$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: hr7K4P0yHKwg//N5TIvwSrcaFNGnP3MiNQQ1N7dPMU8= Subject key identifier: 45:1F:FA:DE:79:0B:79:68:FB:9B:33:D4:F9:7B:00:62:5D:D3:D0:1D Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 020F Signing time: Wed 25 Mar 2026 02:32:03 +0000 Manifest this update: Wed 25 Mar 2026 02:32:02 +0000 Manifest next update: Wed 01 Apr 2026 02:32:02 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: h/WgB3Y/Tco08/YhRz5Zyh6MA1/EC5wL6Yeo9MmQbjA=) 2: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: 2IMnLKkDtPnRMRm7EMhHOB0THYlzNJsg+gB0GBMnX4s=) 3: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 1di8rNGyqV1ndDBfMBfKTjWY7rtHJTy/ZCp+HJPdtTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Mar 25 02:32:02 2026 GMT Not After : Apr 1 02:32:02 2026 GMT Subject: CN=69c34922-399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:49:bf:e3:90:14:52:a2:8b:6b:d9:2c:7f:4d: 18:3c:7b:49:1c:ee:17:23:5b:76:08:d0:85:94:a9: 0a:c4:96:78:d5:c5:63:76:cb:53:0e:d4:7d:6b:b6: 7b:e0:4a:30:5c:ab:89:cc:cb:82:3e:96:d4:df:d2: ff:ae:68:42:94:c0:87:e1:01:4a:3b:31:b7:1e:93: 8f:c3:84:11:9c:6e:c6:88:7f:2b:c4:6a:e4:7b:b8: 7b:ac:67:28:1b:10:b2:b8:1c:24:cc:b4:b2:7d:c4: b2:69:7e:a7:d2:04:72:84:42:8d:f3:b4:ca:1d:eb: 55:70:b2:05:fb:90:11:59:4f:75:57:97:a3:ad:ef: 67:ff:22:32:bd:19:8f:b7:80:07:03:7d:ec:61:71: 5a:23:90:f7:4e:32:75:6c:ad:9a:2a:95:6b:fc:59: fd:3d:ad:26:54:97:53:cc:08:95:6b:2e:61:54:3e: a6:c4:0a:20:38:f6:b8:c2:5b:c8:73:ec:0c:7d:6a: d3:29:f8:b5:37:de:52:c8:32:4b:a5:71:50:ea:6d: 0b:cc:d5:1d:b7:48:bc:52:6e:59:46:14:94:33:44: 6b:5e:b9:0e:65:3f:37:c2:7b:a4:7c:1f:74:51:e3: 76:f0:6a:5d:d0:66:7d:16:84:4f:c9:07:8d:03:41: f8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1F:FA:DE:79:0B:79:68:FB:9B:33:D4:F9:7B:00:62:5D:D3:D0:1D X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1f:20:76:aa:f6:1f:b1:e6:b7:e3:33:16:f2:7a:8e:22:6e: c5:d4:40:40:d3:bf:43:b3:3b:77:56:cd:26:54:b6:1b:1c:2d: 76:e5:d5:01:7f:32:6e:b9:c3:ac:f2:15:4b:96:91:42:db:b9: a2:dd:86:4e:70:f9:44:fc:b9:37:d5:83:72:3f:8f:f7:aa:1c: 64:9b:1c:79:71:fd:d2:ca:ae:4f:d8:d3:79:32:b6:f4:2c:f2: d5:ce:43:f9:6f:f8:97:53:ed:49:27:33:cb:91:a6:c7:65:32: 4a:f3:fc:9d:84:42:ee:90:88:cd:2d:00:41:8e:5a:cb:3f:c1: 92:e6:9e:db:0c:93:0e:46:20:0c:0f:99:a6:01:0c:4b:af:15: 75:1f:af:d9:b1:a6:df:e7:12:1a:b3:20:bd:04:0f:72:77:b5: 58:12:1b:d0:15:34:67:4f:10:a8:4d:76:10:4c:4b:f6:f5:ee: 28:87:cf:99:01:b1:58:8e:15:35:12:74:f2:36:1a:75:65:dd: d1:a7:9a:03:9f:fc:83:f1:83:5a:ac:ea:dc:44:eb:3b:77:b5: da:07:38:f8:5f:2c:e9:70:d8:28:3c:5a:f5:b2:ab:20:a4:e2: 8e:57:0b:a2:bf:61:3e:ff:33:dc:65:be:0e:b3:08:84:dd:e7: 72:60:c6:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjYwMzI1MDIzMjAyWhcNMjYwNDAxMDIzMjAyWjAYMRYwFAYD VQQDEw02OWMzNDkyMi0zOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Em/45AUUqKLa9ksf00YPHtJHO4XI1t2CNCFlKkKxJZ41cVjdstTDtR9a7Z7 4EowXKuJzMuCPpbU39L/rmhClMCH4QFKOzG3HpOPw4QRnG7GiH8rxGrke7h7rGco GxCyuBwkzLSyfcSyaX6n0gRyhEKN87TKHetVcLIF+5ARWU91V5ejre9n/yIyvRmP t4AHA33sYXFaI5D3TjJ1bK2aKpVr/Fn9Pa0mVJdTzAiVay5hVD6mxAogOPa4wlvI c+wMfWrTKfi1N95SyDJLpXFQ6m0LzNUdt0i8Um5ZRhSUM0RrXrkOZT83wnukfB90 UeN28Gpd0GZ9FoRPyQeNA0H41wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEUf+t55 C3lo+5sz1Pl7AGJd09AdMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkB8gdqr2H7Hmt+MzFvJ6jiJuxdRAQNO/Q7M7d1bNJlS2GxwtduXVAX8ybrnD rPIVS5aRQtu5ot2GTnD5RPy5N9WDcj+P96ocZJsceXH90squT9jTeTK29Czy1c5D +W/4l1PtSSczy5Gmx2UySvP8nYRC7pCIzS0AQY5ayz/Bkuae2wyTDkYgDA+ZpgEM S68VdR+v2bGm3+cSGrMgvQQPcne1WBIb0BU0Z08QqE12EExL9vXuKIfPmQGxWI4V NRJ08jYadWXd0aeaA5/8g/GDWqzq3ETrO3e12gc4+F8s6XDYKDxa9bKrIKTijlcL or9hPv8z3GW+DrMIhN3ncmDGPw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:15:31 2026 by rpki-client