$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: fKtv0MC4Q/uB/GIIs79lJXp2Nk0vSewUuFK+tDaoioo= Subject key identifier: BD:23:3B:F5:41:2B:0E:1A:75:C0:E6:3D:55:E8:4A:AB:E4:A2:28:50 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 120B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 11E0 Signing time: Thu 24 Apr 2025 17:11:54 +0000 Manifest this update: Thu 24 Apr 2025 17:11:53 +0000 Manifest next update: Thu 01 May 2025 17:11:53 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: yUqTIzaSibr6w8bFv59qsPxAcohQ3RtJhhjBTWNoPK8=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4619 (0x120b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Apr 24 17:11:53 2025 GMT Not After : May 1 17:11:53 2025 GMT Subject: CN=680a70da-cfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4c:97:bf:91:fe:ab:bc:52:24:42:ec:23:83: e3:50:00:ce:4b:e9:40:21:a4:83:4c:24:64:51:52: 8d:6c:50:97:06:93:36:7f:30:56:6c:e4:bc:22:6c: d9:84:88:e1:ee:82:61:1c:59:44:1c:0e:10:2c:f6: d2:65:f4:6d:f6:02:83:bd:08:7a:7a:ca:da:1c:af: 2e:88:e9:a9:22:d7:9a:b0:45:a9:05:ca:04:ac:b5: 3e:2f:1d:b5:8b:49:6a:b4:56:ef:19:33:fa:31:f5: 17:8c:bb:38:7b:33:b4:c6:ea:52:ae:a3:96:d4:eb: 2f:e6:49:88:cb:87:7e:c2:d9:c1:3e:14:f9:3f:e8: 47:2b:f2:e9:f8:3a:6e:86:6b:2e:8b:21:92:07:d2: 0d:22:78:8b:93:a9:00:9e:58:7a:2b:63:be:ec:82: 1b:48:78:ed:e8:4d:0a:bc:73:3c:2c:c4:fb:e7:fd: 1c:3a:ce:59:e5:0b:e6:a3:78:c9:26:c7:5c:e7:d7: 55:05:fe:e6:72:01:eb:18:5e:9a:7b:7d:74:3f:13: 0e:ef:b9:7f:5d:80:49:fd:1f:1e:40:be:a0:9a:ac: 68:f5:a2:4c:1b:ee:ab:84:8e:51:9d:e7:a3:c0:98: 36:36:34:66:b8:63:6f:39:c5:bd:a1:59:2a:39:04: 68:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:23:3B:F5:41:2B:0E:1A:75:C0:E6:3D:55:E8:4A:AB:E4:A2:28:50 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:34:df:a4:c5:7a:d7:eb:21:ad:6e:12:8f:b7:51:6e:fc:87: 21:1e:84:88:4c:69:5d:12:32:67:9d:ad:de:42:96:46:6b:97: e0:58:e2:82:5e:2d:89:76:91:e7:59:f1:fd:1c:aa:92:8e:18: e7:d0:52:8c:46:f2:2f:23:19:1b:cb:51:54:2a:e0:51:d0:27: 84:3f:54:e4:05:28:14:ed:d8:09:e0:cd:52:d0:2c:fa:b2:76: 48:2b:be:73:03:d9:a9:ef:00:db:98:f2:5a:af:0e:71:2d:e6: 84:27:50:f4:b1:d0:1c:61:dd:0d:38:80:db:3c:13:db:c9:16: 98:00:87:e5:5d:22:0f:0f:2d:e8:52:89:ef:fa:5b:32:98:05: 34:18:40:70:8e:9a:6d:8e:27:b3:da:18:54:a0:12:4b:18:3f: 88:70:28:29:ae:a9:37:69:63:47:5e:63:34:0d:7d:d3:af:f6: dc:1a:eb:22:86:81:76:95:98:ac:0c:77:12:cd:51:2d:d4:ae: e2:56:92:92:4b:30:9e:f6:eb:20:e4:d8:b0:0a:60:4d:16:63: d8:dc:0d:60:05:ed:1a:09:5a:9b:a7:53:36:85:2b:c1:de:14: 13:8b:bd:da:ca:c8:15:1e:82:b9:f7:36:fe:9c:e4:a8:d0:46: e1:42:57:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwNDI0MTcxMTUzWhcNMjUwNTAxMTcxMTUzWjAYMRYwFAYD VQQDEw02ODBhNzBkYS1jZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kyXv5H+q7xSJELsI4PjUADOS+lAIaSDTCRkUVKNbFCXBpM2fzBWbOS8ImzZ hIjh7oJhHFlEHA4QLPbSZfRt9gKDvQh6esraHK8uiOmpIteasEWpBcoErLU+Lx21 i0lqtFbvGTP6MfUXjLs4ezO0xupSrqOW1Osv5kmIy4d+wtnBPhT5P+hHK/Lp+Dpu hmsuiyGSB9INIniLk6kAnlh6K2O+7IIbSHjt6E0KvHM8LMT75/0cOs5Z5Qvmo3jJ Jsdc59dVBf7mcgHrGF6ae310PxMO77l/XYBJ/R8eQL6gmqxo9aJMG+6rhI5Rneej wJg2NjRmuGNvOcW9oVkqOQRowwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0jO/VB Kw4adcDmPVXoSqvkoihQMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLNN+kxXrX6yGtbhKPt1Fu/IchHoSITGldEjJnna3eQpZGa5fgWOKC Xi2JdpHnWfH9HKqSjhjn0FKMRvIvIxkby1FUKuBR0CeEP1TkBSgU7dgJ4M1S0Cz6 snZIK75zA9mp7wDbmPJarw5xLeaEJ1D0sdAcYd0NOIDbPBPbyRaYAIflXSIPDy3o Uonv+lsymAU0GEBwjpptjiez2hhUoBJLGD+IcCgprqk3aWNHXmM0DX3Tr/bcGusi hoF2lZisDHcSzVEt1K7iVpKSSzCe9usg5NiwCmBNFmPY3A1gBe0aCVqbp1M2hSvB 3hQTi73aysgVHoK59zb+nOSo0EbhQlfT -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:07 2025 by rpki-client