$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft File: shmdscl5XUlnt_7Voe9wn6LpaGE.mft (raw, json) Hash identifier: ldhVF/Qs4lORh26ioV5htdSXJVlTmGlUEPu9c2q8fXY= Subject key identifier: 4C:10:B0:1A:4C:C6:45:72:B7:77:C7:9A:19:C5:09:F2:4B:FC:78:61 Authority key identifier: B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61 Certificate issuer: /CN=A9111D65/serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft Manifest number: 12 Signing time: Fri 17 Apr 2026 08:44:48 +0000 Manifest this update: Fri 17 Apr 2026 08:44:48 +0000 Manifest next update: Fri 24 Apr 2026 08:44:48 +0000 Files and hashes: 1: shmdscl5XUlnt_7Voe9wn6LpaGE.crl (hash: 2px8LLZ21f45KWUFG5C3VKCdj2PePZ2FxJt8cHltX2s=) 2: D5931DD822A911F1B999B242B5833773.roa (hash: 9CC6O07iFUNLEts6pdhGBre/dsBGCYzcLM8YjPj0LWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D65, serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861 Validity Not Before: Apr 17 08:44:48 2026 GMT Not After : Apr 24 08:44:48 2026 GMT Subject: CN=69e1f300-7419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:5e:9b:97:da:b0:c2:7b:d0:35:b8:18:a6: 90:79:a8:5d:35:8b:47:36:93:a0:24:65:47:58:b8: 80:db:a2:d3:59:62:55:af:d8:56:18:e8:7a:00:e4: 3b:d6:0b:14:57:74:72:53:9a:30:a0:fa:30:b3:bb: 5f:b0:f1:83:d7:14:22:bd:f4:4a:51:16:06:67:cc: 82:d2:c6:09:e0:e8:71:98:f7:24:6a:67:d2:fe:c5: 1a:d4:ac:be:ce:2a:65:aa:03:42:be:63:c6:c1:c4: 80:63:18:f3:b7:22:2a:4f:f2:d9:8c:c3:62:45:f2: c9:1c:20:71:6a:12:d0:a3:a7:f7:9e:b0:86:db:86: b8:e8:f3:e8:de:e4:f1:f6:a3:ee:4e:0b:a3:7b:36: 50:0b:51:51:bc:0c:92:e8:92:68:8c:74:75:4f:fc: e0:34:c8:05:a4:4a:7d:01:0c:6c:b9:f8:b9:f2:77: 6c:dc:27:7f:81:1e:45:a5:41:eb:07:77:7d:e8:d2: fb:b7:eb:e7:f5:5f:b7:df:32:5a:a1:f2:88:5f:20: 52:5d:bb:8b:3b:90:67:6f:4c:2a:e7:e1:9e:c4:29: 81:9f:5b:0d:4f:95:b6:be:f4:e8:e2:ad:78:6a:44: ca:03:be:e2:a1:80:32:3f:0d:b5:62:02:96:6f:4f: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:10:B0:1A:4C:C6:45:72:B7:77:C7:9A:19:C5:09:F2:4B:FC:78:61 X509v3 Authority Key Identifier: keyid:B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:3e:dc:17:41:e5:73:1f:bb:1e:dd:17:d6:8b:38:f8:f3:e1: da:e0:e9:a5:94:8f:b7:9f:c4:1c:ac:de:b4:84:a4:03:b5:e3: 23:bf:ad:a1:8c:13:d2:3c:0e:b3:ff:5f:e8:bf:5b:66:04:58: ff:db:73:b4:92:82:2a:7f:da:28:d9:2a:2f:94:f6:48:ff:e3: 5e:e6:55:89:58:6d:0f:18:0b:fe:fb:5b:4d:41:77:1b:11:9c: dd:c1:24:7f:83:36:38:cf:ab:4b:ca:c5:08:70:42:10:11:8b: bd:c2:e6:9c:4d:2c:d4:ea:d3:49:a8:9f:6d:69:d4:9d:43:f3: 26:7d:28:e6:35:1a:07:15:3a:87:33:4b:ea:26:2e:b6:14:2a: b8:8c:be:5b:b8:9b:f2:7e:4d:2d:31:31:62:ad:5f:fd:a5:40: 33:a2:c7:0a:da:2f:7d:e8:86:f6:22:2c:a7:eb:34:85:20:11: 7b:99:b1:ff:cc:2c:f8:9e:d0:1e:8e:06:f3:86:37:8b:fc:57: d1:9d:d8:04:2c:f0:01:f8:8a:e8:b9:77:b8:b2:2f:b2:3a:4c: ea:1c:82:34:3a:35:f2:ff:aa:aa:92:c4:18:85:fb:83:75:63: 7e:ca:39:dc:aa:a1:03:d8:6d:44:27:22:60:fb:11:6b:a3:22: 1e:32:3c:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUQ2NTExMC8GA1UEBRMoQjIxOTlEQjFDOTc5NUQ0OTY3QjdGRUQ1QTFFRjcwOUZB MkU5Njg2MTAeFw0yNjA0MTcwODQ0NDhaFw0yNjA0MjQwODQ0NDhaMBgxFjAUBgNV BAMTDTY5ZTFmMzAwLTc0MTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUDF6bl9qwwnvQNbgYppB5qF01i0c2k6AkZUdYuIDbotNZYlWv2FYY6HoA5DvW CxRXdHJTmjCg+jCzu1+w8YPXFCK99EpRFgZnzILSxgng6HGY9yRqZ9L+xRrUrL7O KmWqA0K+Y8bBxIBjGPO3IipP8tmMw2JF8skcIHFqEtCjp/eesIbbhrjo8+je5PH2 o+5OC6N7NlALUVG8DJLokmiMdHVP/OA0yAWkSn0BDGy5+Lnyd2zcJ3+BHkWlQesH d33o0vu36+f1X7ffMlqh8ohfIFJdu4s7kGdvTCrn4Z7EKYGfWw1Plba+9OjirXhq RMoDvuKhgDI/DbViApZvT5gvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTBCwGkzG RXK3d8eaGcUJ8kv8eGEwHwYDVR0jBBgwFoAUshmdscl5XUlnt/7Voe9wn6LpaGEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0M2QzVCOEQ0MjJB ODExRjFBMjlDODUxQ0I1ODMzNzczL3NobWRzY2w1WFVsbnRfN1ZvZTl3bjZMcGFH RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc2htZHNjbDVYVWxudF83Vm9lOXduNkxwYUdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RDY1L0M2QzVCOEQ0MjJBODExRjFBMjlDODUxQ0I1ODMzNzczL3NobWRzY2w1WFVs bnRfN1ZvZTl3bjZMcGFHRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQPtwXQeVzH7se3RfWizj48+Ha4OmllI+3n8QcrN60hKQDteMjv62hjBPSPA6z /1/ov1tmBFj/23O0koIqf9oo2SovlPZI/+Ne5lWJWG0PGAv++1tNQXcbEZzdwSR/ gzY4z6tLysUIcEIQEYu9wuacTSzU6tNJqJ9tadSdQ/MmfSjmNRoHFTqHM0vqJi62 FCq4jL5buJvyfk0tMTFirV/9pUAzoscK2i996Ib2Iiyn6zSFIBF7mbH/zCz4ntAe jgbzhjeL/FfRndgELPAB+IrouXe4si+yOkzqHII0OjXy/6qqksQYhfuDdWN+yjnc qqED2G1EJyJg+xFroyIeMjwM -----END CERTIFICATE-----Generated at Fri Apr 17 17:19:55 2026 by rpki-client