
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json)
Hash identifier: L0TwR5eo3g107BCjFEzgF9ohyrsTsVIlw08QGwG6PJw=
Subject key identifier: 0C:B2:D0:AA:C9:C1:79:17:C7:0E:1F:16:F7:0E:EC:45:70:C9:B4:A5
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 02A5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
Manifest number: 028F
Signing time: Wed 29 Jul 2026 02:50:06 +0000
Manifest this update: Wed 29 Jul 2026 02:50:05 +0000
Manifest next update: Wed 05 Aug 2026 02:50:05 +0000
Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: CzccybsLMxhVfPDiUzLvX7G9ZHR9Ijht20jJd65UixE=)
2: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=)
3: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Validity
Not Before: Jul 29 02:50:05 2026 GMT
Not After : Aug 5 02:50:05 2026 GMT
Subject: CN=6a696a5e-bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:3d:cf:69:ca:25:87:e0:7b:c4:01:26:10:
88:4a:d1:c9:ad:bd:d9:e5:b6:e0:aa:5c:23:8c:c9:
15:53:81:97:53:bd:c4:4a:e0:97:1a:98:50:f6:07:
34:b5:1b:42:9b:53:1c:80:c3:0b:30:cc:27:dd:a4:
2d:d3:97:02:53:f6:05:4d:b6:9d:26:b9:47:58:c7:
66:38:d7:fa:bf:ba:27:12:07:0b:48:76:e7:a4:26:
8f:f4:dc:97:ef:b1:a4:a2:7f:c2:c4:d8:fc:ff:07:
c0:7a:20:cf:36:61:ec:66:14:6d:b2:62:b1:48:fb:
3f:ff:44:68:a6:2a:33:94:2c:a8:b0:a6:41:c7:4a:
11:31:de:d2:c2:30:33:7e:ca:68:72:f7:b0:f3:de:
22:14:e1:73:f8:fe:ad:08:17:27:17:07:be:2a:90:
22:6b:ac:ff:f7:0d:ff:f5:34:c0:67:3a:5d:f0:25:
d5:94:c4:69:35:2e:28:21:52:ba:45:e9:15:11:a4:
c8:c6:ac:a4:83:fb:35:5f:c2:1d:61:66:3b:9d:bf:
c0:9f:49:af:b9:4e:bb:3b:6d:24:f5:1b:f5:99:a8:
d1:bb:96:2b:a8:44:db:9c:2a:85:4e:be:75:e9:94:
b6:18:cf:78:dd:d2:c2:9a:bf:71:09:a4:57:6f:69:
25:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:D0:AA:C9:C1:79:17:C7:0E:1F:16:F7:0E:EC:45:70:C9:B4:A5
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:6b:8c:0d:16:82:c8:bf:bc:8d:97:b8:0b:1b:76:cf:7b:58:
d7:1a:a5:db:20:55:12:52:05:42:d4:38:cb:55:01:75:88:85:
cd:fa:4c:33:e0:14:70:f6:20:74:68:45:7c:0e:f5:b2:bf:29:
6b:3f:93:36:33:8f:7d:0a:4c:c9:10:85:30:79:08:e4:b4:f1:
e2:23:29:5f:a0:fc:5b:8c:92:44:57:f0:3d:2b:90:4f:ef:2d:
ac:c9:1d:76:55:b6:bc:21:1b:e6:10:c8:9f:16:fb:01:1c:e5:
67:98:66:31:b3:b2:24:f9:c0:ba:22:b5:0f:3a:e1:b9:05:10:
8c:f9:ec:9b:9c:a2:4c:eb:25:63:27:44:aa:5d:07:fa:e6:dc:
fe:47:c4:d4:9d:c9:92:de:58:63:b8:da:71:0f:9f:9f:7e:5a:
45:5e:97:48:10:63:b6:6c:c9:47:fb:d6:03:c7:6a:04:ed:8a:
01:b7:a0:b5:ef:50:df:b6:ab:2a:da:0c:01:7d:f1:50:3a:39:
bb:f8:be:ae:5e:26:52:ca:f5:2c:cf:91:d8:0d:03:2a:6a:37:
3f:ac:32:fb:ca:91:5e:05:01:af:e6:c3:74:23:d7:a0:5f:f7:
76:f1:d5:03:11:b9:ec:f4:69:14:36:04:d7:8a:fd:d2:cc:e7:
12:ec:c0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:16:57 2026 by rpki-client