
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: 11RfPHem3pOwWUX19WGFA9aIfDOKRCrJfBG2CBc2cc0=
Subject key identifier: B7:C8:BF:CB:A5:33:D4:26:10:F6:C9:2B:B1:47:47:69:2F:53:FF:7C
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 1336
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 12F4
Signing time: Sun 20 Sep 2026 17:00:19 +0000
Manifest this update: Sun 20 Sep 2026 17:00:19 +0000
Manifest next update: Sun 27 Sep 2026 17:00:19 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: CcjngdOjkMQ6rSIz26e8OLiLoTxw+8wgW2QJIvtzOBM=)
2: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=)
3: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=)
4: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=)
5: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=)
6: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: krbf5dctADsCVZfdltaoJKfg4me/fONaG9SIS0vFud8=)
7: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4918 (0x1336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Sep 20 17:00:19 2026 GMT
Not After : Sep 27 17:00:19 2026 GMT
Subject: CN=6ab01123-f377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:cc:80:3e:eb:0f:28:20:42:14:69:91:ab:
8b:b0:55:20:fe:cf:7b:a0:27:62:69:13:23:d7:b0:
c4:65:be:8b:5d:8f:14:d0:7d:b7:e5:99:30:00:03:
9f:51:b1:29:51:b8:4c:9b:1d:48:18:37:b8:5e:a9:
fb:83:bd:a0:3a:ef:39:40:af:a6:49:45:d3:19:0b:
cd:b2:f2:d6:73:4f:0e:17:3c:0d:a3:62:a0:c8:b2:
fd:12:20:40:6e:98:aa:e5:18:cb:ec:27:27:0f:e7:
54:79:ac:76:f4:8b:01:3b:c9:e5:1c:91:df:de:8e:
5d:90:be:99:50:1a:a4:8d:f0:f6:7a:76:ec:46:90:
28:6f:ba:fb:6b:a0:15:c0:a6:2d:b4:14:ae:7f:3b:
e7:94:ab:4d:9b:f1:b3:44:3d:5d:c6:cf:48:8a:ae:
3d:2e:a4:2a:df:66:03:ec:a4:39:89:73:2a:f8:00:
f5:35:9e:f3:c2:3c:4e:ca:fd:55:e1:e6:5f:df:77:
00:52:c6:fb:59:c8:7e:b5:e2:e2:a8:04:e6:24:8f:
6f:60:0a:6e:81:ad:47:80:5e:0f:a2:74:ab:e5:cb:
8a:ad:19:6f:86:e7:b4:d7:9a:4d:b1:1f:bb:e4:b9:
cd:11:e6:21:83:c7:ca:76:a6:2b:30:40:74:b0:36:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:BF:CB:A5:33:D4:26:10:F6:C9:2B:B1:47:47:69:2F:53:FF:7C
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:41:d1:92:dc:cb:66:66:3e:0a:97:b8:a9:61:fe:da:14:ea:
4d:10:e1:67:31:f2:92:d9:0b:ac:f7:db:81:ff:5e:c1:99:bd:
d1:5a:26:9f:94:bc:7f:29:8d:81:de:b1:a6:36:d3:0b:43:34:
dc:5f:b8:9f:30:2c:db:6c:be:50:19:45:eb:7d:de:2b:40:84:
df:cd:54:bc:73:1c:6e:d8:b1:3d:34:4e:91:cc:27:7e:f2:06:
22:f0:4b:4c:17:30:36:ad:a7:c2:b1:a7:f7:04:1b:a7:98:eb:
96:1c:01:a1:09:f9:7d:93:54:1d:68:c8:bd:54:2b:3d:9b:ca:
67:df:cb:1f:a3:0e:45:c7:0d:7c:f0:56:1b:75:00:38:9d:08:
42:eb:80:71:e3:94:38:bd:0c:f2:b1:32:60:13:aa:da:03:d1:
b0:8b:29:13:a6:05:e4:8f:03:cc:e6:4b:7b:93:88:01:3a:6d:
ee:28:90:8a:dc:5d:fe:c2:ab:6e:ee:21:d7:3d:93:86:b5:f1:
d1:81:08:f8:0f:88:21:0d:19:be:d4:c6:5a:6f:95:4a:0f:79:
53:34:e8:40:8b:52:df:36:79:42:6d:b8:5b:8f:7d:bd:2d:a5:
11:80:b7:00:29:cb:0c:0d:1c:7a:7a:7f:81:bd:8e:bb:b5:96:
4d:c1:fa:bb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB
QUJENDAyNzEwHhcNMjYwOTIwMTcwMDE5WhcNMjYwOTI3MTcwMDE5WjAYMRYwFAYD
VQQDEw02YWIwMTEyMy1mMzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2oXMgD7rDyggQhRpkauLsFUg/s97oCdiaRMj17DEZb6LXY8U0H235ZkwAAOf
UbEpUbhMmx1IGDe4Xqn7g72gOu85QK+mSUXTGQvNsvLWc08OFzwNo2KgyLL9EiBA
bpiq5RjL7CcnD+dUeax29IsBO8nlHJHf3o5dkL6ZUBqkjfD2enbsRpAob7r7a6AV
wKYttBSufzvnlKtNm/GzRD1dxs9Iiq49LqQq32YD7KQ5iXMq+AD1NZ7zwjxOyv1V
4eZf33cAUsb7Wch+teLiqATmJI9vYApuga1HgF4PonSr5cuKrRlvhue015pNsR+7
5LnNEeYhg8fKdqYrMEB0sDaNBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfIv8ul
M9QmEPbJK7FHR2kvU/98MB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB
MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J
SGE2RlJmZmpYWjJxdlVBbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAGEHRktzLZmY+Cpe4qWH+2hTqTRDhZzHyktkLrPfbgf9ewZm90Vomn5S8fymN
gd6xpjbTC0M03F+4nzAs22y+UBlF633eK0CE381UvHMcbtixPTROkcwnfvIGIvBL
TBcwNq2nwrGn9wQbp5jrlhwBoQn5fZNUHWjIvVQrPZvKZ9/LH6MORccNfPBWG3UA
OJ0IQuuAceOUOL0M8rEyYBOq2gPRsIspE6YF5I8DzOZLe5OIATpt7iiQitxd/sKr
bu4h1z2ThrXx0YEI+A+IIQ0ZvtTGWm+VSg95UzToQItS3zZ5Qm24W499vS2lEYC3
ACnLDA0cenp/gb2Ou7WWTcH6uw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:26:40 2026 by rpki-client