$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: zadrqpDLedccvSqJWX7jv8o1mlDhhY7fR5ifqyMntFw= Subject key identifier: 9D:1E:B4:C8:A9:F5:75:96:5D:AA:C7:8F:E3:FB:BF:11:54:D9:57:C0 Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 01BC Signing time: Thu 19 Jun 2025 02:33:05 +0000 Manifest this update: Thu 19 Jun 2025 02:33:04 +0000 Manifest next update: Thu 26 Jun 2025 02:33:04 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: KH81kfwWDVDO+TNb/1xzQY7s6MTgUrWPA/fY7FP6QTc=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Jun 19 02:33:04 2025 GMT Not After : Jun 26 02:33:04 2025 GMT Subject: CN=685376e0-fc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:c2:28:7e:f9:bb:21:ed:a5:54:0c:88:f5: 7b:cd:40:b5:62:b2:13:c4:d2:ac:d0:f2:be:00:6a: e5:b1:a6:70:11:c4:b4:40:72:34:9a:a4:69:2b:43: 0d:91:81:f8:52:72:55:6d:88:95:8d:c5:45:10:68: 0d:04:cd:93:f4:d9:1c:35:8a:30:53:54:9d:07:a0: 7c:0e:e7:b0:08:4d:4d:3b:1c:bf:d4:e3:88:2e:78: cf:29:7d:5e:a8:fe:0a:78:59:81:5f:29:a2:28:86: 3c:93:29:ed:a0:22:22:6a:b9:38:23:cf:bc:62:69: 49:fb:4e:1d:a5:1b:35:89:38:c0:18:cf:6d:79:2f: 7a:a1:33:61:1a:c1:9e:27:28:a1:8b:60:c0:13:e8: 7c:6f:53:2e:ed:e8:43:1f:c0:d4:db:64:6b:5c:b8: 54:e6:00:46:83:f3:c9:3e:d9:72:7b:b9:3e:30:d7: 36:c6:f4:e9:e6:e8:5e:d9:8f:97:66:2a:ae:bb:96: 50:40:0c:0e:d3:63:e1:08:99:6d:b4:eb:0c:90:95: b0:0d:af:e4:16:eb:5c:eb:7a:f0:b1:b9:aa:3c:71: 58:4c:d3:4b:d7:4d:04:01:27:ef:2f:d0:d4:23:bb: 26:62:c7:25:a7:5f:87:18:25:1d:62:2e:d9:ad:81: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1E:B4:C8:A9:F5:75:96:5D:AA:C7:8F:E3:FB:BF:11:54:D9:57:C0 X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:09:68:57:79:00:98:4c:69:d1:33:fa:1f:00:36:5f:8f:20: d6:42:9c:6b:de:e9:f9:a4:03:f9:95:0d:cf:79:97:64:1c:14: 6d:a8:8a:03:51:35:f1:2d:c2:c9:5c:8f:e1:7f:8e:b9:32:38: ce:28:cd:09:e0:66:b8:bf:79:28:65:3a:6f:06:d0:7d:07:4c: d1:c5:25:22:26:ae:80:31:0b:2d:6a:8d:b1:66:a9:67:73:f3: cb:be:a0:5d:03:8d:e9:a5:bf:d4:7d:4f:09:98:7a:75:15:84: 97:43:c0:f3:21:06:6d:d7:92:be:70:8d:9c:44:20:3d:98:3c: 28:19:cd:04:19:11:ca:28:de:6c:db:f3:90:b4:a2:01:e0:9a: 92:b2:f4:36:ad:bb:5b:db:60:d1:05:d8:07:4c:aa:73:34:89: b2:c1:b4:56:d5:0c:89:3e:45:a2:80:0d:01:4f:2c:56:d6:6b: 8b:b8:7f:e3:3f:e3:79:b0:fd:52:53:11:99:3c:2d:28:aa:e9: 76:1e:7f:8b:2a:a0:4b:1c:73:cf:2b:79:6a:9c:bb:bb:08:5f: 03:6f:f3:82:17:23:f9:f2:b5:42:00:8f:b4:90:d0:79:07:e6: dc:64:ac:c7:1a:17:a5:51:14:78:6f:bc:3a:a0:00:3b:75:7c: d4:49:cb:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUwNjE5MDIzMzA0WhcNMjUwNjI2MDIzMzA0WjAYMRYwFAYD VQQDEw02ODUzNzZlMC1mYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttzCKH75uyHtpVQMiPV7zUC1YrITxNKs0PK+AGrlsaZwEcS0QHI0mqRpK0MN kYH4UnJVbYiVjcVFEGgNBM2T9NkcNYowU1SdB6B8DuewCE1NOxy/1OOILnjPKX1e qP4KeFmBXymiKIY8kyntoCIiark4I8+8YmlJ+04dpRs1iTjAGM9teS96oTNhGsGe Jyihi2DAE+h8b1Mu7ehDH8DU22RrXLhU5gBGg/PJPtlye7k+MNc2xvTp5uhe2Y+X Ziquu5ZQQAwO02PhCJlttOsMkJWwDa/kFutc63rwsbmqPHFYTNNL100EASfvL9DU I7smYsclp1+HGCUdYi7ZrYG3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0etMip 9XWWXarHj+P7vxFU2VfAMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCWhXeQCYTGnRM/ofADZfjyDWQpxr3un5pAP5lQ3PeZdkHBRtqIoD UTXxLcLJXI/hf465MjjOKM0J4Ga4v3koZTpvBtB9B0zRxSUiJq6AMQstao2xZqln c/PLvqBdA43ppb/UfU8JmHp1FYSXQ8DzIQZt15K+cI2cRCA9mDwoGc0EGRHKKN5s 2/OQtKIB4JqSsvQ2rbtb22DRBdgHTKpzNImywbRW1QyJPkWigA0BTyxW1muLuH/j P+N5sP1SUxGZPC0oqul2Hn+LKqBLHHPPK3lqnLu7CF8Db/OCFyP58rVCAI+0kNB5 B+bcZKzHGhelURR4b7w6oAA7dXzUScuC -----END CERTIFICATE-----Generated at Fri Jun 20 09:44:01 2025 by rpki-client