODM5ZTkxMi04OTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNJq3KOYO+ysTOcqBgZHE05AENGOnOtl6+UPHFPa/v7sj7ELs8xGb8RysQ6J L0LqGNzAKSFGekimJwrld+ExUqUxu8CvkrFxyt0qEcRwZ7Qezlv06RKD+ALfI94a 2Ylt3dmRd6Vq+hgyRcarWmcHjbXaYC1qv0fuH1MhUOFSP+pqjLPP0CdZX++ItoCn vGc1Tfmj843WL+Eu45llkJxQi6Kq6cDjHcgJyAX2OSQISi4xadmQkvB/GqbzLXiN OwrHUbc7FbIMXLOIA/OQZ2Mf1XuzjHANpxoNkSt4zsV+cwRit5bWZ5TcLBNptpIj vWyrubZLCHYrV9+SSeyjA1CU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgVIxws RwOxfvgXVDY60bUAMM5JMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy5/W4wzVAa6njwAeo5XqK9XvOt2hPNhdflF343J6MkhVcCjRhkZXl Br79FGXPfXdlvH1i470lbQxMKOGvArmQUlOZqnUsgey1vSo0Q4Xv902QOYCUmDea zG0eC5TJvkbWD33vF/ZfcqitoDIfsdM/KE8l6lIH2smsr3OvQ/y+11R7+Zfyn8sx kmfLvE3hoCb9IFscoycbTStHAnADpYgD60EKL6UhyuLusGqOqOuTarBNoq/djVV8 0Lr/GpLEbUQ4CwRj9OB4TVaFQ43Sg3Y/MpNrS8llWwdaDGlbQd2mBfYd+8tAbbGr VX14yUZagS5t0KixvA3aHPJ4PG1TOLHX -----END CERTIFICATE-----Generated at Sat May 31 16:38:50 2025 by rpki-client