
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: 3uVYQmVRdrTdhyaAAURQZUGFvjKQbqMfFKUr1SsNuNc=
Subject key identifier: 97:64:16:43:95:C2:79:EC:AE:F2:1B:21:20:B2:67:39:97:F5:75:9E
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 12F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 12AF
Signing time: Tue 12 May 2026 17:05:55 +0000
Manifest this update: Tue 12 May 2026 17:05:54 +0000
Manifest next update: Tue 19 May 2026 17:05:54 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: qCdvbouLiNFmihw5DTETnjB4SSJ9rXhrvkc2NCusmug=)
2: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=)
3: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=)
4: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=)
5: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: mL1wDKbNUQQjoMtW47ox2tYBHJ623H86bPa3cy15R1E=)
6: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=)
7: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 17:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4848 (0x12f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: May 12 17:05:54 2026 GMT
Not After : May 19 17:05:54 2026 GMT
Subject: CN=6a035df3-99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:ba:25:40:2b:f3:f1:8d:88:54:dd:98:fb:
dd:f1:71:5a:4b:bf:6c:14:cc:47:94:11:73:65:9d:
af:51:b1:49:a5:aa:19:a2:d0:1a:6f:2a:28:76:01:
b2:a9:7a:9d:e1:c6:43:81:a2:07:42:42:99:2a:f1:
ca:13:89:75:e5:30:83:f5:a7:ae:a9:4a:90:12:3c:
2e:bf:ff:cf:25:27:38:d5:72:23:2e:22:6b:57:03:
9a:b3:f0:e6:26:1c:03:41:23:d1:57:d2:c0:df:60:
99:ad:c5:a0:4d:c7:87:43:7a:92:33:57:13:8a:3c:
87:2e:3c:77:46:2d:12:bb:c3:31:0d:e2:35:f7:95:
b2:37:f3:36:cd:80:ff:81:3a:9e:c6:b3:6f:01:30:
26:91:7b:30:98:68:6b:93:40:73:56:d0:f8:9b:74:
1f:70:c7:1a:cb:c3:ea:9a:33:19:7d:fb:1e:3a:2c:
bd:d1:a7:18:6e:ef:50:71:30:eb:a1:a0:6e:55:e4:
97:98:ec:1b:72:65:a9:6f:2c:5e:18:00:7f:74:1d:
ae:2f:93:9a:b6:7e:e5:8f:5a:6c:10:1a:2d:32:c0:
00:ef:0e:fb:c8:e0:d3:fd:5b:97:c5:5b:27:70:72:
77:d3:c7:eb:c7:3f:47:76:64:23:7a:40:f9:3d:08:
bb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:64:16:43:95:C2:79:EC:AE:F2:1B:21:20:B2:67:39:97:F5:75:9E
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
34:28:cb:41:be:97:f3:c6:9f:8a:91:49:92:5a:ce:e4:80:24:
a3:57:99:2f:a3:50:aa:8f:18:af:a0:4a:c5:63:7a:73:51:2d:
57:d6:49:55:a7:49:0c:6d:20:bb:0b:87:62:df:67:62:86:3d:
b9:71:82:95:d2:74:69:0a:b1:bf:41:12:fc:90:0b:9c:68:e6:
54:da:00:15:24:80:ee:2e:0d:31:1a:b5:63:8f:9d:95:34:f3:
67:ec:d8:3f:d5:1e:2f:45:ac:bc:cf:8f:8e:34:f5:6a:ce:52:
b1:98:c2:6a:36:d0:f5:25:ee:12:da:54:93:50:27:fe:72:58:
ff:99:06:26:58:34:5b:48:45:b6:79:95:39:75:19:8d:d4:70:
e5:3e:4d:7a:37:7f:df:7a:eb:c8:c7:8a:72:00:0a:08:e2:7e:
76:01:23:a7:14:43:30:d8:61:07:29:88:a9:d3:2e:cf:49:15:
b2:40:36:8a:53:5c:72:24:51:ce:af:63:cb:0f:75:02:46:59:
9e:19:94:fe:77:4d:a5:c4:7e:1f:f2:f6:fb:ca:17:cf:45:ab:
c0:6d:38:4e:84:a3:42:1d:31:d7:44:2e:33:7b:04:bf:49:f5:
59:c2:c0:6e:b0:52:c1:61:c7:c9:d9:4a:68:8a:98:60:cf:c3:
52:d0:7c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:06 2026 by rpki-client