
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json)
Hash identifier: YhPBHXCglwSZCcBQUbXFShiPk+L/x1GwidlOzS1XQqw=
Subject key identifier: 1B:77:8C:3A:88:84:B6:7F:30:3B:50:9E:81:10:F4:3B:ED:21:DD:55
Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Certificate serial: 2B
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
Manifest number: 2A
Signing time: Sat 13 Jun 2026 08:50:35 +0000
Manifest this update: Sat 13 Jun 2026 08:50:35 +0000
Manifest next update: Sat 20 Jun 2026 08:50:35 +0000
Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: 1d6zITcHinvsDaGhkktJDZ/nHJvBNXIPTvcwugdWA9E=)
2: 712388E4280111F1A83DAB9AB3833773.roa (hash: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 08:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341
Validity
Not Before: Jun 13 08:50:35 2026 GMT
Not After : Jun 20 08:50:35 2026 GMT
Subject: CN=6a2d19db-0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:f4:b8:f9:0e:c2:74:aa:4a:d3:b5:5e:1c:
9a:ea:8d:3b:05:6b:8d:d4:07:7a:82:d1:82:4b:24:
a7:89:91:64:3a:82:86:6f:ad:72:d6:22:d8:b5:48:
0b:77:ea:98:4c:ed:1b:f8:b2:84:bd:aa:31:33:54:
36:85:d2:60:b0:91:09:7f:c0:dc:31:8b:14:e5:1b:
59:45:96:4b:8d:23:a7:7c:95:a0:86:67:69:4e:06:
ea:85:cb:b6:0f:6c:f1:96:6f:93:2a:b3:4b:81:57:
b7:fb:64:ac:00:bf:09:70:d5:9c:04:27:46:4b:ac:
8c:10:47:fe:1f:82:31:bd:ae:ef:23:8c:3d:7b:77:
d2:27:6a:37:1a:af:28:d3:92:f2:60:57:49:d7:3f:
f5:32:a1:f7:f8:41:43:1e:12:79:15:aa:52:45:cf:
d2:ce:9c:2f:44:f7:26:50:6c:90:8e:23:76:a9:02:
06:3c:ab:d6:b2:e8:a7:67:4d:55:bf:92:b7:79:50:
1e:3d:79:9e:3e:af:b5:c8:3b:c0:5d:55:fb:81:3d:
c0:64:64:3e:35:c5:a9:a4:12:b4:a6:7d:42:1b:71:
48:06:48:14:69:9b:70:51:16:00:1b:23:90:02:05:
ff:a3:94:ae:c5:2b:dc:ff:b2:1c:e4:06:03:ea:fb:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:8C:3A:88:84:B6:7F:30:3B:50:9E:81:10:F4:3B:ED:21:DD:55
X509v3 Authority Key Identifier:
keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:1a:f7:eb:f1:2e:eb:bb:dd:58:6b:27:5c:80:91:3b:9f:26:
cb:33:b7:60:e1:14:97:49:81:e0:c9:bc:b6:10:5c:70:ec:1d:
60:54:03:41:16:8c:70:f9:0a:84:2d:74:20:1a:21:48:0b:0c:
ea:ea:f6:4b:23:7e:94:83:8c:8d:f3:b8:79:60:ce:16:6d:ea:
45:90:08:ae:8a:5a:2c:da:e3:83:39:b5:f5:5f:9c:ac:09:b0:
2f:a9:17:4a:4a:46:20:83:40:d7:7a:a7:d8:08:5d:58:3f:42:
e6:5d:85:ca:c5:67:dd:71:89:3a:ff:67:35:c3:7a:67:d2:61:
fc:5d:2d:8e:c9:25:ba:42:45:71:5f:dd:ea:fa:a4:e6:2c:29:
33:fc:e4:ed:e8:5c:c2:cf:a8:74:d4:42:09:75:eb:46:ad:1a:
00:8f:b1:63:d0:c3:1c:d0:e5:2d:fe:54:c8:a1:d5:60:b4:d2:
28:2d:cf:2f:e9:c5:7c:36:7d:3a:ae:bf:e4:7a:3b:eb:8f:35:
e7:c1:bf:6c:49:dc:00:51:ab:fc:2c:ee:b1:97:8d:92:d4:31:
57:b6:e5:ef:27:f2:b1:65:f1:98:ad:9b:2a:b2:0a:22:27:50:
44:85:f7:2a:6d:6f:e9:30:47:b2:02:6c:f6:05:5f:be:c5:05:
eb:83:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:38:52 2026 by rpki-client