$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: qHAKPpV/18r8YVYRP2TB0SRnGlMJnJnD90IqH2fD73o= Subject key identifier: 6C:7A:24:DB:BA:11:EC:9C:D7:06:F1:62:EB:79:FD:04:B8:5D:9C:75 Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 025C Signing time: Fri 17 Apr 2026 02:03:45 +0000 Manifest this update: Fri 17 Apr 2026 02:03:44 +0000 Manifest next update: Fri 24 Apr 2026 02:03:44 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: wUgYgMoaLpbi/zirzMhlqkQPPMA/mFI9mYILFK4SGK0=) 2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=) 3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Apr 17 02:03:44 2026 GMT Not After : Apr 24 02:03:44 2026 GMT Subject: CN=69e19501-e584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:9c:b2:73:ba:6e:5c:df:2d:b0:f1:9b:b9: 6f:26:6d:dc:ec:96:b4:31:c2:65:23:08:aa:98:78: 54:c3:68:f1:c0:40:4f:5e:d2:e3:b8:1f:f4:44:9e: 49:f3:40:2c:63:a9:e3:ca:5f:f8:10:84:31:ca:7e: f8:62:22:3e:04:60:ff:8e:ed:11:c2:90:35:01:3e: e9:4b:1f:0e:6f:fc:a5:a8:aa:43:61:fc:d3:44:b0: 91:c6:52:26:1a:6a:f1:fb:56:4d:31:4e:04:ee:49: cb:7f:67:be:78:6b:10:bc:1d:45:b6:36:29:85:47: 8b:71:f9:09:8a:cb:93:8c:e8:5a:9c:ab:7e:21:05: ce:50:4e:45:33:c5:7a:a3:c5:11:0c:61:99:80:ed: d6:0b:b2:35:96:36:61:f5:26:b2:42:fc:e5:ef:c8: d5:00:d9:9a:ab:93:3b:d4:d1:0d:73:ae:6f:cf:32: 29:85:dd:5c:ad:3b:93:d3:36:a9:ac:24:f2:62:ed: 7a:4e:b6:e6:6f:17:52:f3:a6:fe:b1:6c:33:0a:8a: f9:2d:f0:06:13:23:c9:df:42:7d:3d:ad:7a:54:5e: e6:f8:51:e0:52:85:97:ef:b2:14:11:5a:f6:cc:ca: a1:51:ba:d4:c7:f0:87:3d:ad:1b:2d:01:47:a3:c9: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7A:24:DB:BA:11:EC:9C:D7:06:F1:62:EB:79:FD:04:B8:5D:9C:75 X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:a1:2d:73:0a:79:84:40:34:9e:0a:cd:02:99:4a:d8:12:fb: 5d:fa:50:8a:0e:c7:16:03:94:fb:6e:51:e1:b3:e4:30:5c:d2: bb:a8:6a:9f:76:7c:4f:f7:a5:27:40:dc:72:91:7f:ac:a4:02: 20:af:ee:6a:a6:b5:33:45:dd:09:44:34:da:b3:b5:1b:0e:29: 19:2b:49:50:a5:de:4c:c0:5c:02:80:1c:9e:c6:33:ac:cf:b8: 3c:a1:76:50:fa:ed:0d:97:8f:fe:7b:17:12:8a:c2:1f:0e:53: 57:36:bb:b3:e0:08:01:dc:31:d2:ec:10:6c:fd:8a:4c:c9:05: 4c:e6:f6:b8:54:1e:a6:f6:aa:ab:11:ca:e7:02:e9:16:f4:17: d0:e7:7f:0c:a7:82:7e:f4:f9:39:43:a8:fb:0f:bf:51:36:4b: 4f:41:85:ff:6d:7f:d1:07:28:70:bc:6d:53:b7:00:ad:64:28: 53:06:75:69:41:40:a9:fd:7e:46:5c:71:bc:ae:f6:79:7e:4d: 71:ab:da:a8:7b:2e:61:49:64:4a:5f:0b:e7:7c:af:f0:01:9b: c3:6b:aa:73:48:13:92:e9:ee:30:71:e0:ed:8b:b9:d3:da:0d: af:d3:30:dd:3a:0d:4f:40:82:3f:df:83:a9:2a:3c:12:90:67: 8d:71:13:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjYwNDE3MDIwMzQ0WhcNMjYwNDI0MDIwMzQ0WjAYMRYwFAYD VQQDEw02OWUxOTUwMS1lNTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyNmcsnO6blzfLbDxm7lvJm3c7Ja0McJlIwiqmHhUw2jxwEBPXtLjuB/0RJ5J 80AsY6njyl/4EIQxyn74YiI+BGD/ju0RwpA1AT7pSx8Ob/ylqKpDYfzTRLCRxlIm Gmrx+1ZNMU4E7knLf2e+eGsQvB1FtjYphUeLcfkJisuTjOhanKt+IQXOUE5FM8V6 o8URDGGZgO3WC7I1ljZh9SayQvzl78jVANmaq5M71NENc65vzzIphd1crTuT0zap rCTyYu16TrbmbxdS86b+sWwzCor5LfAGEyPJ30J9Pa16VF7m+FHgUoWX77IUEVr2 zMqhUbrUx/CHPa0bLQFHo8lQfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGx6JNu6 Eeyc1wbxYut5/QS4XZx1MB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxKEtcwp5hEA0ngrNAplK2BL7XfpQig7HFgOU+25R4bPkMFzSu6hqn3Z8T/el J0DccpF/rKQCIK/uaqa1M0XdCUQ02rO1Gw4pGStJUKXeTMBcAoAcnsYzrM+4PKF2 UPrtDZeP/nsXEorCHw5TVza7s+AIAdwx0uwQbP2KTMkFTOb2uFQepvaqqxHK5wLp FvQX0Od/DKeCfvT5OUOo+w+/UTZLT0GF/21/0QcocLxtU7cArWQoUwZ1aUFAqf1+ RlxxvK72eX5NcavaqHsuYUlkSl8L53yv8AGbw2uqc0gTkunuMHHg7Yu509oNr9Mw 3ToNT0CCP9+DqSo8EpBnjXEThA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:41:32 2026 by rpki-client