$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft File: shmdscl5XUlnt_7Voe9wn6LpaGE.mft (raw, json) Hash identifier: moCGt01Uevu1kKHPkrb4822JFTRANS9Vs3Tl610Ot0c= Subject key identifier: C3:D8:85:C1:14:F2:7D:E9:79:E4:DD:FB:EB:71:75:76:5D:E1:5F:F3 Authority key identifier: B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61 Certificate issuer: /CN=A9111D65/serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft Manifest number: 42 Signing time: Thu 23 Jul 2026 10:28:01 +0000 Manifest this update: Thu 23 Jul 2026 10:28:01 +0000 Manifest next update: Thu 30 Jul 2026 10:28:01 +0000 Files and hashes: 1: shmdscl5XUlnt_7Voe9wn6LpaGE.crl (hash: cLwwfWKCdq4ZQPgI3M4PksU7a3VNREuc2/KgJqgEtxA=) 2: D5931DD822A911F1B999B242B5833773.roa (hash: 9CC6O07iFUNLEts6pdhGBre/dsBGCYzcLM8YjPj0LWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111D65, serialNumber=B2199DB1C9795D4967B7FED5A1EF709FA2E96861 Validity Not Before: Jul 23 10:28:01 2026 GMT Not After : Jul 30 10:28:01 2026 GMT Subject: CN=6a61ecb1-21af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:c5:11:a3:2c:b5:06:a7:64:e3:33:6d:0b: a1:2f:d0:7e:78:78:7d:7d:93:a6:33:ff:0b:b4:14: 65:e5:77:89:e4:0f:bf:cf:e2:87:94:92:c0:00:6a: bb:d5:b8:9a:5c:47:c4:51:ee:49:81:6d:3f:83:4b: 3f:e4:db:dd:79:59:32:f5:45:e0:7b:8d:d0:a0:9a: 7c:fd:d6:ec:ff:8b:1c:8b:ce:64:de:1c:0a:8c:32: ed:6a:27:d4:c6:33:04:6f:2a:52:22:20:ea:59:a9: 9e:71:4d:4f:77:7a:41:fe:b7:cb:a0:db:b4:51:20: 58:d1:80:52:9a:08:45:1f:5a:50:e3:0d:19:62:7d: d1:9f:91:34:c2:f2:d4:00:19:67:a9:f7:c3:26:ea: c7:66:b7:bb:d5:88:40:5d:3e:12:fd:24:9e:3c:c8: 42:7b:52:a8:e1:8a:28:02:bc:04:35:83:39:b2:5c: ab:05:63:a3:80:48:98:94:26:51:c4:3f:9b:af:c6: 7b:cd:94:e3:56:f1:77:e0:97:48:31:5e:85:03:01: 8b:9f:e3:0f:1f:d9:a6:31:f1:f4:aa:c5:ab:cc:9c: 65:65:d2:c3:a6:46:a2:ba:35:76:ed:71:95:02:30: f9:93:a6:a5:55:cf:f2:b1:2b:4f:47:c8:33:f2:3b: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D8:85:C1:14:F2:7D:E9:79:E4:DD:FB:EB:71:75:76:5D:E1:5F:F3 X509v3 Authority Key Identifier: keyid:B2:19:9D:B1:C9:79:5D:49:67:B7:FE:D5:A1:EF:70:9F:A2:E9:68:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/shmdscl5XUlnt_7Voe9wn6LpaGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/C6C5B8D422A811F1A29C851CB5833773/shmdscl5XUlnt_7Voe9wn6LpaGE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:95:19:fc:62:59:15:40:28:61:bf:4e:70:79:cb:3e:1a: 3d:dc:2a:ed:6d:dd:8b:21:33:79:c3:b8:c2:45:91:d0:e8:97: a0:18:ea:c4:10:4c:62:d2:a2:60:26:ee:fc:3f:b3:5b:62:0d: 9c:14:3e:37:ca:c9:96:71:52:cc:be:06:27:95:28:9c:31:ab: cc:87:e2:eb:8c:cc:82:7f:82:f7:99:ba:2e:43:c9:0b:10:26: c3:1b:8e:1a:6e:31:d9:10:0e:f5:68:20:f7:6a:60:ba:76:12: f6:9b:94:32:9b:90:97:13:89:62:7c:c8:28:e1:c6:90:d0:b6: 35:22:55:5c:15:ef:82:79:10:fc:a2:5f:40:a1:be:8b:71:47: 3a:8a:ea:1b:ac:0a:59:87:b8:f6:3c:c5:cc:ae:de:e2:18:f1: eb:a4:3a:90:0a:fd:d0:b8:76:51:29:62:8c:65:56:ea:e5:9e: 9e:21:3b:1f:ef:0f:da:df:2e:16:2a:6c:84:b0:b4:ee:54:ee: f7:b7:5d:f0:08:de:1a:79:c4:4a:ff:19:38:62:3f:f1:4d:e3: e2:76:e0:82:74:d6:70:86:6f:57:f4:81:ee:16:df:7d:85:8d: fb:7d:0b:78:2f:72:26:9f:47:fc:a8:8a:0f:c3:db:5f:fc:ed: ca:85:50:94 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MUQ2NTExMC8GA1UEBRMoQjIxOTlEQjFDOTc5NUQ0OTY3QjdGRUQ1QTFFRjcwOUZB MkU5Njg2MTAeFw0yNjA3MjMxMDI4MDFaFw0yNjA3MzAxMDI4MDFaMBgxFjAUBgNV BAMTDTZhNjFlY2IxLTIxYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6psURoyy1Bqdk4zNtC6Ev0H54eH19k6Yz/wu0FGXld4nkD7/P4oeUksAAarvV uJpcR8RR7kmBbT+DSz/k2915WTL1ReB7jdCgmnz91uz/ixyLzmTeHAqMMu1qJ9TG MwRvKlIiIOpZqZ5xTU93ekH+t8ug27RRIFjRgFKaCEUfWlDjDRlifdGfkTTC8tQA GWep98Mm6sdmt7vViEBdPhL9JJ48yEJ7UqjhiigCvAQ1gzmyXKsFY6OASJiUJlHE P5uvxnvNlONW8Xfgl0gxXoUDAYuf4w8f2aYx8fSqxavMnGVl0sOmRqK6NXbtcZUC MPmTpqVVz/KxK09HyDPyOwvfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw9iFwRTy fel55N3763F1dl3hX/MwHwYDVR0jBBgwFoAUshmdscl5XUlnt/7Voe9wn6LpaGEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDY1L0M2QzVCOEQ0MjJB ODExRjFBMjlDODUxQ0I1ODMzNzczL3NobWRzY2w1WFVsbnRfN1ZvZTl3bjZMcGFH RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc2htZHNjbDVYVWxudF83Vm9lOXduNkxwYUdFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx RDY1L0M2QzVCOEQ0MjJBODExRjFBMjlDODUxQ0I1ODMzNzczL3NobWRzY2w1WFVs bnRfN1ZvZTl3bjZMcGFHRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCAcZUZ/GJZFUAoYb9OcHnLPho93Crtbd2LITN5w7jCRZHQ6JegGOrEEExi0qJg Ju78P7NbYg2cFD43ysmWcVLMvgYnlSicMavMh+LrjMyCf4L3mbouQ8kLECbDG44a bjHZEA71aCD3amC6dhL2m5Qym5CXE4lifMgo4caQ0LY1IlVcFe+CeRD8ol9Aob6L cUc6iuobrApZh7j2PMXMrt7iGPHrpDqQCv3QuHZRKWKMZVbq5Z6eITsf7w/a3y4W KmyEsLTuVO73t13wCN4aecRK/xk4Yj/xTePiduCCdNZwhm9X9IHuFt99hY37fQt4 L3Imn0f8qIoPw9tf/O3KhVCU -----END CERTIFICATE-----Generated at Fri Jul 24 14:25:38 2026 by rpki-client