$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json) Hash identifier: TirPkcvM/3zeG4bo64ic5ljMbb1psWaxL8Azg4VpcdI= Subject key identifier: 83:C0:95:80:76:20:AE:BA:7E:0F:E7:BA:72:79:FC:13:5D:64:8B:BD Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 1499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft Manifest number: 1355 Signing time: Tue 12 May 2026 17:02:20 +0000 Manifest this update: Tue 12 May 2026 17:02:20 +0000 Manifest next update: Tue 19 May 2026 17:02:20 +0000 Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: IpJVE+HWE1pMrCAGICrleRWb6Vws4JPGs6bBBVLamFk=) 2: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: 1rrUr85BF/sY2udLImZ0ePN2Kgi1s7SnmiZY7CqnRO0=) 3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: 4ErdLc5I6Vjk6uLExe07aYdEJVnOiI+wzbQvVUiYi2A=) 4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: WxVTSI5IqBCtDZMa9uJVKr0/nWjqcu853MnRjiV9FJM=) 5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: Y0tv3S5qBpizFf7zS7O2Gepf7bo7jWIy8poU5vPkGKI=) 6: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 0Ug2MlowSOnP4Pb++tVsQunj0HFM39e7BgFne7s9Gxk=) 7: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: ux2ARJ/bgr7if6KwYjchysUxhnA8D8TRZk6Lw4d52aw=) 8: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: 0nXqFu4Qi3Igds5cTks5iZ4dhntuRJvANiDD3hyPktU=) 9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: lO58lSpUoRJEo6C2ieXTdSjYTs9Vv0caugZb03Wynjg=) 10: 0038D872072E11EB8914E540C4F9AE02.roa (hash: BfVI3TFyV6fOpgoDG6kN2cNefVnef49M3JRzF9OGVQ8=) 11: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: jlJ7Tld2dLSNm+vxLU+DB4uapMo/I9nK2H7uiQod+hI=) 12: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: 9gF1aAdFHEDmuDddG9VCS6z/7V4hA5cH16J97sGtqmY=) 13: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: DErQ3o7TiaR6Xkm9YVkxrmIyVyHa9Hd4DAj359Ovfp8=) 14: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: 0JqXWVNYYl5QUi3Ff44dnxQVqYfsFqTw62wHqYfZBwc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5273 (0x1499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: May 12 17:02:20 2026 GMT Not After : May 19 17:02:20 2026 GMT Subject: CN=6a035d1c-cc0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:7f:03:9d:ec:4f:99:a8:10:0e:e8:e1:99: 93:2a:de:51:f1:84:8b:e2:cf:22:3e:16:fd:74:12: a2:af:90:38:fa:91:d2:b0:0b:25:77:05:67:74:c0: a7:1c:b9:24:39:dd:ae:1a:09:2b:42:91:6c:41:0e: 3d:05:e1:79:87:b6:ab:48:a1:8a:45:ee:cf:e4:39: be:40:53:cc:a7:1d:0f:f8:bb:98:28:ac:78:29:ac: ad:58:6b:12:b0:41:eb:c0:5e:6c:31:d8:ef:03:fa: c2:d4:b6:f9:b6:d8:8a:dc:52:6f:f0:b4:94:36:15: ce:7a:a5:f0:70:2d:c3:b6:be:b3:46:e1:5f:20:a6: ad:82:b1:59:58:68:84:8f:9c:27:85:e9:55:64:e6: 41:73:79:8d:3d:92:6e:05:95:70:69:a7:67:29:5a: bf:84:5e:95:dd:4e:47:2d:ef:03:5c:69:d5:2c:d0: 9d:5d:93:60:ec:07:fd:bf:f7:f8:1e:65:5e:74:e2: 3b:4d:2f:55:40:8c:79:72:fc:01:35:99:59:5a:a0: d0:b4:7b:e4:cc:4d:78:dd:b1:58:fa:44:39:85:c3: ea:60:51:2f:ab:e1:04:35:2c:f3:1e:5a:21:0e:8e: 24:78:e2:0e:ff:8c:23:47:6b:99:7e:78:79:49:c9: f9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C0:95:80:76:20:AE:BA:7E:0F:E7:BA:72:79:FC:13:5D:64:8B:BD X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f4:6c:68:d8:8a:f2:5d:59:e6:d4:31:d9:72:e1:84:81:d9: 5b:0d:1c:de:b4:17:e9:7c:94:73:86:4d:0f:22:bb:eb:64:c3: 54:99:55:7e:86:3e:68:db:89:d2:18:bc:29:e0:8b:b2:ec:4a: 7a:c0:f1:b0:a4:c7:19:17:e0:9e:41:84:43:0e:7e:7e:76:5c: 81:7b:c6:8e:4b:9f:06:f8:1e:7f:e1:32:d9:5b:27:f3:bd:df: 4b:0b:7a:a5:c7:66:ce:6d:eb:9a:5e:d6:88:65:9e:d5:2d:71: b8:11:fa:f8:3b:7b:44:6b:fb:d2:01:dd:83:0c:70:34:c8:7f: e0:f5:ee:b3:78:c2:56:3f:d9:c4:0d:17:16:01:9c:51:af:4c: b3:97:cb:3e:32:77:53:0a:35:98:08:9c:1e:77:54:d7:f5:bc: fe:3d:4b:f7:e3:d2:9c:25:4e:1d:a1:08:0b:78:a7:ea:06:8b: a6:d4:08:b7:02:8a:13:8c:e0:af:a3:ea:4c:72:4e:38:2d:cb: 7c:f7:e7:6d:38:7e:86:26:c4:6c:c2:8c:a0:66:e6:32:d3:ec: d1:8a:66:e8:4d:87:3a:4b:d6:3a:38:55:89:8a:20:e1:90:2a: b6:28:dd:95:dc:c8:19:b4:95:41:6e:8f:b9:be:c6:c8:e7:85: 31:8b:a8:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjYwNTEyMTcwMjIwWhcNMjYwNTE5MTcwMjIwWjAYMRYwFAYD VQQDEw02YTAzNWQxYy1jYzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA171/A53sT5moEA7o4ZmTKt5R8YSL4s8iPhb9dBKir5A4+pHSsAsldwVndMCn HLkkOd2uGgkrQpFsQQ49BeF5h7arSKGKRe7P5Dm+QFPMpx0P+LuYKKx4KaytWGsS sEHrwF5sMdjvA/rC1Lb5ttiK3FJv8LSUNhXOeqXwcC3Dtr6zRuFfIKatgrFZWGiE j5wnhelVZOZBc3mNPZJuBZVwaadnKVq/hF6V3U5HLe8DXGnVLNCdXZNg7Af9v/f4 HmVedOI7TS9VQIx5cvwBNZlZWqDQtHvkzE143bFY+kQ5hcPqYFEvq+EENSzzHloh Do4keOIO/4wjR2uZfnh5Scn5BQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIPAlYB2 IK66fg/nunJ5/BNdZIu9MB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS82MTY2NkMwRUQ2ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZm dXg0eFlHalIwQmNTWUxzY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvRsaNiK8l1Z5tQx2XLhhIHZWw0c3rQX6XyUc4ZNDyK762TDVJlVfoY+aNuJ 0hi8KeCLsuxKesDxsKTHGRfgnkGEQw5+fnZcgXvGjkufBvgef+Ey2Vsn873fSwt6 pcdmzm3rml7WiGWe1S1xuBH6+Dt7RGv70gHdgwxwNMh/4PXus3jCVj/ZxA0XFgGc Ua9Ms5fLPjJ3Uwo1mAicHndU1/W8/j1L9+PSnCVOHaEIC3in6gaLptQItwKKE4zg r6PqTHJOOC3LfPfnbTh+hibEbMKMoGbmMtPs0Ypm6E2HOkvWOjhViYog4ZAqtijd ldzIGbSVQW6Pub7GyOeFMYuoLg== -----END CERTIFICATE-----Generated at Wed May 13 11:32:54 2026 by rpki-client