
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: 27S1ziF+EJkkSUDVRn1ljdscZFQvHj0zWLLuWj90Tqk=
Subject key identifier: 50:91:57:FA:BA:8A:BA:D3:D9:75:83:F7:C2:4E:2A:FD:FB:1F:4B:61
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 1313
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 12D2
Signing time: Mon 20 Jul 2026 17:12:19 +0000
Manifest this update: Mon 20 Jul 2026 17:12:19 +0000
Manifest next update: Mon 27 Jul 2026 17:12:19 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: RpNwrHEICxdso3iemi/+3/UTpLwTOxbfhHkhS0NjNz0=)
2: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=)
3: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=)
4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=)
5: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: mL1wDKbNUQQjoMtW47ox2tYBHJ623H86bPa3cy15R1E=)
6: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=)
7: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 17:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4883 (0x1313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Jul 20 17:12:19 2026 GMT
Not After : Jul 27 17:12:19 2026 GMT
Subject: CN=6a5e56f3-a54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:12:26:8b:9e:88:e0:25:85:80:2c:e4:ff:
02:df:6b:9a:b1:55:e7:00:68:28:07:c7:13:f0:25:
01:d4:34:1e:f8:c8:73:09:4b:fc:f3:f2:16:8f:65:
81:a9:e0:4a:2d:34:e8:74:98:02:fc:92:35:c2:71:
45:66:7d:dd:4d:3d:c8:fb:14:c2:47:69:13:a6:0c:
09:b7:e2:25:94:b8:bd:a3:e6:94:dd:5e:f7:27:19:
1a:52:30:e5:8a:87:d8:da:a9:56:4a:40:54:73:23:
e8:7b:88:82:77:63:c2:fd:12:e3:03:18:a5:26:4d:
29:f6:8f:71:6c:5c:44:72:52:7f:fa:1e:8d:e6:3e:
69:ae:c7:6a:23:42:71:c7:cb:14:74:27:4c:ac:ed:
da:a5:5f:bf:ca:41:cc:cd:30:ce:dc:da:cb:4d:75:
4f:6f:fb:62:4b:52:49:40:37:68:20:66:5c:36:4b:
fc:3d:67:6c:da:63:a7:af:a9:c1:be:05:9c:ec:51:
4f:0d:42:9a:e3:f1:d1:59:b5:a4:19:2b:34:a6:55:
59:c7:41:ae:b4:3f:e8:e7:95:15:9c:71:53:4c:d0:
4a:51:e9:d9:2a:d5:f8:24:a6:15:32:8f:8c:6f:1b:
73:55:82:fb:63:a8:fa:2d:2b:08:2e:e4:6b:b1:8f:
77:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:91:57:FA:BA:8A:BA:D3:D9:75:83:F7:C2:4E:2A:FD:FB:1F:4B:61
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7d:4d:55:98:da:e6:86:aa:2c:67:74:e7:5d:3a:d7:58:fe:
8e:5c:59:d2:12:83:48:79:3e:0e:87:ac:86:4c:0a:f5:c4:fb:
96:1c:bd:1d:52:57:be:99:f4:4c:4a:f7:02:71:1c:19:cb:0c:
b6:55:6d:f4:e7:4c:15:96:98:0f:fd:57:e3:cb:5b:4f:82:38:
e3:f3:5e:fe:a4:f7:a7:b3:7f:18:b1:33:56:d5:ed:37:61:03:
1b:cf:cf:8f:ce:06:49:68:d7:74:15:c2:6d:bf:07:2f:95:a9:
ec:c6:7e:0a:b8:77:2f:c7:8d:7f:54:1b:11:92:d8:38:8c:83:
0b:d5:62:34:92:4d:29:e4:93:fe:81:86:de:06:c8:49:d6:f5:
e8:0e:1f:f1:44:ab:1c:49:37:50:eb:eb:22:fa:61:67:15:e7:
c7:bb:50:55:c7:4d:b0:22:0c:9e:d1:50:3f:13:b2:ae:46:30:
3e:7a:5a:14:99:e6:13:c5:f4:d8:e0:f6:11:e5:ef:8d:f5:5a:
33:79:cf:d9:f7:7a:04:e3:cc:4e:80:c4:55:39:36:e1:8a:d7:
99:51:12:9a:d5:d0:f9:97:20:9b:60:cb:b9:99:c4:d8:17:48:
ee:ae:cb:86:ab:af:b6:36:b1:73:d2:a3:51:56:be:72:93:e6:
0c:35:99:1c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICExMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB
QUJENDAyNzEwHhcNMjYwNzIwMTcxMjE5WhcNMjYwNzI3MTcxMjE5WjAYMRYwFAYD
VQQDEw02YTVlNTZmMy1hNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYESJoueiOAlhYAs5P8C32uasVXnAGgoB8cT8CUB1DQe+MhzCUv88/IWj2WB
qeBKLTTodJgC/JI1wnFFZn3dTT3I+xTCR2kTpgwJt+IllLi9o+aU3V73JxkaUjDl
iofY2qlWSkBUcyPoe4iCd2PC/RLjAxilJk0p9o9xbFxEclJ/+h6N5j5prsdqI0Jx
x8sUdCdMrO3apV+/ykHMzTDO3NrLTXVPb/tiS1JJQDdoIGZcNkv8PWds2mOnr6nB
vgWc7FFPDUKa4/HRWbWkGSs0plVZx0GutD/o55UVnHFTTNBKUenZKtX4JKYVMo+M
bxtzVYL7Y6j6LSsILuRrsY93EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFCRV/q6
irrT2XWD98JOKv37H0thMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB
MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J
SGE2RlJmZmpYWjJxdlVBbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArn1NVZja5oaqLGd0510611j+jlxZ0hKDSHk+DoeshkwK9cT7lhy9HVJXvpn0
TEr3AnEcGcsMtlVt9OdMFZaYD/1X48tbT4I44/Ne/qT3p7N/GLEzVtXtN2EDG8/P
j84GSWjXdBXCbb8HL5Wp7MZ+Crh3L8eNf1QbEZLYOIyDC9ViNJJNKeST/oGG3gbI
Sdb16A4f8USrHEk3UOvrIvphZxXnx7tQVcdNsCIMntFQPxOyrkYwPnpaFJnmE8X0
2OD2EeXvjfVaM3nP2fd6BOPMToDEVTk24YrXmVESmtXQ+Zcgm2DLuZnE2BdI7q7L
hquvtjaxc9KjUVa+cpPmDDWZHA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:51 2026 by rpki-client