$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json) Hash identifier: B8GEXvDc5CK+/dgC0oRxSfw98VseBoH4blQ0l+flHNQ= Subject key identifier: BE:AA:AE:11:63:94:D9:D8:F9:0E:55:D8:AE:7F:E2:B2:61:4E:13:0E Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft Manifest number: 10 Signing time: Tue 21 Apr 2026 08:52:50 +0000 Manifest this update: Tue 21 Apr 2026 08:52:49 +0000 Manifest next update: Tue 28 Apr 2026 08:52:49 +0000 Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: yRiWLbndwCtppK6Nm4oHcZvYplazDqVV2SgeKe1Yq+Y=) 2: 712388E4280111F1A83DAB9AB3833773.roa (hash: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:52:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Validity Not Before: Apr 21 08:52:49 2026 GMT Not After : Apr 28 08:52:49 2026 GMT Subject: CN=69e73ae2-2813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:3a:4a:2f:f1:31:9d:c7:1c:1f:5f:2d:cd: 2a:1b:24:70:2b:2d:95:c1:0f:04:18:b6:13:b6:b4: b6:0e:aa:66:13:47:18:24:74:9a:ea:1b:74:81:d0: 00:49:b1:8e:2b:d8:a0:99:fc:fb:0a:1d:ff:18:e6: 5c:5c:d8:dc:a0:11:39:1c:c3:ac:9b:a4:52:36:b2: e4:a4:8c:01:fc:5b:4e:96:d6:53:75:63:30:59:b8: ed:3d:8c:7c:5f:00:19:cd:66:ca:03:bd:97:80:2f: a4:a0:63:90:30:02:ea:08:28:7b:c5:57:74:9e:b7: b6:dc:9c:31:1b:05:da:11:01:a1:90:2f:cf:0c:d4: c7:32:7d:a3:5c:de:69:05:9b:16:46:a9:ec:5f:d2: 01:d3:57:fa:06:5f:82:5f:a7:52:91:08:49:02:0a: 93:b6:c0:dd:f0:89:c8:a0:e4:71:36:a8:36:ba:26: af:ea:d6:aa:b9:1a:71:e8:ce:b0:35:7e:cd:01:b4: 36:96:f6:17:84:01:7c:82:49:db:08:f7:47:c4:9d: 3d:6a:b2:9d:74:92:27:0a:8b:a1:52:6b:34:62:7c: 7f:0f:de:45:c1:1e:0d:2c:7d:44:ea:2f:84:a4:2d: 62:41:e4:b6:f3:80:72:09:d4:7a:e6:da:53:1d:a4: 4d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AA:AE:11:63:94:D9:D8:F9:0E:55:D8:AE:7F:E2:B2:61:4E:13:0E X509v3 Authority Key Identifier: keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:20:15:59:6f:2c:ab:9c:41:da:ec:83:e6:76:f9:2f:ac:3b: c6:f0:2f:01:b3:4e:dc:1d:46:0c:ad:55:ef:f8:35:03:fa:eb: 2d:e1:3a:14:32:f1:ee:df:46:2f:d7:2d:b5:59:6e:ca:48:95: b1:78:e3:8e:20:74:ba:11:75:7b:c4:3e:76:ef:3e:07:75:4f: d9:71:c9:09:b2:2c:6d:21:0f:37:45:5c:b8:8e:7c:ab:23:95: 54:cc:9e:9e:43:79:d4:4d:27:f4:d3:42:62:c4:82:c3:a5:35: 4b:30:93:b7:d9:99:9b:70:a4:77:a7:be:72:46:d1:3a:fd:7f: 47:a0:01:cc:46:c5:03:b5:7c:dc:16:5d:89:72:cf:72:7a:84: 67:c8:96:2d:1f:6c:e7:a3:fb:3a:04:20:8a:56:2f:f6:a9:1c: 8c:3f:94:58:b6:0e:e1:5f:24:bb:fa:92:d6:cc:7a:46:a7:43: 6d:29:3d:32:7a:70:eb:ce:ea:75:6d:72:1a:c7:d4:ab:1f:da: a6:9f:b6:86:6e:a7:42:7b:8a:a3:0f:13:3a:b4:49:e7:0b:c7: 54:88:ec:1d:34:4d:66:7a:d3:6f:19:82:0d:4d:d1:c5:5e:44: 8b:c4:4d:4c:5a:fd:83:41:e3:12:4a:39:8c:c0:ea:7a:f4:a1: 53:3b:0e:1f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2 QkVGQTM0MTAeFw0yNjA0MjEwODUyNDlaFw0yNjA0MjgwODUyNDlaMBgxFjAUBgNV BAMTDTY5ZTczYWUyLTI4MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2rjpKL/ExncccH18tzSobJHArLZXBDwQYthO2tLYOqmYTRxgkdJrqG3SB0ABJ sY4r2KCZ/PsKHf8Y5lxc2NygETkcw6ybpFI2suSkjAH8W06W1lN1YzBZuO09jHxf ABnNZsoDvZeAL6SgY5AwAuoIKHvFV3Set7bcnDEbBdoRAaGQL88M1McyfaNc3mkF mxZGqexf0gHTV/oGX4Jfp1KRCEkCCpO2wN3wicig5HE2qDa6Jq/q1qq5GnHozrA1 fs0BtDaW9heEAXyCSdsI90fEnT1qsp10kicKi6FSazRifH8P3kXBHg0sfUTqL4Sk LWJB5LbzgHIJ1Hrm2lMdpE0jAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvqquEWOU 2dj5DlXYrn/ismFOEw4wHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBDIBVZbyyrnEHa7IPmdvkvrDvG8C8Bs07cHUYMrVXv+DUD+ust4ToUMvHu30Yv 1y21WW7KSJWxeOOOIHS6EXV7xD527z4HdU/ZcckJsixtIQ83RVy4jnyrI5VUzJ6e Q3nUTSf000JixILDpTVLMJO32ZmbcKR3p75yRtE6/X9HoAHMRsUDtXzcFl2Jcs9y eoRnyJYtH2zno/s6BCCKVi/2qRyMP5RYtg7hXyS7+pLWzHpGp0NtKT0yenDrzup1 bXIax9SrH9qmn7aGbqdCe4qjDxM6tEnnC8dUiOwdNE1metNvGYINTdHFXkSLxE1M Wv2DQeMSSjmMwOp69KFTOw4f -----END CERTIFICATE-----Generated at Tue Apr 21 21:32:58 2026 by rpki-client