
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: F2N4objRFKMJf7AeE3Tuwm7peN+oHO8sRpgu6Px/5DY=
Subject key identifier: 76:B8:2D:67:E1:8E:68:F5:71:A2:DB:F8:40:3D:14:37:06:72:75:47
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 12CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 128A
Signing time: Mon 02 Mar 2026 01:33:22 +0000
Manifest this update: Mon 02 Mar 2026 01:33:20 +0000
Manifest next update: Mon 09 Mar 2026 01:33:20 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: R/kc5vDIvgjCOA3b/g3y/qOu7/GSXBGUHSBqahZ29J4=)
2: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=)
3: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: mL1wDKbNUQQjoMtW47ox2tYBHJ623H86bPa3cy15R1E=)
4: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=)
5: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=)
6: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=)
7: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4811 (0x12cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Mar 2 01:33:20 2026 GMT
Not After : Mar 9 01:33:20 2026 GMT
Subject: CN=69a4e8e2-0120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:70:3b:c6:4e:d6:ed:1f:49:d6:d0:05:66:
ef:09:95:21:d3:8b:f1:15:f8:c7:68:04:69:ad:b2:
a8:65:35:a3:92:2c:e7:43:37:cb:c2:5a:32:5b:a5:
0d:4f:35:84:9f:03:90:f6:a3:89:a4:2f:e1:19:fb:
b5:90:06:d8:0d:cf:75:c9:9b:cb:2f:95:13:0d:ef:
a7:af:28:ae:a9:bd:5d:c6:c9:fb:ad:d4:53:c2:c1:
e1:b2:5a:00:e4:3a:c1:c9:bf:dc:2c:90:b7:5f:88:
16:e9:1f:e0:b9:64:aa:15:ab:32:31:0a:d9:c1:ea:
f3:bc:34:93:d0:69:58:a0:a1:32:28:b4:1e:07:1f:
1a:5c:ce:03:f1:80:91:e9:4e:88:2c:b3:e9:d7:3c:
07:9d:e6:2d:05:5f:3b:9b:cc:aa:5d:cc:c7:cc:9c:
b5:e9:54:b7:43:15:3c:ae:c0:a9:77:6b:a6:de:e0:
d4:9f:d1:da:9e:0b:ab:10:06:f8:82:66:17:48:62:
23:d8:99:b3:f5:8f:1a:04:31:fa:0b:18:8f:33:0a:
b1:96:84:76:66:3e:94:c3:da:70:96:9f:de:ce:18:
b8:bb:ee:29:25:77:ec:20:69:9d:30:a5:4a:d1:18:
11:22:08:da:e1:1e:d2:60:d3:b0:b1:f8:ae:cd:d0:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B8:2D:67:E1:8E:68:F5:71:A2:DB:F8:40:3D:14:37:06:72:75:47
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:47:42:72:0c:2c:b6:d5:26:96:c8:78:e6:00:51:23:93:1c:
12:69:9a:70:21:c7:aa:e6:d1:09:95:d6:7b:bd:bb:fc:ae:09:
d2:57:23:85:11:6c:fc:7b:4c:a1:46:c2:95:88:17:80:b3:c6:
97:c6:04:63:eb:8f:a1:f9:70:2e:d5:cc:7b:3b:20:84:7e:2d:
69:61:dc:4b:e6:c0:cc:33:99:33:cc:c8:d5:66:4a:01:27:9f:
f3:36:1f:b1:30:3a:cf:ae:19:12:ef:81:29:b9:63:b8:3b:ab:
cd:41:f6:eb:6e:c4:89:ee:6f:9a:ad:14:f1:3e:32:fd:63:23:
f6:f3:b1:8c:e6:a1:72:d5:b5:3f:18:50:b5:7c:4c:65:f9:f8:
2d:6b:49:88:90:84:ea:b3:90:14:a5:c4:f2:5b:8c:86:74:ce:
a5:57:97:60:96:a4:38:8d:b0:8b:c9:6a:96:e4:e9:7c:62:0c:
19:7f:c7:f5:71:d3:43:3c:48:ff:80:46:f8:70:57:55:d7:77:
66:01:f6:62:73:10:93:11:9c:b4:b7:d8:d8:96:b9:99:39:5c:
19:b1:a8:43:d9:08:59:39:f1:8e:77:a6:af:1d:fc:d5:85:7d:
53:7a:7a:07:ae:41:99:45:2a:44:d3:1a:46:06:ef:c7:7c:50:
5a:4c:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:51 2026 by rpki-client