$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: zY/HaqWdSD0/EvyqZPFoRiq/tLJkF9TmUNHN0Z3Qp8w= Subject key identifier: 28:B9:FC:B3:FE:D3:D3:B8:9F:A2:18:DA:90:EB:B7:A6:78:A8:71:E5 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 0230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 0215 Signing time: Sun 05 Apr 2026 02:39:22 +0000 Manifest this update: Sun 05 Apr 2026 02:39:21 +0000 Manifest next update: Sun 12 Apr 2026 02:39:21 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: w/z/haFlQDgeKb2Bw9fVIkWTQgygAlvGZGshAH/nErc=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: 2IMnLKkDtPnRMRm7EMhHOB0THYlzNJsg+gB0GBMnX4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 560 (0x230) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Apr 5 02:39:21 2026 GMT Not After : Apr 12 02:39:21 2026 GMT Subject: CN=69d1cb5a-8b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:73:61:05:6b:29:e7:15:2e:62:1a:71:9a:ec: 85:8c:cf:77:7a:ca:0a:45:90:8d:d8:75:70:96:44: be:f6:d6:fc:59:ff:ae:b0:fd:5c:7b:33:f3:83:28: c9:e3:0c:28:6f:87:28:34:a5:82:9d:07:d3:18:7f: b4:d6:19:74:e0:5b:61:ed:a7:1d:4c:a1:af:af:cb: e2:51:95:a7:71:a6:87:55:9a:38:c8:59:18:f1:77: ce:f9:1e:b9:c7:c5:ab:90:5f:6e:cf:d9:c3:9e:47: e7:52:d4:89:d5:12:2d:ea:ad:56:91:2f:64:9e:ab: 65:24:cd:b6:42:6e:5b:1e:89:9b:f2:b8:65:81:bd: 78:59:05:fb:6d:7d:da:cf:d7:b8:25:9b:94:9b:ce: 18:72:88:a0:60:38:47:95:49:d4:0b:85:35:45:97: 09:fa:0d:2e:9a:f3:36:8a:c3:09:0c:58:cc:85:7b: 3d:bb:77:07:a2:fc:c7:23:ee:1a:00:17:a7:8b:9b: 0a:9f:3f:d4:7f:38:91:67:f6:bf:fa:2a:37:fc:f2: 30:55:e7:1c:10:fe:73:58:10:fa:6c:2c:cb:a5:3c: 55:59:cd:72:c5:d9:6f:7c:92:d0:e9:58:50:ea:ab: 02:07:8f:4f:ee:52:ed:06:f2:78:36:8e:42:24:8e: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:FC:B3:FE:D3:D3:B8:9F:A2:18:DA:90:EB:B7:A6:78:A8:71:E5 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:62:06:85:03:ac:c3:38:f0:69:4f:ab:83:fc:50:f8:8a:a1: 2a:46:9d:c3:e7:92:3e:e2:43:05:d5:f8:cb:43:9f:f1:cf:e4: fe:dc:85:ad:91:eb:cb:1d:ff:72:94:08:f0:fe:2a:90:9a:6f: 45:4a:bf:91:07:eb:f6:71:2e:77:73:c6:35:b0:31:e5:1a:ec: e2:58:c1:3f:65:28:df:3b:38:4d:bf:0a:fc:26:f8:bb:a7:aa: 43:9e:88:2d:d8:58:c4:5f:34:54:7a:4c:60:8e:25:d3:27:83: 64:ff:68:05:d3:88:14:eb:2c:64:5d:e1:dd:0c:bc:4c:6e:d1: 92:9e:17:2d:e7:28:92:65:a3:1b:38:a4:2d:25:c7:ae:37:59: 7c:af:3b:64:47:d4:ec:81:ba:44:8c:45:6f:8d:31:0e:fa:2d: b8:ee:9e:9a:7e:5c:ac:74:9d:0f:d5:a2:38:b1:89:5d:22:f9: 83:81:80:57:00:cc:8f:4b:5e:10:56:ce:85:8b:39:68:52:04: ce:ec:da:7d:e6:7e:0b:1d:e1:73:7b:3f:d6:a2:7d:ef:10:ba: e9:24:9f:21:16:43:9b:2f:ec:23:9c:3e:f3:08:54:26:a6:60: 52:4d:5f:fe:b5:e3:64:7d:50:ff:15:64:ec:66:7b:5d:3a:24: f1:aa:16:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjYwNDA1MDIzOTIxWhcNMjYwNDEyMDIzOTIxWjAYMRYwFAYD VQQDEw02OWQxY2I1YS04YjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HNhBWsp5xUuYhpxmuyFjM93esoKRZCN2HVwlkS+9tb8Wf+usP1cezPzgyjJ 4wwob4coNKWCnQfTGH+01hl04Fth7acdTKGvr8viUZWncaaHVZo4yFkY8XfO+R65 x8WrkF9uz9nDnkfnUtSJ1RIt6q1WkS9knqtlJM22Qm5bHomb8rhlgb14WQX7bX3a z9e4JZuUm84YcoigYDhHlUnUC4U1RZcJ+g0umvM2isMJDFjMhXs9u3cHovzHI+4a ABeni5sKnz/UfziRZ/a/+io3/PIwVeccEP5zWBD6bCzLpTxVWc1yxdlvfJLQ6VhQ 6qsCB49P7lLtBvJ4No5CJI62UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCi5/LP+ 09O4n6IY2pDrt6Z4qHHlMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOGIGhQOswzjwaU+rg/xQ+IqhKkadw+eSPuJDBdX4y0Of8c/k/tyFrZHryx3/ cpQI8P4qkJpvRUq/kQfr9nEud3PGNbAx5Rrs4ljBP2Uo3zs4Tb8K/Cb4u6eqQ56I LdhYxF80VHpMYI4l0yeDZP9oBdOIFOssZF3h3Qy8TG7Rkp4XLecokmWjGzikLSXH rjdZfK87ZEfU7IG6RIxFb40xDvotuO6emn5crHSdD9WiOLGJXSL5g4GAVwDMj0te EFbOhYs5aFIEzuzafeZ+Cx3hc3s/1qJ97xC66SSfIRZDmy/sI5w+8whUJqZgUk1f /rXjZH1Q/xVk7GZ7XTok8aoWKQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:03 2026 by rpki-client