$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft File: sh-7koheKG95wUMeEHecbxfbntc.mft (raw, json) Hash identifier: rytH148eS7FNJi7EuPdG3OdOxhjfWXi7DZixZSc3zgc= Subject key identifier: CA:04:2A:19:14:DE:72:98:03:42:93:17:C1:24:0C:BE:4C:D0:57:41 Authority key identifier: B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7 Certificate issuer: /CN=A9114747/serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft Manifest number: 1A Signing time: Mon 21 Sep 2026 09:00:40 +0000 Manifest this update: Mon 21 Sep 2026 09:00:39 +0000 Manifest next update: Mon 28 Sep 2026 09:00:39 +0000 Files and hashes: 1: sh-7koheKG95wUMeEHecbxfbntc.crl (hash: l7US7FSD4ljLhBmz91auT2bdM9mZ+17eQ/xlISpfjUY=) 2: E855FB7A980111F1937686323211F970.roa (hash: 6NC9VsA0PjYcqqS7+rb/opvcfAVHW6RSMyp3OIjHA6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114747, serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7 Validity Not Before: Sep 21 09:00:39 2026 GMT Not After : Sep 28 09:00:39 2026 GMT Subject: CN=6ab0f238-56f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f0:5e:17:2a:f8:62:79:5f:c8:4b:74:d6:00: 17:ab:29:49:20:a7:43:fb:a8:ae:e7:39:c2:67:ad: c1:2a:17:03:9c:4a:95:f6:8b:44:13:dd:bf:10:6d: 76:63:bd:96:82:d9:26:11:62:27:c4:a4:33:65:f3: 78:e3:88:b8:47:c9:41:64:7e:e2:66:34:d8:ba:6d: c8:89:4e:49:e3:a4:7d:d5:9c:7b:f5:5f:42:67:a9: e6:cc:ed:18:fb:d6:69:fa:8e:4b:94:b8:0d:cc:a9: 25:d5:3f:45:2d:38:b3:3f:c2:07:ae:2d:bf:8c:16: 3a:71:10:4d:ae:e7:de:27:c4:dc:10:c7:9a:e1:c7: c6:cc:92:79:93:03:32:28:65:e0:a6:66:c0:a4:66: bd:a9:ce:4e:0e:36:b8:b5:90:ec:ea:f1:20:6a:00: 30:a1:66:ec:29:df:9a:26:69:d6:81:dc:db:53:09: 39:8d:6d:c3:fc:96:3d:da:f3:f4:03:b4:96:b8:c1: 51:1a:06:00:34:5e:a6:fd:9e:99:a7:9b:88:fe:ad: 46:4d:1e:14:f9:e1:fa:d1:b8:0c:a5:c3:7f:21:17: 9d:7f:d2:14:da:01:4e:c2:62:a5:d1:b3:c3:8f:4b: 75:70:68:a5:99:ff:01:1d:92:9d:39:80:4e:67:15: 33:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:04:2A:19:14:DE:72:98:03:42:93:17:C1:24:0C:BE:4C:D0:57:41 X509v3 Authority Key Identifier: keyid:B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f3:88:f7:a3:c5:e7:2c:78:85:54:47:6b:32:9f:ba:0c:84: dc:76:21:60:58:c8:09:ee:49:69:29:61:c0:61:d9:ec:d7:f9: 41:d7:de:dd:da:df:63:8a:ed:90:ca:54:83:b2:32:68:29:0a: c9:b5:3e:7f:82:e8:67:11:f9:48:b6:01:80:fb:f9:f3:61:e4: 8c:2d:1d:8f:cf:48:23:df:59:11:c9:ad:37:0f:a2:91:e2:ce: 32:39:04:9f:aa:64:03:87:9c:16:c6:44:fe:bd:98:2a:00:fd: 44:33:fd:8f:f1:71:3e:af:68:cb:09:60:d3:82:4b:d9:64:f3: 07:83:cf:2c:16:8e:22:3f:95:39:52:62:93:fa:0b:6e:f5:9d: 4f:79:a5:8f:51:ee:e0:59:38:23:d5:08:07:55:c4:1a:ac:95: 47:10:52:18:d4:c3:ee:e6:38:59:08:bb:2a:6a:5e:40:58:18: db:e8:59:a7:09:f3:cf:a4:6b:17:bc:5d:d7:30:d3:90:ff:99: 5c:40:ca:81:1b:43:2f:86:14:8d:5f:ef:54:30:11:57:53:fc: 66:7b:4d:6b:38:81:75:89:f7:24:07:34:dc:16:f7:e1:b1:b3: 5c:52:c1:56:19:ab:ea:d5:53:ad:7d:2f:8c:32:a1:de:29:20: 26:03:a1:ab -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDc0NzExMC8GA1UEBRMoQjIxRkJCOTI4ODVFMjg2Rjc5QzE0MzFFMTA3NzlDNkYx N0RCOUVENzAeFw0yNjA5MjEwOTAwMzlaFw0yNjA5MjgwOTAwMzlaMBgxFjAUBgNV BAMTDTZhYjBmMjM4LTU2ZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCp8F4XKvhieV/IS3TWABerKUkgp0P7qK7nOcJnrcEqFwOcSpX2i0QT3b8QbXZj vZaC2SYRYifEpDNl83jjiLhHyUFkfuJmNNi6bciJTknjpH3VnHv1X0JnqebM7Rj7 1mn6jkuUuA3MqSXVP0UtOLM/wgeuLb+MFjpxEE2u594nxNwQx5rhx8bMknmTAzIo ZeCmZsCkZr2pzk4ONri1kOzq8SBqADChZuwp35omadaB3NtTCTmNbcP8lj3a8/QD tJa4wVEaBgA0Xqb9npmnm4j+rUZNHhT54frRuAylw38hF51/0hTaAU7CYqXRs8OP S3VwaKWZ/wEdkp05gE5nFTNZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUygQqGRTe cpgDQpMXwSQMvkzQV0EwHwYDVR0jBBgwFoAUsh+7koheKG95wUMeEHecbxfbntcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NzQ3LzFDNDkwNDZBOTgw MDExRjE5Nzc5RDZFNzMxMTFGOTcwL3NoLTdrb2hlS0c5NXdVTWVFSGVjYnhmYm50 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2gtN2tvaGVLRzk1d1VNZUVIZWNieGZibnRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NzQ3LzFDNDkwNDZBOTgwMDExRjE5Nzc5RDZFNzMxMTFGOTcwL3NoLTdrb2hlS0c5 NXdVTWVFSGVjYnhmYm50Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCZ84j3o8XnLHiFVEdrMp+6DITcdiFgWMgJ7klpKWHAYdns1/lB197d2t9jiu2Q ylSDsjJoKQrJtT5/guhnEflItgGA+/nzYeSMLR2Pz0gj31kRya03D6KR4s4yOQSf qmQDh5wWxkT+vZgqAP1EM/2P8XE+r2jLCWDTgkvZZPMHg88sFo4iP5U5UmKT+gtu 9Z1PeaWPUe7gWTgj1QgHVcQarJVHEFIY1MPu5jhZCLsqal5AWBjb6FmnCfPPpGsX vF3XMNOQ/5lcQMqBG0MvhhSNX+9UMBFXU/xme01rOIF1ifckBzTcFvfhsbNcUsFW Gavq1VOtfS+MMqHeKSAmA6Gr -----END CERTIFICATE-----Generated at Tue Sep 22 12:24:36 2026 by rpki-client