$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: j4yY+kHWfW+Y6FnyRIBD6RZRi8ORueZ6y5L0Jjitg3g= Subject key identifier: 24:28:92:BC:DE:9C:0D:3A:FA:44:4B:09:06:15:00:FE:F2:4E:31:6F Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0333 Signing time: Fri 17 Apr 2026 01:07:05 +0000 Manifest this update: Fri 17 Apr 2026 01:07:05 +0000 Manifest next update: Fri 24 Apr 2026 01:07:05 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: /evu+Q0uu3i1O7lfGyeD5wdh+B4JKLJKoyOjVSKIAmQ=) 2: 3632957E441311EE8A03A472C4F9AE02.roa (hash: 9ag6UcsfwmbTKN69vAxeZlrGHPmOD+4Nc24cq2hGYEc=) 3: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: wQpbqelrmj4lybIs+25sHCQuHoXsqTv8dn2kB+Eex/w=) 4: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: RVftrvoH41xQlyHc3BQPzPH5X6Qw+/kOv2Gdp8k6+jY=) 5: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: LjbP/nLFrw9roK+062Qwn6m9oqXfGtb3IoQOgK+dP48=) 6: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: qKOdCAVWFADz493wTDf641lI0abU4p/Itg/wcgS+l0o=) 7: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: b8yYo+lj+yL+d9+ynU+UPW4NogScvGdrJp9Cr5Z0WP0=) 8: 3D34A750A88111ED80831318C4F9AE02.roa (hash: bfzeYGUzhmju4UBpRVlco+BnDmJ+eLaB1Aqj15egdaw=) 9: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: 6py7+bxGSuMtBsOOS74wMtrFxOuNUNxvgY9dbOF/Dhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Apr 17 01:07:05 2026 GMT Not After : Apr 24 01:07:05 2026 GMT Subject: CN=69e187b9-f74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f9:a6:0a:4d:6f:a5:0d:4a:e4:82:f4:fa:3f: c3:af:e5:8d:33:4f:6a:32:2e:57:64:8b:70:30:e4: 80:54:16:7f:a4:b6:94:24:61:4a:36:cd:f0:e3:30: 95:31:e3:64:b2:46:ed:bd:49:85:f2:61:d5:d6:7f: 3d:aa:6a:8e:8e:03:b1:5b:1a:a8:18:6f:6e:61:c8: d0:61:45:bd:c3:d2:67:bb:31:30:c1:92:2b:cc:ff: c9:93:f2:d5:6f:0b:99:ef:68:d6:af:e6:9d:cb:9a: 0e:03:08:32:a5:2a:b3:61:9c:0a:32:23:fe:bb:89: 6d:62:e0:ba:42:2b:33:ea:f3:7d:d2:f3:c8:9e:13: 1e:44:3b:f6:e8:2c:ed:82:84:88:0f:57:97:42:80: 21:9e:96:e6:0f:5a:4a:5d:0b:84:23:c3:5f:ec:ab: 45:e1:bd:3b:55:a3:99:b4:0d:7f:6b:14:cb:57:14: 31:5a:62:b7:b9:2a:af:42:56:30:66:43:25:a9:c0: 6c:6d:85:03:df:9d:7a:95:3f:7f:bd:13:d2:7c:52: c3:ad:4d:f5:f6:3c:29:2d:3f:c1:7e:8b:30:14:c6: 33:83:08:52:2b:27:01:94:03:4a:bd:52:ce:ec:9f: 7c:27:f6:da:6d:4f:d6:6a:e1:bd:0e:49:dd:60:2d: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:28:92:BC:DE:9C:0D:3A:FA:44:4B:09:06:15:00:FE:F2:4E:31:6F X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:e2:b5:7f:c6:40:7d:78:b6:79:be:13:0d:f3:8f:a0:a7:5c: 4a:67:bf:5a:35:17:bd:6e:b5:ea:39:ae:33:69:7d:65:13:21: ac:d3:6a:03:e7:a0:f8:4f:ed:2a:21:c5:98:e8:20:6c:62:60: b6:4d:33:57:0e:b2:99:79:69:e2:85:df:88:ad:a6:9b:e7:b4: c0:22:9f:f5:25:3b:0a:0c:bc:41:10:55:2a:b2:2f:cf:b1:50: 79:5d:52:f1:45:ec:59:8b:19:9e:99:3c:84:17:52:61:37:ae: 7e:a1:d6:6b:ed:3e:68:a7:54:cf:cd:a9:7f:3a:46:bb:fc:28: 5a:0a:82:5a:98:16:40:13:4e:ae:5e:bb:3f:cb:bd:ae:13:2c: bc:89:22:b6:17:57:cd:b7:54:a1:79:a1:33:65:a9:6b:e2:8e: 58:b0:ae:b4:2c:f3:1b:32:b5:49:96:d3:4d:e6:ec:c0:bd:8a: 8f:a1:86:25:23:8e:21:7f:4e:a5:8a:e1:ad:d5:5a:a8:28:e5: a0:be:06:27:d0:64:b5:52:0c:91:c6:7d:f9:ab:c6:f7:41:36: 8e:d9:02:41:6e:27:38:6c:0d:9c:5c:1a:0e:f3:c4:a2:c7:c1: ac:02:1f:1e:dc:5f:fc:4a:8d:1c:d2:f9:88:0a:fe:d0:d0:8e: 7f:aa:04:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjYwNDE3MDEwNzA1WhcNMjYwNDI0MDEwNzA1WjAYMRYwFAYD VQQDEw02OWUxODdiOS1mNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPmmCk1vpQ1K5IL0+j/Dr+WNM09qMi5XZItwMOSAVBZ/pLaUJGFKNs3w4zCV MeNkskbtvUmF8mHV1n89qmqOjgOxWxqoGG9uYcjQYUW9w9JnuzEwwZIrzP/Jk/LV bwuZ72jWr+ady5oOAwgypSqzYZwKMiP+u4ltYuC6Qisz6vN90vPInhMeRDv26Czt goSID1eXQoAhnpbmD1pKXQuEI8Nf7KtF4b07VaOZtA1/axTLVxQxWmK3uSqvQlYw ZkMlqcBsbYUD3516lT9/vRPSfFLDrU319jwpLT/BfoswFMYzgwhSKycBlANKvVLO 7J98J/babU/WauG9DkndYC3dcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCQokrze nA06+kRLCQYVAP7yTjFvMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAeK1f8ZAfXi2eb4TDfOPoKdcSme/WjUXvW616jmuM2l9ZRMhrNNqA+eg+E/t KiHFmOggbGJgtk0zVw6ymXlp4oXfiK2mm+e0wCKf9SU7Cgy8QRBVKrIvz7FQeV1S 8UXsWYsZnpk8hBdSYTeufqHWa+0+aKdUz82pfzpGu/woWgqCWpgWQBNOrl67P8u9 rhMsvIkithdXzbdUoXmhM2Wpa+KOWLCutCzzGzK1SZbTTebswL2Kj6GGJSOOIX9O pYrhrdVaqCjloL4GJ9BktVIMkcZ9+avG90E2jtkCQW4nOGwNnFwaDvPEosfBrAIf Htxf/EqNHNL5iAr+0NCOf6oELA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:49:15 2026 by rpki-client