$ rpki-client -vvf rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft File: ShBYcSoe344SOQfrNw8JHcdDNfo.mft (raw, json) Hash identifier: CmDaHx+PjSaKCjeLLfBKmcOFXn5nI0kr/WWpJgLJyGM= Subject key identifier: 4E:91:F6:CA:FB:87:83:6D:9A:DE:09:99:4F:EC:DD:29:2A:E5:DE:9D Authority key identifier: 4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA Certificate issuer: /CN=A913738D/serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft Manifest number: 28 Signing time: Mon 27 Jul 2026 11:11:25 +0000 Manifest this update: Mon 27 Jul 2026 11:11:25 +0000 Manifest next update: Mon 03 Aug 2026 11:11:25 +0000 Files and hashes: 1: ShBYcSoe344SOQfrNw8JHcdDNfo.crl (hash: KjojtGMSn3H1gbLWpQ1qFtLBXucW9bp39ZhWx0K/aJo=) 2: D6315EBC4EA011F18D123533BE833773.roa (hash: +uy/rfP0mfTiKOrRLiTzZGPfW5GTzYympoeDw/BIW+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913738D, serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA Validity Not Before: Jul 27 11:11:25 2026 GMT Not After : Aug 3 11:11:25 2026 GMT Subject: CN=6a673cdd-1ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0d:c7:94:d3:a1:0e:3b:3e:f3:f7:d2:b7:ea: 15:55:2c:a4:7d:ad:95:a2:66:65:8d:a6:d5:35:e9: 77:bd:51:3d:65:84:27:92:2b:c4:48:40:ea:8b:d0: 28:7a:5b:ef:ec:51:7c:32:2f:20:81:af:66:bb:b1: b2:d1:27:56:f7:95:36:a0:86:f4:b8:c0:3a:75:9e: 66:2f:40:69:12:64:71:a0:14:69:e8:40:7a:1f:b1: 0d:6d:14:8e:ec:10:91:a3:4c:9d:8d:b7:c0:54:12: f1:2f:32:39:1b:2b:18:73:ed:39:6f:b7:fe:d2:74: 38:d0:c1:47:03:bd:06:bf:ff:83:fb:42:4b:96:cf: 04:d4:cd:7f:34:98:33:e2:42:94:b9:48:95:1f:29: b8:b7:7f:5e:5c:df:cf:dd:e0:b9:65:5c:2f:9a:5b: 32:8c:d4:13:6c:3d:d0:2c:5d:7e:c6:07:e5:f5:11: 90:c7:70:8a:c4:5a:64:4b:3c:67:ec:ce:0e:f3:5d: 7d:8d:57:48:3e:35:f3:02:0f:c9:34:9a:a7:b5:cf: c0:4c:27:ce:0f:5c:bb:5f:04:4a:dd:10:52:87:e5: 27:5e:b1:d4:fb:1c:13:61:db:ae:39:18:a0:9d:e3: 3e:55:73:29:20:bc:7d:24:03:89:30:02:43:97:0d: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:91:F6:CA:FB:87:83:6D:9A:DE:09:99:4F:EC:DD:29:2A:E5:DE:9D X509v3 Authority Key Identifier: keyid:4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ae:45:b4:7d:87:92:0a:7c:94:38:ac:8d:d9:56:e1:b7:c7: 69:0e:f3:59:6b:66:25:18:82:ea:41:fa:3c:ec:57:26:07:31: 42:41:64:da:c1:69:dd:d7:e5:db:73:b1:28:29:58:cc:3a:82: 30:31:73:c7:c0:37:6b:39:59:ec:ba:0e:30:4d:5e:39:38:cd: 15:19:45:ff:af:b2:b1:a2:1c:a0:bd:72:03:2f:a0:6b:47:dc: 29:fb:f0:02:95:ba:02:a1:85:91:c8:f1:65:99:92:57:f7:b5: 40:dd:d1:08:66:61:da:c6:24:89:96:d8:40:59:56:8a:6d:13: 46:f3:e2:6d:88:b8:57:75:34:73:9d:cd:36:2e:8a:c2:59:58: a8:95:e4:f3:dc:fd:f4:ba:e9:b6:5c:d1:0d:b7:cf:31:65:af: 63:7b:18:3e:5a:90:6e:aa:8d:96:4f:5b:36:df:e1:c3:09:38: 8a:db:82:27:a1:84:be:bd:b5:3b:cf:1e:25:7c:59:52:4f:c5: 2f:94:d1:99:96:28:85:ec:ae:c6:a4:a8:24:f4:ba:38:46:bb: 23:24:f1:9d:ea:e4:45:0e:7b:0c:37:cc:ff:6b:45:48:bb:47: bb:1a:04:3b:53:8d:ca:6e:6d:d2:97:b6:42:cf:af:4b:4d:93: 31:83:7e:08 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzM4RDExMC8GA1UEBRMoNEExMDU4NzEyQTFFREY4RTEyMzkwN0VCMzcwRjA5MURD NzQzMzVGQTAeFw0yNjA3MjcxMTExMjVaFw0yNjA4MDMxMTExMjVaMBgxFjAUBgNV BAMTDTZhNjczY2RkLTFlYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1DceU06EOOz7z99K36hVVLKR9rZWiZmWNptU16Xe9UT1lhCeSK8RIQOqL0Ch6 W+/sUXwyLyCBr2a7sbLRJ1b3lTaghvS4wDp1nmYvQGkSZHGgFGnoQHofsQ1tFI7s EJGjTJ2Nt8BUEvEvMjkbKxhz7Tlvt/7SdDjQwUcDvQa//4P7QkuWzwTUzX80mDPi QpS5SJUfKbi3f15c38/d4LllXC+aWzKM1BNsPdAsXX7GB+X1EZDHcIrEWmRLPGfs zg7zXX2NV0g+NfMCD8k0mqe1z8BMJ84PXLtfBErdEFKH5SdesdT7HBNh2645GKCd 4z5VcykgvH0kA4kwAkOXDXVFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTpH2yvuH g22a3gmZT+zdKSrl3p0wHwYDVR0jBBgwFoAUShBYcSoe344SOQfrNw8JHcdDNfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MzhELzhBNUNGRDlDNEU5 QzExRjE4NEYwREI1MEJEODMzNzczL1NoQlljU29lMzQ0U09RZnJOdzhKSGNkRE5m by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU2hCWWNTb2UzNDRTT1Fmck53OEpIY2RETmZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MzhELzhBNUNGRDlDNEU5QzExRjE4NEYwREI1MEJEODMzNzczL1NoQlljU29lMzQ0 U09RZnJOdzhKSGNkRE5mby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAQrkW0fYeSCnyUOKyN2Vbht8dpDvNZa2YlGILqQfo87FcmBzFCQWTawWnd1+Xb c7EoKVjMOoIwMXPHwDdrOVnsug4wTV45OM0VGUX/r7KxohygvXIDL6BrR9wp+/AC lboCoYWRyPFlmZJX97VA3dEIZmHaxiSJlthAWVaKbRNG8+JtiLhXdTRznc02LorC WVioleTz3P30uum2XNENt88xZa9jexg+WpBuqo2WT1s23+HDCTiK24InoYS+vbU7 zx4lfFlST8UvlNGZliiF7K7GpKgk9Lo4RrsjJPGd6uRFDnsMN8z/a0VIu0e7GgQ7 U43Kbm3Sl7ZCz69LTZMxg34I -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:12 2026 by rpki-client