$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: 4AkcHPOXDUv9SvD8eYACeQLdb9HQb7z9RyMVlKOXdDM= Subject key identifier: E3:96:6D:97:FA:6D:9C:46:E5:FE:53:7B:45:27:85:9E:B2:DB:BE:05 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 0155 Signing time: Mon 21 Jul 2025 04:16:36 +0000 Manifest this update: Mon 21 Jul 2025 04:16:36 +0000 Manifest next update: Mon 28 Jul 2025 04:16:36 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: T0pVwaxFxDJY6eJb1O1nm3s3vuHPsxA85W8H5vLUlS0=) 2: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (hash: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4=) 3: 17FCF7A0CE7011EF928B4F3BC4F9AE02.roa (hash: CQbFQYBGgN4cPicwihuMngPy/DYvAdUX5/XQle8VCXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Jul 21 04:16:36 2025 GMT Not After : Jul 28 04:16:36 2025 GMT Subject: CN=687dbf24-3cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:dd:c2:e1:ce:b0:42:12:c5:6a:0a:42:d5: 5d:f8:44:5e:82:88:4e:75:85:bf:d0:c0:84:18:e6: 75:7e:80:f6:8b:1f:78:7a:79:fa:4a:e0:60:bd:8a: f8:18:ce:e2:de:ee:b6:ae:7c:c5:49:6c:40:16:7a: 92:ad:7d:d7:31:0d:85:de:87:fb:ef:3b:83:77:9c: 5a:45:15:ed:8c:5f:c9:c5:6a:89:16:6f:05:20:94: fd:c6:99:aa:63:41:89:4f:bb:c4:30:d3:44:6f:c4: 26:dc:32:9b:50:39:e0:7e:73:97:f5:82:3b:96:09: c8:ed:03:58:be:46:d7:16:8d:9c:8e:4e:89:58:bc: 0f:b8:8f:c1:c4:88:43:a5:ad:15:99:ea:f7:67:ac: 20:9d:90:da:11:b1:5b:2d:89:d0:e2:cd:ca:e5:3f: af:92:e6:49:3a:a0:fe:12:58:5a:9d:fa:7a:d2:58: 64:46:b6:f1:32:0f:90:8f:a7:4d:09:f8:7f:b0:88: ac:d2:91:b7:40:31:f8:bf:64:fe:06:f2:db:8e:be: dd:c3:cb:50:04:5f:6f:c2:a2:fe:2e:31:e0:04:85: 05:9d:e0:68:eb:3f:20:87:90:ca:36:8e:a9:6c:59: ff:16:e5:c1:7d:ca:cb:bb:40:57:3a:61:9a:ac:a9: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:96:6D:97:FA:6D:9C:46:E5:FE:53:7B:45:27:85:9E:B2:DB:BE:05 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:59:6f:0b:a8:ac:40:3e:a3:1e:f2:d4:bf:ee:5a:40:40:ae: dc:33:3d:11:b0:03:4e:22:2b:43:7a:9f:85:b3:9d:ba:d5:3c: 49:02:b2:23:5e:87:33:23:8f:81:03:e9:5b:bd:56:9a:48:80: 7d:39:16:fc:04:13:f7:91:77:e9:fa:0e:d4:1f:c7:9d:de:77: bf:2c:75:ec:74:4c:62:e1:76:65:b6:f3:9c:3e:81:92:5d:ca: 02:93:b0:f0:35:a6:39:36:9f:38:31:0f:f3:d4:2a:e2:eb:06: 73:52:df:a6:db:75:66:d2:7f:ef:6d:80:8e:f5:ca:d9:d1:e6: ca:73:ef:0f:0e:70:b9:37:16:2e:8f:69:2f:60:3e:2a:5f:2e: e6:d6:f3:4f:78:6a:50:99:55:32:63:bc:1b:61:88:a7:40:60: 7f:64:fa:40:d3:40:be:55:40:b8:83:bd:27:3d:b1:92:36:6d: 53:9d:61:73:24:8b:8b:af:1b:3b:71:1b:8d:ff:a8:f6:37:3f: 0a:a4:20:5f:f4:8a:63:52:01:9e:bd:4d:0d:41:9a:6c:bf:63: e8:cd:4e:bc:46:c4:88:19:15:d8:57:1b:7d:42:24:5d:66:4a: a5:cd:3b:e3:3a:e7:21:47:a8:b4:27:d5:dd:04:ff:f8:e2:0b: 54:9c:cd:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjUwNzIxMDQxNjM2WhcNMjUwNzI4MDQxNjM2WjAYMRYwFAYD VQQDEw02ODdkYmYyNC0zY2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWXdwuHOsEISxWoKQtVd+ERegohOdYW/0MCEGOZ1foD2ix94enn6SuBgvYr4 GM7i3u62rnzFSWxAFnqSrX3XMQ2F3of77zuDd5xaRRXtjF/JxWqJFm8FIJT9xpmq Y0GJT7vEMNNEb8Qm3DKbUDngfnOX9YI7lgnI7QNYvkbXFo2cjk6JWLwPuI/BxIhD pa0Vmer3Z6wgnZDaEbFbLYnQ4s3K5T+vkuZJOqD+Elhanfp60lhkRrbxMg+Qj6dN Cfh/sIis0pG3QDH4v2T+BvLbjr7dw8tQBF9vwqL+LjHgBIUFneBo6z8gh5DKNo6p bFn/FuXBfcrLu0BXOmGarKlBwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOWbZf6 bZxG5f5Te0UnhZ6y274FMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgWW8LqKxAPqMe8tS/7lpAQK7cMz0RsANOIitDep+Fs5261TxJArIj XoczI4+BA+lbvVaaSIB9ORb8BBP3kXfp+g7UH8ed3ne/LHXsdExi4XZltvOcPoGS XcoCk7DwNaY5Np84MQ/z1Cri6wZzUt+m23Vm0n/vbYCO9crZ0ebKc+8PDnC5NxYu j2kvYD4qXy7m1vNPeGpQmVUyY7wbYYinQGB/ZPpA00C+VUC4g70nPbGSNm1TnWFz JIuLrxs7cRuN/6j2Nz8KpCBf9IpjUgGevU0NQZpsv2PozU68RsSIGRXYVxt9QiRd ZkqlzTvjOuchR6i0J9XdBP/44gtUnM3h -----END CERTIFICATE-----Generated at Mon Jul 21 06:57:45 2025 by rpki-client