$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: CwoNNJa5PF5BRJWUDlLsen0ny3qsXlCjXC7EczoC7+U= Subject key identifier: 68:D1:46:F9:20:EE:C0:AE:B6:F7:0F:B7:92:AB:50:F6:FA:B8:AE:1D Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 120C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 11E1 Signing time: Sat 26 Apr 2025 17:07:15 +0000 Manifest this update: Sat 26 Apr 2025 17:07:15 +0000 Manifest next update: Sat 03 May 2025 17:07:15 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: nLILVnG3r9cXSstaP5FqteBEsjsiaDBFlnIZPMgQ2KA=) 2: E10FA0FCB52611EEB3487B5BC4F9AE02.roa (hash: Ltv8z6WWaa2+oLDNFCiQZzrXSOvYt4/kd8+B2+9mpag=) 3: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: VO5DG+TONfuWaK4KlLEPGGA7S5VlkkqdkwaWjpddPs4=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: tLRdGA63vL/4Q6tG2G+muQ6zFwRCPeYKwAT/VXHH2sk=) 5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: VnHHLWdIC0Z7hlj3lvhrgLLFDoQepPwTAeT6vGg9tFQ=) 6: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: L5z6CZuJjQUruU4WBLzzNr0zFcI7mWzwVCjhbt9gItQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4620 (0x120c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Apr 26 17:07:15 2025 GMT Not After : May 3 17:07:15 2025 GMT Subject: CN=680d12c3-3e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:a3:b9:89:f9:c2:1e:f0:fc:a8:e3:7a:6e: 40:ab:bc:50:a4:3c:8e:49:92:3e:71:91:ec:45:32: 29:90:c5:43:0c:9f:87:31:5f:8e:cf:3b:a8:ad:57: b5:b3:f6:88:b0:c4:46:ca:2d:a5:76:ef:c0:f8:47: 7e:12:1f:05:ec:8a:b1:e9:ed:15:c8:5d:c3:7e:2e: 17:8b:56:75:3d:98:da:eb:34:f1:9f:60:7f:6c:af: d8:02:67:5c:02:b1:28:ae:73:4c:c3:27:ae:fa:f1: 3a:a6:03:2a:da:c9:9a:28:01:71:78:6d:d0:00:83: 26:94:9e:3f:d8:eb:f3:bc:93:82:f6:81:e8:38:98: ea:19:37:e6:24:49:09:6a:7d:ea:23:1c:30:5b:68: 75:27:ff:1d:94:a3:39:2f:43:a4:2d:7e:58:2f:c4: 18:cf:b4:63:21:0a:06:05:f0:14:e5:a5:fd:27:be: 43:b0:bf:e4:fc:d8:82:8e:c9:6d:89:df:e3:c4:0a: 00:2f:d1:19:9a:e3:55:d5:34:f8:19:f8:70:d8:ba: 99:f2:76:5d:51:bf:dd:81:fc:b9:b3:51:52:66:fa: 60:56:5c:6f:77:14:da:83:97:06:9a:89:9a:35:8b: fb:cf:13:50:2b:cc:38:29:97:39:06:eb:2e:ba:22: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:46:F9:20:EE:C0:AE:B6:F7:0F:B7:92:AB:50:F6:FA:B8:AE:1D X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cf:07:f3:1f:12:4c:69:04:60:d0:30:9d:f1:75:37:bd:d2: 7e:9f:db:84:e8:37:25:51:42:29:fc:f0:ab:8e:64:29:c5:fe: 03:ce:9a:d1:11:ea:0c:28:ea:51:be:d7:86:f5:3e:4d:89:45: 19:d2:74:92:d6:49:ec:fc:73:b5:f3:6f:34:4e:27:80:ac:ad: cc:dd:e4:9e:b8:23:04:2f:a2:3d:ee:c0:f9:55:9f:8f:f6:45: 86:e2:75:7d:db:25:57:85:70:b8:c4:93:69:3d:19:a9:90:83: 5a:ed:da:ae:c8:43:23:81:53:b3:18:38:9b:b3:9d:3f:2a:df: 7c:37:38:2e:48:9e:ec:60:be:71:fa:c3:59:cc:07:09:ea:25: 71:c1:47:f2:b5:2c:b5:40:c9:2f:6c:e1:80:f5:2d:01:0a:92: ed:44:d0:94:e2:45:65:83:70:c8:60:68:01:c0:7b:36:8e:b8: c6:a0:7b:05:70:8d:6d:cc:29:d5:41:83:c1:e2:93:57:f4:e5: 32:a8:b5:ed:15:61:7a:9a:0a:2d:15:88:dc:3c:4e:4d:af:0e: 6e:c7:68:d4:48:d7:e0:4b:e2:e9:bf:0b:e0:9e:f2:aa:16:12: bd:2f:07:0f:6a:84:6e:5b:89:fa:a8:70:a4:0e:3b:b3:54:33: c0:d0:ce:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjUwNDI2MTcwNzE1WhcNMjUwNTAzMTcwNzE1WjAYMRYwFAYD VQQDEw02ODBkMTJjMy0zZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0ijuYn5wh7w/Kjjem5Aq7xQpDyOSZI+cZHsRTIpkMVDDJ+HMV+OzzuorVe1 s/aIsMRGyi2ldu/A+Ed+Eh8F7Iqx6e0VyF3Dfi4Xi1Z1PZja6zTxn2B/bK/YAmdc ArEornNMwyeu+vE6pgMq2smaKAFxeG3QAIMmlJ4/2OvzvJOC9oHoOJjqGTfmJEkJ an3qIxwwW2h1J/8dlKM5L0OkLX5YL8QYz7RjIQoGBfAU5aX9J75DsL/k/NiCjslt id/jxAoAL9EZmuNV1TT4Gfhw2LqZ8nZdUb/dgfy5s1FSZvpgVlxvdxTag5cGmoma NYv7zxNQK8w4KZc5BusuuiLeuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjRRvkg 7sCutvcPt5KrUPb6uK4dMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbzwfzHxJMaQRg0DCd8XU3vdJ+n9uE6DclUUIp/PCrjmQpxf4DzprR EeoMKOpRvteG9T5NiUUZ0nSS1kns/HO18280TieArK3M3eSeuCMEL6I97sD5VZ+P 9kWG4nV92yVXhXC4xJNpPRmpkINa7dquyEMjgVOzGDibs50/Kt98NzguSJ7sYL5x +sNZzAcJ6iVxwUfytSy1QMkvbOGA9S0BCpLtRNCU4kVlg3DIYGgBwHs2jrjGoHsF cI1tzCnVQYPB4pNX9OUyqLXtFWF6mgotFYjcPE5Nrw5ux2jUSNfgS+LpvwvgnvKq FhK9LwcPaoRuW4n6qHCkDjuzVDPA0M7U -----END CERTIFICATE-----Generated at Sat Apr 26 21:02:00 2025 by rpki-client on console.sobornost.net