$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: ojE5e04TmdXbIFQZG374rH4l3FqeaYx8Z7vIYVmSFRw= Subject key identifier: 2B:5B:7F:25:D3:65:CA:E1:B8:E5:A2:1D:98:C1:CB:77:1A:DD:4B:35 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 1247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 121C Signing time: Fri 22 Aug 2025 17:17:05 +0000 Manifest this update: Fri 22 Aug 2025 17:17:04 +0000 Manifest next update: Fri 29 Aug 2025 17:17:04 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: jndOgf4TxiFM/UARPDgX88YD3Dk9XyXKT3246PDbo/8=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:17:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4679 (0x1247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Aug 22 17:17:04 2025 GMT Not After : Aug 29 17:17:04 2025 GMT Subject: CN=68a8a610-4999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:48:c3:30:40:d5:01:e5:0b:91:03:77:8d: 98:cc:c9:45:fd:a0:71:e9:6f:dc:ca:0a:c6:c3:1f: 83:9d:df:5e:d8:44:bd:63:6d:ff:d1:e5:14:54:b4: 83:a1:5b:70:cc:c2:c7:bb:87:8e:dd:31:79:8d:88: a8:4a:b3:70:e7:1e:91:c1:fc:7e:51:9f:6c:e4:5d: 80:47:1b:ea:df:33:e2:21:62:b5:9e:b6:94:26:42: 44:ec:e4:bc:df:74:98:88:02:58:f6:9d:b2:40:88: 32:bf:ba:a8:30:f5:8b:3d:db:6a:d8:f6:e3:aa:4b: 12:c4:03:4c:1a:2f:1e:09:7f:8b:f2:ef:1b:58:dd: cf:2e:98:a8:98:cb:67:bd:19:a6:f3:6c:ac:5a:3b: 59:70:f5:f4:d3:ba:47:63:d3:28:49:cf:36:7e:82: 9b:6e:b2:7d:71:07:15:ef:5b:03:7f:20:b6:2a:3c: 18:85:8f:f6:4c:39:23:5d:7c:c0:d1:68:d9:d9:07: 68:e4:3f:05:66:05:f5:69:74:ea:1a:6f:ea:67:21: b4:b1:2f:11:6a:c5:36:d8:fa:73:b1:fa:dc:1d:ff: ef:10:55:0c:34:f6:b3:f3:b4:f7:b8:65:fc:cb:f4: 99:cf:e8:74:66:41:33:16:5b:a3:f6:ca:ab:11:b5: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5B:7F:25:D3:65:CA:E1:B8:E5:A2:1D:98:C1:CB:77:1A:DD:4B:35 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:df:30:7e:ed:c1:15:13:f2:2b:3d:67:1e:f5:7c:8d:94:15: fd:b9:72:3e:45:51:85:e7:6e:dc:73:c7:a0:46:6c:0c:13:49: b7:eb:71:59:ea:31:20:4c:51:b1:11:df:bd:3f:11:66:59:02: b1:2a:97:e2:22:72:a8:6e:50:46:c3:58:00:5d:8d:7d:0e:18: d2:19:dd:34:e8:2f:02:83:27:04:61:c4:32:1a:73:52:43:76: b5:29:42:1f:05:4b:c4:b7:49:3b:27:8b:0b:89:63:77:4d:52: b1:39:55:61:11:6f:b5:98:dd:bd:cc:9c:13:ed:9b:df:77:c5: a6:94:98:51:72:9c:30:8f:e2:a3:ef:12:e4:db:d1:10:0c:b8: 66:ab:3f:e1:4b:61:98:5b:57:e9:9b:78:18:bc:52:09:ff:0c: 3b:6d:fa:57:fa:66:01:23:72:c8:ee:20:e9:ec:4c:8b:5b:5b: 99:5d:b8:56:c6:4a:b5:52:98:b6:5a:89:6b:69:c5:73:8a:82: b1:93:8c:3f:86:37:31:51:dd:b4:f3:1d:2b:0a:6e:6c:b4:a0: 53:13:78:b1:50:91:4c:4a:03:3a:30:6a:68:a9:9f:e2:33:3e: ce:d1:44:76:88:65:4d:1d:22:5e:e8:90:ce:5d:6a:3d:41:7c: 6c:97:80:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwODIyMTcxNzA0WhcNMjUwODI5MTcxNzA0WjAYMRYwFAYD VQQDEw02OGE4YTYxMC00OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsm1IwzBA1QHlC5EDd42YzMlF/aBx6W/cygrGwx+Dnd9e2ES9Y23/0eUUVLSD oVtwzMLHu4eO3TF5jYioSrNw5x6Rwfx+UZ9s5F2ARxvq3zPiIWK1nraUJkJE7OS8 33SYiAJY9p2yQIgyv7qoMPWLPdtq2PbjqksSxANMGi8eCX+L8u8bWN3PLpiomMtn vRmm82ysWjtZcPX007pHY9MoSc82foKbbrJ9cQcV71sDfyC2KjwYhY/2TDkjXXzA 0WjZ2Qdo5D8FZgX1aXTqGm/qZyG0sS8RasU22PpzsfrcHf/vEFUMNPaz87T3uGX8 y/SZz+h0ZkEzFluj9sqrEbUmdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtbfyXT ZcrhuOWiHZjBy3ca3Us1MB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR3zB+7cEVE/IrPWce9XyNlBX9uXI+RVGF527cc8egRmwME0m363FZ 6jEgTFGxEd+9PxFmWQKxKpfiInKoblBGw1gAXY19DhjSGd006C8CgycEYcQyGnNS Q3a1KUIfBUvEt0k7J4sLiWN3TVKxOVVhEW+1mN29zJwT7Zvfd8WmlJhRcpwwj+Kj 7xLk29EQDLhmqz/hS2GYW1fpm3gYvFIJ/ww7bfpX+mYBI3LI7iDp7EyLW1uZXbhW xkq1Upi2WolracVzioKxk4w/hjcxUd208x0rCm5stKBTE3ixUJFMSgM6MGpoqZ/i Mz7O0UR2iGVNHSJe6JDOXWo9QXxsl4BR -----END CERTIFICATE-----Generated at Sat Aug 23 21:07:07 2025 by rpki-client