
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
File: shwri89IL512bSpNMlmO6Uv2Zaw.mft (raw, json)
Hash identifier: XfynHYKNX1/DJCCjcYagOzUmj2BW8Np2AD8ZvDA4+aM=
Subject key identifier: 73:EC:62:3A:5B:21:84:85:A9:09:C6:78:A0:9E:01:A7:92:DD:4C:00
Authority key identifier: B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
Certificate issuer: /CN=A911A7D2/serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Certificate serial: 0141
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
Manifest number: 013D
Signing time: Sun 15 Nov 2026 05:45:04 +0000
Manifest this update: Sun 15 Nov 2026 05:45:04 +0000
Manifest next update: Sun 22 Nov 2026 05:45:04 +0000
Files and hashes: 1: shwri89IL512bSpNMlmO6Uv2Zaw.crl (hash: FXYcSNMESNAXF4nN0gZ1jL6z3OG78ZJQwWyPzrK5Dd8=)
2: C7FAB578FEEC11EFB40D667FC4F9AE02.roa (hash: KytT7CwlQe11jWfAsLPRMxvbGLLkhLmlX/I5QLbz6lk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 22 Nov 2026 05:45:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 321 (0x141)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A7D2, serialNumber=B21C2B8BCF482F9D766D2A4D32598EE94BF665AC
Validity
Not Before: Nov 15 05:45:04 2026 GMT
Not After : Nov 22 05:45:04 2026 GMT
Subject: CN=6af946e0-f3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:df:ae:46:f2:48:2e:fd:b3:28:be:23:12:
d8:19:1f:2d:db:d5:ac:39:b6:3f:39:47:61:a9:58:
3f:da:89:cc:3e:fa:d3:87:4f:3f:6e:ad:14:1f:ff:
07:e6:e3:2c:8d:5b:37:76:93:92:d0:b1:60:85:21:
88:92:72:27:7b:67:d1:82:f8:7c:31:35:61:eb:3d:
92:a3:81:15:8f:63:dc:88:d6:89:38:4b:41:f2:48:
0a:81:25:22:69:0b:a8:c9:95:f0:8a:f5:45:c8:17:
84:8e:3c:22:3a:fe:98:11:f3:4a:0e:ca:da:36:46:
71:df:d8:bc:08:36:b8:61:e7:30:e0:f7:19:53:31:
9c:1f:5c:8b:50:ce:cf:c4:ca:15:8e:46:b7:2e:a3:
95:1b:8f:07:a1:bd:92:c8:ce:c0:2e:71:33:43:00:
66:82:80:d9:2c:3f:69:4a:e0:b4:26:1e:80:73:fd:
66:32:14:52:88:30:14:4a:54:cf:79:d7:7e:39:32:
07:91:9d:7c:4e:4e:86:8d:51:ea:d9:41:79:14:1f:
1d:ea:4e:0f:d9:fe:36:9a:55:59:76:f1:8c:e7:37:
8c:3c:94:72:52:f8:86:92:3f:00:e3:9a:f5:10:80:
e5:2c:ab:d7:cb:cf:35:9b:67:56:77:c2:b4:cd:e7:
61:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:62:3A:5B:21:84:85:A9:09:C6:78:A0:9E:01:A7:92:DD:4C:00
X509v3 Authority Key Identifier:
keyid:B2:1C:2B:8B:CF:48:2F:9D:76:6D:2A:4D:32:59:8E:E9:4B:F6:65:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/shwri89IL512bSpNMlmO6Uv2Zaw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7D2/5BDB152CFEEC11EFAFA6917EC4F9AE02/shwri89IL512bSpNMlmO6Uv2Zaw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c0:dd:83:58:9d:f0:bf:f4:c0:52:d4:33:31:17:92:72:e8:
26:85:a3:98:56:c6:b7:64:ed:05:0a:f0:ca:03:54:0a:97:bc:
13:3e:7f:d8:9a:74:4f:8c:00:bc:d9:4b:27:f4:b8:5a:e0:85:
ac:ed:e0:ca:6f:c2:c6:73:a3:cb:ea:cf:0d:ca:1b:6a:88:7a:
f7:56:e4:42:f1:d3:a3:10:6d:5a:df:64:0f:ae:91:06:1b:28:
ed:6e:cf:26:fb:5c:a9:34:b8:0d:df:51:cb:fc:64:66:2a:ca:
1c:94:b8:c6:11:3e:3c:1e:6a:08:f6:96:dd:9b:47:29:70:bf:
e9:86:94:2b:f1:43:48:d5:6f:b8:91:8e:98:4e:ee:1d:8f:7a:
b6:51:cd:57:f0:65:b0:ab:29:bc:d6:d9:2b:8f:94:7c:f6:83:
ed:b8:42:62:c8:c3:79:c0:f9:e7:b9:3c:c9:d9:6d:b5:04:54:
7c:36:10:41:5b:57:b5:99:56:77:fd:2e:39:f2:61:ed:47:34:
b3:4f:e2:4c:ab:7a:0d:df:68:18:0b:2e:14:48:35:99:e4:d8:
9d:19:f1:3f:cd:7d:6e:8d:51:01:ce:10:41:55:41:b0:c0:07:
27:45:b1:a1:e9:6c:93:87:9a:4e:c6:ed:ab:9f:53:18:32:6f:
36:72:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:18:16 2026 by rpki-client