
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier: UEOvUW+UwJGUoAzRL6VqBV4o5b0KbXW4WuQR/iZICKU=
Subject key identifier: 05:D4:02:47:38:28:03:4A:E4:8A:75:BA:1E:FD:33:67:89:78:C5:45
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial: FE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number: FA
Signing time: Tue 07 Jul 2026 07:23:52 +0000
Manifest this update: Tue 07 Jul 2026 07:23:51 +0000
Manifest next update: Tue 14 Jul 2026 07:23:51 +0000
Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: jtO1d/lQ4ArRu1SatkCbRwsgWLeN2Y6Bk3SB7YEiPuQ=)
2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: KytT7CwlQe11jWfAsLPRMxvbGLLkhLmlX/I5QLbz6lk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Jul 2026 07:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Validity
Not Before: Jul 7 07:23:51 2026 GMT
Not After : Jul 14 07:23:51 2026 GMT
Subject: CN=6a4ca988-511c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:9d:c6:24:b3:f3:1d:ea:51:63:8c:20:ef:
d5:c8:72:5b:3e:c9:32:18:c1:d8:dd:18:97:3b:23:
f0:9f:94:3c:9e:0f:d8:92:21:87:7b:22:2b:11:61:
ed:81:fc:1d:f9:70:14:3b:aa:82:64:87:57:34:17:
20:7b:b5:76:65:28:3e:e0:d7:33:1d:5d:06:83:71:
a3:d4:12:37:79:2f:cf:ee:49:b8:7e:4d:df:8c:15:
1f:f9:7f:0a:6b:e1:55:fe:4a:0f:d4:4c:c6:7d:24:
2f:80:56:d0:ea:dd:57:a2:cb:50:fc:63:98:88:91:
be:2a:79:ee:b2:1c:58:9b:9b:4f:7f:4b:9b:76:9a:
58:39:25:14:ef:32:ad:15:92:15:aa:91:04:9f:47:
56:7e:44:6e:2e:57:ac:13:99:a8:75:79:79:8a:7b:
03:4e:99:eb:ba:ba:8e:be:c1:b7:9f:eb:2f:77:22:
ba:60:cb:1a:59:93:73:b2:0f:a3:53:eb:40:e0:26:
ae:b1:c1:5d:05:80:48:bf:11:c1:60:16:1f:3a:b9:
45:42:2e:61:58:eb:fc:b6:89:b2:5a:ee:af:12:0e:
3d:98:09:50:1b:f9:f0:d7:50:dc:6e:ff:89:51:de:
e2:e0:44:d4:8a:ed:4e:f9:17:1e:9a:2e:85:bb:73:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:02:47:38:28:03:4A:E4:8A:75:BA:1E:FD:33:67:89:78:C5:45
X509v3 Authority Key Identifier:
keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4b:9c:64:e1:91:47:9d:4b:13:b9:86:a1:5c:8f:e7:c3:f3:
2e:ab:66:fc:13:10:22:8e:ea:bf:0e:13:c4:96:ea:81:f8:d5:
37:ce:57:e1:3b:2b:b5:04:0b:d8:2b:55:a8:d8:5b:f1:d8:fb:
9f:dc:44:b4:7d:3a:af:29:1f:b3:af:ab:2a:a1:14:09:c9:66:
44:35:24:1a:b3:ba:20:76:c2:63:77:e0:3a:74:b3:b9:03:f2:
9d:ba:84:c5:fc:c5:8f:35:48:0f:d2:2f:7e:ac:ac:2d:e1:af:
1a:40:8a:9c:28:95:88:1f:45:ff:18:f5:47:46:57:16:0d:5d:
9b:6d:cd:c7:31:f3:f7:e4:d8:22:ff:e1:29:05:cc:8e:a3:63:
08:df:00:a3:ba:aa:17:7e:26:89:07:67:1a:d1:19:25:6c:9b:
76:87:2e:b4:a7:50:24:fb:d2:77:e6:02:ac:1f:ec:ad:f0:06:
1c:63:60:5f:03:6a:a5:82:95:b6:d6:1e:34:16:d5:ee:dd:2f:
78:dd:f5:5a:2e:f3:fe:4e:bd:0d:8e:2d:e1:1f:8d:85:0b:fe:
8a:42:7d:22:d4:34:63:d2:17:00:6e:d8:c4:ae:d2:6d:70:26:
44:5f:e1:96:1d:c2:92:04:7a:dd:29:d5:3f:04:d6:b7:5b:6f:
cf:41:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:03:23 2026 by rpki-client