$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: rax4orCENTJIQ+CopOg4nGM25d2Wsh3NiYByWbmWizw= Subject key identifier: 61:08:44:B5:B6:CC:46:C8:92:6A:39:25:B5:DB:A6:CE:51:3E:3C:77 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 122C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1201 Signing time: Mon 30 Jun 2025 17:21:49 +0000 Manifest this update: Mon 30 Jun 2025 17:21:49 +0000 Manifest next update: Mon 07 Jul 2025 17:21:49 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: mwQfGMwGidsvjVskkWfIJHl81dqy/EPb9A9ELuDcLU4=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4652 (0x122c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Jun 30 17:21:49 2025 GMT Not After : Jul 7 17:21:49 2025 GMT Subject: CN=6862c7ad-1607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:23:a2:7c:d5:5e:71:2d:0b:d2:e0:37:c6:d4: 01:30:7e:90:ba:30:24:03:dd:07:81:91:26:ed:60: d1:5a:25:50:81:f4:21:54:c9:a0:50:d6:e6:f6:57: ee:8c:a6:8e:13:de:d8:e6:41:e7:55:f6:14:e5:fd: c1:ee:49:d8:f1:64:02:94:59:17:53:bf:25:76:f9: f0:5d:a5:f3:9a:1c:37:fa:c6:79:a7:5e:11:a2:38: 02:e6:71:e6:37:fc:35:90:95:34:89:91:49:8d:78: 51:9d:dd:78:a7:bd:48:13:2d:07:eb:b9:1a:c8:39: ce:45:b8:96:82:fc:42:18:74:10:89:67:1f:fb:ab: 71:42:ce:e7:ce:0d:3c:2b:42:4f:26:6f:f7:99:0b: 40:4c:49:9a:6d:e1:14:4f:67:41:a6:ed:58:a4:64: 84:c8:b7:e5:ef:01:6c:6b:5e:ad:bf:b0:3a:72:56: 08:cd:91:23:c1:bb:84:4d:8a:9d:02:b0:b5:c1:f5: a5:80:5c:99:75:7d:61:39:e0:f0:bd:dd:fd:b8:36: 4b:90:57:63:3d:7e:2b:c6:ef:09:9e:7f:9c:dc:03: 0d:7c:79:e8:9b:f8:72:5f:b8:4b:c2:00:0e:e9:56: 36:f8:f1:73:cf:60:d5:4a:e5:78:4d:81:cb:02:28: 52:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:08:44:B5:B6:CC:46:C8:92:6A:39:25:B5:DB:A6:CE:51:3E:3C:77 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:5c:dd:63:01:63:0c:09:38:2d:34:84:ab:79:33:65:a2:a2: bb:00:0d:34:7f:ed:b1:1b:c3:55:6a:c5:68:9e:fd:5d:bd:31: 48:76:44:3e:0c:17:b7:6e:5f:44:c0:ab:db:c6:f8:fc:ff:cb: bf:37:e9:27:2f:22:2a:5c:7f:28:61:c9:96:23:43:7e:07:7b: a0:88:1f:2d:86:83:46:96:4d:50:4d:ab:98:0b:74:80:73:79: de:f6:fa:2a:08:92:ff:90:3b:16:22:88:5c:48:cc:0c:31:1a: b1:86:af:b0:99:e0:00:04:1f:bb:73:25:27:c4:ef:5d:8c:05: a4:79:41:e4:3e:1b:18:91:5a:e0:e5:a9:67:43:92:77:3f:30: 1c:db:17:b7:b0:05:b5:c9:3b:3d:2d:e3:e5:60:a2:fd:72:20: b0:46:5b:b5:53:b6:09:a4:f3:2a:d1:7b:16:f1:73:56:9a:8b: 7b:28:9a:58:e3:03:62:2c:d4:25:c0:54:65:3b:7a:04:6d:75: 99:cb:b3:e9:c6:1d:b7:9e:51:dd:c5:d1:2e:78:c0:97:b1:86: 15:78:8b:4c:bb:6d:8e:7e:89:00:b8:63:49:8e:fa:02:0a:a6: f9:7b:e3:2c:c9:85:37:08:5e:fb:8e:86:c4:ff:d0:d5:2d:d1: 54:f5:21:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwNjMwMTcyMTQ5WhcNMjUwNzA3MTcyMTQ5WjAYMRYwFAYD VQQDEw02ODYyYzdhZC0xNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8COifNVecS0L0uA3xtQBMH6QujAkA90HgZEm7WDRWiVQgfQhVMmgUNbm9lfu jKaOE97Y5kHnVfYU5f3B7knY8WQClFkXU78ldvnwXaXzmhw3+sZ5p14RojgC5nHm N/w1kJU0iZFJjXhRnd14p71IEy0H67kayDnORbiWgvxCGHQQiWcf+6txQs7nzg08 K0JPJm/3mQtATEmabeEUT2dBpu1YpGSEyLfl7wFsa16tv7A6clYIzZEjwbuETYqd ArC1wfWlgFyZdX1hOeDwvd39uDZLkFdjPX4rxu8Jnn+c3AMNfHnom/hyX7hLwgAO 6VY2+PFzz2DVSuV4TYHLAihSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEIRLW2 zEbIkmo5JbXbps5RPjx3MB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEXN1jAWMMCTgtNISreTNloqK7AA00f+2xG8NVasVonv1dvTFIdkQ+ DBe3bl9EwKvbxvj8/8u/N+knLyIqXH8oYcmWI0N+B3ugiB8thoNGlk1QTauYC3SA c3ne9voqCJL/kDsWIohcSMwMMRqxhq+wmeAABB+7cyUnxO9djAWkeUHkPhsYkVrg 5alnQ5J3PzAc2xe3sAW1yTs9LePlYKL9ciCwRlu1U7YJpPMq0XsW8XNWmot7KJpY 4wNiLNQlwFRlO3oEbXWZy7Ppxh23nlHdxdEueMCXsYYVeItMu22OfokAuGNJjvoC Cqb5e+MsyYU3CF77jobE/9DVLdFU9SEJ -----END CERTIFICATE-----Generated at Tue Jul 1 17:40:11 2025 by rpki-client