$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json) Hash identifier: NlNC4LlP7N3WrghNasmSLPC1TtPNav4O7tRi1YtFLy0= Subject key identifier: E3:92:46:C4:5A:64:3D:19:42:85:32:22:E3:A1:37:B0:23:59:C5:80 Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Certificate serial: 12D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft Manifest number: 1298 Signing time: Sat 28 Mar 2026 17:02:24 +0000 Manifest this update: Sat 28 Mar 2026 17:02:24 +0000 Manifest next update: Sat 04 Apr 2026 17:02:24 +0000 Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: zQEIVtWZLCLBtxZyEZcG0T3uRy6ZXTvN5L+fRnxdrb0=) 2: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=) 3: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=) 4: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=) 5: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: mL1wDKbNUQQjoMtW47ox2tYBHJ623H86bPa3cy15R1E=) 6: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=) 7: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 17:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4825 (0x12d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271 Validity Not Before: Mar 28 17:02:24 2026 GMT Not After : Apr 4 17:02:24 2026 GMT Subject: CN=69c809a0-011b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c2:cd:e5:9c:a2:e1:0c:ac:3a:0d:fc:ab:c8: a0:01:bd:58:1f:fe:8f:d9:5b:0f:a1:fa:73:dc:f4: 1c:61:78:e1:c3:a2:53:b6:79:61:3b:30:c1:41:b4: f4:c4:5e:97:80:41:49:5a:6d:ac:4e:1a:4e:3d:a0: 1b:fb:07:53:a4:70:a2:80:74:dc:bf:e5:f9:bc:fc: 88:fd:b9:63:8f:c1:d3:d2:fc:5f:54:be:d1:a5:ba: 09:fd:81:7c:99:a0:51:63:d6:0c:75:bf:08:41:e4: 2e:d8:ae:2c:0e:e2:cf:2b:ad:91:6f:a2:c8:63:79: 29:7d:f2:dc:8f:a6:20:3d:60:e9:19:39:ec:e4:84: e7:26:44:e2:c5:af:1b:33:68:da:2d:af:a0:86:f2: 4a:c7:93:e3:59:4d:86:11:94:7a:38:d0:e4:65:6e: d7:f3:74:1b:a9:b6:69:52:71:a7:07:1c:b6:79:7f: 7b:80:20:a9:20:41:59:68:f1:9c:4b:a6:08:5f:94: da:cc:b4:93:74:c9:21:b7:5e:b5:73:6e:a5:9c:5e: da:02:9c:1a:5c:48:95:51:e5:90:bb:7c:5b:7e:ec: 09:d5:31:e2:f0:0a:e3:d8:b0:10:fe:d2:0b:2a:4f: 1b:8d:f2:40:71:27:72:c3:0b:d3:6f:ad:91:2f:37: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:46:C4:5A:64:3D:19:42:85:32:22:E3:A1:37:B0:23:59:C5:80 X509v3 Authority Key Identifier: keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:0b:3c:3e:a2:0c:01:d6:bb:4d:8c:d7:4c:b3:45:9c:65:54: c9:2f:16:4d:99:5a:1f:99:b2:c9:8d:3e:27:e1:82:0c:40:ae: 27:c5:4f:aa:c8:75:3a:ea:3e:d7:59:6b:96:10:de:4b:20:ac: 5e:eb:5f:1e:6d:2f:5b:37:45:b5:7c:a1:a1:16:ad:69:48:a8: 29:10:77:60:7a:28:29:95:50:16:41:c7:2d:f4:68:2a:37:c2: 05:e5:88:82:55:39:96:e5:2a:11:73:4a:0d:dd:4a:c4:f5:4b: ea:7a:7a:32:4d:e3:7a:7c:2b:e6:6f:cd:3e:65:29:12:20:56: 0b:25:cc:f7:0e:04:bb:3b:28:a6:4a:d9:9e:96:b1:ed:09:39: 7f:59:4a:06:bb:b1:b1:cc:2b:71:9c:79:1e:ee:44:74:30:57: 49:98:a4:47:41:ed:91:3c:ea:cd:55:33:bc:b5:a8:bc:6f:1e: 30:f8:d6:6d:75:77:de:44:dd:be:86:59:14:91:15:84:e3:82: 2e:38:bb:cc:b0:9b:fd:84:90:39:dc:8e:cd:1b:b4:28:63:11: 6a:1c:bf:f4:4e:14:c1:d1:8a:ac:19:39:28:a4:a1:54:00:22: 2d:03:d5:26:d1:1f:8b:80:65:e2:0a:be:a2:f8:8b:0e:8a:84: ee:8f:62:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB QUJENDAyNzEwHhcNMjYwMzI4MTcwMjI0WhcNMjYwNDA0MTcwMjI0WjAYMRYwFAYD VQQDEw02OWM4MDlhMC0wMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApMLN5Zyi4QysOg38q8igAb1YH/6P2VsPofpz3PQcYXjhw6JTtnlhOzDBQbT0 xF6XgEFJWm2sThpOPaAb+wdTpHCigHTcv+X5vPyI/bljj8HT0vxfVL7RpboJ/YF8 maBRY9YMdb8IQeQu2K4sDuLPK62Rb6LIY3kpffLcj6YgPWDpGTns5ITnJkTixa8b M2jaLa+ghvJKx5PjWU2GEZR6ONDkZW7X83QbqbZpUnGnBxy2eX97gCCpIEFZaPGc S6YIX5TazLSTdMkht161c26lnF7aApwaXEiVUeWQu3xbfuwJ1THi8Arj2LAQ/tIL Kk8bjfJAcSdywwvTb62RLzfR6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOSRsRa ZD0ZQoUyIuOhN7AjWcWAMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J SGE2RlJmZmpYWjJxdlVBbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABAs8PqIMAda7TYzXTLNFnGVUyS8WTZlaH5myyY0+J+GCDECuJ8VPqsh1Ouo+ 11lrlhDeSyCsXutfHm0vWzdFtXyhoRataUioKRB3YHooKZVQFkHHLfRoKjfCBeWI glU5luUqEXNKDd1KxPVL6np6Mk3jenwr5m/NPmUpEiBWCyXM9w4EuzsopkrZnpax 7Qk5f1lKBruxscwrcZx5Hu5EdDBXSZikR0HtkTzqzVUzvLWovG8eMPjWbXV33kTd voZZFJEVhOOCLji7zLCb/YSQOdyOzRu0KGMRahy/9E4UwdGKrBk5KKShVAAiLQPV JtEfi4Bl4gq+oviLDoqE7o9ifQ== -----END CERTIFICATE-----Generated at Mon Mar 30 08:35:38 2026 by rpki-client