
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: Qvn8Rh1aoCeiKKw6Be6RQyIN/7/OGO9r0mUgMLdgHP8=
Subject key identifier: 6A:79:7D:98:A7:50:87:BC:A9:76:B0:FD:F5:2E:9A:D4:87:00:2F:03
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 132E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 12EC
Signing time: Fri 04 Sep 2026 17:00:39 +0000
Manifest this update: Fri 04 Sep 2026 17:00:38 +0000
Manifest next update: Fri 11 Sep 2026 17:00:38 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: /nrNknofb8w1KwkPcE7hKpneTJ2DQ7c9D+rEkxteNrU=)
2: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: krbf5dctADsCVZfdltaoJKfg4me/fONaG9SIS0vFud8=)
3: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=)
4: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=)
5: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=)
6: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=)
7: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4910 (0x132e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Sep 4 17:00:38 2026 GMT
Not After : Sep 11 17:00:38 2026 GMT
Subject: CN=6a9af937-b7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:74:4d:1b:56:c8:2b:a3:79:64:98:0f:a8:
1d:33:a3:c3:47:60:af:c0:f1:d5:09:9f:34:8b:bd:
dd:7e:c0:ae:a9:d5:21:b5:38:47:70:47:b5:d5:11:
18:17:3c:90:35:5a:7a:30:0d:de:ef:e5:e5:1a:7a:
12:a8:05:f0:d6:dd:6e:c7:f3:90:8f:64:fc:a6:ea:
25:38:4d:00:a1:ad:39:47:f5:af:10:23:90:19:d5:
14:c3:61:69:e5:b8:a8:03:39:44:20:ff:fd:64:34:
5c:1a:58:c2:fb:d3:0d:11:8a:b7:16:a0:57:84:c5:
d9:73:a7:9e:cb:ae:42:30:38:5b:fb:22:db:e4:a4:
58:b6:75:9d:b0:c3:43:87:2c:31:de:59:e0:30:9d:
3d:59:92:05:6f:61:0f:05:4f:00:29:21:b0:03:54:
fb:14:82:92:76:88:f4:b1:b4:f1:14:12:16:f8:00:
d4:2c:f2:ad:83:43:28:9e:94:7f:01:28:2c:f1:85:
f4:5d:bd:6f:9b:63:e2:f9:53:cd:f7:f2:5a:eb:89:
90:c1:37:42:9c:b7:7b:2d:58:cc:32:59:8f:5b:63:
fd:2c:5f:c5:56:f5:dd:fb:ee:24:f0:5f:d6:d7:a3:
4d:d1:89:66:2c:7b:3a:2f:4b:b4:03:10:0a:cf:a7:
eb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:79:7D:98:A7:50:87:BC:A9:76:B0:FD:F5:2E:9A:D4:87:00:2F:03
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:2b:61:3d:31:00:bd:90:ed:5b:70:2f:51:4f:3a:60:e9:70:
ba:24:5c:2a:ec:68:4c:c0:48:37:56:7c:b8:84:dd:67:d6:3d:
a7:ef:bc:20:36:d4:22:78:c5:e2:61:28:39:58:58:c7:d6:b4:
52:63:cd:1a:94:16:ff:13:64:64:e1:72:f9:12:47:c9:fd:ba:
19:a5:09:b3:70:5b:75:9a:ab:8a:83:8b:3f:c0:79:8f:c3:99:
77:58:86:a7:33:0e:11:57:73:8e:a5:f0:66:59:40:b2:6a:db:
f5:59:9e:02:fd:51:0f:67:58:ac:7b:da:16:8d:c9:ae:ee:70:
a4:db:80:d5:bf:3e:3f:62:11:08:2f:c4:19:f0:03:17:69:70:
b9:11:a5:a0:b3:84:6d:36:eb:c1:95:11:f8:22:9e:3c:62:31:
d9:81:5d:4a:44:a8:d1:91:4a:b6:07:65:24:b5:20:78:d3:69:
bf:51:3a:e5:33:41:96:ce:03:f5:39:57:eb:53:94:a1:34:cf:
b3:7b:1e:b0:31:72:f4:f6:89:98:c6:20:2e:36:65:2e:87:3c:
ff:2a:6f:c7:df:fc:4a:09:60:09:2d:d3:aa:8a:22:1f:08:d1:
1f:79:89:7b:8e:26:52:29:dc:86:bf:45:5d:4a:55:a5:4c:ac:
a3:04:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:18:08 2026 by rpki-client