$ rpki-client -vvvf rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft File: sh-7koheKG95wUMeEHecbxfbntc.mft (raw, json) Hash identifier: mIdEN2yznu3OW4uBLaP0tTM2IUrA7FH28aGLIwMkNaA= Subject key identifier: 9A:EA:1A:B2:05:09:37:3B:25:6B:2B:28:99:16:BB:69:AA:C1:6D:D8 Authority key identifier: B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7 Certificate issuer: /CN=A9114747/serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft Manifest number: 1B Signing time: Wed 23 Sep 2026 08:45:54 +0000 Manifest this update: Wed 23 Sep 2026 08:45:53 +0000 Manifest next update: Wed 30 Sep 2026 08:45:53 +0000 Files and hashes: 1: sh-7koheKG95wUMeEHecbxfbntc.crl (hash: 4ufAOxzcGqE0jb6ATLZMiwVpC/XS9U1ITPoiV74L/SY=) 2: E855FB7A980111F1937686323211F970.roa (hash: 6NC9VsA0PjYcqqS7+rb/opvcfAVHW6RSMyp3OIjHA6M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 08:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114747, serialNumber=B21FBB92885E286F79C1431E10779C6F17DB9ED7 Validity Not Before: Sep 23 08:45:53 2026 GMT Not After : Sep 30 08:45:53 2026 GMT Subject: CN=6ab391c2-ae83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:58:42:35:f6:30:f6:5d:2d:e5:28:8c:4a:72: 44:fe:e2:87:51:da:8a:50:9a:8b:c8:09:29:94:18: 83:9a:95:f5:3b:fe:0e:04:73:0e:a4:a6:4c:29:84: b6:0d:4b:a5:19:87:36:c1:40:18:22:ab:98:51:fa: 52:5f:86:f0:02:1d:90:fc:6b:36:7d:2a:9e:17:cb: 1b:20:95:e9:8a:1a:51:ec:17:8b:8e:57:18:72:2f: 03:3c:6c:69:a7:ba:e8:0d:bd:e8:4b:32:de:2a:7e: 13:ca:04:73:8e:90:ea:95:87:f4:9c:23:b4:e8:9d: ec:1e:7a:04:3f:8d:b2:a8:14:2a:16:95:45:b1:0d: 19:cc:a1:df:35:a4:7c:a7:ab:ae:44:89:41:b8:ef: e0:36:23:67:c5:d1:f7:b2:46:07:d7:97:f9:e7:52: 0b:d9:78:eb:de:29:41:4d:6d:f8:c9:a0:4f:0a:3c: d4:35:da:b7:4b:3f:3d:12:b6:95:d7:ab:b5:98:d6: fe:b5:8c:b2:b6:9d:7f:65:42:28:2c:4b:f9:3c:49: 14:d5:6d:fc:c1:c5:6f:1e:14:29:71:40:9e:c4:d0: 8c:92:aa:b9:24:6d:0e:c6:43:47:91:00:2a:e9:1d: b1:d9:d7:2b:3b:d3:14:15:52:f3:d6:46:be:31:6f: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EA:1A:B2:05:09:37:3B:25:6B:2B:28:99:16:BB:69:AA:C1:6D:D8 X509v3 Authority Key Identifier: keyid:B2:1F:BB:92:88:5E:28:6F:79:C1:43:1E:10:77:9C:6F:17:DB:9E:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sh-7koheKG95wUMeEHecbxfbntc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114747/1C49046A980011F19779D6E73111F970/sh-7koheKG95wUMeEHecbxfbntc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e7:4b:53:67:ca:39:b7:84:45:a6:99:ea:bc:66:c9:1b:e9: 1e:dc:2a:6c:4e:b3:0f:b8:d2:e1:b9:58:ed:89:b9:55:6a:8b: d5:52:87:2e:95:50:2c:de:ae:ad:f6:c5:66:3f:77:72:2e:72: b1:9f:4a:e3:8a:2d:0f:9a:57:0f:c7:af:76:6a:bf:46:f0:36: 7b:f7:55:42:d8:ac:63:ea:c0:ff:87:83:43:c5:42:dd:82:c6: 24:64:be:75:30:52:52:e8:09:cb:59:84:71:02:2f:ba:b6:26: 08:fe:8a:d7:51:a5:58:f7:56:6d:b1:6d:d1:92:bf:4b:ce:dc: 71:45:b2:cf:13:2e:d6:9f:c0:75:cb:7a:c1:61:25:bc:0d:41: f2:e5:fb:bb:c2:f5:e4:a5:80:5c:66:1a:e9:7c:fc:49:a8:4f: d8:a5:65:aa:79:f8:8f:90:a9:e1:f6:cb:d4:b9:20:00:de:a4: 84:78:1c:83:1f:ba:08:eb:a5:cf:36:c6:08:31:2e:0c:d2:42: 66:16:fb:48:c3:39:21:74:c5:89:e0:cc:f2:3f:2b:ed:6b:b9: 22:61:9d:1e:54:56:ed:bb:2e:5d:0f:ce:14:e8:b7:c8:c0:54: e5:73:6f:7f:17:14:13:cc:6c:6a:87:fe:dd:b6:79:b9:3b:6d: 7d:a3:52:31 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDc0NzExMC8GA1UEBRMoQjIxRkJCOTI4ODVFMjg2Rjc5QzE0MzFFMTA3NzlDNkYx N0RCOUVENzAeFw0yNjA5MjMwODQ1NTNaFw0yNjA5MzAwODQ1NTNaMBgxFjAUBgNV BAMTDTZhYjM5MWMyLWFlODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1WEI19jD2XS3lKIxKckT+4odR2opQmovICSmUGIOalfU7/g4Ecw6kpkwphLYN S6UZhzbBQBgiq5hR+lJfhvACHZD8azZ9Kp4XyxsglemKGlHsF4uOVxhyLwM8bGmn uugNvehLMt4qfhPKBHOOkOqVh/ScI7ToneweegQ/jbKoFCoWlUWxDRnMod81pHyn q65EiUG47+A2I2fF0feyRgfXl/nnUgvZeOveKUFNbfjJoE8KPNQ12rdLPz0StpXX q7WY1v61jLK2nX9lQigsS/k8SRTVbfzBxW8eFClxQJ7E0IySqrkkbQ7GQ0eRACrp HbHZ1ys70xQVUvPWRr4xb9VnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmuoasgUJ NzslaysomRa7aarBbdgwHwYDVR0jBBgwFoAUsh+7koheKG95wUMeEHecbxfbntcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NzQ3LzFDNDkwNDZBOTgw MDExRjE5Nzc5RDZFNzMxMTFGOTcwL3NoLTdrb2hlS0c5NXdVTWVFSGVjYnhmYm50 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc2gtN2tvaGVLRzk1d1VNZUVIZWNieGZibnRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NzQ3LzFDNDkwNDZBOTgwMDExRjE5Nzc5RDZFNzMxMTFGOTcwL3NoLTdrb2hlS0c5 NXdVTWVFSGVjYnhmYm50Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBP50tTZ8o5t4RFppnqvGbJG+ke3CpsTrMPuNLhuVjtiblVaovVUoculVAs3q6t 9sVmP3dyLnKxn0rjii0PmlcPx692ar9G8DZ791VC2Kxj6sD/h4NDxULdgsYkZL51 MFJS6AnLWYRxAi+6tiYI/orXUaVY91ZtsW3Rkr9LztxxRbLPEy7Wn8B1y3rBYSW8 DUHy5fu7wvXkpYBcZhrpfPxJqE/YpWWqefiPkKnh9svUuSAA3qSEeByDH7oI66XP NsYIMS4M0kJmFvtIwzkhdMWJ4MzyPyvta7kiYZ0eVFbtuy5dD84U6LfIwFTlc29/ FxQTzGxqh/7dtnm5O219o1Ix -----END CERTIFICATE-----Generated at Wed Sep 23 22:09:28 2026 by rpki-client