$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: kv21/QWU2Z0PyJVrYftoWTrfDDHETW95te/NW55xNyk= Subject key identifier: 1F:2E:A2:92:F6:D2:89:03:63:DA:3A:DA:C3:0F:8F:D2:44:E6:73:AF Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 3B Signing time: Sun 29 Jun 2025 06:36:13 +0000 Manifest this update: Sun 29 Jun 2025 06:36:13 +0000 Manifest next update: Sun 06 Jul 2025 06:36:13 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: b6/Pt0x8XF8/Z7sblwWm8oO+MIxsvL6diqWkWP34uWc=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Jun 29 06:36:13 2025 GMT Not After : Jul 6 06:36:13 2025 GMT Subject: CN=6860dedd-48f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e8:05:fa:62:05:45:d8:c3:d5:9f:3f:ef:0f: 48:eb:b2:21:eb:50:12:d0:cb:07:77:62:67:49:70: 78:1a:97:5a:f6:c8:e9:27:dd:ca:94:cb:11:76:dc: dc:a3:6a:9c:bf:e8:92:eb:c6:87:0e:1e:0a:92:66: b9:bc:f3:27:6c:30:e5:4c:56:54:bb:d2:4d:f8:31: f1:b4:27:3f:e9:fe:85:f8:05:d4:5a:22:f2:aa:71: b2:76:87:7e:87:a5:11:e6:30:2e:41:41:44:8c:67: 65:cb:29:4a:ca:b1:b2:da:e0:89:81:11:65:2b:98: 3e:ca:fd:14:53:a3:f3:8d:bb:c5:53:5a:17:11:1b: fd:80:3b:1c:a9:c0:82:66:d3:fc:5c:07:30:20:dd: 2c:c0:5b:18:29:81:c2:ba:a2:5b:41:5b:b3:59:bd: 7a:c5:1c:4b:3a:e6:7b:66:d1:27:92:4d:bd:d3:fb: 91:01:26:89:69:d0:92:38:ef:21:7f:21:0a:38:e7: 49:4a:ce:b9:c4:5d:b0:0e:3a:9c:30:9b:8f:25:c8: ab:0e:12:78:28:d1:6c:41:ed:7a:54:d7:c5:22:4b: 9e:6e:59:c9:04:da:3c:72:ed:bc:c6:a2:4b:d7:0d: 5e:3f:64:60:73:95:f9:93:48:02:36:cd:e3:39:77: e9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2E:A2:92:F6:D2:89:03:63:DA:3A:DA:C3:0F:8F:D2:44:E6:73:AF X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:b8:6c:ac:84:5f:0d:2b:c2:9a:b3:c8:d3:8a:2e:29:75:13: 9b:5a:69:ed:aa:f3:28:d9:4b:91:ee:1a:83:0e:b7:0e:08:97: 21:25:9c:4e:2c:94:0d:f8:54:e2:0f:e1:1d:d7:27:45:35:b9: 55:a2:25:b9:99:9e:39:4a:53:99:0c:0e:6f:a2:9e:f1:49:f2: f6:6f:cd:f5:05:57:3d:6b:cb:38:f4:22:1f:79:21:3c:1e:56: 32:41:d2:88:c9:ff:b6:81:a9:83:ba:e0:53:2d:88:3b:9a:68: ae:79:4c:00:a7:54:ee:dd:40:7b:2c:2b:e4:d8:57:84:6f:be: 0f:47:fd:e1:36:d7:a6:3a:20:79:7f:bc:16:59:74:21:ad:97: 0b:2b:7f:30:7f:3d:5e:1e:bf:b2:32:37:d7:05:94:c4:1d:2e: 53:ff:d5:78:c4:60:90:51:9b:fc:83:c0:85:a2:2c:df:96:3d: 6a:4a:0d:a0:e4:44:c9:08:84:bf:bf:c2:4e:51:e0:52:b9:29: 9e:ce:3d:70:3b:b0:6f:2b:23:05:d4:5d:5c:ef:82:0a:e6:c0: 8e:b0:2d:bc:33:12:ec:b2:7a:d6:d7:02:5c:8a:f4:91:75:70: f8:7a:06:64:38:f4:d4:f6:7d:b2:a4:6b:21:95:0a:1c:15:b3: f5:4a:d5:0e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA2MjkwNjM2MTNaFw0yNTA3MDYwNjM2MTNaMBgxFjAUBgNV BAMTDTY4NjBkZWRkLTQ4ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC6AX6YgVF2MPVnz/vD0jrsiHrUBLQywd3YmdJcHgal1r2yOkn3cqUyxF23Nyj apy/6JLrxocOHgqSZrm88ydsMOVMVlS70k34MfG0Jz/p/oX4BdRaIvKqcbJ2h36H pRHmMC5BQUSMZ2XLKUrKsbLa4ImBEWUrmD7K/RRTo/ONu8VTWhcRG/2AOxypwIJm 0/xcBzAg3SzAWxgpgcK6oltBW7NZvXrFHEs65ntm0SeSTb3T+5EBJolp0JI47yF/ IQo450lKzrnEXbAOOpwwm48lyKsOEngo0WxB7XpU18UiS55uWckE2jxy7bzGokvX DV4/ZGBzlfmTSAI2zeM5d+mvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHy6ikvbS iQNj2jraww+P0kTmc68wHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABW4bKyEXw0rwpqzyNOKLil1E5taae2q8yjZS5HuGoMOtw4IlyElnE4s lA34VOIP4R3XJ0U1uVWiJbmZnjlKU5kMDm+invFJ8vZvzfUFVz1ryzj0Ih95ITwe VjJB0ojJ/7aBqYO64FMtiDuaaK55TACnVO7dQHssK+TYV4Rvvg9H/eE216Y6IHl/ vBZZdCGtlwsrfzB/PV4ev7IyN9cFlMQdLlP/1XjEYJBRm/yDwIWiLN+WPWpKDaDk RMkIhL+/wk5R4FK5KZ7OPXA7sG8rIwXUXVzvggrmwI6wLbwzEuyyetbXAlyK9JF1 cPh6BmQ49NT2fbKkayGVChwVs/VK1Q4= -----END CERTIFICATE-----Generated at Mon Jun 30 17:18:45 2025 by rpki-client