
$ rpki-client -vvf rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
File: ShBYcSoe344SOQfrNw8JHcdDNfo.mft (raw, json)
Hash identifier: tt9wLksGBTkZzfw3PGXaQLfEjK56634N3y50T73Sr+c=
Subject key identifier: 5C:19:15:9C:EC:22:EE:68:05:F1:FC:4C:5F:84:F1:1F:97:9C:B5:23
Authority key identifier: 4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA
Certificate issuer: /CN=A913738D/serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA
Certificate serial: 15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
Manifest number: 12
Signing time: Thu 11 Jun 2026 11:25:41 +0000
Manifest this update: Thu 11 Jun 2026 11:25:40 +0000
Manifest next update: Thu 18 Jun 2026 11:25:40 +0000
Files and hashes: 1: ShBYcSoe344SOQfrNw8JHcdDNfo.crl (hash: bZcq4GDxSW8zhw2iwc6ITx9kzMlshnTglI7hTTjww8I=)
2: D6315EBC4EA011F18D123533BE833773.roa (hash: +uy/rfP0mfTiKOrRLiTzZGPfW5GTzYympoeDw/BIW+I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl
rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 11:25:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913738D, serialNumber=4A1058712A1EDF8E123907EB370F091DC74335FA
Validity
Not Before: Jun 11 11:25:40 2026 GMT
Not After : Jun 18 11:25:40 2026 GMT
Subject: CN=6a2a9b34-a1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:fd:29:0a:94:21:25:1d:9f:b9:f5:28:12:
91:7b:e5:de:ff:36:b3:ca:9a:30:05:d7:b9:ed:19:
26:9b:b9:ee:5a:37:29:de:10:d4:95:32:2b:69:c0:
ba:bc:da:79:12:d9:41:df:21:f9:f8:08:b8:09:60:
a5:f4:65:6a:21:82:8b:ec:32:46:4f:48:64:a2:5b:
00:1e:87:36:b3:b6:17:2c:6f:8d:d5:49:76:d8:03:
14:c1:f0:de:ac:98:4b:2c:7a:32:f9:29:7b:0b:31:
62:e5:bc:5d:df:6b:b4:a3:a0:cf:df:19:01:c3:9b:
ec:40:70:b1:8f:f3:aa:2b:b1:09:61:e4:05:22:1f:
63:0d:78:c5:49:bd:8b:e5:83:2d:14:eb:2c:31:01:
57:e4:9a:57:b8:8e:8b:8d:16:89:70:29:7d:7d:47:
54:3b:ef:37:b9:3b:fe:fa:db:e0:c7:94:4a:16:47:
04:a9:0e:f8:2e:b5:28:22:47:3c:2d:35:cf:ce:e7:
da:48:da:2b:a7:fd:45:59:8a:ea:36:1a:4d:b1:ad:
18:d6:84:06:bd:f0:67:6c:64:d8:4e:2e:65:91:0f:
3d:2b:08:8a:1e:66:66:e5:e4:c2:ca:90:40:ca:b3:
22:5e:a2:4a:ba:77:0c:af:14:d7:86:fd:7d:6c:b4:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:19:15:9C:EC:22:EE:68:05:F1:FC:4C:5F:84:F1:1F:97:9C:B5:23
X509v3 Authority Key Identifier:
keyid:4A:10:58:71:2A:1E:DF:8E:12:39:07:EB:37:0F:09:1D:C7:43:35:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShBYcSoe344SOQfrNw8JHcdDNfo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913738D/8A5CFD9C4E9C11F184F0DB50BD833773/ShBYcSoe344SOQfrNw8JHcdDNfo.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:ee:9a:cf:3e:62:5b:76:ee:f5:81:37:47:f0:54:c1:d5:b9:
de:84:84:20:2d:e5:37:af:4f:10:74:02:79:ac:a0:a0:f3:05:
3e:a7:ac:42:e9:ec:04:ac:17:9d:c2:ba:ca:28:3d:fa:69:d0:
21:a3:43:61:10:18:75:e2:e1:d1:d1:76:af:6a:5a:61:1c:bf:
a4:02:93:06:99:43:00:4a:f3:36:01:81:42:6e:89:a6:bf:62:
cf:ac:c6:64:30:03:92:f5:ed:45:70:0d:2b:9e:88:0a:a9:8b:
e9:4a:fb:84:6f:6c:81:12:d5:01:0e:c8:d4:0f:e6:fd:88:37:
b9:a0:b9:28:43:ca:bc:16:90:7e:e3:2e:d2:f6:8c:69:59:d3:
56:26:1f:1a:d9:28:f5:a1:1d:fc:e0:37:d6:0c:ce:58:d5:19:
2f:d5:c1:ab:6f:b3:36:73:b7:f7:d8:86:55:ce:d7:43:23:78:
89:31:05:02:a1:8a:c8:7d:85:15:59:c5:ef:87:fc:d0:8a:55:
ef:7d:7e:92:87:62:7c:ad:7a:ff:7b:02:1d:e0:40:e6:62:20:
93:4b:2d:ab:04:dc:51:fc:7a:a0:02:6c:3a:b4:a0:6f:80:47:
1e:0a:70:4a:b1:69:37:5a:ab:33:63:68:ef:01:24:94:c2:50:
33:54:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:14 2026 by rpki-client