$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json) Hash identifier: 2gQalVBLGU6XMZXMGBaZWPoB3VSobT/XdNOjs96KBes= Subject key identifier: 7E:29:44:70:BD:C2:10:5A:EB:BF:1A:30:0C:7B:B1:61:3B:DA:E2:D0 Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft Manifest number: 0E Signing time: Fri 17 Apr 2026 08:49:28 +0000 Manifest this update: Fri 17 Apr 2026 08:49:28 +0000 Manifest next update: Fri 24 Apr 2026 08:49:28 +0000 Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: 7zv592fO14jqtHKv4i5oh1/03WFyMt30rvvK53pltws=) 2: 712388E4280111F1A83DAB9AB3833773.roa (hash: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Validity Not Before: Apr 17 08:49:28 2026 GMT Not After : Apr 24 08:49:28 2026 GMT Subject: CN=69e1f418-44e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:8a:98:de:0e:17:60:1f:44:e1:3c:90:7f: f9:11:85:b0:a6:14:82:51:09:6d:b7:c7:ac:d3:be: 48:b5:f6:d8:95:93:6b:87:ab:eb:a8:d1:f1:ea:d6: 00:9c:2b:0c:e4:7c:64:48:fc:ca:1c:b1:70:78:6d: 97:16:86:ae:c2:89:b6:94:25:82:a2:03:b1:34:22: 03:d6:33:ef:c8:cd:6b:87:c1:a1:2a:8e:f8:22:35: 0c:55:13:95:df:4f:80:f2:cd:8e:b7:37:7c:11:1d: 25:17:11:64:c1:8a:0e:b0:e4:fd:0e:7e:d7:e4:02: 80:ac:86:2b:2d:e7:bd:24:80:6d:14:2f:dd:d8:fc: f9:5b:25:c1:3d:37:ef:c5:41:0e:cf:60:15:8c:e9: 4b:58:ab:5b:32:da:9f:27:f1:1d:06:4c:6a:52:3d: 7a:8c:f4:51:ac:1e:ce:6d:d2:f9:7d:45:ef:b5:29: b4:3e:be:9f:c3:8f:50:73:31:07:7b:a4:91:02:6a: 0e:31:1f:3f:ae:35:0a:30:dc:8e:78:ef:73:e6:8e: 84:b0:1c:55:53:f0:30:0f:5e:52:fb:c2:b6:e5:4d: f6:d3:37:a4:43:40:fb:70:8a:4e:48:33:c8:47:f1: f0:ba:bb:0f:74:43:e2:5c:91:27:c5:9d:dc:f9:87: c3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:29:44:70:BD:C2:10:5A:EB:BF:1A:30:0C:7B:B1:61:3B:DA:E2:D0 X509v3 Authority Key Identifier: keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:9e:a7:fa:91:ad:a8:ad:4a:1c:1f:50:bf:91:78:98:15:88: 55:80:8c:e7:c3:0c:cf:a3:86:bc:95:8e:3f:ac:c9:44:cb:d1: a4:75:f6:9e:9d:d4:d7:6d:95:aa:bf:bf:31:9f:c0:e3:47:a5: b4:13:cd:a2:a2:5b:6d:da:76:e3:74:1f:e6:6a:c8:27:0d:2c: d9:45:3a:8f:05:0b:18:11:d9:fb:97:a7:ac:72:ba:aa:43:1a: c7:29:b9:4f:fc:06:bf:ed:03:d8:89:6f:61:7d:e8:d3:33:9a: 8c:fd:e7:53:45:12:f1:a4:a7:52:dc:a5:13:e4:4d:d1:d3:9d: 35:e3:30:41:93:0b:26:2b:45:44:bb:d4:0a:7d:69:c8:6d:89: 60:e5:5b:60:24:01:76:be:75:a8:d0:26:d2:92:21:11:b3:7d: 3e:e6:c4:2d:7a:14:1d:1b:d0:c6:91:ab:e5:ca:6e:9e:ad:13: b3:f8:0e:06:fc:a3:d2:1b:f2:05:87:53:de:eb:d9:19:6f:05: 7c:3f:98:ac:35:b4:c0:0c:d2:88:cd:3b:4e:1c:2d:0d:dc:88: fb:d2:87:2d:2f:04:54:90:e9:bd:49:40:b6:37:6d:79:a5:fe: 38:ad:59:34:0f:64:a0:c7:6a:17:3a:da:66:d0:8e:96:2f:aa: 7a:38:ea:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2 QkVGQTM0MTAeFw0yNjA0MTcwODQ5MjhaFw0yNjA0MjQwODQ5MjhaMBgxFjAUBgNV BAMTDTY5ZTFmNDE4LTQ0ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaVIqY3g4XYB9E4TyQf/kRhbCmFIJRCW23x6zTvki19tiVk2uHq+uo0fHq1gCc KwzkfGRI/MocsXB4bZcWhq7CibaUJYKiA7E0IgPWM+/IzWuHwaEqjvgiNQxVE5Xf T4DyzY63N3wRHSUXEWTBig6w5P0OftfkAoCshist570kgG0UL93Y/PlbJcE9N+/F QQ7PYBWM6UtYq1sy2p8n8R0GTGpSPXqM9FGsHs5t0vl9Re+1KbQ+vp/Dj1BzMQd7 pJECag4xHz+uNQow3I5473PmjoSwHFVT8DAPXlL7wrblTfbTN6RDQPtwik5IM8hH 8fC6uw90Q+JckSfFndz5h8NFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfilEcL3C EFrrvxowDHuxYTva4tAwHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB5nqf6ka2orUocH1C/kXiYFYhVgIznwwzPo4a8lY4/rMlEy9GkdfaendTXbZWq v78xn8DjR6W0E82ioltt2nbjdB/masgnDSzZRTqPBQsYEdn7l6escrqqQxrHKblP /Aa/7QPYiW9hfejTM5qM/edTRRLxpKdS3KUT5E3R05014zBBkwsmK0VEu9QKfWnI bYlg5VtgJAF2vnWo0CbSkiERs30+5sQtehQdG9DGkavlym6erROz+A4G/KPSG/IF h1Pe69kZbwV8P5isNbTADNKIzTtOHC0N3Ij70octLwRUkOm9SUC2N215pf44rVk0 D2Sgx2oXOtpm0I6WL6p6OOoI -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:53 2026 by rpki-client