$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: aRXBSeaF5d1Gtx/qrfsFSyA1xX+AtqR286CHSHmy0E4= Subject key identifier: 4C:10:42:49:82:7E:F9:53:BE:9A:33:CD:23:D3:17:6C:E4:28:DB:2F Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 19 Signing time: Fri 25 Apr 2025 06:57:11 +0000 Manifest this update: Fri 25 Apr 2025 06:57:10 +0000 Manifest next update: Fri 02 May 2025 06:57:10 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: OWLlrOBwG9UlrvbUqL58VsamyCS7H5krcRyUnxwwRTg=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: FLLpHbBTqnDBs40y47ZsimY2UyQLa+Oyfs+4Y2gV/9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Apr 25 06:57:10 2025 GMT Not After : May 2 06:57:10 2025 GMT Subject: CN=680b3247-ad0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:6c:93:89:78:e3:99:10:29:f4:f4:2c:71: e0:8b:b9:50:25:d9:85:74:dc:25:96:70:52:df:ab: 2c:9c:31:4a:b2:f0:07:a1:88:2d:60:ef:55:68:5c: ea:37:67:a3:39:79:e4:4a:f5:c0:27:a9:ae:9f:c0: 99:40:82:f4:18:e5:fa:e1:33:b4:2c:b5:2e:f7:2f: a1:3d:94:12:30:94:fa:40:b6:cf:68:ad:c6:06:60: e4:2f:03:4d:c0:93:ac:28:83:d4:ce:68:52:ba:23: cb:33:06:ea:f0:e5:77:65:a5:26:34:78:62:22:16: 20:3b:23:61:8e:f6:1c:5c:bf:01:5e:99:bc:88:18: 93:55:21:56:35:e0:ce:e5:ef:80:6b:95:a0:e8:b7: 26:06:a5:1b:4d:52:85:49:67:d5:51:af:95:36:fb: 8b:64:ca:f2:16:3b:89:69:6a:9c:ae:d4:69:44:4f: 2d:2d:ce:e2:27:8c:91:27:74:f4:6f:c9:3e:a4:07: 55:22:e8:c7:91:5f:ab:6f:f5:60:d9:a8:9c:b4:c7: 26:1a:8d:f0:8c:4c:92:ac:10:2c:57:e8:26:92:cb: 8f:cd:9c:d2:4b:0c:4d:a0:f0:21:84:8a:43:c8:1e: 89:05:ab:c3:15:34:e8:5a:31:05:82:b7:05:cb:a2: 91:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:10:42:49:82:7E:F9:53:BE:9A:33:CD:23:D3:17:6C:E4:28:DB:2F X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:24:26:8e:04:6e:92:d6:cd:ad:a0:10:47:61:0a:2f:ef:5c: 07:a5:00:1b:c1:ca:73:90:e1:85:3e:e6:90:fb:c9:b6:ba:49: 7b:c6:1f:fb:4b:65:5e:9c:af:51:6f:c8:1f:57:27:58:09:8c: 8a:4d:a0:4a:98:cc:3a:56:29:02:92:98:57:e2:ce:f1:79:dc: 65:c5:dd:b3:0c:9f:4f:e4:18:19:3e:28:00:b5:49:83:fa:3f: 01:b0:09:ab:ff:3e:20:74:30:ba:13:41:3c:19:8b:c4:20:aa: 18:25:cd:68:d1:cd:89:34:a9:8a:6d:af:df:1d:9a:4e:fd:11: 32:53:0a:f9:31:0d:39:f7:ee:78:1b:64:17:44:49:4a:64:47: 2f:f5:17:86:fd:53:6e:f8:0d:9b:33:41:3d:8a:51:92:54:45: 24:5c:f3:63:fb:57:c1:3f:43:e9:18:20:00:b7:09:f3:20:2b: 4e:6f:bc:8d:77:fc:0e:30:c4:90:3d:6a:89:87:86:27:69:54: ff:9d:3e:1c:6c:c0:e0:60:99:20:97:8a:26:f2:59:fc:d7:8a: 9c:5e:31:90:78:b4:a4:ca:db:00:80:f3:06:12:2e:50:ec:7f: 16:bd:cf:bd:c4:0d:aa:05:17:d1:6c:ca:1c:f6:d4:0a:19:55: 9f:7a:c9:b7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA0MjUwNjU3MTBaFw0yNTA1MDIwNjU3MTBaMBgxFjAUBgNV BAMTDTY4MGIzMjQ3LWFkMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbaWyTiXjjmRAp9PQsceCLuVAl2YV03CWWcFLfqyycMUqy8AehiC1g71VoXOo3 Z6M5eeRK9cAnqa6fwJlAgvQY5frhM7QstS73L6E9lBIwlPpAts9orcYGYOQvA03A k6wog9TOaFK6I8szBurw5XdlpSY0eGIiFiA7I2GO9hxcvwFembyIGJNVIVY14M7l 74BrlaDotyYGpRtNUoVJZ9VRr5U2+4tkyvIWO4lpapyu1GlETy0tzuInjJEndPRv yT6kB1Ui6MeRX6tv9WDZqJy0xyYajfCMTJKsECxX6CaSy4/NnNJLDE2g8CGEikPI HokFq8MVNOhaMQWCtwXLopF9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTBBCSYJ+ +VO+mjPNI9MXbOQo2y8wHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMkkJo4EbpLWza2gEEdhCi/vXAelABvBynOQ4YU+5pD7yba6SXvGH/tL ZV6cr1FvyB9XJ1gJjIpNoEqYzDpWKQKSmFfizvF53GXF3bMMn0/kGBk+KAC1SYP6 PwGwCav/PiB0MLoTQTwZi8QgqhglzWjRzYk0qYptr98dmk79ETJTCvkxDTn37ngb ZBdESUpkRy/1F4b9U274DZszQT2KUZJURSRc82P7V8E/Q+kYIAC3CfMgK05vvI13 /A4wxJA9aomHhidpVP+dPhxswOBgmSCXiibyWfzXipxeMZB4tKTK2wCA8wYSLlDs fxa9z73EDaoFF9Fsyhz21AoZVZ96ybc= -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:01 2025 by rpki-client