$ rpki-client -vvf rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft File: dh_-bfalw4-a60XlQCWIzddef9w.mft (raw, json) Hash identifier: /B6ozY+870NgiMHlUy/vX8zldSeT/IxPvgDWy/PKkBM= Subject key identifier: 54:47:70:FB:D9:EA:3C:74:F6:6A:CB:8F:98:B7:E9:69:5F:2D:7E:9A Authority key identifier: 76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC Certificate issuer: /CN=A9179CA1/serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft Manifest number: 0848 Signing time: Thu 16 Apr 2026 20:45:09 +0000 Manifest this update: Thu 16 Apr 2026 20:45:09 +0000 Manifest next update: Thu 23 Apr 2026 20:45:09 +0000 Files and hashes: 1: dh_-bfalw4-a60XlQCWIzddef9w.crl (hash: rNZcwPs1xhRXO47EClrE0a9Dri1TsWA3UJrMSmFFYL8=) 2: 7816A67E045611EB86495B26C4F9AE02.roa (hash: 7pu3YPOy/Iyi+5lsIR5w0HcGr9ERc7QOQEXQx+NBL5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179CA1, serialNumber=761FFE6DF6A5C38F9AEB45E5402588CDD75E7FDC Validity Not Before: Apr 16 20:45:09 2026 GMT Not After : Apr 23 20:45:09 2026 GMT Subject: CN=69e14a55-5670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:c8:66:67:2c:10:56:99:fd:89:ed:a7:b5: 08:9b:d2:ce:6c:6e:3e:9c:fe:64:58:0a:ec:bd:97: 88:4e:89:b5:11:94:49:78:43:96:77:56:53:d7:f0: 06:e5:2c:5b:4c:96:ca:1b:1f:11:3f:53:8d:9f:57: b6:3a:e6:c9:e1:09:31:d2:8a:15:42:aa:fd:9e:4a: 47:e1:07:01:36:19:8b:0e:11:0b:f5:b7:9d:eb:66: f2:95:04:57:52:00:c0:89:77:1c:06:c3:3c:b5:d0: b7:5f:62:0e:49:27:92:8f:4b:26:16:64:bf:14:68: 85:89:64:00:12:76:aa:b6:2b:ef:8b:49:3a:7b:a3: 61:47:72:04:ff:7c:55:62:57:86:61:df:f0:60:40: fc:92:84:f7:d3:ee:36:fb:f6:f0:d9:c7:34:6a:5e: f6:a9:ab:45:64:df:6b:d5:93:81:13:19:9a:6c:87: 75:73:0d:9b:76:0f:b6:e7:ee:2b:a0:bc:17:09:fa: ad:85:81:e7:d3:81:71:4a:a5:f4:18:1a:f4:aa:36: d6:cd:ea:35:ac:06:b1:36:33:13:ea:33:dd:62:8d: f7:7e:98:3a:67:6a:b7:77:8a:62:db:93:a5:85:a6: b2:64:12:26:6c:2c:f9:3d:15:0e:91:47:d2:02:de: d7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:47:70:FB:D9:EA:3C:74:F6:6A:CB:8F:98:B7:E9:69:5F:2D:7E:9A X509v3 Authority Key Identifier: keyid:76:1F:FE:6D:F6:A5:C3:8F:9A:EB:45:E5:40:25:88:CD:D7:5E:7F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dh_-bfalw4-a60XlQCWIzddef9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179CA1/806354AE045511EB891A8B25C4F9AE02/dh_-bfalw4-a60XlQCWIzddef9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:44:13:d5:f8:16:3d:94:4c:a1:dd:38:ea:e5:68:15:3c:73: 5e:9c:ae:e9:dc:f7:d0:27:94:27:af:03:b6:17:9e:31:a4:36: 01:fb:df:d1:6e:ce:e0:90:39:d0:5c:17:0b:3d:85:d2:e7:87: a1:2b:7e:df:f4:80:98:9f:67:fb:b0:62:9f:ac:7c:12:ee:ef: 12:fc:e4:37:06:b4:d9:d0:f5:db:5f:df:fb:cd:e0:e2:0f:ee: 0e:04:3b:0c:d3:ab:cd:6b:6b:60:8d:cc:5c:f9:04:eb:f0:a0: d4:26:db:47:ff:3c:23:47:f0:70:fa:e4:d1:ce:4e:7a:d6:ce: 41:be:3e:31:8d:52:bd:c2:9d:ab:48:cc:f3:1d:16:68:bf:f0: b5:fe:14:60:0d:ba:e8:06:65:26:a1:77:8d:9b:ee:f0:3c:17: fb:0d:8d:a9:c0:76:d7:55:b1:a6:ee:b8:2e:b5:f1:f2:f2:5f: 2b:31:5e:31:cf:f0:b0:5f:58:eb:7c:15:b5:a2:0c:65:af:d4: ca:68:44:43:b2:9b:40:83:4f:04:4d:04:3b:01:d7:3c:44:ae: 61:6e:84:81:7a:a2:a7:2c:bd:77:ec:99:3e:8b:f2:2f:f8:42: 10:42:97:ac:76:76:c9:c6:de:eb:3b:40:2c:d0:27:b4:b6:0b: 38:ec:83:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlDQTExMTAvBgNVBAUTKDc2MUZGRTZERjZBNUMzOEY5QUVCNDVFNTQwMjU4OENE RDc1RTdGREMwHhcNMjYwNDE2MjA0NTA5WhcNMjYwNDIzMjA0NTA5WjAYMRYwFAYD VQQDEw02OWUxNGE1NS01NjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhjIZmcsEFaZ/Yntp7UIm9LObG4+nP5kWArsvZeITom1EZRJeEOWd1ZT1/AG 5SxbTJbKGx8RP1ONn1e2OubJ4Qkx0ooVQqr9nkpH4QcBNhmLDhEL9bed62bylQRX UgDAiXccBsM8tdC3X2IOSSeSj0smFmS/FGiFiWQAEnaqtivvi0k6e6NhR3IE/3xV YleGYd/wYED8koT30+42+/bw2cc0al72qatFZN9r1ZOBExmabId1cw2bdg+25+4r oLwXCfqthYHn04FxSqX0GBr0qjbWzeo1rAaxNjMT6jPdYo33fpg6Z2q3d4pi25Ol haayZBImbCz5PRUOkUfSAt7X5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFRHcPvZ 6jx09mrLj5i36WlfLX6aMB8GA1UdIwQYMBaAFHYf/m32pcOPmutF5UAliM3XXn/c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUNBMS84MDYzNTRBRTA0 NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0LWE2MFhsUUNXSXpkZGVm OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoXy1iZmFsdzQtYTYwWGxRQ1dJemRkZWY5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUNBMS84MDYzNTRBRTA0NTUxMUVCODkxQThCMjVDNEY5QUUwMi9kaF8tYmZhbHc0 LWE2MFhsUUNXSXpkZGVmOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh0QT1fgWPZRMod046uVoFTxzXpyu6dz30CeUJ68DtheeMaQ2Afvf0W7O4JA5 0FwXCz2F0ueHoSt+3/SAmJ9n+7Bin6x8Eu7vEvzkNwa02dD121/f+83g4g/uDgQ7 DNOrzWtrYI3MXPkE6/Cg1CbbR/88I0fwcPrk0c5OetbOQb4+MY1SvcKdq0jM8x0W aL/wtf4UYA266AZlJqF3jZvu8DwX+w2NqcB211Wxpu64LrXx8vJfKzFeMc/wsF9Y 63wVtaIMZa/UymhEQ7KbQINPBE0EOwHXPESuYW6EgXqipyy9d+yZPovyL/hCEEKX rHZ2ycbe6ztALNAntLYLOOyD9A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:41 2026 by rpki-client