$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: PDqi6uHOgIGqnlCVIBwe2XCTMtFq3k6RG/HylM2kkgw= Subject key identifier: B2:27:A6:81:10:35:7D:C5:76:A3:56:CF:BE:B6:01:CB:B6:B0:5A:9F Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 0236 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 021B Signing time: Fri 17 Apr 2026 02:48:16 +0000 Manifest this update: Fri 17 Apr 2026 02:48:15 +0000 Manifest next update: Fri 24 Apr 2026 02:48:15 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: qgsXh7WZjRbHsCZxEqU8QoF2t9dY2eRAflBeIpfKlAg=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: 2IMnLKkDtPnRMRm7EMhHOB0THYlzNJsg+gB0GBMnX4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 566 (0x236) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Apr 17 02:48:15 2026 GMT Not After : Apr 24 02:48:15 2026 GMT Subject: CN=69e19f6f-acda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fd:44:3e:33:e2:68:7b:9b:d5:55:57:8d:56: 5b:c7:ff:c2:11:da:7b:44:97:b1:01:14:33:69:44: 37:3a:64:07:0c:85:d0:ef:6f:7a:f6:32:46:81:48: 91:3d:9f:c4:e8:ed:65:dd:69:f8:b4:1e:0c:ad:14: a5:aa:02:c3:a1:0f:9a:56:4d:6f:3a:7c:b3:2b:e4: 1f:5e:a8:fb:12:48:2b:12:a6:e4:ae:02:a9:c7:6b: c7:bb:9b:4d:86:8e:76:cb:0f:dc:bf:56:81:ee:98: bc:5b:6f:4d:19:2a:95:d9:a7:fb:f3:4c:8d:ac:95: 07:27:5e:66:8e:88:67:e2:4b:52:4f:85:20:56:d2: 0e:42:bd:b0:2e:ba:08:70:95:17:c8:92:d2:5b:dd: bb:5c:14:ea:8d:71:1b:48:52:c9:4e:df:fb:3c:cd: 3a:d5:b8:a8:96:3d:aa:da:5a:6c:3c:09:70:89:bb: 07:26:a2:29:b6:df:05:e7:f8:4e:6e:8a:d6:fd:0a: c7:f5:26:b2:a7:48:22:20:ce:ec:ab:0b:bd:e1:14: 6e:7b:c6:c7:93:99:61:cb:4c:c4:ad:a8:1c:90:6e: d3:b2:9b:18:ae:16:70:76:42:a5:c1:ef:dc:d3:08: 72:8b:44:5b:ce:0f:e3:e3:b1:f7:e1:99:85:7a:ae: a0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:27:A6:81:10:35:7D:C5:76:A3:56:CF:BE:B6:01:CB:B6:B0:5A:9F X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2c:52:d3:dd:4f:79:c5:fc:2d:42:35:ca:74:85:ed:f8:42: c4:ef:3e:25:64:44:73:b2:53:2c:22:58:10:a7:14:9d:02:6a: 57:38:58:7e:18:d8:3a:15:e4:45:3f:a8:d4:36:4a:21:27:44: ef:02:97:8f:bd:11:7b:46:83:29:e0:0e:11:6e:c6:d8:ec:75: 96:81:05:be:53:8f:91:c9:5c:6b:1f:f6:8c:02:36:37:49:9f: 56:5a:15:1c:4d:ff:11:2b:7c:40:eb:5b:a4:8f:a8:21:26:5f: 69:4e:c2:0e:ef:a2:44:5b:8c:92:31:46:96:07:e7:ec:08:8d: 54:7e:64:54:cf:13:bd:ca:82:7a:f1:79:b8:65:f8:d9:7d:02: 76:e8:9a:4f:a7:39:ae:e0:f9:f5:c9:59:1a:e8:ae:77:85:2e: 47:e5:cc:7c:b0:37:29:51:72:54:40:c5:39:aa:55:2b:69:6d: 98:50:ab:17:c0:86:42:5b:92:6f:10:85:c3:ac:c2:36:19:4a: f9:92:41:a4:e4:a2:50:f9:e2:ef:eb:94:a5:1e:4f:06:87:c1: 1c:e0:6f:b3:57:5c:96:28:b3:a7:5a:80:65:9c:97:ac:7d:0a: 80:8a:c5:5f:0b:99:cb:f9:c5:e2:d5:cb:a9:f2:e6:2d:a7:61: 34:fb:20:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjYwNDE3MDI0ODE1WhcNMjYwNDI0MDI0ODE1WjAYMRYwFAYD VQQDEw02OWUxOWY2Zi1hY2RhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf1EPjPiaHub1VVXjVZbx//CEdp7RJexARQzaUQ3OmQHDIXQ72969jJGgUiR PZ/E6O1l3Wn4tB4MrRSlqgLDoQ+aVk1vOnyzK+QfXqj7EkgrEqbkrgKpx2vHu5tN ho52yw/cv1aB7pi8W29NGSqV2af780yNrJUHJ15mjohn4ktST4UgVtIOQr2wLroI cJUXyJLSW927XBTqjXEbSFLJTt/7PM061biolj2q2lpsPAlwibsHJqIptt8F5/hO borW/QrH9Sayp0giIM7sqwu94RRue8bHk5lhy0zEragckG7TspsYrhZwdkKlwe/c 0whyi0Rbzg/j47H34ZmFeq6g1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLInpoEQ NX3FdqNWz762Acu2sFqfMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmyxS091PecX8LUI1ynSF7fhCxO8+JWREc7JTLCJYEKcUnQJqVzhYfhjYOhXk RT+o1DZKISdE7wKXj70Re0aDKeAOEW7G2Ox1loEFvlOPkclcax/2jAI2N0mfVloV HE3/ESt8QOtbpI+oISZfaU7CDu+iRFuMkjFGlgfn7AiNVH5kVM8TvcqCevF5uGX4 2X0CduiaT6c5ruD59clZGuiud4UuR+XMfLA3KVFyVEDFOapVK2ltmFCrF8CGQluS bxCFw6zCNhlK+ZJBpOSiUPni7+uUpR5PBofBHOBvs1dcliizp1qAZZyXrH0KgIrF XwuZy/nF4tXLqfLmLadhNPsg3w== -----END CERTIFICATE-----Generated at Sat Apr 18 02:32:47 2026 by rpki-client