$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: RwSGjROQQ/vfBu+8/9atTu4dTNBi7qLluHCJTofOOBY= Subject key identifier: 14:96:20:6B:54:DD:D9:53:E3:53:22:06:49:9A:E0:2B:71:C5:78:8B Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 01D9 Signing time: Wed 25 Mar 2026 02:58:15 +0000 Manifest this update: Wed 25 Mar 2026 02:58:15 +0000 Manifest next update: Wed 01 Apr 2026 02:58:15 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: IN6WGGyas8lDNUwC6pHRT5OSuWLk17u6aQE/yW9b+M0=) 2: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=) 3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=) 4: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Mar 25 02:58:15 2026 GMT Not After : Apr 1 02:58:15 2026 GMT Subject: CN=69c34f47-61db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:5d:3f:8c:ed:8c:47:2b:9c:2a:10:5c:f0: fa:c3:ba:d3:32:09:3f:9f:65:95:77:62:a4:79:50: ce:4a:87:cd:24:78:1b:ff:86:c3:35:7e:60:20:38: 37:e4:c4:c4:6a:c8:a6:35:60:ed:32:51:3d:4b:e9: 83:fb:dc:65:8d:2b:fd:e6:dc:57:e1:ea:12:33:ca: b8:a9:96:c4:60:aa:35:9e:d0:b8:6f:fa:b8:8c:1f: 5f:40:03:4c:4b:10:3b:e9:dc:33:29:65:e8:cf:a3: c2:aa:68:a5:29:52:99:e3:a7:16:76:33:12:59:1f: 75:3a:c7:59:f4:41:63:4f:dc:32:b9:51:b2:4a:b7: 30:8a:9f:be:c8:4b:92:41:32:42:d6:f9:4f:d0:f7: e2:c3:23:3f:64:f9:01:00:ed:6c:d3:f6:cc:42:95: 3e:bc:34:8a:85:b8:4e:f8:fc:f7:4d:3f:a4:4d:f1: d6:6a:84:fc:99:ec:e4:18:a5:a4:17:08:e5:d9:cd: 01:c6:8f:4d:42:09:86:f7:ff:a7:e1:2e:bc:29:71: e7:1c:db:3a:c8:f3:63:66:76:11:92:61:5c:aa:dc: ed:58:cb:d7:b7:a6:8a:bb:60:8d:79:0f:32:64:11: 1d:21:e1:ab:b3:97:1c:64:7c:90:5f:0d:69:06:dc: c5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:96:20:6B:54:DD:D9:53:E3:53:22:06:49:9A:E0:2B:71:C5:78:8B X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:31:27:d0:aa:1e:87:f8:f4:5e:09:a5:0b:d8:57:55:7e:87: 67:10:9f:29:fb:fb:eb:c9:c5:03:b5:1b:e5:7a:7f:9e:ad:7a: a9:bf:39:7b:97:f2:3c:14:d8:c3:1e:ce:41:7d:6c:9d:33:ea: e3:f1:6f:56:78:94:3c:89:42:f4:71:5c:80:0c:a3:0a:2e:00: b8:d4:cd:56:ee:f5:81:3c:9a:78:cb:1e:41:ee:e2:8a:43:5e: 9e:5c:d6:dc:eb:12:1f:9b:f1:c6:b8:72:19:8b:7f:ed:2e:fd: 2e:42:3b:79:f1:92:2a:2c:c9:de:38:fb:b7:2b:4c:ed:99:e5: de:fe:cc:65:17:32:bb:6c:97:5c:32:c9:d9:8b:b0:ae:6f:82: 7f:bd:78:91:79:55:39:1c:00:d7:eb:bf:05:e9:b7:a6:da:29: 7f:24:36:6b:c8:ee:8f:a8:5d:b9:4c:03:d7:be:ec:68:53:0b: 82:ae:00:84:d0:6c:fe:31:93:24:8a:21:20:75:ad:87:f9:b5: df:9e:1e:00:fc:5a:6b:ec:a1:a0:98:2a:12:86:d2:74:e7:bc: 83:04:48:df:a1:b8:dd:32:e3:d0:fd:e5:36:d2:0a:68:89:2e: 1d:c1:77:84:73:8b:8f:32:06:c8:8f:5c:ad:e1:1e:7c:64:be: 4f:2a:67:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjYwMzI1MDI1ODE1WhcNMjYwNDAxMDI1ODE1WjAYMRYwFAYD VQQDEw02OWMzNGY0Ny02MWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylddP4ztjEcrnCoQXPD6w7rTMgk/n2WVd2KkeVDOSofNJHgb/4bDNX5gIDg3 5MTEasimNWDtMlE9S+mD+9xljSv95txX4eoSM8q4qZbEYKo1ntC4b/q4jB9fQANM SxA76dwzKWXoz6PCqmilKVKZ46cWdjMSWR91OsdZ9EFjT9wyuVGySrcwip++yEuS QTJC1vlP0PfiwyM/ZPkBAO1s0/bMQpU+vDSKhbhO+Pz3TT+kTfHWaoT8mezkGKWk Fwjl2c0Bxo9NQgmG9/+n4S68KXHnHNs6yPNjZnYRkmFcqtztWMvXt6aKu2CNeQ8y ZBEdIeGrs5ccZHyQXw1pBtzF6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBSWIGtU 3dlT41MiBkma4CtxxXiLMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHzEn0Koeh/j0XgmlC9hXVX6HZxCfKfv768nFA7Ub5Xp/nq16qb85e5fyPBTY wx7OQX1snTPq4/FvVniUPIlC9HFcgAyjCi4AuNTNVu71gTyaeMseQe7iikNenlzW 3OsSH5vxxrhyGYt/7S79LkI7efGSKizJ3jj7tytM7Znl3v7MZRcyu2yXXDLJ2Yuw rm+Cf714kXlVORwA1+u/Bem3ptopfyQ2a8juj6hduUwD177saFMLgq4AhNBs/jGT JIohIHWth/m1354eAPxaa+yhoJgqEobSdOe8gwRI36G43TLj0P3lNtIKaIkuHcF3 hHOLjzIGyI9creEefGS+TypnKg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:11 2026 by rpki-client