$ rpki-client -vvvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json) Hash identifier: q5Fn21cEzaVReSJOGQrqH9b/3wzL86djkcwn+X3l69s= Subject key identifier: DD:09:66:56:AC:04:19:AE:5E:F4:C2:2B:CB:98:56:28:F3:2B:2B:D2 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 14E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft Manifest number: 139F Signing time: Wed 26 Aug 2026 16:57:00 +0000 Manifest this update: Wed 26 Aug 2026 16:57:00 +0000 Manifest next update: Wed 02 Sep 2026 16:57:00 +0000 Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: u595xwe+fk5YTBLfaV7YdrWqcIkiEM3h2lCIEoD8/Iw=) 2: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: DErQ3o7TiaR6Xkm9YVkxrmIyVyHa9Hd4DAj359Ovfp8=) 3: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: jlJ7Tld2dLSNm+vxLU+DB4uapMo/I9nK2H7uiQod+hI=) 4: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: ux2ARJ/bgr7if6KwYjchysUxhnA8D8TRZk6Lw4d52aw=) 5: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: WxVTSI5IqBCtDZMa9uJVKr0/nWjqcu853MnRjiV9FJM=) 6: ABBD7288621E11F1B46C43227047A888.roa (hash: XkYX6vbb6wu0I6LyLg7rmDrKGG169XYV0z/dzuJsV18=) 7: 4D6A840A5D9611F1BD5FE02C96833773.roa (hash: d3z49JgJZXiieN6MWgLeD2K+u7C1Gr2j766YBYQR8LI=) 8: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: 0nXqFu4Qi3Igds5cTks5iZ4dhntuRJvANiDD3hyPktU=) 9: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: Y0tv3S5qBpizFf7zS7O2Gepf7bo7jWIy8poU5vPkGKI=) 10: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: 0JqXWVNYYl5QUi3Ff44dnxQVqYfsFqTw62wHqYfZBwc=) 11: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: 4ErdLc5I6Vjk6uLExe07aYdEJVnOiI+wzbQvVUiYi2A=) 12: 0038D872072E11EB8914E540C4F9AE02.roa (hash: BfVI3TFyV6fOpgoDG6kN2cNefVnef49M3JRzF9OGVQ8=) 13: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: 1rrUr85BF/sY2udLImZ0ePN2Kgi1s7SnmiZY7CqnRO0=) 14: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: Ww46Lbl6UjA/CXqKqzqylfENifJWkFzcJuiq1+uDY3g=) 15: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: 9gF1aAdFHEDmuDddG9VCS6z/7V4hA5cH16J97sGtqmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 16:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5351 (0x14e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Aug 26 16:57:00 2026 GMT Not After : Sep 2 16:57:00 2026 GMT Subject: CN=6a8f1adc-6691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c0:35:6e:88:b5:43:a7:9f:63:f3:3d:c3:eb: 2b:e1:7c:1a:88:80:3e:7e:78:63:ba:40:a0:eb:ae: 0c:65:6b:6a:d1:c6:83:97:87:65:82:6a:22:c2:d4: da:66:47:a5:21:24:01:9d:13:b9:1b:cd:b7:3a:ef: 43:1b:af:67:c6:48:6e:7a:4d:48:36:fb:a9:06:b6: 7f:29:40:ce:23:47:dc:cc:02:33:b0:bd:61:73:89: 5d:aa:44:36:5b:5f:e1:13:84:92:be:0f:f0:d4:57: b9:71:51:3f:ea:9d:c4:15:54:d9:ed:a4:41:76:24: 91:b7:3d:d2:47:97:da:3f:9f:a2:c9:8f:c8:20:13: 17:c2:d9:b2:0d:2d:59:80:0f:88:ed:44:cb:54:31: 08:40:09:59:59:02:49:d1:4d:c3:99:09:07:42:67: 93:2e:37:c4:3b:18:ca:d8:a1:e3:e2:01:ad:db:be: 3c:07:26:c3:fe:41:b7:92:2d:ca:66:85:31:52:cd: 04:96:e3:6f:3a:0a:eb:f3:38:6e:ab:31:f9:5f:77: aa:7f:b4:8c:f5:93:6f:cc:30:27:94:c7:6d:90:59: 16:b5:49:07:b4:06:e0:51:8f:33:4f:d0:b8:74:98: 8a:e8:0f:3e:70:78:79:b8:61:4d:ca:7f:dd:45:86: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:09:66:56:AC:04:19:AE:5E:F4:C2:2B:CB:98:56:28:F3:2B:2B:D2 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:58:6a:c7:31:35:57:52:cc:ae:e0:24:89:94:f5:88:67:6a: 53:5d:4c:64:ab:ce:5f:6e:60:e9:78:ff:d5:2d:f9:16:27:29: c9:5d:44:dc:7b:e7:a2:4e:f2:e6:f6:8b:d2:a4:2b:0e:96:79: bd:47:23:96:8e:a2:37:8f:c2:d4:91:c3:b2:8a:07:66:bb:02: d7:9d:75:03:44:f6:23:5a:30:b6:a1:e2:9a:22:b1:a5:95:10: 54:2f:a4:45:dd:d7:3d:05:3f:4b:cb:12:e0:74:ee:2f:43:29: 0b:f3:7b:c3:b8:ec:a9:6f:ab:12:d6:ac:6d:10:00:bc:5c:05: 02:5e:9a:6c:2e:3d:29:b5:a9:47:17:a1:c8:a7:f7:d0:36:ac: 71:9c:6e:f2:ef:da:eb:17:fe:af:21:a2:73:cf:28:53:f8:ee: ee:a2:dd:04:d9:b7:ed:d5:4c:ae:04:10:01:f8:eb:05:dd:54: bd:d4:98:0d:d2:35:96:8d:0b:e6:c7:77:f9:8e:69:36:2c:f6: ce:8f:b4:ce:7e:4f:5d:29:6d:4c:f5:55:ec:7c:4c:b9:85:bc: 68:d9:39:da:6d:df:6c:cc:49:4e:92:03:a1:30:e0:63:32:73: bf:e7:d5:8b:1f:2f:0e:02:46:1e:21:74:32:8c:2a:89:86:39: 6c:49:f2:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjYwODI2MTY1NzAwWhcNMjYwOTAyMTY1NzAwWjAYMRYwFAYD VQQDEw02YThmMWFkYy02NjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cA1boi1Q6efY/M9w+sr4XwaiIA+fnhjukCg664MZWtq0caDl4dlgmoiwtTa ZkelISQBnRO5G823Ou9DG69nxkhuek1INvupBrZ/KUDOI0fczAIzsL1hc4ldqkQ2 W1/hE4SSvg/w1Fe5cVE/6p3EFVTZ7aRBdiSRtz3SR5faP5+iyY/IIBMXwtmyDS1Z gA+I7UTLVDEIQAlZWQJJ0U3DmQkHQmeTLjfEOxjK2KHj4gGt2748BybD/kG3ki3K ZoUxUs0EluNvOgrr8zhuqzH5X3eqf7SM9ZNvzDAnlMdtkFkWtUkHtAbgUY8zT9C4 dJiK6A8+cHh5uGFNyn/dRYbJpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0JZlas BBmuXvTCK8uYVijzKyvSMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS82MTY2NkMwRUQ2ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZm dXg0eFlHalIwQmNTWUxzY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArlhqxzE1V1LMruAkiZT1iGdqU11MZKvOX25g6Xj/1S35FicpyV1E3Hvnok7y 5vaL0qQrDpZ5vUcjlo6iN4/C1JHDsooHZrsC1511A0T2I1owtqHimiKxpZUQVC+k Rd3XPQU/S8sS4HTuL0MpC/N7w7jsqW+rEtasbRAAvFwFAl6abC49KbWpRxehyKf3 0DascZxu8u/a6xf+ryGic88oU/ju7qLdBNm37dVMrgQQAfjrBd1UvdSYDdI1lo0L 5sd3+Y5pNiz2zo+0zn5PXSltTPVV7HxMuYW8aNk52m3fbMxJTpIDoTDgYzJzv+fV ix8vDgJGHiF0MowqiYY5bEnyMg== -----END CERTIFICATE-----Generated at Thu Aug 27 18:23:57 2026 by rpki-client