$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: hvPYTx0BCtQ+JWq8yGIU9vcM2MdPh9BSy2V11AXFqbs= Subject key identifier: 4A:2E:0D:B4:73:B6:6D:F9:B8:45:25:24:57:3E:63:DB:1C:D9:23:6B Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 20 Signing time: Fri 09 May 2025 06:54:07 +0000 Manifest this update: Fri 09 May 2025 06:54:06 +0000 Manifest next update: Fri 16 May 2025 06:54:06 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: 06XdDTOwds+OL3tUF9sHs/vtM5t42fL1pVv47Z7i1nw=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: FLLpHbBTqnDBs40y47ZsimY2UyQLa+Oyfs+4Y2gV/9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 06:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: May 9 06:54:06 2025 GMT Not After : May 16 06:54:06 2025 GMT Subject: CN=681da68f-346c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:a2:ef:a0:c5:3f:11:ef:d9:c9:2f:2c:9d: 74:c3:a6:88:68:90:56:69:63:2e:dd:8d:ed:03:18: 18:b8:f4:6e:92:0f:7a:40:09:b5:b9:37:f9:a8:08: 5a:50:78:a9:58:bd:27:6a:b1:67:72:ef:8f:b1:78: 61:ba:1f:25:d3:25:7b:25:a4:77:a1:02:93:89:0b: 8a:83:01:10:0d:56:6d:fa:aa:a4:e8:c4:b9:03:2a: ac:05:52:36:a3:28:5f:59:6f:3f:41:aa:f4:09:3d: 62:0a:35:5d:c4:cb:1e:ba:57:18:e5:4e:97:55:d3: 8e:6d:e7:97:8f:cd:17:73:1b:a9:35:02:0c:37:4b: 12:cb:7e:4c:63:d6:57:99:cc:92:b3:55:64:9d:a1: 0c:55:72:f2:37:a2:c2:9d:51:94:0d:49:23:05:53: f8:a2:ac:c6:c2:18:bf:c9:d5:4e:6f:16:4f:c5:72: f6:53:24:90:4e:b0:c4:8a:b9:c3:81:ba:1d:dd:49: 68:d0:d8:57:54:83:27:c6:20:08:fa:e6:1b:95:8e: 84:0a:ae:32:e8:0e:b9:0c:7b:eb:0e:d4:59:60:27: fa:2c:91:41:08:ae:2f:a7:48:6f:37:cc:2a:6c:83: 5e:a5:7c:53:1a:d2:dc:e5:14:ca:c0:a2:3f:7b:31: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2E:0D:B4:73:B6:6D:F9:B8:45:25:24:57:3E:63:DB:1C:D9:23:6B X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2a:be:62:db:d6:54:ab:1c:92:6c:cd:5b:fa:38:5a:b7:42: a3:f5:ad:1c:a7:b6:e1:50:82:04:0e:a1:de:9d:93:f7:28:b9: cf:da:00:d9:7f:0b:2d:7d:5d:49:a6:2e:b7:e4:81:23:90:de: bd:ef:ba:8f:34:43:44:fc:6b:ed:c6:ef:59:e2:b5:01:98:92: cc:07:cc:45:1a:8f:15:65:97:77:b2:b7:b8:be:9b:41:ca:a6: 13:69:d7:a2:1a:fa:d2:65:fe:b8:cf:af:5b:50:65:17:40:fb: 89:02:d3:fa:af:74:d2:d0:6b:02:5c:bb:1d:39:82:9e:9b:50: cb:35:74:04:d7:bf:78:f7:0c:b1:fc:1f:0b:cb:d4:a1:cf:01: b2:21:78:d6:fb:d3:a2:de:68:06:25:44:4e:4e:79:ce:41:18: 4a:fb:b7:89:19:c1:91:aa:48:b8:da:c4:54:62:ac:d9:59:3c: 23:9b:76:6a:b9:fc:fe:c7:13:6f:d6:4b:dd:f6:7b:dd:9a:62: 06:d4:da:85:43:72:de:96:d6:88:5d:f6:4d:4d:f8:5f:1f:33: 92:e5:33:29:05:3d:99:28:34:bc:df:3d:34:6a:98:e8:5d:5c: 8e:58:96:dd:32:30:60:f0:e8:2f:e5:f0:61:89:19:b7:76:8d: 89:53:70:21 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA1MDkwNjU0MDZaFw0yNTA1MTYwNjU0MDZaMBgxFjAUBgNV BAMTDTY4MWRhNjhmLTM0NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsqqLvoMU/Ee/ZyS8snXTDpohokFZpYy7dje0DGBi49G6SD3pACbW5N/moCFpQ eKlYvSdqsWdy74+xeGG6HyXTJXslpHehApOJC4qDARANVm36qqToxLkDKqwFUjaj KF9Zbz9BqvQJPWIKNV3Eyx66VxjlTpdV045t55ePzRdzG6k1Agw3SxLLfkxj1leZ zJKzVWSdoQxVcvI3osKdUZQNSSMFU/iirMbCGL/J1U5vFk/FcvZTJJBOsMSKucOB uh3dSWjQ2FdUgyfGIAj65huVjoQKrjLoDrkMe+sO1FlgJ/oskUEIri+nSG83zCps g16lfFMa0tzlFMrAoj97MapPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSi4NtHO2 bfm4RSUkVz5j2xzZI2swHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIsqvmLb1lSrHJJszVv6OFq3QqP1rRyntuFQggQOod6dk/couc/aANl/ Cy19XUmmLrfkgSOQ3r3vuo80Q0T8a+3G71nitQGYkswHzEUajxVll3eyt7i+m0HK phNp16Ia+tJl/rjPr1tQZRdA+4kC0/qvdNLQawJcux05gp6bUMs1dATXv3j3DLH8 HwvL1KHPAbIheNb706LeaAYlRE5Oec5BGEr7t4kZwZGqSLjaxFRirNlZPCObdmq5 /P7HE2/WS932e92aYgbU2oVDct6W1ohd9k1N+F8fM5LlMykFPZkoNLzfPTRqmOhd XI5Ylt0yMGDw6C/l8GGJGbd2jYlTcCE= -----END CERTIFICATE-----Generated at Sat May 10 05:03:44 2025 by rpki-client