$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: R01QCSav6FZJ7iDI1XKvLgK96In2jq9JTraszcHGQBo= Subject key identifier: 67:F5:71:2F:F6:46:03:E3:B5:82:7A:F5:6A:EB:AE:7B:6E:8E:11:97 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 0188 Signing time: Mon 27 Oct 2025 05:32:52 +0000 Manifest this update: Mon 27 Oct 2025 05:32:52 +0000 Manifest next update: Mon 03 Nov 2025 05:32:52 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: bA1rlnMQ8A1npDTawTxiOey5m8RrrL0RnQRBXkWGUQQ=) 2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: kCIpXC6EIbtuKR2i4V7EwfmRM7/iWNRzlF4kMJtINEg=) 3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: di6M3jWKOmaxEhMQ/IxoKsnFZ1/UQ/LM6pZHtmuxUVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 05:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Oct 27 05:32:52 2025 GMT Not After : Nov 3 05:32:52 2025 GMT Subject: CN=68ff0404-e49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:a5:6f:22:79:86:42:24:72:33:a5:75:93: 9a:0b:6d:b5:32:42:88:cd:12:98:29:e4:42:d3:dc: c8:a6:28:96:60:6e:7e:3e:26:00:0a:33:05:00:1e: 53:99:89:b8:24:2a:d4:16:d3:87:92:00:9d:52:d7: ad:8f:d1:e7:43:e9:cc:89:1a:ed:3f:50:9e:cb:27: 9c:1f:f7:ed:c9:30:cc:3e:95:42:8a:9e:d2:68:57: 0e:3c:4f:ec:34:dc:6d:23:7b:82:01:ad:c4:86:5b: e3:06:06:4f:dc:af:ed:19:df:93:c4:8b:39:df:5d: 20:2a:a0:51:ba:f9:58:4a:4c:09:f7:c0:81:a9:2f: 8b:d0:b3:89:34:25:04:7e:d4:5c:06:b0:98:c6:36: c3:ba:cf:fc:4e:cc:6d:01:42:90:88:43:e8:ba:46: d6:e6:2d:77:af:89:db:21:22:04:91:9b:38:e9:21: bb:81:a0:50:ff:ba:d9:71:79:ed:3e:85:ce:3e:f1: e6:16:32:7f:4b:93:24:38:39:95:4b:56:28:bd:27: d0:46:9c:41:71:6b:48:d7:4c:c9:f1:6e:02:cc:a2: 4c:d0:72:34:72:8b:87:54:2a:0b:1a:1d:c8:5e:d1: ef:3a:37:cf:bd:ee:d7:1e:1c:6c:99:07:d1:0e:bd: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:71:2F:F6:46:03:E3:B5:82:7A:F5:6A:EB:AE:7B:6E:8E:11:97 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:bc:45:fc:a0:49:c2:bb:fa:8c:fb:47:ad:fc:19:65:f9:f6: 0c:0f:ff:24:48:f1:21:6c:d0:f7:5a:9e:a7:60:2f:f8:49:c6: ac:17:18:b8:38:d2:54:1d:7b:72:e6:e4:97:36:c1:a2:21:94: fc:bb:ea:de:fa:80:58:e1:a1:e6:1b:e6:a8:78:41:5d:ce:b5: 53:a5:3e:b2:60:52:4a:d3:9b:d8:ba:aa:27:ef:05:56:88:ab: 62:41:83:6d:a6:74:05:c2:1d:b4:a5:9a:05:32:fb:4b:5a:ce: af:cb:83:32:a7:26:d6:58:85:db:00:d5:ce:e3:4e:83:4f:f2: 66:02:f7:fa:23:2d:30:ab:72:5c:fd:d3:9f:f5:b0:92:a1:27: f1:53:f7:01:31:fa:df:09:be:12:28:ca:fc:cd:6f:4b:a5:38: a7:4b:0e:8c:d2:13:81:64:6d:92:5a:3b:39:cb:11:46:cc:f0: 58:27:01:34:82:a0:e7:a3:e8:39:23:9c:d3:71:b5:0d:e7:d6: b7:d7:58:78:20:3d:15:d7:2d:bd:20:9b:48:a3:dd:36:f8:fa: 53:66:48:6d:3d:c6:2d:d8:cd:22:17:a4:7b:29:5d:57:aa:dc: d3:9d:de:95:37:20:07:cb:c9:4d:bb:69:b8:b1:9b:c9:c7:03: d8:6a:c3:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjUxMDI3MDUzMjUyWhcNMjUxMTAzMDUzMjUyWjAYMRYwFAYD VQQDEw02OGZmMDQwNC1lNDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztylbyJ5hkIkcjOldZOaC221MkKIzRKYKeRC09zIpiiWYG5+PiYACjMFAB5T mYm4JCrUFtOHkgCdUtetj9HnQ+nMiRrtP1CeyyecH/ftyTDMPpVCip7SaFcOPE/s NNxtI3uCAa3EhlvjBgZP3K/tGd+TxIs5310gKqBRuvlYSkwJ98CBqS+L0LOJNCUE ftRcBrCYxjbDus/8TsxtAUKQiEPoukbW5i13r4nbISIEkZs46SG7gaBQ/7rZcXnt PoXOPvHmFjJ/S5MkODmVS1YovSfQRpxBcWtI10zJ8W4CzKJM0HI0couHVCoLGh3I XtHvOjfPve7XHhxsmQfRDr2H8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGf1cS/2 RgPjtYJ69WrrrntujhGXMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNvEX8oEnCu/qM+0et/Bll+fYMD/8kSPEhbND3Wp6nYC/4ScasFxi4 ONJUHXty5uSXNsGiIZT8u+re+oBY4aHmG+aoeEFdzrVTpT6yYFJK05vYuqon7wVW iKtiQYNtpnQFwh20pZoFMvtLWs6vy4MypybWWIXbANXO406DT/JmAvf6Iy0wq3Jc /dOf9bCSoSfxU/cBMfrfCb4SKMr8zW9LpTinSw6M0hOBZG2SWjs5yxFGzPBYJwE0 gqDno+g5I5zTcbUN59a311h4ID0V1y29IJtIo902+PpTZkhtPcYt2M0iF6R7KV1X qtzTnd6VNyAHy8lNu2m4sZvJxwPYasOy -----END CERTIFICATE-----Generated at Mon Oct 27 14:59:29 2025 by rpki-client