$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json) Hash identifier: pGwuNfajRXH+WBYu6oyUlMQssTrt0eCVT53wAFaIv/Y= Subject key identifier: 8D:C9:90:A9:17:C3:11:96:C6:D6:22:8D:7F:60:2A:D2:9D:28:99:19 Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft Manifest number: 34 Signing time: Sun 15 Jun 2025 06:45:09 +0000 Manifest this update: Sun 15 Jun 2025 06:45:08 +0000 Manifest next update: Sun 22 Jun 2025 06:45:08 +0000 Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: +yW9lm4gQX73Omxr3PAPdPJYe87Hd5OXSrTl+PRMwGk=) 2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: yccW+1ACapqEoCH6+LHPWiR8nw1+mshcVd6qYR3Nz+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 06:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC Validity Not Before: Jun 15 06:45:08 2025 GMT Not After : Jun 22 06:45:08 2025 GMT Subject: CN=684e6bf5-9960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:be:68:31:c6:ee:bc:ba:68:89:d2:7f:0a: b9:ea:7b:24:c0:1e:ae:02:9c:18:7e:71:94:24:71: 94:35:47:63:50:bc:79:66:b0:8b:aa:88:40:09:77: 9b:8d:66:c4:68:52:e3:6d:69:f6:2d:af:fd:f1:a9: 70:84:e7:5b:e2:43:4c:6b:43:82:b9:5b:19:20:59: 0e:65:93:16:5d:52:2d:75:d3:11:b0:f5:35:b2:32: 11:c1:4e:8b:b4:c2:85:d9:40:9a:4e:e8:67:85:8c: cf:9b:2d:24:19:2f:1c:fe:d5:48:76:2b:33:bb:d0: 11:80:b0:2b:49:56:d2:79:bd:01:03:72:3c:01:67: 9a:43:7f:64:38:74:98:1e:11:f8:33:bb:d1:78:02: 38:08:23:c5:c5:31:6c:27:f0:53:2d:74:fb:0f:30: 99:7d:35:8e:10:c3:ce:72:32:88:3e:a5:b6:47:8c: d5:bf:c0:6c:83:21:80:99:80:7c:a5:08:be:61:22: f6:ea:4a:2e:8a:de:4b:d7:e6:b2:01:68:2b:d0:d8: e9:04:df:5d:6a:2b:ca:22:71:3a:57:4e:43:ff:d6: c6:6d:d6:2a:8e:03:d1:38:41:a5:4a:a2:e5:9c:7e: 7b:67:b9:22:19:94:ca:e6:0c:e0:42:93:75:37:e0: 73:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:C9:90:A9:17:C3:11:96:C6:D6:22:8D:7F:60:2A:D2:9D:28:99:19 X509v3 Authority Key Identifier: keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b1:be:30:21:4a:80:d2:1f:70:02:84:0d:03:2c:1b:1e:35: 71:e1:1f:16:79:3e:1a:5a:a9:38:f5:67:4a:28:de:81:22:81: df:54:07:73:ff:5a:e1:32:2b:11:1d:b4:8b:87:0d:5d:6a:6f: 4f:2c:13:b4:dc:ee:97:f5:45:35:da:f6:61:06:6e:22:d1:49: b8:08:5c:97:9e:80:21:45:85:93:e5:1a:ea:16:3e:d3:dd:31: ff:bd:b5:da:91:6c:1e:af:03:33:33:ee:6f:25:6a:ec:7b:b2: 02:e8:a5:90:7a:03:5f:15:12:46:a7:3a:f9:b2:9c:8e:c2:cb: 2f:02:7a:b1:7a:75:58:40:97:cf:d8:00:48:01:e9:ff:7b:ad: bc:6c:48:0d:30:8a:b6:ff:27:20:57:d1:39:eb:bc:3e:5b:6a: 1d:33:3a:79:19:05:7a:73:27:d0:d7:bf:a9:62:d4:6e:21:22: 21:f6:2a:e1:a4:85:43:7e:6a:9a:77:98:a9:e1:fd:d3:5a:08: 46:c7:7d:6d:87:e1:25:55:53:ba:7c:89:39:a3:41:a3:ac:5c: f4:25:f9:db:cf:db:a4:86:b7:17:75:b5:72:59:0a:f6:5c:7d: 9d:1b:b5:ac:75:05:8c:b2:07:26:be:9b:2b:ec:b6:99:15:28: de:1c:8e:1f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QTdEMjExMC8GA1UEBRMoQjIxQzJCOEJDRjQ4MkY5RDc2NkQyQTREMzI1OThFRTk0 QkY2NjVBQzAeFw0yNTA2MTUwNjQ1MDhaFw0yNTA2MjIwNjQ1MDhaMBgxFjAUBgNV BAMTDTY4NGU2YmY1LTk5NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtdr5oMcbuvLpoidJ/CrnqeyTAHq4CnBh+cZQkcZQ1R2NQvHlmsIuqiEAJd5uN ZsRoUuNtafYtr/3xqXCE51viQ0xrQ4K5WxkgWQ5lkxZdUi110xGw9TWyMhHBTou0 woXZQJpO6GeFjM+bLSQZLxz+1Uh2KzO70BGAsCtJVtJ5vQEDcjwBZ5pDf2Q4dJge Efgzu9F4AjgII8XFMWwn8FMtdPsPMJl9NY4Qw85yMog+pbZHjNW/wGyDIYCZgHyl CL5hIvbqSi6K3kvX5rIBaCvQ2OkE311qK8oicTpXTkP/1sZt1iqOA9E4QaVKouWc fntnuSIZlMrmDOBCk3U34HP/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjcmQqRfD EZbG1iKNf2Aq0p0omRkwHwYDVR0jBBgwFoAUshwri89IL512bSpNMlmO6Uv2Zaww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFBN0QyLzVCREIxNTJDRkVF QzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUxMmJTcE5NbG1PNlV2Mlph dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2h3cmk4OUlMNTEyYlNwTk1sbU82VXYyWmF3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFB N0QyLzVCREIxNTJDRkVFQzExRUZBRkE2OTE3RUM0RjlBRTAyL3Nod3JpODlJTDUx MmJTcE5NbG1PNlV2Mlphdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABixvjAhSoDSH3AChA0DLBseNXHhHxZ5PhpaqTj1Z0oo3oEigd9UB3P/ WuEyKxEdtIuHDV1qb08sE7Tc7pf1RTXa9mEGbiLRSbgIXJeegCFFhZPlGuoWPtPd Mf+9tdqRbB6vAzMz7m8laux7sgLopZB6A18VEkanOvmynI7Cyy8CerF6dVhAl8/Y AEgB6f97rbxsSA0wirb/JyBX0TnrvD5bah0zOnkZBXpzJ9DXv6li1G4hIiH2KuGk hUN+app3mKnh/dNaCEbHfW2H4SVVU7p8iTmjQaOsXPQl+dvP26SGtxd1tXJZCvZc fZ0btax1BYyyBya+myvstpkVKN4cjh8= -----END CERTIFICATE-----Generated at Sun Jun 15 21:59:24 2025 by rpki-client