
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier: WGwG05CPDj1svYrqN4zKBVWHJ66clQiPFWCnZNX0wuw=
Subject key identifier: FC:CF:BB:07:31:BD:5C:99:5C:43:9A:D6:8B:CB:EE:AE:F5:E1:94:FA
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial: F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number: EE
Signing time: Sat 13 Jun 2026 06:31:34 +0000
Manifest this update: Sat 13 Jun 2026 06:31:34 +0000
Manifest next update: Sat 20 Jun 2026 06:31:34 +0000
Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: HVE85d8dfBeY03SMlZ1giDGDo3M/5Btzy+TVO0c8Vn0=)
2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: KytT7CwlQe11jWfAsLPRMxvbGLLkhLmlX/I5QLbz6lk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Validity
Not Before: Jun 13 06:31:34 2026 GMT
Not After : Jun 20 06:31:34 2026 GMT
Subject: CN=6a2cf946-0234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:8e:66:e8:57:56:ec:7e:dc:6e:41:da:d9:
1b:32:37:1b:79:c1:32:03:91:d8:87:22:01:0e:56:
85:08:96:20:c3:41:92:c0:d0:44:0d:02:fb:bd:c5:
82:1b:f2:27:4a:81:8d:92:47:bf:3c:d2:2d:08:48:
e1:df:91:cd:da:d9:7e:1c:be:56:48:f9:8c:99:2c:
e0:fc:38:86:51:8c:45:33:9a:fa:70:0f:80:d6:a7:
43:1d:fc:a4:08:1b:bf:5f:b6:17:e3:c6:79:92:4f:
14:8a:21:7c:ca:0b:f7:8a:c5:ab:42:52:3b:b2:cb:
f8:ad:c7:0e:bc:fe:b6:66:cb:bf:84:bb:7e:60:e4:
44:3b:51:a3:22:1b:0d:ef:9d:ef:83:ff:23:0d:f4:
0b:0a:be:a0:93:43:63:eb:b5:4e:4f:7f:da:22:33:
ef:cc:db:47:01:1f:c1:b2:f1:cf:1b:88:d5:c7:e1:
9c:b4:f0:ce:56:1f:40:d3:9a:09:70:cf:08:a0:b1:
fa:9a:10:ed:ef:bc:99:26:b3:1a:55:9c:5c:bb:48:
c0:b4:60:48:31:1c:c4:c1:a5:58:5e:87:09:b1:ab:
d3:86:c1:4f:ea:2e:54:b5:54:cf:14:17:ed:df:a8:
94:a0:53:95:fa:bb:2e:6c:ab:82:83:2f:8c:d2:ff:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:BB:07:31:BD:5C:99:5C:43:9A:D6:8B:CB:EE:AE:F5:E1:94:FA
X509v3 Authority Key Identifier:
keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:8d:81:7f:c3:9e:3b:e4:09:98:01:98:c6:24:1d:0e:4c:
d7:82:4b:d4:cd:7f:8b:f3:9e:98:bc:a1:fd:a1:4b:32:7c:8b:
9c:db:db:a6:42:ed:71:f5:f6:c4:71:be:29:73:da:75:17:9b:
d3:b5:8b:ad:17:d6:62:7f:f4:8a:3d:f0:2e:b4:e5:ff:8f:8e:
86:38:62:95:50:41:a8:ed:ef:e7:ec:54:a9:bd:11:f3:23:53:
c0:61:90:5e:64:f5:69:c2:20:91:ec:1a:18:e0:a4:eb:a7:97:
a6:22:b1:2d:2c:67:39:49:f3:d8:55:7c:f5:4a:5f:e4:20:01:
84:11:19:38:4e:31:bd:5f:bb:4a:55:9b:ae:5a:ba:26:42:7c:
c2:5e:34:d6:78:75:8e:6c:d9:c9:47:3e:e6:2a:94:94:f0:b9:
53:8a:c7:ca:5b:aa:51:78:29:89:d0:e1:f8:b8:a6:4d:2e:18:
5a:47:ad:b3:44:c0:f1:29:62:1b:9b:db:17:29:f1:4c:7d:15:
df:4e:cf:2b:df:ca:c8:82:e5:07:30:ab:71:c3:2e:7a:0d:1c:
a0:b7:69:51:4c:b6:75:a2:87:98:ce:35:3b:3e:b6:9e:6f:d1:
f0:b7:8e:13:17:44:fa:4c:7b:17:d8:ad:e4:6f:fa:80:cf:2f:
08:9c:e0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:48 2026 by rpki-client