$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json) Hash identifier: gkw21j6e4TF+wCvaEitJaNKJiOXLXjdkPFhy6/F3i1A= Subject key identifier: 05:79:24:73:F2:45:58:B4:75:FC:85:8F:5E:A7:1A:C1:D6:62:83:15 Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft Manifest number: 3F Signing time: Tue 21 Jul 2026 10:24:54 +0000 Manifest this update: Tue 21 Jul 2026 10:24:53 +0000 Manifest next update: Tue 28 Jul 2026 10:24:53 +0000 Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: IawLg7Y12RoPloexceRdB84m48Sbik3dFCk3bHkxxS8=) 2: E86962E47E9A11F1BA87E1CE61A30FBC.roa (hash: r053k+9BngwOs8liZ7NrLuZJcmmTygGFd/pGOUQXUUY=) 3: 870077D67E9A11F1ACB132C361A30FBC.roa (hash: j/Veg91WVOxBOE2x+CFx84+oTH0wTF8HWi+UAwsfAcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Validity Not Before: Jul 21 10:24:53 2026 GMT Not After : Jul 28 10:24:53 2026 GMT Subject: CN=6a5f48f6-17db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:a4:7d:55:b3:76:4f:d0:b8:2a:1d:c0:67: 2f:60:4d:87:74:76:03:94:b3:5b:6d:6b:93:b4:30: 75:a8:90:a3:fd:62:c0:10:53:f1:c2:53:b9:7b:15: f5:cc:c6:da:78:42:e0:ee:5a:09:0d:a0:98:a8:b9: b3:e6:3d:c8:b4:4f:b0:73:16:1d:57:6e:22:4a:5b: 09:50:ad:44:10:0e:f8:0f:55:6e:5f:9b:2c:67:eb: 33:28:4a:ee:9f:7c:30:0b:ab:98:e5:79:30:e1:df: 71:c0:f7:d5:b9:0d:06:e4:8f:33:1f:ec:41:dd:9e: af:e9:46:44:5c:85:3d:08:4f:7f:2b:3c:80:39:7f: a3:7c:c4:b6:73:d0:33:45:31:41:09:fa:8c:d0:5b: 79:35:12:10:b8:e7:98:ee:8f:ff:f0:1c:3f:a0:3c: 35:a0:02:f5:76:c3:cf:da:fc:2b:0b:9b:29:ab:39: 73:82:02:57:85:26:5d:2e:a0:7f:7f:ed:42:ca:ab: 37:31:ad:cf:35:9b:fe:f0:5d:6a:d0:b9:b6:2f:2a: 4e:74:9d:aa:43:a5:a1:24:55:3a:21:99:12:6c:ed: 2b:49:48:12:14:dc:0c:dd:1e:89:4f:6d:4e:2c:11: 6e:2c:84:49:48:13:f7:77:10:d0:58:3d:2e:04:c3: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:79:24:73:F2:45:58:B4:75:FC:85:8F:5E:A7:1A:C1:D6:62:83:15 X509v3 Authority Key Identifier: keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3d:fd:e8:3b:3f:d9:5f:7f:8b:c8:38:e1:31:b7:2d:85:26: 49:99:52:18:80:1e:35:69:c6:1e:cc:70:6d:29:56:73:9c:d8: 87:73:f5:d3:a4:14:1d:6a:66:2b:cf:c8:1d:a0:87:23:50:4b: 92:42:41:51:fe:94:d7:ec:d6:a1:42:0e:99:62:b4:87:42:70: 93:d2:b8:e1:d4:9d:e4:02:0b:3d:f2:76:5a:32:70:4f:87:dc: 73:62:ab:93:8e:ff:da:b2:82:c9:b3:60:23:f8:d8:df:9f:49: 37:17:c8:53:0e:b4:ba:ad:7e:90:c6:13:c1:71:bd:82:d5:13: 11:66:64:81:31:2a:97:97:2d:1f:ad:eb:79:b4:00:38:8c:f1: f9:3b:c9:45:08:94:55:04:bd:7e:12:9a:24:64:63:34:f0:d1: ca:d9:a2:4c:21:cf:b8:5d:59:da:ad:da:60:81:a1:c9:1a:b7: fc:ce:3a:77:93:cb:6c:d9:29:d6:32:dd:a3:a2:02:b9:f7:59: c1:d3:3b:c8:1e:f8:be:33:63:d8:e9:53:8c:cc:a1:52:a1:e1: ab:d6:b1:08:3e:c5:44:23:6a:f4:3b:e8:0e:7f:db:52:4a:f1: 98:e6:16:c1:1c:1e:03:e4:1e:6a:6a:5b:e1:35:8e:b0:96:e9: 81:05:7b:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2 QkVGQTM0MTAeFw0yNjA3MjExMDI0NTNaFw0yNjA3MjgxMDI0NTNaMBgxFjAUBgNV BAMTDTZhNWY0OGY2LTE3ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVPqR9VbN2T9C4Kh3AZy9gTYd0dgOUs1tta5O0MHWokKP9YsAQU/HCU7l7FfXM xtp4QuDuWgkNoJioubPmPci0T7BzFh1XbiJKWwlQrUQQDvgPVW5fmyxn6zMoSu6f fDALq5jleTDh33HA99W5DQbkjzMf7EHdnq/pRkRchT0IT38rPIA5f6N8xLZz0DNF MUEJ+ozQW3k1EhC455juj//wHD+gPDWgAvV2w8/a/CsLmymrOXOCAleFJl0uoH9/ 7ULKqzcxrc81m/7wXWrQubYvKk50napDpaEkVTohmRJs7StJSBIU3AzdHolPbU4s EW4shElIE/d3ENBYPS4Ew9DPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUBXkkc/JF WLR1/IWPXqcawdZigxUwHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA+Pf3oOz/ZX3+LyDjhMbcthSZJmVIYgB41acYezHBtKVZznNiHc/XTpBQdamYr z8gdoIcjUEuSQkFR/pTX7NahQg6ZYrSHQnCT0rjh1J3kAgs98nZaMnBPh9xzYquT jv/asoLJs2Aj+Njfn0k3F8hTDrS6rX6QxhPBcb2C1RMRZmSBMSqXly0fret5tAA4 jPH5O8lFCJRVBL1+EpokZGM08NHK2aJMIc+4XVnardpggaHJGrf8zjp3k8ts2SnW Mt2jogK591nB0zvIHvi+M2PY6VOMzKFSoeGr1rEIPsVEI2r0O+gOf9tSSvGY5hbB HB4D5B5qalvhNY6wlumBBXty -----END CERTIFICATE-----Generated at Tue Jul 21 21:47:55 2026 by rpki-client