$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: hkDxpLs/6mCPSC/XaIVtHwUU4oLyUodCOCoDeey8q8A= Subject key identifier: AD:A1:61:F9:22:5B:D0:9C:18:CA:1C:F6:63:BC:62:4D:A2:AD:E0:35 Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 57 Signing time: Sat 23 Aug 2025 07:28:36 +0000 Manifest this update: Sat 23 Aug 2025 07:28:36 +0000 Manifest next update: Sat 30 Aug 2025 07:28:36 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: CPlyqOfANekTINjLYT2SCxrnKaQY6q7GHXgVJunGF80=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Aug 23 07:28:36 2025 GMT Not After : Aug 30 07:28:36 2025 GMT Subject: CN=68a96da4-497c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:3e:9f:fb:77:88:b0:af:86:4d:97:33:a0: a6:59:90:78:db:65:00:16:a9:74:f7:1f:ae:67:68: b9:f3:24:d3:4e:3d:20:e0:e4:5d:f0:dc:18:33:3c: 8a:95:57:64:e2:de:45:c2:66:b9:bf:83:d5:12:4c: c8:3a:56:b7:cf:74:5d:b4:a0:47:f2:f5:0a:3b:a1: 15:90:8e:d6:8d:6d:23:13:e3:18:bc:54:76:1d:b0: e8:02:ff:55:66:2c:4b:08:f5:86:cc:95:c2:11:95: 9b:26:17:3d:33:4c:41:d3:6e:b2:35:ff:75:f4:e4: be:53:34:b8:56:a0:46:f5:f8:25:9d:1b:de:6a:a2: 21:e5:ec:f0:d1:53:47:a4:27:48:86:be:57:dd:59: 07:92:fa:d0:e5:0a:5d:83:01:22:a6:eb:99:ed:83: 8f:e6:3d:a2:68:0f:6b:b3:2c:e5:00:a5:98:53:12: 30:58:c5:47:ab:84:e5:ab:b3:53:60:69:f3:b7:42: e8:cc:2d:72:39:7b:1d:bb:a1:47:80:c4:4f:3c:f2: 8f:9d:54:02:28:14:05:8d:9d:c2:27:07:1e:cd:22: 9a:6c:e1:03:6f:67:90:e6:87:4f:93:3d:af:e6:34: de:c3:02:6e:cc:67:61:0d:df:0e:18:8c:2b:5e:63: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A1:61:F9:22:5B:D0:9C:18:CA:1C:F6:63:BC:62:4D:A2:AD:E0:35 X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:a1:67:9c:11:d4:8d:c8:dc:5f:c9:4f:18:e6:d5:c6:d9:83: 3a:71:9d:4c:fc:6f:69:38:fb:14:a4:d1:5a:e3:68:b3:b5:be: 3e:c3:4a:4e:32:e4:18:c4:7b:18:3a:e0:6a:7b:7f:b4:9f:da: 99:80:28:fd:de:3f:4c:86:de:d1:98:50:8d:ae:55:a0:07:ee: 27:88:a7:5b:a5:cb:41:b4:15:e3:55:cf:ff:e4:fc:8f:83:7d: ee:98:17:24:57:84:66:8f:36:fb:6d:13:54:e3:e2:b5:d8:63: 92:c2:e5:f9:be:c9:47:76:27:0a:bb:c1:07:b7:6d:01:59:37: 39:d3:20:9c:2e:48:32:26:c8:d7:87:0f:2a:59:ae:08:63:af: 63:38:4b:a4:e6:37:d2:a7:82:55:66:33:b9:76:0f:a9:97:ee: 75:1b:06:0c:cd:1b:70:16:59:7f:b7:14:ae:5e:80:4c:45:66: e4:bb:36:6d:7d:a6:de:70:84:4b:43:89:b1:40:a2:f0:0f:ab: 08:d4:a0:34:aa:4e:2d:7c:62:b5:92:cf:45:fb:52:c3:f3:ec: ea:82:1e:0f:a5:02:29:2b:37:e4:95:ca:5e:1c:6b:a3:c8:75: 6f:8b:c8:62:96:0b:12:4f:1e:9b:0e:4b:5d:d9:48:d0:b5:5c: f2:60:b9:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA4MjMwNzI4MzZaFw0yNTA4MzAwNzI4MzZaMBgxFjAUBgNV BAMTDTY4YTk2ZGE0LTQ5N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcgD6f+3eIsK+GTZczoKZZkHjbZQAWqXT3H65naLnzJNNOPSDg5F3w3BgzPIqV V2Ti3kXCZrm/g9USTMg6VrfPdF20oEfy9Qo7oRWQjtaNbSMT4xi8VHYdsOgC/1Vm LEsI9YbMlcIRlZsmFz0zTEHTbrI1/3X05L5TNLhWoEb1+CWdG95qoiHl7PDRU0ek J0iGvlfdWQeS+tDlCl2DASKm65ntg4/mPaJoD2uzLOUApZhTEjBYxUerhOWrs1Ng afO3QujMLXI5ex27oUeAxE888o+dVAIoFAWNncInBx7NIpps4QNvZ5Dmh0+TPa/m NN7DAm7MZ2EN3w4YjCteYwwDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUraFh+SJb 0JwYyhz2Y7xiTaKt4DUwHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANahZ5wR1I3I3F/JTxjm1cbZgzpxnUz8b2k4+xSk0VrjaLO1vj7DSk4y 5BjEexg64Gp7f7Sf2pmAKP3eP0yG3tGYUI2uVaAH7ieIp1uly0G0FeNVz//k/I+D fe6YFyRXhGaPNvttE1Tj4rXYY5LC5fm+yUd2Jwq7wQe3bQFZNznTIJwuSDImyNeH DypZrghjr2M4S6TmN9KnglVmM7l2D6mX7nUbBgzNG3AWWX+3FK5egExFZuS7Nm19 pt5whEtDibFAovAPqwjUoDSqTi18YrWSz0X7UsPz7OqCHg+lAikrN+SVyl4ca6PI dW+LyGKWCxJPHpsOS13ZSNC1XPJguR0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:38:45 2025 by rpki-client