
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
File: shmdscl5XUlnt_7Voe9wn6LpaGE.mft (raw, json)
Hash identifier: ESJkwngFClgwFdhgR6cLrdsLvfxjZMlkx70nPjSiPQc=
Subject key identifier: AF:7C:F2:8B:33:D3:76:DF:32:80:84:96:FA:81:A7:49:05:6B:0A:F0
Authority key identifier: B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61
Certificate issuer: /CN=A9111D65/serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861
Certificate serial: 6D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
Manifest number: 6C
Signing time: Tue 13 Oct 2026 08:40:32 +0000
Manifest this update: Tue 13 Oct 2026 08:40:31 +0000
Manifest next update: Tue 20 Oct 2026 08:40:31 +0000
Files and hashes: 1: shmdscl5XUlnt_7Voe9wn6LpaGE.crl (hash: DYC35JmHIxzIXSqH75lRbV+V27XRyUSyZ3AiykZ2J5Y=)
2: D5931DD822A911F1B999B242B5833773.roa (hash: 9CC6O07iFUNLEts6pdhGBre/dsBGCYzcLM8YjPj0LWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl
rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 20 Oct 2026 08:40:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109 (0x6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D65, serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861
Validity
Not Before: Oct 13 08:40:31 2026 GMT
Not After : Oct 20 08:40:31 2026 GMT
Subject: CN=6acdee80-ccdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:ad:a5:9b:89:71:e6:5e:e8:35:11:5a:f0:
be:06:69:33:79:64:50:07:af:0a:aa:50:a0:a4:da:
cf:f8:2b:12:6f:6f:81:b9:8b:00:f5:c1:cf:a8:5f:
89:56:29:53:e8:21:f6:60:c4:31:e1:4b:6a:94:15:
0b:99:06:e6:9f:06:e0:24:d4:16:bf:63:03:c6:9a:
35:98:83:d6:51:6d:70:05:0d:60:46:f2:0b:85:d6:
82:ca:2f:b9:eb:51:b3:fd:f1:17:d6:d0:ea:76:26:
2e:43:7f:b2:4d:94:73:3b:7b:c2:03:56:34:71:4b:
39:8a:bc:4e:e9:8d:cd:d1:a2:5a:57:49:f9:43:c7:
fa:b8:a1:08:85:b2:99:e1:d3:f2:b8:62:2f:7f:3f:
63:d0:a3:84:87:64:90:30:d7:74:2c:7c:d4:1f:a0:
ed:77:fd:8c:6a:00:9a:a8:4a:a0:52:af:2e:59:a7:
0a:7a:b3:94:28:99:39:39:ef:4f:3f:11:7e:6a:89:
d9:c1:35:a7:ea:be:2d:06:69:61:ae:7b:c3:fa:ec:
d0:66:f5:70:98:2c:cc:14:df:cf:f5:38:a3:e4:ae:
8a:e3:d0:9e:d6:16:4e:9a:14:5c:71:02:c7:6e:62:
79:41:7c:03:70:46:b8:eb:3b:94:6a:26:4e:ea:96:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:F2:8B:33:D3:76:DF:32:80:84:96:FA:81:A7:49:05:6B:0A:F0
X509v3 Authority Key Identifier:
keyid:B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c7:44:a9:56:14:cf:cd:81:7c:1b:d3:76:4d:7a:56:e1:83:74:
ad:2f:40:1c:13:45:29:1b:80:57:ac:bc:f9:10:ec:80:cc:d5:
d9:ad:9e:08:57:36:ff:56:fb:5c:d3:10:d3:8a:f8:c1:31:c5:
71:bf:5b:22:a2:45:1a:07:27:e2:c2:5b:12:77:46:37:45:89:
2a:1f:a9:ed:5c:a8:92:b8:3c:d1:a7:7e:6a:97:5f:a7:1a:33:
07:10:19:d4:97:83:9f:ca:35:d9:ce:f1:3b:92:a2:03:41:ce:
49:cf:29:93:00:d2:b9:21:86:5a:11:8c:c8:fd:1d:97:09:90:
6a:e8:1a:ce:a4:e3:63:1a:e5:af:6b:ca:2e:f5:a6:07:49:f2:
ab:34:d2:56:70:be:a9:38:be:12:1c:2c:61:07:f6:60:b9:85:
b3:c2:6c:0a:67:53:30:ba:47:f2:b4:aa:d7:7d:f7:cd:00:b3:
6a:8a:55:6d:1a:03:19:5b:77:be:a3:d6:df:12:16:9b:01:1e:
23:35:72:6c:2d:da:21:9c:78:ac:aa:b4:b6:1b:02:da:15:14:
52:2c:38:a1:5e:1d:b9:8a:f5:5f:72:8f:b0:a9:ef:03:4a:2a:
66:d9:6e:23:56:97:c8:54:84:64:c7:b3:df:9e:95:34:b1:71:
8a:8e:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:57:03 2026 by rpki-client