
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json)
Hash identifier: c5eOVrK27pu2dQVQeVS3HVZxNQV3x3Gvq9o9GkUyMP0=
Subject key identifier: B6:3A:17:15:B0:17:28:6E:9B:83:58:11:A4:DD:EB:2B:C9:7B:C2:35
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 0293
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
Manifest number: 027D
Signing time: Tue 23 Jun 2026 02:07:15 +0000
Manifest this update: Tue 23 Jun 2026 02:07:15 +0000
Manifest next update: Tue 30 Jun 2026 02:07:15 +0000
Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: RLoZn4TzwDMJ4MngnpCUv0bn3rl/HnWQsdWocJOPpbA=)
2: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=)
3: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 02:07:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 659 (0x293)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Validity
Not Before: Jun 23 02:07:15 2026 GMT
Not After : Jun 30 02:07:15 2026 GMT
Subject: CN=6a39ea53-1fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:39:77:e8:4e:b5:af:33:28:8e:fa:46:3f:a9:
12:f5:27:c3:77:9e:11:00:9a:5b:ae:5e:9d:89:40:
6c:46:7b:48:b3:dc:9f:12:47:76:a1:b0:a6:13:be:
2a:e9:48:dc:af:79:e8:00:50:d5:1c:3e:5c:9e:ea:
93:76:7b:66:7e:30:53:3a:56:65:e0:fd:56:d7:9a:
53:55:66:31:e3:1a:35:d2:e7:cb:27:f6:07:a9:38:
43:65:e3:2b:3c:a5:87:89:1d:5c:1c:0a:e5:ec:32:
39:52:f7:f6:18:af:3c:1b:a8:d4:cb:cb:48:9f:a5:
33:d4:77:45:f0:db:48:c8:4c:07:81:6b:55:39:21:
42:b1:9c:f2:5f:e1:ee:da:d1:0c:28:6a:06:95:e7:
37:4c:b6:87:5f:46:8a:02:9a:f9:e4:dc:79:70:d4:
e6:1f:56:0c:cc:05:ea:87:4e:69:61:d9:41:2f:48:
03:42:a6:d6:e7:5b:cc:49:43:11:09:f2:a5:c1:0a:
77:5d:5a:04:8d:fb:70:69:0f:0d:da:e9:3f:81:bd:
33:da:e5:fa:19:60:fa:0c:8f:5b:9d:99:42:8f:73:
41:02:84:74:b2:b3:22:d7:43:34:23:26:6c:25:4d:
0f:aa:7c:ea:fa:30:2c:5c:3e:25:82:ff:35:13:12:
02:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:17:15:B0:17:28:6E:9B:83:58:11:A4:DD:EB:2B:C9:7B:C2:35
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:3a:64:d4:d4:58:87:26:01:14:7e:6f:70:e8:f2:ef:cf:4f:
f3:d8:89:93:f8:12:92:d5:96:fa:2b:49:b8:9b:6b:c6:52:f1:
81:9d:05:8b:33:13:77:6a:d6:d4:96:06:fd:eb:0c:fb:10:a2:
cf:4c:60:66:8a:8d:d1:59:56:75:67:81:c9:f1:af:ad:a9:fc:
46:34:33:04:b7:db:06:ea:f3:45:e8:c5:2d:4b:e5:86:ad:54:
24:1a:9e:c0:18:f5:d9:52:1b:06:ba:92:76:b0:44:f6:c1:6b:
62:9c:e4:5b:73:37:d9:4a:98:25:f7:b4:b0:da:a1:f0:ec:48:
b7:2b:af:aa:a9:9b:c4:6a:b1:c5:d1:98:8a:fa:b0:ba:c3:d2:
c7:26:a6:8f:ce:88:0a:4c:1d:e0:c7:6d:89:65:83:3b:b0:9e:
7e:49:8f:50:a2:51:9f:ea:7b:fd:6a:60:d7:15:b3:7c:61:93:
39:a3:57:85:32:1e:f9:44:65:60:58:e9:18:62:02:4f:79:99:
50:7e:4e:72:ad:e9:b8:cc:f9:6d:09:d7:71:eb:63:9e:37:1a:
8e:19:dd:0a:77:bd:4e:a0:00:65:9d:82:51:13:7b:01:4c:b6:
20:a6:85:62:aa:5d:a7:83:90:65:9b:f2:52:1a:6c:a5:1b:f6:
f7:b5:d9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:34:12 2026 by rpki-client