$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft File: 4QiBh_ZAlCY92mdJqV9zqmwasGM.mft (raw, json) Hash identifier: upUxUKgKCQGoF+9KWICTXCVfstksff6JGbr9z08Grjk= Subject key identifier: FE:DC:E2:53:9D:34:E4:35:B9:10:AC:A7:22:12:63:D6:FC:FE:82:15 Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 Certificate issuer: /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft Manifest number: 0338 Signing time: Mon 27 Apr 2026 01:09:37 +0000 Manifest this update: Mon 27 Apr 2026 01:09:37 +0000 Manifest next update: Mon 04 May 2026 01:09:37 +0000 Files and hashes: 1: 4QiBh_ZAlCY92mdJqV9zqmwasGM.crl (hash: p4nHpuvy0Z8aTUNd86dUtighUM3W/GpG4s2oSYADqvU=) 2: 780136B63D1211EEBB0A0C5AC4F9AE02.roa (hash: RVftrvoH41xQlyHc3BQPzPH5X6Qw+/kOv2Gdp8k6+jY=) 3: 9DC49A2449A011EEB3DFDD0DC4F9AE02.roa (hash: LjbP/nLFrw9roK+062Qwn6m9oqXfGtb3IoQOgK+dP48=) 4: 3632957E441311EE8A03A472C4F9AE02.roa (hash: 9ag6UcsfwmbTKN69vAxeZlrGHPmOD+4Nc24cq2hGYEc=) 5: 78BC7D28A87E11ED9AE70779C4F9AE02.roa (hash: wQpbqelrmj4lybIs+25sHCQuHoXsqTv8dn2kB+Eex/w=) 6: CCEE4F76CAC711EF80553A61C4F9AE02.roa (hash: b8yYo+lj+yL+d9+ynU+UPW4NogScvGdrJp9Cr5Z0WP0=) 7: CC647BDECAC711EF80553A61C4F9AE02.roa (hash: 6py7+bxGSuMtBsOOS74wMtrFxOuNUNxvgY9dbOF/Dhk=) 8: 4C7C3EA8E8F511EDBC11CF6BC4F9AE02.roa (hash: qKOdCAVWFADz493wTDf641lI0abU4p/Itg/wcgS+l0o=) 9: 3D34A750A88111ED80831318C4F9AE02.roa (hash: bfzeYGUzhmju4UBpRVlco+BnDmJ+eLaB1Aqj15egdaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 01:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063 Validity Not Before: Apr 27 01:09:37 2026 GMT Not After : May 4 01:09:37 2026 GMT Subject: CN=69eeb751-4556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:3d:97:91:53:f7:14:87:01:52:42:8e:41: b5:c5:22:a8:a1:b2:eb:1a:e9:1b:f8:9f:3e:0b:02: 20:55:ce:41:7f:2c:5d:c2:cf:cc:9c:43:d8:79:8f: f9:5c:4b:ea:2c:8e:14:fd:d0:60:9b:b9:e6:c8:6f: cb:4a:17:be:6a:8d:ab:61:bb:22:56:cc:6a:47:fc: 34:b0:64:3b:8b:83:9e:f4:12:58:d0:57:39:14:86: c6:4a:90:ca:bc:fb:e6:ae:2f:3d:2e:2d:27:d6:d2: f8:4a:fb:b4:a9:28:32:c8:48:c6:e6:53:c2:f2:bf: b1:f7:5e:89:aa:6c:80:38:a1:d5:cf:46:27:d3:6b: 15:3b:f5:0d:21:f6:16:f4:a1:45:af:84:49:c2:eb: f7:45:d0:b8:f4:72:4d:81:0d:6c:b7:0b:fb:36:96: a3:1d:0c:e3:a0:0a:59:8b:4a:27:1f:6e:9d:af:8c: 71:6e:42:ec:7e:20:7f:40:48:fa:09:9c:42:16:5e: b9:bc:03:18:88:97:bf:9f:87:c9:00:e5:76:34:14: 18:5d:3d:5c:ed:3c:a7:c2:b9:4b:ce:de:a0:56:57: 29:86:65:5a:6d:15:8b:f9:26:21:78:e3:77:be:5d: 04:81:32:72:90:7a:c1:bf:4b:3e:f4:b6:53:68:d1: c2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DC:E2:53:9D:34:E4:35:B9:10:AC:A7:22:12:63:D6:FC:FE:82:15 X509v3 Authority Key Identifier: keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:10:82:9a:63:e8:6e:56:50:6c:ee:80:cd:96:c7:5e:8c:e2: 3d:01:40:a5:da:8f:bc:5a:66:a5:ab:02:e9:69:6b:26:bd:7d: df:61:7d:61:9f:fb:0b:bb:4a:2c:11:2a:56:95:34:d1:3d:3b: d5:c8:5b:5e:28:34:80:94:52:11:7a:64:66:34:bd:fc:e4:5c: 74:2d:21:76:32:58:ec:0e:50:0e:ed:79:b8:4f:1e:1e:2c:6b: 1f:9a:67:b7:e4:7d:3e:96:02:d6:fa:c5:a0:e4:61:bc:bc:23: 72:bc:a6:77:45:2e:86:09:f8:7d:25:8b:53:81:8d:cd:6b:a7: b3:e4:4f:84:d4:a1:eb:57:b4:1e:88:2a:8c:6f:4e:92:55:ac: 00:9d:56:85:94:3a:9c:b8:3f:34:cc:c3:b5:a7:5a:7d:54:27: 92:c2:a4:15:7b:b6:00:77:8f:99:32:d0:2e:d5:a2:32:50:cf: 58:54:ef:5f:35:33:a8:c6:dc:12:1c:2b:5e:b6:94:c0:d2:9b: 0f:5c:9c:ea:03:0e:99:b0:f0:16:3c:d1:b1:06:08:c3:79:ad: a9:79:34:ac:d2:a5:f5:6c:8e:18:93:fc:d2:93:e3:2b:40:72: 2d:4d:28:19:fe:06:12:f9:79:80:4f:d8:d6:2e:82:4c:c3:39: fc:9b:e8:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JBQzUxMTAvBgNVBAUTKEUxMDg4MTg3RjY0MDk0MjYzRERBNjc0OUE5NUY3M0FB NkMxQUIwNjMwHhcNMjYwNDI3MDEwOTM3WhcNMjYwNTA0MDEwOTM3WjAYMRYwFAYD VQQDEw02OWVlYjc1MS00NTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSM9l5FT9xSHAVJCjkG1xSKoobLrGukb+J8+CwIgVc5Bfyxdws/MnEPYeY/5 XEvqLI4U/dBgm7nmyG/LShe+ao2rYbsiVsxqR/w0sGQ7i4Oe9BJY0Fc5FIbGSpDK vPvmri89Li0n1tL4Svu0qSgyyEjG5lPC8r+x916JqmyAOKHVz0Yn02sVO/UNIfYW 9KFFr4RJwuv3RdC49HJNgQ1stwv7NpajHQzjoApZi0onH26dr4xxbkLsfiB/QEj6 CZxCFl65vAMYiJe/n4fJAOV2NBQYXT1c7TynwrlLzt6gVlcphmVabRWL+SYheON3 vl0EgTJykHrBv0s+9LZTaNHCGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7c4lOd NOQ1uRCspyISY9b8/oIVMB8GA1UdIwQYMBaAFOEIgYf2QJQmPdpnSalfc6psGrBj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkFDNS80NzBBNjIwNDE1 MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxDWTkybWRKcVY5enFtd2Fz R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRRaUJoX1pBbENZOTJtZEpxVjl6cW13YXNHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkFDNS80NzBBNjIwNDE1MzAxMUVEQkFBM0QwMjdDNEY5QUUwMi80UWlCaF9aQWxD WTkybWRKcVY5enFtd2FzR00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgBCCmmPoblZQbO6AzZbHXoziPQFApdqPvFpmpasC6WlrJr1932F9YZ/7C7tK LBEqVpU00T071chbXig0gJRSEXpkZjS9/ORcdC0hdjJY7A5QDu15uE8eHixrH5pn t+R9PpYC1vrFoORhvLwjcrymd0Uuhgn4fSWLU4GNzWuns+RPhNSh61e0HogqjG9O klWsAJ1WhZQ6nLg/NMzDtadafVQnksKkFXu2AHePmTLQLtWiMlDPWFTvXzUzqMbc EhwrXraUwNKbD1yc6gMOmbDwFjzRsQYIw3mtqXk0rNKl9WyOGJP80pPjK0ByLU0o Gf4GEvl5gE/Y1i6CTMM5/JvoNQ== -----END CERTIFICATE-----Generated at Mon Apr 27 09:17:03 2026 by rpki-client