$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json) Hash identifier: F2au6KlUWVFLN/6rR5jxkHmO23owBCAI4XRSZnPhVo4= Subject key identifier: AD:87:4A:D3:7C:77:11:E6:F1:DD:FD:B4:05:43:FA:CC:B2:D7:F3:8E Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Certificate serial: 026C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft Manifest number: 0256 Signing time: Sun 05 Apr 2026 01:54:56 +0000 Manifest this update: Sun 05 Apr 2026 01:54:55 +0000 Manifest next update: Sun 12 Apr 2026 01:54:55 +0000 Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: 4mHGJW+Z5wtspBeqMi3tyZBC5fWplmXHMQTevHQnhRE=) 2: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=) 3: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 620 (0x26c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B Validity Not Before: Apr 5 01:54:55 2026 GMT Not After : Apr 12 01:54:55 2026 GMT Subject: CN=69d1c0f0-4a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:7d:db:3b:60:d8:4c:5a:61:d6:ae:87:85: eb:55:a3:ae:b7:ff:68:93:b3:01:d1:6f:3c:8f:ca: a6:83:57:2e:f9:b3:59:fc:11:b4:43:8a:cc:0c:5d: 84:66:97:6e:79:8a:6e:7a:49:97:32:c7:ff:14:e1: 12:2f:33:0b:4e:f5:88:6c:36:39:88:64:63:91:61: e0:58:47:53:87:b5:53:e9:ee:67:6e:73:dd:f8:84: bd:17:b8:31:b5:d7:66:3d:bc:e7:6e:fb:c7:d3:8a: e5:76:12:a5:3e:6d:0d:9c:54:22:83:40:0f:33:75: 6d:e2:56:1e:e3:a6:b9:f2:02:2c:b5:ad:5d:36:cd: 5b:37:4e:12:ce:8d:c4:a3:78:d4:74:fe:6c:09:05: 3c:4e:7d:cd:d9:0b:1c:41:e7:a3:eb:90:e1:9c:5a: 70:e7:99:a4:3c:27:66:63:59:ec:21:b5:17:9f:c9: ec:18:bf:96:b8:49:a3:07:cb:90:7d:b6:f4:13:fa: 50:17:d5:89:4f:50:6f:c5:d5:26:57:ac:20:d6:b9: 44:2f:54:7e:2e:bb:35:79:49:29:43:52:05:92:ba: 12:b7:72:aa:97:be:fb:98:19:10:7d:64:2a:c0:e8: a8:ab:65:c0:66:5b:4d:17:d9:dc:c2:8e:32:44:de: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:87:4A:D3:7C:77:11:E6:F1:DD:FD:B4:05:43:FA:CC:B2:D7:F3:8E X509v3 Authority Key Identifier: keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:98:ba:2f:2f:0b:74:d7:6e:13:01:58:9e:4b:a6:b7:88:56: f4:17:1a:3b:4d:85:8c:b3:32:07:4c:c4:85:97:14:72:0c:87: c8:df:e5:9d:cb:2b:de:f2:42:53:c3:f7:0d:1f:89:78:c5:ec: 77:76:b6:08:5e:f1:87:a4:ed:13:ef:57:e2:6d:73:82:bc:ee: c1:5e:0b:36:82:ae:53:54:cf:fb:39:a2:3c:66:92:c6:73:5f: 18:d1:07:b5:64:95:12:75:43:a0:c5:8a:9b:8c:a6:a6:09:39: f2:4d:75:74:97:76:07:31:f8:c6:f2:5a:cc:4e:b4:48:e3:56: e5:8f:05:85:59:70:17:56:24:53:88:ae:18:72:06:5d:83:50: 54:77:a8:aa:19:40:62:1c:a9:22:ae:d0:01:5f:18:1d:2d:7b: b5:7d:81:f8:49:5e:a7:d8:51:0e:1c:54:3a:32:c8:cc:cc:9f: 21:47:d2:35:21:57:7e:c7:99:c9:b6:a6:6e:f6:4f:cd:99:25: 5b:2b:24:d4:65:d9:4c:54:10:b1:e9:79:78:fd:87:fe:df:75: 09:10:6d:ca:2e:c2:f9:fc:98:c7:e2:ca:2f:30:72:33:74:3a: d6:91:2e:66:82:cc:2d:e5:e4:ee:d1:75:bb:aa:66:84:a4:f9: f7:34:aa:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyNDYxMTAvBgNVBAUTKDRBMTg4RTMxODdDRUM1RDM2QzM2OEMyNEU5NEY0MzFE MDQyNTNCN0IwHhcNMjYwNDA1MDE1NDU1WhcNMjYwNDEyMDE1NDU1WjAYMRYwFAYD VQQDEw02OWQxYzBmMC00YTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Dt92ztg2ExaYdauh4XrVaOut/9ok7MB0W88j8qmg1cu+bNZ/BG0Q4rMDF2E ZpdueYpuekmXMsf/FOESLzMLTvWIbDY5iGRjkWHgWEdTh7VT6e5nbnPd+IS9F7gx tddmPbznbvvH04rldhKlPm0NnFQig0APM3Vt4lYe46a58gIsta1dNs1bN04Szo3E o3jUdP5sCQU8Tn3N2QscQeej65DhnFpw55mkPCdmY1nsIbUXn8nsGL+WuEmjB8uQ fbb0E/pQF9WJT1BvxdUmV6wg1rlEL1R+Lrs1eUkpQ1IFkroSt3Kql777mBkQfWQq wOioq2XAZltNF9ncwo4yRN6H+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK2HStN8 dxHm8d39tAVD+syy1/OOMB8GA1UdIwQYMBaAFEoYjjGHzsXTbDaMJOlPQx0EJTt7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTI0Ni8zOEM5NzA4QUIx MDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hkTnNOb3drNlU5REhRUWxP M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NoaU9NWWZPeGROc05vd2s2VTlESFFRbE8zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTI0Ni8zOEM5NzA4QUIxMDgxMUVEQTg4NTQyMTdDNEY5QUUwMi9TaGlPTVlmT3hk TnNOb3drNlU5REhRUWxPM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOJi6Ly8LdNduEwFYnkumt4hW9BcaO02FjLMyB0zEhZcUcgyHyN/lncsr3vJC U8P3DR+JeMXsd3a2CF7xh6TtE+9X4m1zgrzuwV4LNoKuU1TP+zmiPGaSxnNfGNEH tWSVEnVDoMWKm4ympgk58k11dJd2BzH4xvJazE60SONW5Y8FhVlwF1YkU4iuGHIG XYNQVHeoqhlAYhypIq7QAV8YHS17tX2B+Elep9hRDhxUOjLIzMyfIUfSNSFXfseZ ybambvZPzZklWysk1GXZTFQQsel5eP2H/t91CRBtyi7C+fyYx+LKLzByM3Q61pEu ZoLMLeXk7tF1u6pmhKT59zSqDw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:16 2026 by rpki-client