$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: 3ZhuvD/4aNBw8/IEPiXqzHZrxkdewURFc8cUrCWWTAg= Subject key identifier: E6:5A:02:F6:52:3F:36:42:1F:F2:7F:A5:59:5C:AA:F8:C0:8F:D1:04 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 018F Signing time: Wed 05 Nov 2025 03:45:47 +0000 Manifest this update: Wed 05 Nov 2025 03:45:47 +0000 Manifest next update: Wed 12 Nov 2025 03:45:47 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: 4AKh4MaaDl7TY7HmH4Jv8+yU8MH82wtq6PiF54R5J0g=) 2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: coTbLMChMtsb+9hU9/oYsNe+RoCOnIHIavvRJNUhB3k=) 3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: SLEJBl6iI7A9mQ/gCP8wQV/FveWhHBwcWU7BMm4+pLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Nov 5 03:45:47 2025 GMT Not After : Nov 12 03:45:47 2025 GMT Subject: CN=690ac86b-fdd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:e6:85:a8:a0:46:ea:70:28:8c:7f:8d:59: cc:47:50:ee:71:31:d8:0d:14:8e:45:46:0b:9c:8d: 8a:52:49:8a:2b:65:a6:6e:76:05:1b:f8:53:44:8f: bd:41:32:70:64:20:2e:e0:2e:9a:86:29:00:9c:4c: be:93:7e:b6:ca:da:7a:f1:46:8a:36:af:72:3d:93: 59:91:a7:02:ec:49:4c:79:e6:3a:f4:f1:51:74:ad: 70:5f:82:e4:ef:c3:d1:64:a3:f9:78:03:9a:db:21: d8:61:8d:d2:27:94:63:b3:76:a5:03:a4:33:46:f5: f0:87:e4:44:c4:0d:eb:eb:a8:a4:a0:50:09:71:b8: 2b:b9:ee:52:bf:cd:c1:1c:b7:0b:f9:a6:1f:1f:cc: 83:67:2a:de:8b:78:5c:c2:a1:a1:64:69:0a:16:4f: 70:5a:fc:cd:2e:16:eb:c1:9a:83:e1:af:4e:11:0b: 23:5d:48:78:8a:0f:7f:28:6a:03:63:80:d3:6d:5d: 72:b6:bd:89:2d:1c:b4:69:e6:95:0b:fd:6e:b0:6c: a0:7a:13:dd:71:9a:bc:f0:8d:16:be:c8:c8:3f:ff: 51:9c:03:63:e6:9f:d3:35:6a:78:0b:d7:df:90:01: 32:2b:91:b9:9a:bb:9a:fe:6f:9d:e2:49:7a:77:7c: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:02:F6:52:3F:36:42:1F:F2:7F:A5:59:5C:AA:F8:C0:8F:D1:04 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6e:09:d3:45:41:1a:92:42:7a:37:78:79:6a:33:bb:16:76: 22:28:0a:ad:51:11:c5:d8:ef:22:7d:a4:e6:a3:b5:93:b4:d2: a9:59:08:b4:9d:c1:7d:19:95:79:a5:50:28:a4:da:c5:27:f5: 11:e8:2d:33:85:ce:f1:f9:7f:e3:3d:61:59:52:55:d8:2e:17: 3c:55:4c:3f:d0:ca:5e:12:ad:63:6b:fe:db:d1:2f:c0:c5:97: a8:b3:be:86:61:3f:b8:ee:97:1e:cd:7b:8e:43:ef:ab:a4:bb: ec:4c:f2:11:5b:55:b8:47:04:01:27:82:3e:29:8d:8e:ff:2d: 59:c1:d0:06:de:a0:70:cb:4f:2b:93:7b:c5:c3:e7:af:6c:ff: 6d:6a:38:00:7b:4a:00:1b:6a:44:10:7d:2a:9b:5a:0f:21:c6: 1a:c4:32:6d:4b:1f:07:1b:4e:11:a2:c8:bb:1e:7d:7f:91:71: ea:7f:93:e7:29:eb:8b:3d:4b:95:a1:c7:8a:05:91:cf:0c:ba: d2:3f:05:04:1a:83:1a:b6:89:18:29:d6:66:9e:cf:12:a9:cf: a7:21:6c:a3:b7:f1:8a:ea:24:ab:86:c2:a8:7a:9f:0e:4f:e3: c6:45:b4:5c:ee:d3:46:0d:79:25:63:04:0a:cb:d5:47:4a:ba: 10:b1:4c:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjUxMTA1MDM0NTQ3WhcNMjUxMTEyMDM0NTQ3WjAYMRYwFAYD VQQDEw02OTBhYzg2Yi1mZGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMHmhaigRupwKIx/jVnMR1DucTHYDRSORUYLnI2KUkmKK2WmbnYFG/hTRI+9 QTJwZCAu4C6ahikAnEy+k362ytp68UaKNq9yPZNZkacC7ElMeeY69PFRdK1wX4Lk 78PRZKP5eAOa2yHYYY3SJ5Rjs3alA6QzRvXwh+RExA3r66ikoFAJcbgrue5Sv83B HLcL+aYfH8yDZyrei3hcwqGhZGkKFk9wWvzNLhbrwZqD4a9OEQsjXUh4ig9/KGoD Y4DTbV1ytr2JLRy0aeaVC/1usGygehPdcZq88I0WvsjIP/9RnANj5p/TNWp4C9ff kAEyK5G5mrua/m+d4kl6d3xnTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOZaAvZS PzZCH/J/pVlcqvjAj9EEMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7bgnTRUEakkJ6N3h5ajO7FnYiKAqtURHF2O8ifaTmo7WTtNKpWQi0 ncF9GZV5pVAopNrFJ/UR6C0zhc7x+X/jPWFZUlXYLhc8VUw/0MpeEq1ja/7b0S/A xZeos76GYT+47pcezXuOQ++rpLvsTPIRW1W4RwQBJ4I+KY2O/y1ZwdAG3qBwy08r k3vFw+evbP9tajgAe0oAG2pEEH0qm1oPIcYaxDJtSx8HG04Rosi7Hn1/kXHqf5Pn KeuLPUuVoceKBZHPDLrSPwUEGoMatokYKdZmns8Sqc+nIWyjt/GK6iSrhsKoep8O T+PGRbRc7tNGDXklYwQKy9VHSroQsUwT -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:36 2025 by rpki-client