$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json) Hash identifier: gh0aOybRnLgpPp4eh6kwJKDjBG58BQxuaT/2d4MLEZg= Subject key identifier: E5:72:96:12:C5:38:59:A1:12:A7:95:3F:BC:D1:7C:DA:6D:0F:8D:B4 Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft Manifest number: 40 Signing time: Thu 23 Jul 2026 10:33:07 +0000 Manifest this update: Thu 23 Jul 2026 10:33:07 +0000 Manifest next update: Thu 30 Jul 2026 10:33:07 +0000 Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: FyZxF10Cw1plq9zpz6dPvSJvRBoF/iGDmAl2xItl530=) 2: 870077D67E9A11F1ACB132C361A30FBC.roa (hash: j/Veg91WVOxBOE2x+CFx84+oTH0wTF8HWi+UAwsfAcw=) 3: E86962E47E9A11F1BA87E1CE61A30FBC.roa (hash: r053k+9BngwOs8liZ7NrLuZJcmmTygGFd/pGOUQXUUY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Validity Not Before: Jul 23 10:33:07 2026 GMT Not After : Jul 30 10:33:07 2026 GMT Subject: CN=6a61ede3-7307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e4:96:b5:e2:5d:05:30:db:97:c3:27:e2:a5: 58:cc:a3:bb:5b:36:6d:8b:94:c2:ae:7c:f4:fe:70: c1:50:5a:3e:82:27:3c:cb:3c:0f:0e:a0:20:77:e5: 72:0b:db:da:0c:cd:b4:16:c4:d2:4c:0e:2c:ad:2b: f7:1f:c0:2e:46:9d:4c:b8:8a:59:e7:7e:be:b2:78: f3:eb:f0:bf:c7:6a:82:ab:30:ca:0e:98:96:5a:51: a7:c8:6b:9d:29:17:08:a9:a0:e2:60:cc:24:cd:54: 0d:94:78:c3:3a:c0:da:4a:c6:87:6d:f5:b6:5c:f8: a6:aa:88:76:40:89:c7:bc:7f:37:87:04:94:35:f5: 2c:e6:5b:f2:99:f0:04:ca:ea:3d:31:76:51:88:24: 32:97:8b:40:ac:f1:28:56:9c:36:09:7f:44:07:57: 68:bc:0b:1d:08:cb:d5:8d:02:c4:eb:57:e1:a0:bd: b6:af:2c:4e:81:16:f7:af:7f:84:d3:bd:78:7c:2f: c9:bd:f0:b7:4b:39:29:43:0d:c7:92:d4:77:ce:d9: da:59:0c:af:e7:64:df:80:05:15:3b:bd:03:ee:ba: 52:56:b7:59:24:30:64:cb:4e:b2:1f:41:30:f8:53: 21:f2:c8:af:3c:1a:51:a1:8d:40:28:12:08:a0:83: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:72:96:12:C5:38:59:A1:12:A7:95:3F:BC:D1:7C:DA:6D:0F:8D:B4 X509v3 Authority Key Identifier: keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:8e:d8:20:20:c0:34:59:48:34:55:a6:83:dd:19:80:3a:21: 44:84:32:66:62:95:0c:b8:77:8d:b3:d5:f7:8d:cf:1d:6d:56: 92:02:be:ac:bb:e2:6a:46:e7:5d:b2:d1:6c:42:36:df:84:c4: 04:46:7f:25:a0:25:08:29:af:d3:b3:b6:3b:7f:09:53:22:ed: d5:44:0c:40:46:d3:77:59:a4:dd:b5:f1:fe:71:36:6b:91:1f: 17:11:ef:4e:77:02:b7:19:0a:67:4f:50:a7:b4:94:ee:bb:f0: a4:e7:20:61:0f:6d:6d:71:e2:a0:8f:bc:08:9c:96:aa:30:a6: 42:f2:4a:6c:bb:e2:98:29:b0:3b:c6:db:cc:a5:46:59:79:1d: 7a:59:5d:8f:03:48:85:e0:57:a4:b0:50:c4:83:69:1a:42:e6: cc:a6:20:e7:44:e4:45:61:d4:aa:8c:19:c6:86:9d:66:a5:cb: 9c:fa:11:7b:be:c0:d7:92:7e:38:b8:fe:8c:bc:d6:97:9a:cc: 7a:65:25:a6:69:8a:6c:bd:5d:d2:0b:40:7e:3e:bf:d0:36:66: 4b:86:f7:76:a6:c1:06:99:10:7d:77:f1:48:21:95:74:46:f8: aa:09:a4:d5:ec:3c:33:de:6a:c5:4e:27:4f:6a:32:fd:ee:a3: f5:d4:68:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2 QkVGQTM0MTAeFw0yNjA3MjMxMDMzMDdaFw0yNjA3MzAxMDMzMDdaMBgxFjAUBgNV BAMTDTZhNjFlZGUzLTczMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC45Ja14l0FMNuXwyfipVjMo7tbNm2LlMKufPT+cMFQWj6CJzzLPA8OoCB35XIL 29oMzbQWxNJMDiytK/cfwC5GnUy4ilnnfr6yePPr8L/HaoKrMMoOmJZaUafIa50p FwipoOJgzCTNVA2UeMM6wNpKxodt9bZc+KaqiHZAice8fzeHBJQ19SzmW/KZ8ATK 6j0xdlGIJDKXi0Cs8ShWnDYJf0QHV2i8Cx0Iy9WNAsTrV+GgvbavLE6BFvevf4TT vXh8L8m98LdLOSlDDceS1HfO2dpZDK/nZN+ABRU7vQPuulJWt1kkMGTLTrIfQTD4 UyHyyK88GlGhjUAoEgigg/RPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5XKWEsU4 WaESp5U/vNF82m0PjbQwHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTjtggIMA0WUg0VaaD3RmAOiFEhDJmYpUMuHeNs9X3jc8dbVaSAr6su+JqRudd stFsQjbfhMQERn8loCUIKa/Ts7Y7fwlTIu3VRAxARtN3WaTdtfH+cTZrkR8XEe9O dwK3GQpnT1CntJTuu/Ck5yBhD21tceKgj7wInJaqMKZC8kpsu+KYKbA7xtvMpUZZ eR16WV2PA0iF4FeksFDEg2kaQubMpiDnRORFYdSqjBnGhp1mpcuc+hF7vsDXkn44 uP6MvNaXmsx6ZSWmaYpsvV3SC0B+Pr/QNmZLhvd2psEGmRB9d/FIIZV0RviqCaTV 7Dwz3mrFTidPajL97qP11Gia -----END CERTIFICATE-----Generated at Fri Jul 24 14:37:50 2026 by rpki-client