$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft File: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft (raw, json) Hash identifier: P++SblCm3A0Vr2z+Ssr8sDd2uWYU2EFGFmJz8JxGQWQ= Subject key identifier: C7:E4:98:13:78:72:0B:22:2C:E6:AA:81:07:6E:65:98:70:55:13:7B Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F Certificate issuer: /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft Manifest number: 0285 Signing time: Fri 17 Apr 2026 01:44:09 +0000 Manifest this update: Fri 17 Apr 2026 01:44:09 +0000 Manifest next update: Fri 24 Apr 2026 01:44:09 +0000 Files and hashes: 1: 4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl (hash: X+5po44sUgI+s/YeblryQPB+n8NsXsI4RTx0r8QSJrA=) 2: 13BC244C61A311F0A6E3910CC4F9AE02.roa (hash: L4XqfcnZ4gHSW4QTEz3ONJ/g1x9XTw6MU5/Gf30dDq8=) 3: E8F2B1C224E911F0B5C26715C4F9AE02.roa (hash: XvLu9Lco+z3v8UzXTRCenPQt8JmuU1Ozm34u8QKc+Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDDF, serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F Validity Not Before: Apr 17 01:44:09 2026 GMT Not After : Apr 24 01:44:09 2026 GMT Subject: CN=69e19069-8b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:a1:5b:ec:13:71:3f:88:f2:1b:cf:ba:e3: 46:ca:b7:9d:53:18:d2:99:4e:8e:54:7c:ac:ba:a7: 7c:2c:d9:db:01:63:f4:cb:5a:c9:0d:71:45:7e:dd: 06:c0:01:e8:0d:b5:00:5b:e3:16:2f:ac:9f:ee:9a: b3:3d:8b:c0:91:da:00:40:57:aa:7c:85:25:2e:97: 4f:9b:4b:aa:fa:3a:b1:b8:44:16:bc:06:86:91:c2: b2:e3:f7:4e:d0:6e:ec:a1:5d:6d:21:ef:ed:30:34: 55:c2:f6:e4:c6:4e:66:eb:9e:cf:21:3b:64:53:52: d9:4a:2d:b1:89:2d:4a:12:d9:ac:8c:35:65:5f:ab: e9:99:99:f1:92:b7:67:ba:89:fd:77:c2:52:23:b3: 51:79:c2:61:19:92:75:49:66:94:af:56:bf:f0:78: 88:65:41:45:1c:25:01:f7:b3:5f:72:14:b3:7d:3d: 0d:28:7c:a6:65:48:a2:c8:b9:b2:57:a8:50:30:73: 16:a8:cd:11:8e:ff:98:d2:ec:72:eb:40:75:fd:60: cb:d7:a1:47:43:38:55:12:42:82:f7:6c:18:60:bc: 13:01:9e:86:8a:3d:df:a8:7c:cb:cc:5a:df:21:53: 01:28:f5:1c:b6:06:82:51:c4:68:82:66:6c:34:d9: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E4:98:13:78:72:0B:22:2C:E6:AA:81:07:6E:65:98:70:55:13:7B X509v3 Authority Key Identifier: keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:04:3f:48:a7:9c:2f:7d:75:4f:a4:28:01:6e:eb:5f:34:41: ad:a3:72:a2:f3:89:e7:ef:93:b4:06:8a:34:e3:d5:e8:9b:67: e3:03:87:be:db:a9:38:a0:7d:ca:47:4f:a0:51:c6:64:ba:f4: 1b:26:f0:82:d1:7a:b7:ef:18:42:61:26:1e:6f:44:ca:c1:b9: da:41:a5:05:ee:2d:63:2c:9f:fc:41:30:df:5a:0b:d2:04:e9: 88:89:52:d9:25:00:37:ec:6b:2c:0f:86:ab:87:f2:c6:e3:bb: 91:32:63:92:86:7c:ad:48:47:b1:69:8e:ac:9d:e2:6e:3b:dd: 49:fc:8c:93:c5:ed:58:5c:26:ff:df:39:b2:2a:9d:ee:ee:d9: 9c:38:23:43:96:c5:cf:9f:77:67:c6:9e:d9:ec:d9:e9:68:27: 16:65:3c:8a:9d:63:9b:81:55:ab:b7:ba:e6:88:c3:2c:eb:3b: 7a:7d:6d:aa:e7:23:e4:53:9d:34:02:6a:15:66:79:2e:93:1f: 09:ac:d0:af:7c:28:97:7a:e7:6b:05:fe:dd:02:30:76:bd:63: 6c:9c:c9:c5:4e:5b:f6:e6:11:56:71:bd:21:7d:a8:8a:d6:46: 4f:96:aa:6f:ad:13:b1:3e:49:8e:11:d2:b6:05:3d:f2:0c:25: 5b:51:78:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEREYxMTAvBgNVBAUTKEUzRTFDQ0NGODNENTJDQjhBM0M5ODdBODExRTFGODA3 RjMzOTNFN0YwHhcNMjYwNDE3MDE0NDA5WhcNMjYwNDI0MDE0NDA5WjAYMRYwFAYD VQQDEw02OWUxOTA2OS04YjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdahW+wTcT+I8hvPuuNGyredUxjSmU6OVHysuqd8LNnbAWP0y1rJDXFFft0G wAHoDbUAW+MWL6yf7pqzPYvAkdoAQFeqfIUlLpdPm0uq+jqxuEQWvAaGkcKy4/dO 0G7soV1tIe/tMDRVwvbkxk5m657PITtkU1LZSi2xiS1KEtmsjDVlX6vpmZnxkrdn uon9d8JSI7NRecJhGZJ1SWaUr1a/8HiIZUFFHCUB97NfchSzfT0NKHymZUiiyLmy V6hQMHMWqM0Rjv+Y0uxy60B1/WDL16FHQzhVEkKC92wYYLwTAZ6Gij3fqHzLzFrf IVMBKPUctgaCUcRogmZsNNkdWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMfkmBN4 cgsiLOaqgQduZZhwVRN7MB8GA1UdIwQYMBaAFOPhzM+D1Sy4o8mHqBHh+AfzOT5/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRERi9BMjEyNzY4Qzc2 MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxMaWp5WWVvRWVINEJfTTVQ bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQtSE16NFBWTExpanlZZW9FZUg0Ql9NNVBuOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRERi9BMjEyNzY4Qzc2MEIxMUVEOEM2Q0YyNEVDNEY5QUUwMi80LUhNejRQVkxM aWp5WWVvRWVINEJfTTVQbjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmwQ/SKecL311T6QoAW7rXzRBraNyovOJ5++TtAaKNOPV6Jtn4wOHvtupOKB9 ykdPoFHGZLr0GybwgtF6t+8YQmEmHm9EysG52kGlBe4tYyyf/EEw31oL0gTpiIlS 2SUAN+xrLA+Gq4fyxuO7kTJjkoZ8rUhHsWmOrJ3ibjvdSfyMk8XtWFwm/985siqd 7u7ZnDgjQ5bFz593Z8ae2ezZ6WgnFmU8ip1jm4FVq7e65ojDLOs7en1tqucj5FOd NAJqFWZ5LpMfCazQr3wol3rnawX+3QIwdr1jbJzJxU5b9uYRVnG9IX2oitZGT5aq b60TsT5JjhHStgU98gwlW1F43w== -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:48 2026 by rpki-client