$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft File: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft (raw, json) Hash identifier: Eud21qe+GIeaJ6ptqFNO2X6BVP4ngoxc240O/Yq3Nqo= Subject key identifier: 3B:1C:1C:24:DE:C6:FD:C8:C8:BC:76:D2:03:96:EA:08:D8:BC:B9:86 Authority key identifier: 48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 Certificate issuer: /CN=A9136BEA/serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft Manifest number: 1B Signing time: Wed 13 May 2026 09:06:49 +0000 Manifest this update: Wed 13 May 2026 09:06:49 +0000 Manifest next update: Wed 20 May 2026 09:06:49 +0000 Files and hashes: 1: SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl (hash: zqpARjwFQZfbL3fmkiRPRhtyruVHHaWLAH7DKwgCTTc=) 2: 712388E4280111F1A83DAB9AB3833773.roa (hash: K9JzF7ASQ/dIE8eYhUhxHKBukwqoRDy8rDl9EfISA8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136BEA, serialNumber=48727C43F464295201C9FA6F86F62C896BEFA341 Validity Not Before: May 13 09:06:49 2026 GMT Not After : May 20 09:06:49 2026 GMT Subject: CN=6a043f29-4303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:28:cd:86:31:1b:f6:f5:df:7b:c9:a8:31:2c: 94:39:85:c8:ec:dc:e1:89:74:3c:a5:2d:d6:40:14: 7a:86:ed:98:c8:bc:71:dd:d9:0b:57:b4:ec:e0:03: f9:78:ec:7e:b9:95:39:bb:da:7f:d5:f5:00:8d:f1: fc:c0:a3:cc:ae:3e:e6:7e:cb:62:81:44:d6:af:cb: 1c:99:d8:ee:fe:33:1d:9b:f5:eb:39:b4:6b:9b:cc: f2:83:59:ff:f4:16:19:48:51:85:06:cd:4f:07:29: 5f:a2:a0:68:fc:7a:99:68:14:74:47:03:37:e3:1a: 80:d3:2d:e6:42:b1:e0:9f:8a:d2:ba:72:0a:7a:ce: cc:de:10:00:14:fa:39:0b:59:8c:c9:f6:b8:cc:0b: 43:60:0a:75:16:50:3f:82:2e:50:9f:36:4b:50:2f: ee:3f:62:16:86:3f:79:b0:a0:b3:da:49:3f:66:43: 82:58:44:0f:7e:0a:34:c6:f9:06:6b:15:14:21:be: 4e:b8:30:c8:c3:6b:50:34:1e:28:82:ec:80:0a:54: de:60:b8:32:a0:47:ee:81:d2:95:7b:84:a1:0f:fe: 04:4d:29:66:79:19:59:f9:c4:92:27:fc:77:82:b2: 04:12:cd:0d:10:67:ee:4c:28:6f:9b:19:2b:45:e1: 8f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:1C:24:DE:C6:FD:C8:C8:BC:76:D2:03:96:EA:08:D8:BC:B9:86 X509v3 Authority Key Identifier: keyid:48:72:7C:43:F4:64:29:52:01:C9:FA:6F:86:F6:2C:89:6B:EF:A3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BEA/1601EE74280111F18E46364AB2833773/SHJ8Q_RkKVIByfpvhvYsiWvvo0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:5f:9e:9c:a5:9c:4f:f7:49:08:82:36:b4:f4:8d:30:48:3a: 0c:d1:53:07:09:7c:66:31:14:c9:c9:a1:f4:4e:cc:a9:35:a4: 4d:96:f0:9f:d5:10:a4:3b:e6:61:e8:c6:ab:c1:da:86:4b:82: 24:08:3a:ca:21:fe:f0:e2:b8:9c:86:42:f9:7b:16:f9:5c:5a: 2e:63:f8:da:c7:f1:bb:ae:ec:4a:63:be:a0:1e:bf:91:94:da: 59:fa:15:a4:01:12:45:fe:e1:31:69:0c:26:2e:50:2c:7c:86: 64:8a:c0:ea:ca:09:0f:8e:7e:2a:37:df:70:c3:23:60:68:37: e1:91:45:cb:7a:60:09:ff:d4:4e:cb:d1:d8:47:5a:94:03:4c: 69:5d:ba:07:01:f2:fb:05:a6:2a:c6:a9:71:a3:6c:17:95:2a: 60:39:dd:9f:61:a8:7c:d8:c4:bb:f7:9c:01:18:d8:7f:a9:20: 27:a0:e2:83:55:37:b8:9b:b6:e7:51:ed:1d:aa:66:7f:21:5f: ce:8e:a4:ec:da:bf:1b:ef:eb:1e:24:ce:46:1b:39:59:ee:7b: 37:60:43:2c:d7:15:63:22:90:64:07:e5:2c:0e:a1:ec:61:1d: 45:45:0a:5f:29:34:a1:4d:63:f5:ef:69:9e:ff:27:00:a4:65: aa:5c:30:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkJFQTExMC8GA1UEBRMoNDg3MjdDNDNGNDY0Mjk1MjAxQzlGQTZGODZGNjJDODk2 QkVGQTM0MTAeFw0yNjA1MTMwOTA2NDlaFw0yNjA1MjAwOTA2NDlaMBgxFjAUBgNV BAMTDTZhMDQzZjI5LTQzMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtKM2GMRv29d97yagxLJQ5hcjs3OGJdDylLdZAFHqG7ZjIvHHd2QtXtOzgA/l4 7H65lTm72n/V9QCN8fzAo8yuPuZ+y2KBRNavyxyZ2O7+Mx2b9es5tGubzPKDWf/0 FhlIUYUGzU8HKV+ioGj8eploFHRHAzfjGoDTLeZCseCfitK6cgp6zszeEAAU+jkL WYzJ9rjMC0NgCnUWUD+CLlCfNktQL+4/YhaGP3mwoLPaST9mQ4JYRA9+CjTG+QZr FRQhvk64MMjDa1A0HiiC7IAKVN5guDKgR+6B0pV7hKEP/gRNKWZ5GVn5xJIn/HeC sgQSzQ0QZ+5MKG+bGStF4Y/DAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOxwcJN7G /cjIvHbSA5bqCNi8uYYwHwYDVR0jBBgwFoAUSHJ8Q/RkKVIByfpvhvYsiWvvo0Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QkVBLzE2MDFFRTc0Mjgw MTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJQnlmcHZodllzaVd2dm8w RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0hKOFFfUmtLVklCeWZwdmh2WXNpV3Z2bzBFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2 QkVBLzE2MDFFRTc0MjgwMTExRjE4RTQ2MzY0QUIyODMzNzczL1NISjhRX1JrS1ZJ QnlmcHZodllzaVd2dm8wRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyX56cpZxP90kIgja09I0wSDoM0VMHCXxmMRTJyaH0TsypNaRNlvCf1RCkO+Zh 6MarwdqGS4IkCDrKIf7w4richkL5exb5XFouY/jax/G7ruxKY76gHr+RlNpZ+hWk ARJF/uExaQwmLlAsfIZkisDqygkPjn4qN99wwyNgaDfhkUXLemAJ/9ROy9HYR1qU A0xpXboHAfL7BaYqxqlxo2wXlSpgOd2fYah82MS795wBGNh/qSAnoOKDVTe4m7bn Ue0dqmZ/IV/OjqTs2r8b7+seJM5GGzlZ7ns3YEMs1xVjIpBkB+UsDqHsYR1FRQpf KTShTWP172me/ycApGWqXDAK -----END CERTIFICATE-----Generated at Wed May 13 15:53:11 2026 by rpki-client