$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: Yjtdw8kjNhXW2kFJKw1nyQw+0c1SbrllxdW8EXcWWQg= Subject key identifier: 49:8D:03:DD:A3:5E:5B:02:8E:81:4D:CA:E4:FA:68:DE:78:48:F2:61 Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 01D6 Signing time: Sat 09 Aug 2025 03:11:41 +0000 Manifest this update: Sat 09 Aug 2025 03:11:41 +0000 Manifest next update: Sat 16 Aug 2025 03:11:41 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: KxtCMdiTYHCr6dW6oNSaBiLGiJs40fzwvNNx8iaO6sg=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: kKiJiJDzeIyQzgTjMAe9Lk1kOFbiYohKDFsKrxG/BWs=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: sZLM9dSUcucufQMax9H1Edh8mrh+cYvOCFePwEcH86c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Aug 9 03:11:41 2025 GMT Not After : Aug 16 03:11:41 2025 GMT Subject: CN=6896bc6d-3e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:76:d7:1f:c7:11:d8:27:cd:a4:00:f8:b5:a3: 16:36:3b:9e:c5:da:6d:64:0f:1d:bd:2e:ef:97:65: 4d:ca:69:9d:52:68:68:9e:92:52:fa:1d:b1:cc:90: f9:b8:a8:b9:2f:64:0e:17:cb:79:54:f9:ee:a2:af: 2c:89:71:40:cb:c1:93:c8:75:45:4e:3b:5a:4b:3a: 17:f2:8c:8e:fc:86:ad:ec:7f:bd:69:82:d2:f8:8f: 68:46:ec:4e:4a:f5:64:a5:fc:56:54:a3:0a:77:3a: 2f:b9:0a:da:bf:e2:2f:32:f5:1a:56:25:dc:1d:c0: 6e:7b:51:4a:73:63:fb:b8:34:17:a8:bb:ad:c9:d5: da:9a:92:ba:86:53:bc:f1:1e:9a:9d:60:79:5c:02: cf:ac:47:2d:b7:42:4b:da:a6:b7:88:82:10:90:af: 2f:70:65:d7:48:db:1a:19:0e:96:44:54:d2:17:36: e8:91:d0:17:4d:07:f1:53:bd:d2:50:c0:2c:63:f7: 2d:0e:dd:a0:aa:f7:5a:63:2b:bf:db:4e:9f:35:e1: 3e:4b:87:85:71:85:d4:67:5c:46:bc:07:95:ff:31: 63:72:4f:b9:2e:82:e7:cb:b0:07:15:0c:fc:51:e3: 8a:12:16:f7:9b:b0:6d:31:9a:99:45:41:8d:90:1b: 8e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8D:03:DD:A3:5E:5B:02:8E:81:4D:CA:E4:FA:68:DE:78:48:F2:61 X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ce:5f:69:9d:78:b7:4b:a7:09:f9:69:64:b6:59:49:99:11: 9f:b1:01:60:45:46:74:36:0f:6d:da:cb:31:a3:00:99:78:e8: 6b:a6:96:12:11:13:fa:40:91:ef:f1:f9:c5:ae:e4:d2:25:4a: 5c:5f:f1:31:16:b7:08:1d:8e:58:48:5b:dc:4e:d2:a7:5a:05: 66:af:24:64:7f:ca:9f:0d:17:13:b8:16:d5:21:b6:2b:94:98: e9:e2:e4:bc:23:30:e6:c8:4a:a1:d3:59:d1:92:2c:6e:b4:3b: 71:ef:0f:be:3b:d1:a7:33:c4:fe:75:a1:03:db:64:ca:af:ee: 86:cd:a5:d6:6b:c4:77:f7:56:ad:c5:8b:d9:77:39:4d:73:83: 7a:6b:de:c4:b0:c8:af:77:1b:d2:3a:d4:05:19:fd:33:09:f3: 1e:fd:1f:71:ad:01:46:38:33:96:ad:f2:32:58:e3:b0:eb:4d: 71:9b:2c:93:34:f4:ef:62:b4:c9:c7:df:1d:04:1c:1d:0d:92: 37:d2:8d:19:74:e3:dd:d6:00:ca:55:36:46:42:a4:1a:a0:cd: c1:cb:13:a1:37:9f:f8:f5:85:f2:dd:f5:d4:0f:fb:d1:60:88: c8:4c:bb:18:30:62:13:ee:86:d8:d6:92:77:b6:08:39:57:fd: ab:8d:6d:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjUwODA5MDMxMTQxWhcNMjUwODE2MDMxMTQxWjAYMRYwFAYD VQQDEw02ODk2YmM2ZC0zZTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXbXH8cR2CfNpAD4taMWNjuexdptZA8dvS7vl2VNymmdUmhonpJS+h2xzJD5 uKi5L2QOF8t5VPnuoq8siXFAy8GTyHVFTjtaSzoX8oyO/Iat7H+9aYLS+I9oRuxO SvVkpfxWVKMKdzovuQrav+IvMvUaViXcHcBue1FKc2P7uDQXqLutydXampK6hlO8 8R6anWB5XALPrEctt0JL2qa3iIIQkK8vcGXXSNsaGQ6WRFTSFzbokdAXTQfxU73S UMAsY/ctDt2gqvdaYyu/206fNeE+S4eFcYXUZ1xGvAeV/zFjck+5LoLny7AHFQz8 UeOKEhb3m7BtMZqZRUGNkBuOiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmNA92j XlsCjoFNyuT6aN54SPJhMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmzl9pnXi3S6cJ+WlktllJmRGfsQFgRUZ0Ng9t2ssxowCZeOhrppYS ERP6QJHv8fnFruTSJUpcX/ExFrcIHY5YSFvcTtKnWgVmryRkf8qfDRcTuBbVIbYr lJjp4uS8IzDmyEqh01nRkixutDtx7w++O9GnM8T+daED22TKr+6GzaXWa8R391at xYvZdzlNc4N6a97EsMivdxvSOtQFGf0zCfMe/R9xrQFGODOWrfIyWOOw601xmyyT NPTvYrTJx98dBBwdDZI30o0ZdOPd1gDKVTZGQqQaoM3ByxOhN5/49YXy3fXUD/vR YIjITLsYMGIT7obY1pJ3tgg5V/2rjW0k -----END CERTIFICATE-----Generated at Mon Aug 11 04:14:17 2025 by rpki-client