$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: KiRkQkoSeHlL2suo4CryyhNMgq6o+rshFYr7f6ZAtfk= Subject key identifier: 9C:4B:75:C7:E9:5B:C1:8F:A3:E1:24:07:B3:0F:76:45:53:06:B9:FE Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 0235 Signing time: Wed 23 Sep 2026 02:33:59 +0000 Manifest this update: Wed 23 Sep 2026 02:33:59 +0000 Manifest next update: Wed 30 Sep 2026 02:33:59 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: 1X6np/h7MhQsOG4co2mDbi/vIePynFTd407GhsLckDY=) 2: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=) 3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=) 4: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Sep 23 02:33:59 2026 GMT Not After : Sep 30 02:33:59 2026 GMT Subject: CN=6ab33a97-cdf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:18:2f:5c:4b:a8:2e:db:06:5f:29:c2:34: b2:04:85:63:49:f3:20:1b:84:76:9f:81:98:30:76: 36:76:03:c5:73:e7:c2:1a:30:80:83:93:59:ac:e7: 89:cd:e0:b5:46:ac:7c:f6:32:8f:a4:37:18:0e:f5: 56:94:d3:68:61:ba:37:3e:1a:69:29:e5:28:39:26: c2:7e:ef:6d:3d:5f:a3:36:67:58:8a:6e:c2:b5:41: 19:ca:8f:6c:95:d8:a5:73:f9:cd:87:4b:f1:87:9f: 16:20:72:81:e5:44:28:d6:7c:8f:1e:4d:bd:44:16: 23:ee:e7:87:00:b8:31:9c:35:8b:56:17:4d:07:6e: b8:d1:d9:e4:89:68:42:93:75:32:44:40:ef:40:33: ac:0e:6a:63:1c:4d:1e:11:47:c9:10:79:89:ce:b3: 03:4a:3f:c7:75:3b:a6:7b:54:9a:2d:8a:0c:c4:2f: b3:43:11:64:8f:cf:15:47:f2:d0:24:1c:57:ed:12: a8:39:b0:cf:ee:ce:45:08:12:28:08:1a:dc:d3:01: 6e:20:30:ed:bc:21:13:92:e5:c8:4f:7c:94:76:fa: ca:8b:49:df:8d:db:5a:79:6c:a9:47:a8:81:e3:fb: 33:92:6e:5c:9f:06:42:15:2a:83:be:c6:01:fa:ab: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4B:75:C7:E9:5B:C1:8F:A3:E1:24:07:B3:0F:76:45:53:06:B9:FE X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b8:b6:2a:b3:b3:a2:19:e0:70:16:22:a9:3c:1b:2a:5d:ef: d0:60:af:d7:0f:df:da:38:2c:4b:7b:09:2a:25:bb:f2:aa:19: 7f:66:a0:16:9c:6c:6c:24:44:01:f9:45:09:49:14:cf:3a:72: 9e:0b:6e:3f:93:a8:89:5f:28:d0:b6:17:76:06:29:8c:56:4c: 00:88:79:16:7f:94:80:31:84:f7:0c:e0:42:03:08:87:7f:8b: 92:63:18:e5:0d:98:49:9a:5c:14:cd:13:a2:7d:1f:7b:b8:ec: fa:85:9f:80:35:02:a9:46:49:ea:0f:2c:8c:f7:37:24:3e:86: 97:f7:5f:bc:16:a6:da:78:1d:64:d5:a1:7f:09:20:b4:2f:70: 6a:9e:e4:f4:04:03:44:5c:45:3c:39:de:9f:ce:80:7b:81:30: 3a:4e:6b:de:62:c7:0f:e1:f1:0d:f5:6b:ed:29:bc:05:02:a3: d4:d9:fd:81:47:83:82:e6:f7:97:ba:ae:44:dd:d8:20:db:e6: 90:f2:bb:04:7b:2c:44:84:13:ca:19:c4:aa:5d:c4:46:2e:b9: 0a:f8:21:fe:ed:7d:11:ea:8e:28:82:c3:ab:5b:6c:0e:68:6a: 1b:fc:be:96:2f:2d:51:73:ef:ba:92:b1:6d:83:3a:31:45:e8: 2a:e0:c7:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjYwOTIzMDIzMzU5WhcNMjYwOTMwMDIzMzU5WjAYMRYwFAYD VQQDEw02YWIzM2E5Ny1jZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodkYL1xLqC7bBl8pwjSyBIVjSfMgG4R2n4GYMHY2dgPFc+fCGjCAg5NZrOeJ zeC1Rqx89jKPpDcYDvVWlNNoYbo3PhppKeUoOSbCfu9tPV+jNmdYim7CtUEZyo9s ldilc/nNh0vxh58WIHKB5UQo1nyPHk29RBYj7ueHALgxnDWLVhdNB2640dnkiWhC k3UyREDvQDOsDmpjHE0eEUfJEHmJzrMDSj/HdTume1SaLYoMxC+zQxFkj88VR/LQ JBxX7RKoObDP7s5FCBIoCBrc0wFuIDDtvCETkuXIT3yUdvrKi0nfjdtaeWypR6iB 4/szkm5cnwZCFSqDvsYB+qt/VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxLdcfp W8GPo+EkB7MPdkVTBrn+MB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIbi2KrOzohngcBYiqTwbKl3v0GCv1w/f2jgsS3sJKiW78qoZf2agFpxsbCRE AflFCUkUzzpyngtuP5OoiV8o0LYXdgYpjFZMAIh5Fn+UgDGE9wzgQgMIh3+LkmMY 5Q2YSZpcFM0Ton0fe7js+oWfgDUCqUZJ6g8sjPc3JD6Gl/dfvBam2ngdZNWhfwkg tC9wap7k9AQDRFxFPDnen86Ae4EwOk5r3mLHD+HxDfVr7Sm8BQKj1Nn9gUeDgub3 l7quRN3YINvmkPK7BHssRIQTyhnEql3ERi65Cvgh/u19EeqOKILDq1tsDmhqG/y+ li8tUXPvupKxbYM6MUXoKuDH4g== -----END CERTIFICATE-----Generated at Thu Sep 24 10:12:34 2026 by rpki-client