
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
File: shmdscl5XUlnt_7Voe9wn6LpaGE.mft (raw, json)
Hash identifier: X1FDrI/JFyipRRKAeb2sgmc5+zCrkMcW5Bidb+w3Jo4=
Subject key identifier: D9:E3:06:EF:AC:16:2D:84:59:75:6B:A8:79:FE:57:E0:AF:B6:1E:E4
Authority key identifier: B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61
Certificate issuer: /CN=A9111D65/serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861
Certificate serial: 07
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
Manifest number: 06
Signing time: Wed 25 Mar 2026 08:22:37 +0000
Manifest this update: Wed 25 Mar 2026 08:22:37 +0000
Manifest next update: Wed 01 Apr 2026 08:22:37 +0000
Files and hashes: 1: shmdscl5XUlnt_7Voe9wn6LpaGE.crl (hash: dRwrMmbijNMHHswDz9PdeJtMMNGOOjsbEiAYlJfJ9DA=)
2: D5931DD822A911F1B999B242B5833773.roa (hash: 9CC6O07iFUNLEts6pdhGBre/dsBGCYzcLM8YjPj0LWE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl
rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 08:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D65, serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861
Validity
Not Before: Mar 25 08:22:37 2026 GMT
Not After : Apr 1 08:22:37 2026 GMT
Subject: CN=69c39b4d-bf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:59:e6:12:06:75:d4:df:d7:bf:8e:f1:b4:
08:71:07:79:25:52:5b:69:35:50:4c:6c:60:a0:2d:
8c:12:41:b3:1f:b2:98:59:0d:82:28:c3:36:a5:37:
c5:45:e5:5c:ee:da:11:1f:f6:bb:93:f0:de:d5:c8:
87:47:55:df:94:ac:e4:00:8e:d6:0c:d0:db:b7:aa:
66:a4:53:fb:e9:08:21:97:39:fb:60:2c:43:e0:b8:
8c:96:f1:e1:44:da:e2:9c:4e:ea:78:cc:da:1c:88:
c9:e9:f2:d6:3e:9a:8f:8a:45:75:e2:15:4e:ac:ea:
f4:41:80:25:fc:af:e2:6b:89:ed:dc:63:6e:42:6f:
2b:74:d0:32:47:43:66:06:1d:ee:08:d3:d0:22:5a:
ad:d7:99:8f:a6:ae:ba:97:1f:40:68:ca:a0:99:15:
f0:7c:68:10:80:b7:71:78:f0:f8:23:f9:15:ae:8d:
07:06:40:61:b1:0f:bb:77:58:5f:43:28:dd:98:f7:
18:51:53:58:9c:70:f9:a1:3c:86:4b:d2:c6:0c:0f:
4c:7a:d5:3c:7f:df:db:0d:72:65:3d:04:d6:92:c9:
e3:49:c6:f6:43:be:c6:ae:28:27:10:b1:83:d2:38:
67:ce:10:88:55:9c:3b:9c:85:8d:75:33:72:77:d9:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E3:06:EF:AC:16:2D:84:59:75:6B:A8:79:FE:57:E0:AF:B6:1E:E4
X509v3 Authority Key Identifier:
keyid:B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:c8:3a:31:e3:c3:eb:de:f5:0d:e5:93:3c:0e:71:bf:f2:fb:
28:0c:89:80:22:dc:7c:0d:c2:54:76:e7:80:6c:b7:26:5b:bb:
4c:c7:31:db:a7:43:73:59:ac:da:27:fe:5a:7d:48:20:d0:e4:
0d:ee:c4:1d:79:2f:50:e4:8a:d3:fe:2b:66:af:98:3f:32:08:
e8:f1:4e:10:a7:59:45:95:a6:45:eb:1c:b6:0b:6e:ff:3e:fc:
94:33:17:b6:ba:11:d7:6d:1f:12:77:dd:2e:d2:35:c4:17:54:
2b:15:12:60:19:da:49:e4:4e:25:3e:df:7e:eb:27:4f:b9:54:
e2:04:ca:1c:44:d5:af:c2:9c:28:42:cc:3d:82:6a:58:89:d2:
66:aa:3d:bb:26:46:64:94:50:33:19:48:e3:d9:8b:3f:71:a4:
74:38:cc:15:12:67:2e:a7:ab:04:4c:c8:08:2a:68:1a:a5:3e:
f5:34:04:66:d4:03:88:24:06:6d:9b:1b:d4:40:8d:00:a3:04:
5f:5d:6c:95:01:7f:2f:cf:a0:08:93:f7:cb:4e:0f:ef:7f:39:
e4:f6:50:9f:07:ec:1a:d4:9d:b3:66:74:69:ab:ee:e3:bd:8c:
9e:58:52:2e:d2:b2:45:22:97:4a:e8:8f:59:2f:30:8a:2a:32:
ca:76:c6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:26:26 2026 by rpki-client