$ rpki-client -vvf rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft File: R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft (raw, json) Hash identifier: IA0iKePcmDWVpo2rz+J48v/uhfmLWtLENGT88GbIxwE= Subject key identifier: 38:3C:9D:76:9A:08:0A:D7:77:09:B3:F9:B8:46:38:92:4F:1D:A4:A9 Authority key identifier: 47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 Certificate issuer: /CN=A9158DC6/serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft Manifest number: 031A Signing time: Fri 17 Apr 2026 01:04:12 +0000 Manifest this update: Fri 17 Apr 2026 01:04:11 +0000 Manifest next update: Fri 24 Apr 2026 01:04:11 +0000 Files and hashes: 1: R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl (hash: euGLtopLvgse8XYlqlRWp4N/2QHLg+FsOKLtTmfwy4k=) 2: F80BF07C107B11ED9B3C5410C4F9AE02.roa (hash: xwuBUsXePKpvMYj/ZZ+LZ8VttYRBb2/xivwKeGbI3bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:04:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158DC6, serialNumber=4786DBCCB5CC296B1DAB175E83CC4811A63617C7 Validity Not Before: Apr 17 01:04:11 2026 GMT Not After : Apr 24 01:04:11 2026 GMT Subject: CN=69e1870c-cd04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a9:2b:8d:fe:bf:6d:52:3f:3b:d3:66:ad:6d: 02:d6:04:fe:78:9c:d8:99:3b:64:89:d0:85:05:50: 12:6f:fb:e6:51:cc:a2:34:c9:3d:b2:41:8d:75:bb: 96:ec:58:f6:36:9c:a1:73:0c:7e:64:13:77:8f:50: 66:b1:bc:41:e6:11:41:fd:02:b8:98:a8:aa:3b:3a: 80:b4:92:93:5d:a9:2f:a8:99:03:93:a5:41:f0:bb: 32:77:54:49:e3:9d:e4:61:8a:ab:7d:31:4b:d1:86: 0b:95:24:84:cc:be:25:62:27:dc:87:78:25:82:9c: 43:89:64:62:e5:1f:8f:59:b1:8f:be:ce:f5:cf:2a: 3a:ff:59:48:86:e1:2a:9c:3f:f1:a0:9f:c1:c1:39: 3f:3c:df:6d:9d:7f:a5:06:d5:57:7d:01:d1:5e:96: c3:7b:a1:7d:c4:6b:88:46:b0:a8:70:0a:8e:24:bb: 15:87:c7:8f:2d:ae:6a:63:53:28:41:d3:75:23:d3: 34:ee:77:8e:c7:89:d7:47:95:c7:ec:da:d4:aa:9b: 33:3b:ca:8d:c6:5c:96:20:9a:b0:4f:1b:f0:7b:94: 2f:ba:8c:88:51:32:35:2e:2f:83:6f:ba:0d:f6:dc: e7:4b:b4:d7:e9:6f:30:27:d4:eb:9e:77:f8:80:3b: 14:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3C:9D:76:9A:08:0A:D7:77:09:B3:F9:B8:46:38:92:4F:1D:A4:A9 X509v3 Authority Key Identifier: keyid:47:86:DB:CC:B5:CC:29:6B:1D:AB:17:5E:83:CC:48:11:A6:36:17:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4bbzLXMKWsdqxdeg8xIEaY2F8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158DC6/4A01227C0FF411EDA8B1FA20C4F9AE02/R4bbzLXMKWsdqxdeg8xIEaY2F8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3c:01:06:b7:0d:f4:71:57:03:ed:39:45:0e:0a:a7:28:e2: c1:61:a2:3c:8f:fe:db:06:9b:c6:c2:3a:46:fb:51:a8:3e:ff: 9c:b9:47:72:47:f8:2e:3b:1d:43:90:53:ac:59:2b:58:19:66: 4e:68:a4:ec:c5:ea:19:69:06:3c:da:da:ad:04:e4:26:8c:7f: 0c:71:e0:76:7a:07:69:bd:50:3d:45:98:48:c0:fc:6b:d6:b9: 2f:22:ce:3f:38:86:07:a0:d0:d5:4d:5b:20:2d:a5:8b:a5:0e: f7:29:b2:b3:56:d6:47:86:3f:92:70:da:7d:18:5f:54:46:ad: d3:cf:bc:88:d0:97:95:84:82:db:af:35:9f:94:d2:58:06:9a: f2:ad:65:53:78:7c:b1:81:7e:7d:a1:09:14:91:46:32:5e:0b: c4:7d:68:96:f8:f9:24:af:07:f4:1f:a9:fa:a0:32:91:28:2b: 3e:d7:83:a6:bc:99:5f:ad:bb:b9:1c:dc:16:a5:c3:21:eb:ad: f1:13:ed:0d:6f:b6:7c:32:d3:53:db:2d:53:11:79:2c:34:ce: 57:63:50:51:16:ca:f1:bc:e8:f2:59:2e:a8:2e:fe:4b:9f:ce: 36:c4:f5:79:08:d0:40:d2:39:9c:05:04:ae:cd:95:a4:6e:78: 67:d3:0b:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThEQzYxMTAvBgNVBAUTKDQ3ODZEQkNDQjVDQzI5NkIxREFCMTc1RTgzQ0M0ODEx QTYzNjE3QzcwHhcNMjYwNDE3MDEwNDExWhcNMjYwNDI0MDEwNDExWjAYMRYwFAYD VQQDEw02OWUxODcwYy1jZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApakrjf6/bVI/O9NmrW0C1gT+eJzYmTtkidCFBVASb/vmUcyiNMk9skGNdbuW 7Fj2Npyhcwx+ZBN3j1BmsbxB5hFB/QK4mKiqOzqAtJKTXakvqJkDk6VB8Lsyd1RJ 453kYYqrfTFL0YYLlSSEzL4lYifch3glgpxDiWRi5R+PWbGPvs71zyo6/1lIhuEq nD/xoJ/BwTk/PN9tnX+lBtVXfQHRXpbDe6F9xGuIRrCocAqOJLsVh8ePLa5qY1Mo QdN1I9M07neOx4nXR5XH7NrUqpszO8qNxlyWIJqwTxvwe5QvuoyIUTI1Li+Db7oN 9tznS7TX6W8wJ9Trnnf4gDsUFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDg8nXaa CArXdwmz+bhGOJJPHaSpMB8GA1UdIwQYMBaAFEeG28y1zClrHasXXoPMSBGmNhfH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OERDNi80QTAxMjI3QzBG RjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtXc2RxeGRlZzh4SUVhWTJG OGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0YmJ6TFhNS1dzZHF4ZGVnOHhJRWFZMkY4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OERDNi80QTAxMjI3QzBGRjQxMUVEQThCMUZBMjBDNEY5QUUwMi9SNGJiekxYTUtX c2RxeGRlZzh4SUVhWTJGOGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfjwBBrcN9HFXA+05RQ4KpyjiwWGiPI/+2wabxsI6RvtRqD7/nLlHckf4Ljsd Q5BTrFkrWBlmTmik7MXqGWkGPNrarQTkJox/DHHgdnoHab1QPUWYSMD8a9a5LyLO PziGB6DQ1U1bIC2li6UO9ymys1bWR4Y/knDafRhfVEat08+8iNCXlYSC2681n5TS WAaa8q1lU3h8sYF+faEJFJFGMl4LxH1olvj5JK8H9B+p+qAykSgrPteDpryZX627 uRzcFqXDIeut8RPtDW+2fDLTU9stUxF5LDTOV2NQURbK8bzo8lkuqC7+S5/ONsT1 eQjQQNI5nAUErs2VpG54Z9MLDw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:39:05 2026 by rpki-client