$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft File: 4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json) Hash identifier: Z/gMHbGNoYqepBgAtA/DDe1Is+78fFZKMYAFwk3hd+E= Subject key identifier: CA:C3:5D:58:37:93:74:F5:0F:5F:07:24:44:DC:A0:41:83:3D:85:03 Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 Certificate issuer: /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Certificate serial: 14D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft Manifest number: 138D Signing time: Wed 22 Jul 2026 17:06:55 +0000 Manifest this update: Wed 22 Jul 2026 17:06:54 +0000 Manifest next update: Wed 29 Jul 2026 17:06:54 +0000 Files and hashes: 1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: bZggQMK2szZEvGgLNXn9XOgnT/EtTXEUrKGu3E8HqL0=) 2: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: ux2ARJ/bgr7if6KwYjchysUxhnA8D8TRZk6Lw4d52aw=) 3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: 4ErdLc5I6Vjk6uLExe07aYdEJVnOiI+wzbQvVUiYi2A=) 4: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: Ww46Lbl6UjA/CXqKqzqylfENifJWkFzcJuiq1+uDY3g=) 5: 6A5222E2B8CA11F0AEF0BA3CC4F9AE02.roa (hash: DErQ3o7TiaR6Xkm9YVkxrmIyVyHa9Hd4DAj359Ovfp8=) 6: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: 9gF1aAdFHEDmuDddG9VCS6z/7V4hA5cH16J97sGtqmY=) 7: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: 0JqXWVNYYl5QUi3Ff44dnxQVqYfsFqTw62wHqYfZBwc=) 8: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: Y0tv3S5qBpizFf7zS7O2Gepf7bo7jWIy8poU5vPkGKI=) 9: ABBD7288621E11F1B46C43227047A888.roa (hash: XkYX6vbb6wu0I6LyLg7rmDrKGG169XYV0z/dzuJsV18=) 10: 4D6A840A5D9611F1BD5FE02C96833773.roa (hash: d3z49JgJZXiieN6MWgLeD2K+u7C1Gr2j766YBYQR8LI=) 11: AD7B2798CDCA11F096B9035EC4F9AE02.roa (hash: 1rrUr85BF/sY2udLImZ0ePN2Kgi1s7SnmiZY7CqnRO0=) 12: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: jlJ7Tld2dLSNm+vxLU+DB4uapMo/I9nK2H7uiQod+hI=) 13: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: 0nXqFu4Qi3Igds5cTks5iZ4dhntuRJvANiDD3hyPktU=) 14: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: WxVTSI5IqBCtDZMa9uJVKr0/nWjqcu853MnRjiV9FJM=) 15: 0038D872072E11EB8914E540C4F9AE02.roa (hash: BfVI3TFyV6fOpgoDG6kN2cNefVnef49M3JRzF9OGVQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5333 (0x14d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7 Validity Not Before: Jul 22 17:06:54 2026 GMT Not After : Jul 29 17:06:54 2026 GMT Subject: CN=6a60f8af-95b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:4c:ae:bc:c1:03:62:93:d3:89:ae:07:1e: 83:1d:f1:5b:be:45:b7:46:89:8f:59:51:36:42:ca: c3:8f:d2:83:ff:15:d5:8d:69:61:3f:d4:9b:16:47: 24:37:30:2c:02:a9:f7:6b:5c:09:97:39:7e:20:65: c2:b1:7b:25:78:7a:3d:f7:5c:6e:0d:8f:df:94:fe: f0:ff:e8:76:d7:27:1b:0a:db:2e:5f:ac:e8:99:67: 2e:55:63:67:3a:db:96:5a:df:00:e9:65:7b:c7:71: 2a:07:4b:ab:30:6d:95:cd:1a:c5:0f:90:fc:8c:27: 60:13:d6:a5:23:bf:0b:81:38:c6:3b:73:ce:48:06: 57:96:14:90:69:2e:51:5b:4c:e8:08:5f:4e:e4:4d: 61:a0:91:c8:83:e9:06:df:38:60:8c:81:a1:da:41: ba:79:5c:d6:fb:2d:93:b6:b2:29:80:e4:cb:da:91: 64:72:55:36:b5:32:e7:3b:32:5c:a6:82:76:ab:9e: 0d:4f:ce:29:3a:d7:2e:78:0c:b3:13:cb:e8:f8:e4: 6f:70:63:7b:90:e7:3c:0b:68:b5:78:5c:48:13:4a: 48:db:d2:7b:c4:69:5f:f6:57:cf:e7:81:87:cc:74: 8a:2a:e5:b6:6f:87:0a:5f:f6:e9:da:d1:4c:7d:64: bb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C3:5D:58:37:93:74:F5:0F:5F:07:24:44:DC:A0:41:83:3D:85:03 X509v3 Authority Key Identifier: keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:96:02:a0:d4:10:7b:7c:a0:d3:2e:bc:61:3a:18:9c:0e:83: ca:92:8b:7e:96:b1:9a:b9:a7:0f:b7:d7:49:f3:6c:74:f9:1e: f6:82:8b:af:a7:92:3b:8d:5c:2f:c9:5e:49:d3:81:6a:f1:61: 6e:e6:e8:f9:a3:7d:07:b6:6a:56:22:c4:20:d1:d7:49:1f:0f: ff:f8:35:37:a3:8f:12:3b:98:18:3f:56:4b:a4:ec:84:62:c7: ee:83:52:fc:8b:a0:23:0a:3a:d9:1a:26:88:48:31:b7:51:c9: 8e:63:b2:4f:20:dd:be:20:54:e5:c3:1e:0c:cc:7a:de:b6:ca: 9c:3c:ec:cd:c0:43:95:ef:8f:f0:26:b9:d9:32:e1:8f:a4:90: 9b:e1:6f:36:8c:d8:67:99:59:ad:37:ea:be:5d:f9:65:8e:1d: be:49:9b:7c:d8:90:8f:62:6c:c7:2f:ed:b8:0e:ab:b3:b0:25: ae:2a:c7:86:fb:26:81:d0:d6:b8:00:2c:cc:37:26:1b:89:af: eb:a2:08:d5:4a:84:9a:4b:86:c8:12:19:6b:2d:0b:51:3b:68: 4d:bc:68:2e:d5:94:0d:11:3b:bf:9d:f3:1f:61:d1:e3:2f:c0: 79:7c:1d:f2:c9:35:03:88:95:91:13:61:a8:65:d6:4d:eb:fc: f9:62:1b:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEQUUxMTAvBgNVBAUTKEUxQjgwN0FDMkI3NDU1RkJCMUUzMTYwNjhEMUQwMTcx MjYwQkIxQzcwHhcNMjYwNzIyMTcwNjU0WhcNMjYwNzI5MTcwNjU0WjAYMRYwFAYD VQQDEw02YTYwZjhhZi05NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1lMrrzBA2KT04muBx6DHfFbvkW3RomPWVE2QsrDj9KD/xXVjWlhP9SbFkck NzAsAqn3a1wJlzl+IGXCsXsleHo991xuDY/flP7w/+h21ycbCtsuX6zomWcuVWNn OtuWWt8A6WV7x3EqB0urMG2VzRrFD5D8jCdgE9alI78LgTjGO3POSAZXlhSQaS5R W0zoCF9O5E1hoJHIg+kG3zhgjIGh2kG6eVzW+y2TtrIpgOTL2pFkclU2tTLnOzJc poJ2q54NT84pOtcueAyzE8vo+ORvcGN7kOc8C2i1eFxIE0pI29J7xGlf9lfP54GH zHSKKuW2b4cKX/bp2tFMfWS7MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMrDXVg3 k3T1D18HJETcoEGDPYUDMB8GA1UdIwQYMBaAFOG4B6wrdFX7seMWBo0dAXEmC7HH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0RBRS82MTY2NkMwRUQ2 ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZmdXg0eFlHalIwQmNTWUxz Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRiZ0hyQ3QwVmZ1eDR4WUdqUjBCY1NZTHNjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0RBRS82MTY2NkMwRUQ2ODkxMUU4QjY4MTE0MzNDNEY5QUUwMi80YmdIckN0MFZm dXg0eFlHalIwQmNTWUxzY2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALZYCoNQQe3yg0y68YToYnA6DypKLfpaxmrmnD7fXSfNsdPke9oKLr6eSO41c L8leSdOBavFhbubo+aN9B7ZqViLEINHXSR8P//g1N6OPEjuYGD9WS6TshGLH7oNS /IugIwo62RomiEgxt1HJjmOyTyDdviBU5cMeDMx63rbKnDzszcBDle+P8Ca52TLh j6SQm+FvNozYZ5lZrTfqvl35ZY4dvkmbfNiQj2Jsxy/tuA6rs7AlrirHhvsmgdDW uAAszDcmG4mv66II1UqEmkuGyBIZay0LUTtoTbxoLtWUDRE7v53zH2HR4y/AeXwd 8sk1A4iVkRNhqGXWTev8+WIbUw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:17:46 2026 by rpki-client