$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: 4744uTYMpsx8OIf05biOpeZpork1YkLhQ68ZiYsSec8= Subject key identifier: B6:3D:08:FA:0D:79:5F:0F:9E:72:29:0D:76:56:A8:9A:E4:C1:7B:C2 Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 74 Signing time: Sun 19 Oct 2025 10:12:49 +0000 Manifest this update: Sun 19 Oct 2025 10:12:49 +0000 Manifest next update: Sun 26 Oct 2025 10:12:49 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: Ybfn9nMpG5GCtso4EBgZCZV9xiuR30uHOiNr/jZ/Jh0=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Oct 19 10:12:49 2025 GMT Not After : Oct 26 10:12:49 2025 GMT Subject: CN=68f4b9a1-8520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:de:d0:c2:50:14:a9:43:0f:99:dd:39:dc: 68:2a:82:40:1a:78:43:5e:d3:62:7a:d5:2e:9d:5e: 83:16:b8:65:b3:ec:3b:53:83:0b:f4:f1:94:59:a4: f7:12:fe:15:5f:46:f1:f6:ad:0f:59:15:cf:88:e7: 68:2d:55:31:ff:c5:a9:41:1d:c2:d7:ca:ec:72:38: a3:4d:27:72:a5:8f:a0:87:fe:7b:8a:8b:a7:9f:43: da:2e:4c:44:c5:11:89:79:07:a0:c1:60:24:0c:23: cd:81:95:a3:d8:f9:f3:28:5a:d7:d4:fc:2a:9e:a7: 31:9d:30:d3:5d:e0:d9:82:9e:38:5f:36:91:1c:da: 29:39:ba:7a:5a:75:89:4e:56:7a:d9:64:b7:2c:14: d1:0a:d0:a9:1b:b7:c1:12:0c:25:a7:95:16:02:65: c9:50:9a:f0:18:16:58:8a:83:b4:7c:c1:30:18:cd: 0f:15:21:7e:7b:c6:9b:cf:4e:ea:cc:95:91:c7:a7: 7f:2d:c2:70:8f:61:45:78:e9:3a:18:60:bd:f8:8c: 17:de:e1:d7:6a:40:fb:08:18:07:c0:39:b8:3d:f4: 61:f4:b7:02:b9:ab:1d:8d:b0:f8:61:60:ce:d9:49: 2d:ee:75:7c:8c:c4:3c:3c:f8:93:26:4e:fb:a5:27: 91:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:08:FA:0D:79:5F:0F:9E:72:29:0D:76:56:A8:9A:E4:C1:7B:C2 X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:5b:1c:81:79:07:40:05:65:2a:d0:69:f9:8c:47:14:4d:2f: e9:ab:63:0f:c8:db:d4:d3:0e:37:6a:12:e5:28:c8:66:f9:51: 69:84:01:77:94:99:9b:bc:41:b6:6b:cf:6e:da:9b:87:fd:42: af:23:2d:74:92:7d:6d:b8:97:b3:35:ce:0c:f7:a5:3e:e7:02: a3:19:7e:75:67:a5:1f:f0:86:14:b0:d1:65:41:09:98:cd:f4: 5a:62:ec:3c:0b:46:be:28:30:21:4c:ab:c7:a3:68:5f:c6:26: 06:e2:3d:87:28:e2:7b:2c:7b:b6:1c:2f:05:df:c3:73:e0:dc: e3:a0:14:35:99:47:e0:c6:66:7c:6e:55:46:84:57:26:13:45: 1b:ed:3c:5c:14:3e:fa:c0:9d:cb:8b:ec:78:a1:2f:c6:87:a4: 87:29:48:b3:25:69:a8:49:93:cd:b0:23:53:4c:2a:6c:e5:b4: 55:fa:7e:95:a9:df:ab:ed:08:fc:11:84:29:b6:43:29:cf:6c: cd:11:41:c9:8c:48:b7:e2:ee:a9:d1:27:c5:24:67:6e:6e:10: 6c:04:45:c3:90:7e:f9:94:77:38:07:30:4e:1c:89:2f:9a:2a: 08:11:e6:8b:4e:4f:0f:18:0c:b5:05:03:4b:3b:25:aa:af:e3: d2:48:5d:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTEwMTkxMDEyNDlaFw0yNTEwMjYxMDEyNDlaMBgxFjAUBgNV BAMTDTY4ZjRiOWExLTg1MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4zd7QwlAUqUMPmd053GgqgkAaeENe02J61S6dXoMWuGWz7DtTgwv08ZRZpPcS /hVfRvH2rQ9ZFc+I52gtVTH/xalBHcLXyuxyOKNNJ3Klj6CH/nuKi6efQ9ouTETF EYl5B6DBYCQMI82BlaPY+fMoWtfU/CqepzGdMNNd4NmCnjhfNpEc2ik5unpadYlO VnrZZLcsFNEK0Kkbt8ESDCWnlRYCZclQmvAYFliKg7R8wTAYzQ8VIX57xpvPTurM lZHHp38twnCPYUV46ToYYL34jBfe4ddqQPsIGAfAObg99GH0twK5qx2NsPhhYM7Z SS3udXyMxDw8+JMmTvulJ5F3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtj0I+g15 Xw+ecikNdlaomuTBe8IwHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZbHIF5B0AFZSrQafmMRxRNL+mrYw/I29TTDjdqEuUoyGb5UWmEAXeU mZu8QbZrz27am4f9Qq8jLXSSfW24l7M1zgz3pT7nAqMZfnVnpR/whhSw0WVBCZjN 9Fpi7DwLRr4oMCFMq8ejaF/GJgbiPYco4nsse7YcLwXfw3Pg3OOgFDWZR+DGZnxu VUaEVyYTRRvtPFwUPvrAncuL7HihL8aHpIcpSLMlaahJk82wI1NMKmzltFX6fpWp 36vtCPwRhCm2QynPbM0RQcmMSLfi7qnRJ8UkZ25uEGwERcOQfvmUdzgHME4ciS+a KggR5otOTw8YDLUFA0s7Jaqv49JIXeI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:57:54 2025 by rpki-client