$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: YnyFKPvFT5suIRTPnNgUvjPz/T+hEdG58KsvF8hVBag= Subject key identifier: 00:DA:3A:C9:47:9F:91:97:5A:07:1D:F5:EB:28:22:34:9E:40:8F:D1 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 123F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1214 Signing time: Wed 06 Aug 2025 17:16:58 +0000 Manifest this update: Wed 06 Aug 2025 17:16:58 +0000 Manifest next update: Wed 13 Aug 2025 17:16:58 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: SW1umEpceKxaVBUBI1st7fE8d5b47uqGaU3uERtSE44=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4671 (0x123f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Aug 6 17:16:58 2025 GMT Not After : Aug 13 17:16:58 2025 GMT Subject: CN=68938e0a-81e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:20:39:e3:0e:e6:7f:63:d1:86:a1:18:44:b6: e2:59:04:7c:f0:7c:62:d9:c4:ba:85:f2:84:72:6f: f1:af:51:ad:a0:a6:80:3b:35:be:82:5c:d3:a4:c5: 6e:7a:7c:9c:b2:23:4c:0d:7d:cd:3b:b7:3a:21:06: 42:5d:0f:92:71:59:88:23:be:76:54:f2:38:bf:ff: ca:62:57:6c:69:36:cb:38:d6:4e:c2:ef:38:f8:35: 5c:51:51:9b:47:12:25:e3:ba:d2:ae:44:2c:39:66: 77:8d:6f:db:63:eb:d0:f3:a8:8d:65:50:8a:a3:41: 74:56:88:87:fd:21:6f:36:23:13:20:5a:09:e7:00: 30:65:bc:44:35:cc:da:07:68:6a:a0:9e:21:6c:dc: c1:13:3d:96:e8:19:98:05:fe:08:f0:b9:1f:dd:5d: 59:e3:ae:05:41:35:8f:c2:4f:dc:18:81:17:bc:dd: 94:47:1d:34:98:bb:bb:d0:d5:80:76:78:e1:0b:66: 0b:38:81:6f:5c:3d:b2:b3:cf:eb:06:5e:41:27:0d: f2:1d:d9:ac:96:9b:9a:cb:f3:ce:b8:42:75:f3:a3: 80:db:d8:ae:a6:c4:23:20:ca:d3:8c:d0:b5:dd:af: 7e:03:b6:45:da:41:25:9f:a1:9a:5f:ac:a9:b4:b9: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DA:3A:C9:47:9F:91:97:5A:07:1D:F5:EB:28:22:34:9E:40:8F:D1 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:40:ec:20:a9:58:79:13:be:fd:30:ab:22:39:41:65:7f:2d: 78:17:9a:43:e4:00:60:61:09:84:98:57:39:9b:45:1b:7c:ac: a6:37:58:a3:8d:b6:45:0a:19:7d:df:4a:ad:22:5f:9f:94:0c: 43:bf:8d:d4:70:64:9a:9a:99:26:9c:d6:3a:e7:76:6e:5f:cc: c3:8f:a3:47:82:60:7f:17:38:de:ce:4b:48:74:d6:23:8e:02: ec:8a:d4:ad:b0:50:f9:1c:76:91:9c:cd:a6:9c:01:8d:ac:ef: 0d:7e:b3:6f:c1:0d:7f:d0:8c:9c:05:0f:51:f0:7d:d0:ff:c9: ab:ec:94:a3:78:bc:08:e2:47:b4:27:d5:95:0c:29:b7:71:05: 39:03:fa:5b:66:85:78:19:9a:77:5c:10:12:a2:77:f9:da:57: 4c:a3:3a:52:1a:69:db:1e:0f:99:cc:65:f3:3d:06:a9:cd:d5: 60:71:66:3d:c1:cb:8d:6f:60:fe:3c:a1:48:13:79:4c:7d:1c: 85:0b:a2:e3:1f:ce:9b:e8:c5:c8:33:3c:2e:e9:6a:85:45:ea: bb:8b:e0:86:61:d0:61:5c:21:89:78:d4:7b:04:35:4e:89:b4: 54:e4:bf:d2:3f:a4:d5:b9:2d:5b:e8:81:b3:29:d9:50:7f:ba: ea:9a:cc:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwODA2MTcxNjU4WhcNMjUwODEzMTcxNjU4WjAYMRYwFAYD VQQDEw02ODkzOGUwYS04MWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3SA54w7mf2PRhqEYRLbiWQR88Hxi2cS6hfKEcm/xr1GtoKaAOzW+glzTpMVu enycsiNMDX3NO7c6IQZCXQ+ScVmII752VPI4v//KYldsaTbLONZOwu84+DVcUVGb RxIl47rSrkQsOWZ3jW/bY+vQ86iNZVCKo0F0VoiH/SFvNiMTIFoJ5wAwZbxENcza B2hqoJ4hbNzBEz2W6BmYBf4I8Lkf3V1Z464FQTWPwk/cGIEXvN2URx00mLu70NWA dnjhC2YLOIFvXD2ys8/rBl5BJw3yHdmslpuay/POuEJ186OA29iupsQjIMrTjNC1 3a9+A7ZF2kEln6GaX6yptLnkLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADaOslH n5GXWgcd9esoIjSeQI/RMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEQOwgqVh5E779MKsiOUFlfy14F5pD5ABgYQmEmFc5m0UbfKymN1ij jbZFChl930qtIl+flAxDv43UcGSampkmnNY653ZuX8zDj6NHgmB/FzjezktIdNYj jgLsitStsFD5HHaRnM2mnAGNrO8NfrNvwQ1/0IycBQ9R8H3Q/8mr7JSjeLwI4ke0 J9WVDCm3cQU5A/pbZoV4GZp3XBASonf52ldMozpSGmnbHg+ZzGXzPQapzdVgcWY9 wcuNb2D+PKFIE3lMfRyFC6LjH86b6MXIMzwu6WqFReq7i+CGYdBhXCGJeNR7BDVO ibRU5L/SP6TVuS1b6IGzKdlQf7rqmsz5 -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:13 2025 by rpki-client