$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft File: shmdscl5XUlnt_7Voe9wn6LpaGE.mft (raw, json) Hash identifier: 79naI4vPsYFH91VJd+0LE0EdfQJz4wnGs66yK8M3Jrk= Subject key identifier: 85:49:9D:02:D0:C2:E0:D2:C4:5C:C0:8E:DC:0B:03:76:1A:2B:ED:04 Authority key identifier: B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61 Certificate issuer: /CN=A9111D65/serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft Manifest number: 0C Signing time: Sun 05 Apr 2026 08:26:28 +0000 Manifest this update: Sun 05 Apr 2026 08:26:28 +0000 Manifest next update: Sun 12 Apr 2026 08:26:28 +0000 Files and hashes: 1: shmdscl5XUlnt_7Voe9wn6LpaGE.crl (hash: EJP/Ko89vrYHYei0UeQgGrlF4twKClpBK/DEHgAVGDo=) 2: D5931DD822A911F1B999B242B5833773.roa (hash: 9CC6O07iFUNLEts6pdhGBre/dsBGCYzcLM8YjPj0LWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D65, serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861 Validity Not Before: Apr 5 08:26:28 2026 GMT Not After : Apr 12 08:26:28 2026 GMT Subject: CN=69d21cb4-e734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:12:d0:e0:d4:51:2b:9c:b4:e5:43:65:1a:dc: a2:a6:93:f6:1d:0f:75:c2:09:67:49:76:d9:17:9e: 67:78:4a:99:f6:b8:2b:fd:df:f4:5a:b8:61:9b:0b: db:03:72:9a:2e:bc:a1:b5:36:73:a2:5c:a0:37:c3: ac:df:a1:1e:63:92:cd:3f:e9:fa:21:bc:df:c6:8a: af:9a:b2:ae:4e:9d:4e:50:de:88:4d:a2:98:7f:cd: 6e:40:98:4d:a2:2d:5c:b9:e2:0a:3a:a6:0b:56:aa: d4:2a:94:10:89:4c:a3:17:90:57:e0:10:5e:2b:e7: 07:37:ff:60:79:1f:38:4d:3c:51:66:2b:2d:6d:1f: b8:c8:19:71:be:cb:ad:db:d7:d9:a0:38:03:c9:81: cb:fc:f9:35:2e:b2:cc:6c:d4:19:d4:90:d2:56:57: 88:a4:f9:c9:ea:1e:91:97:a0:e5:c3:aa:dc:93:be: b5:68:86:fe:2d:63:c8:eb:11:cb:45:f3:e4:73:d3: b5:b1:cf:82:65:67:f5:a7:d7:a3:11:b1:d1:cf:b9: 99:b3:c4:9b:fb:e2:a5:c6:94:91:8a:93:79:6b:2a: bd:23:6e:de:a0:0c:b1:22:9e:43:c2:d0:cc:26:9f: e3:b2:4e:fe:56:00:a4:79:fd:35:e7:18:89:3e:da: 5d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:49:9D:02:D0:C2:E0:D2:C4:5C:C0:8E:DC:0B:03:76:1A:2B:ED:04 X509v3 Authority Key Identifier: keyid:B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d2:7f:ae:29:4d:4a:83:ea:9e:68:6b:a7:3f:cf:56:11:f8: 22:1b:fd:7c:3b:14:67:87:cd:a0:e7:ee:21:a8:81:2c:a1:20: c2:4a:e8:28:15:dd:48:5a:76:44:b0:38:b7:50:49:52:c4:28: d0:0e:8d:d2:af:11:39:3c:34:e0:7d:f2:38:b8:5b:e9:82:ee: bc:f1:b1:21:cc:e8:af:c3:e0:bf:47:96:37:0c:12:f8:a5:66: 98:5b:72:cc:d9:c3:e8:50:8b:b4:00:9e:5e:94:29:2b:72:ec: c9:d3:ef:5b:90:f5:49:c7:c4:af:ea:41:e8:d7:eb:a1:c5:25: d8:a4:06:cc:af:c2:29:a9:26:6a:bc:6d:f1:aa:2f:77:74:e0: db:54:64:8d:51:c6:9e:5d:0f:98:e7:fc:ce:af:1c:f5:8a:01: 2d:cb:f2:5d:37:70:43:30:ff:2a:7c:49:6a:0d:da:cc:72:78: f9:4d:08:64:ec:0b:b9:cf:18:fc:c2:7e:71:4d:b2:5e:93:1d: 8c:e5:22:b2:08:c8:cc:a3:8d:c6:49:6b:ce:cb:27:aa:19:85: ed:f1:b3:30:3e:68:98:a5:19:70:25:56:88:7b:74:5f:3d:f0: 9e:31:e0:02:51:f5:9d:c2:8b:cd:91:01:12:17:18:9a:2e:56: 26:f3:47:84 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUQ2NTExMC8GA1UEBRMoQjIxOTlEQjFDOTc5NUQ0OTY3QjdGRUQ1QTFFRjcwOUZB MkU5Njg2MTAeFw0yNjA0MDUwODI2MjhaFw0yNjA0MTIwODI2MjhaMBgxFjAUBgNV BAMTDTY5ZDIxY2I0LWU3MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDaEtDg1FErnLTlQ2Ua3KKmk/YdD3XCCWdJdtkXnmd4Spn2uCv93/RauGGbC9sD cpouvKG1NnOiXKA3w6zfoR5jks0/6fohvN/Giq+asq5OnU5Q3ohNoph/zW5AmE2i LVy54go6pgtWqtQqlBCJTKMXkFfgEF4r5wc3/2B5HzhNPFFmKy1tH7jIGXG+y63b 19mgOAPJgcv8+TUussxs1BnUkNJWV4ik+cnqHpGXoOXDqtyTvrVohv4tY8jrEctF 8+Rz07Wxz4JlZ/Wn16MRsdHPuZmzxJv74qXGlJGKk3lrKr0jbt6gDLEinkPC0Mwm n+OyTv5WAKR5/TXnGIk+2l1RAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUhUmdAtDC 4NLEXMCO3AsDdhor7QQwHwYDVR0jBBgwFoAUshmdscl5XUlnt/7Voe9wn6LpaGEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0M2QzVCOEQ0MjJB ODExRjFBMjlDODUxQ0I1ODMzNzczL3NobWRzY2w1WFVsbnRfN1ZvZTl3bjZMcGFH RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc2htZHNjbDVYVWxudF83Vm9lOXduNkxwYUdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RDY1L0M2QzVCOEQ0MjJBODExRjFBMjlDODUxQ0I1ODMzNzczL3NobWRzY2w1WFVs bnRfN1ZvZTl3bjZMcGFHRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCc0n+uKU1Kg+qeaGunP89WEfgiG/18OxRnh82g5+4hqIEsoSDCSugoFd1IWnZE sDi3UElSxCjQDo3SrxE5PDTgffI4uFvpgu688bEhzOivw+C/R5Y3DBL4pWaYW3LM 2cPoUIu0AJ5elCkrcuzJ0+9bkPVJx8Sv6kHo1+uhxSXYpAbMr8IpqSZqvG3xqi93 dODbVGSNUcaeXQ+Y5/zOrxz1igEty/JdN3BDMP8qfElqDdrMcnj5TQhk7Au5zxj8 wn5xTbJekx2M5SKyCMjMo43GSWvOyyeqGYXt8bMwPmiYpRlwJVaIe3RfPfCeMeAC UfWdwovNkQESFxiaLlYm80eE -----END CERTIFICATE-----Generated at Mon Apr 6 02:15:38 2026 by rpki-client