
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
File: ShevZqBI_IHa6FRffjXZ2qvUAnE.mft (raw, json)
Hash identifier: vfA5t+c1gIVaWwUn7MzKTV2lt4CT9S0BH7fv7MiI2+w=
Subject key identifier: 98:ED:63:4F:82:42:6B:70:A1:FE:27:11:B9:5B:17:7D:14:4B:27:64
Authority key identifier: 4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
Certificate issuer: /CN=A91B6E73/serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Certificate serial: 1337
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
Manifest number: 12F5
Signing time: Tue 22 Sep 2026 16:58:07 +0000
Manifest this update: Tue 22 Sep 2026 16:58:06 +0000
Manifest next update: Tue 29 Sep 2026 16:58:06 +0000
Files and hashes: 1: ShevZqBI_IHa6FRffjXZ2qvUAnE.crl (hash: 1j0/HUFrc4zMlVUODLqgWkwellwtW5kW+QwKuBuIQWA=)
2: 6470410AABD811F08E1F646DC4F9AE02.roa (hash: krbf5dctADsCVZfdltaoJKfg4me/fONaG9SIS0vFud8=)
3: C37CCA126FE611EA9D9F5E67C4F9AE02.roa (hash: MziFt9QpNnpHXoqMSLQHM5S6PwdHDmXlfAVFhDMjdwQ=)
4: 2DDAF496ABD811F08750DA6CC4F9AE02.roa (hash: aHdQHQb36iyPuEnw5ayjz4KnASdeWehuOATph8lux4I=)
5: C0655836B3B511EA8BFADC14C4F9AE02.roa (hash: mTp5hTps5hnadQRKJoPp/zqFwrpimn8O/onGDeMkX0M=)
6: 273538D8CF7A11ECB4E21125C4F9AE02.roa (hash: sR9Q5gYhaXUrEJZM9cQm1+qd48doSCgPOC0vCQhvpRw=)
7: C16DCDDAB3B511EA8BFADC14C4F9AE02.roa (hash: oHnX/hxYILr9+zc/E+u2+0Q1MHhW+KzrVph1PkDwMXk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 16:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4919 (0x1337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B6E73, serialNumber=4A17AF66A048FC81DAE8545F7E35D9DAABD40271
Validity
Not Before: Sep 22 16:58:06 2026 GMT
Not After : Sep 29 16:58:06 2026 GMT
Subject: CN=6ab2b39e-7a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:16:cf:52:71:c2:2f:4b:4d:f3:2b:5a:3c:
37:c8:5b:fe:ba:9a:d4:bf:db:3e:43:19:16:33:4c:
7b:8a:38:70:90:c2:79:49:b3:dc:1a:7f:3a:07:db:
ff:84:12:2d:fd:0a:f1:9c:0a:af:5c:1f:71:da:5b:
56:3a:91:38:1f:c9:f4:88:7f:4a:e1:44:52:30:39:
94:54:7c:97:10:a5:30:fc:9c:8a:b2:10:97:60:4b:
07:7e:b6:f9:46:63:4c:ee:ca:9e:0f:ce:bc:42:f1:
b1:a3:9f:79:8c:20:08:9c:55:85:0e:78:ed:6c:1c:
63:b7:f8:58:3a:f5:a4:ec:ad:eb:97:bb:ec:91:c7:
fc:82:62:0c:c9:88:61:67:f9:d1:8e:2d:86:de:31:
18:22:c0:e1:bb:cc:b2:d5:6e:20:9a:29:96:70:e0:
0d:20:1a:d1:c9:64:f3:73:82:52:f4:ec:03:0f:60:
a1:b2:d7:40:81:4b:33:4a:84:ac:61:21:ef:e9:9f:
57:08:61:08:3a:95:9d:c6:32:f0:e9:60:49:88:ee:
f6:10:8e:5d:2a:d8:7a:64:c8:0a:ac:9c:07:83:00:
7a:82:3d:0a:c0:c5:75:a1:0d:79:29:e6:84:e0:69:
cb:8d:ad:b3:e9:95:39:09:2e:71:86:cb:c9:8e:81:
4d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:ED:63:4F:82:42:6B:70:A1:FE:27:11:B9:5B:17:7D:14:4B:27:64
X509v3 Authority Key Identifier:
keyid:4A:17:AF:66:A0:48:FC:81:DA:E8:54:5F:7E:35:D9:DA:AB:D4:02:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShevZqBI_IHa6FRffjXZ2qvUAnE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6E73/F41D40F2EA0911E8ADA2ED0CC4F9AE02/ShevZqBI_IHa6FRffjXZ2qvUAnE.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:d8:8b:44:08:63:88:2c:5f:d4:af:a9:ec:a5:64:3b:df:
97:82:e6:be:1c:c7:3b:66:e7:91:b6:93:60:03:b7:a2:98:7d:
5a:03:64:96:11:a7:70:fa:42:31:96:e3:7f:24:f3:eb:76:fe:
9f:e9:81:ca:b7:76:18:5e:f1:c5:4f:76:55:c7:38:db:cd:06:
65:f4:38:69:11:bd:38:1e:24:a9:c1:f0:d7:58:72:a1:7e:43:
59:f8:55:18:aa:7e:ee:99:ca:2f:96:ff:6d:83:61:20:7b:81:
c1:8f:cb:c4:62:14:ec:51:aa:ea:1f:8a:33:10:12:19:17:28:
d2:7f:72:20:1b:54:ac:46:93:a3:3c:d3:c2:61:5c:cd:a2:5d:
25:6a:c2:e3:48:7c:c6:f9:83:9c:d8:15:51:10:cb:a2:d4:a7:
ce:88:96:ff:f7:e9:13:bd:2c:12:9d:3d:f0:12:ec:d2:af:04:
ca:0c:5a:25:d8:e9:9b:8b:fb:74:53:bd:63:0d:a8:56:e3:ec:
22:da:d2:7d:35:b9:1e:9b:ca:e8:85:10:db:10:fe:44:14:04:
a0:44:33:07:b4:d5:eb:7a:be:49:47:86:52:5b:67:5a:9b:5b:
80:32:0b:f0:34:ad:ab:47:b1:ce:42:ba:af:b0:18:53:db:d2:
64:dc:ac:b5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZFNzMxMTAvBgNVBAUTKDRBMTdBRjY2QTA0OEZDODFEQUU4NTQ1RjdFMzVEOURB
QUJENDAyNzEwHhcNMjYwOTIyMTY1ODA2WhcNMjYwOTI5MTY1ODA2WjAYMRYwFAYD
VQQDEw02YWIyYjM5ZS03YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA12sWz1Jxwi9LTfMrWjw3yFv+uprUv9s+QxkWM0x7ijhwkMJ5SbPcGn86B9v/
hBIt/QrxnAqvXB9x2ltWOpE4H8n0iH9K4URSMDmUVHyXEKUw/JyKshCXYEsHfrb5
RmNM7sqeD868QvGxo595jCAInFWFDnjtbBxjt/hYOvWk7K3rl7vskcf8gmIMyYhh
Z/nRji2G3jEYIsDhu8yy1W4gmimWcOANIBrRyWTzc4JS9OwDD2ChstdAgUszSoSs
YSHv6Z9XCGEIOpWdxjLw6WBJiO72EI5dKth6ZMgKrJwHgwB6gj0KwMV1oQ15KeaE
4GnLja2z6ZU5CS5xhsvJjoFNRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjtY0+C
Qmtwof4nEblbF30USydkMB8GA1UdIwQYMBaAFEoXr2agSPyB2uhUX3412dqr1AJx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkU3My9GNDFENDBGMkVB
MDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9JSGE2RlJmZmpYWjJxdlVB
bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NoZXZacUJJX0lIYTZGUmZmalhaMnF2VUFuRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkU3My9GNDFENDBGMkVBMDkxMUU4QURBMkVEMENDNEY5QUUwMi9TaGV2WnFCSV9J
SGE2RlJmZmpYWjJxdlVBbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX5PYi0QIY4gsX9SvqeylZDvfl4LmvhzHO2bnkbaTYAO3oph9WgNklhGncPpC
MZbjfyTz63b+n+mByrd2GF7xxU92Vcc4280GZfQ4aRG9OB4kqcHw11hyoX5DWfhV
GKp+7pnKL5b/bYNhIHuBwY/LxGIU7FGq6h+KMxASGRco0n9yIBtUrEaTozzTwmFc
zaJdJWrC40h8xvmDnNgVURDLotSnzoiW//fpE70sEp098BLs0q8EygxaJdjpm4v7
dFO9Yw2oVuPsItrSfTW5HpvK6IUQ2xD+RBQEoEQzB7TV63q+SUeGUltnWptbgDIL
8DStq0exzkK6r7AYU9vSZNystQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:11:39 2026 by rpki-client