$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: O6jmMaUEmT+8ToXmQouFXHFHMx8xjz9sSC4YEDCTtWA= Subject key identifier: 92:9A:6D:4E:2E:31:89:42:EB:4F:8A:26:0A:E7:A5:45:D2:AD:BE:E5 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 01EA Signing time: Mon 27 Apr 2026 03:18:26 +0000 Manifest this update: Mon 27 Apr 2026 03:18:25 +0000 Manifest next update: Mon 04 May 2026 03:18:25 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: 8tNbyt4Kjwj4ns2IJnc3bKz3yUTkRrt8FaEUyu4BBM8=) 2: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: LiM9RbAJbcPHGjg4TcscgKDuZVOWmiimuSNeW/pmmOM=) 3: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: dVk4l+6FoJ+LJujW0n2z+KHzwzCRSilBPwd+g0zU3QQ=) 4: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: gW/hYoQWOa8UoqW/lLZcn2SFXiIobNvhl3G2Vvz6ztY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 03:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Apr 27 03:18:25 2026 GMT Not After : May 4 03:18:25 2026 GMT Subject: CN=69eed582-e65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c9:aa:91:77:76:4c:ec:15:65:28:d6:ec:80: d0:78:ba:04:b4:31:3f:a0:00:4d:da:91:a5:fc:1a: b5:58:e5:ad:0e:37:6f:f3:66:74:e9:c5:83:ec:cf: 35:d8:1a:63:27:91:b1:04:37:48:e3:99:63:37:f9: 1b:c7:8d:8b:ae:16:4a:48:ba:49:0a:86:5c:5b:ee: cb:d5:00:27:92:84:e0:da:da:8e:aa:8a:cd:11:28: 2f:3a:7c:69:03:75:81:9f:45:44:b8:d6:c6:bd:48: 3e:48:46:a1:c3:c0:92:d7:ae:94:27:79:b5:cb:fd: 72:c9:d2:19:cc:aa:9e:40:f0:0a:2b:6d:8e:64:3c: 5e:07:78:83:e2:c3:13:af:cd:9b:ad:3a:fb:38:39: bd:b3:b0:a8:15:47:42:58:53:0c:82:20:88:c8:22: dd:92:e8:a5:8e:5a:15:e9:7d:63:06:fa:ea:86:2c: 5b:ba:93:c6:1b:5b:2c:c5:c4:b9:5c:ed:80:74:6a: 2d:26:4d:92:b2:60:98:8f:d5:96:0a:83:17:d1:aa: 3d:94:4e:43:bf:f8:5c:96:01:95:d1:3f:f1:e0:f5: 16:14:aa:fe:b3:b3:a9:c6:55:60:3b:d0:75:c7:03: 40:47:0f:24:2c:2a:5f:84:e9:c8:d1:cc:8c:7e:b3: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:9A:6D:4E:2E:31:89:42:EB:4F:8A:26:0A:E7:A5:45:D2:AD:BE:E5 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:0e:b1:fe:f2:78:8d:0f:9e:bb:9a:e1:14:22:d6:d7:cd:40: c2:07:86:a0:20:d7:e5:f7:1c:d2:85:bd:36:ea:16:ff:8a:f8: 39:8a:f8:9b:b5:1c:30:a5:87:a1:fb:dd:f0:a9:13:91:d7:0f: 60:7d:48:46:96:bc:70:0a:af:b1:c6:7f:50:99:f9:29:d2:5b: 2f:a9:6a:ae:42:7e:24:89:b6:ca:be:f2:ac:44:7f:4d:1d:4c: b6:56:6a:75:79:d6:8a:da:23:9d:a8:d6:cd:48:d2:9b:65:b5: df:ff:cf:e9:78:9a:d9:c9:3b:a5:ae:5b:f7:a3:e8:fc:e6:1b: d6:ad:b9:1b:e9:6f:75:f4:1e:bc:75:13:35:0b:2f:41:da:2d: 5f:a6:22:fb:d1:b7:3a:41:a1:09:bd:d9:8a:c3:eb:c0:4e:32: 29:22:41:12:a4:af:d4:d4:4a:24:90:20:45:40:1e:a5:d4:03: 92:45:9a:57:8d:de:e8:18:7c:74:22:9d:fc:5b:ba:39:96:00: 70:c9:1a:ba:74:85:f8:56:ba:42:9b:5a:4f:eb:c8:9a:92:d6: 29:09:db:a4:98:2d:d2:37:4c:db:95:b9:2a:f3:f3:32:b5:cf: 8e:ed:e1:1e:b8:b6:d3:34:6f:96:46:2a:52:5b:8c:ad:c4:52: f8:55:7a:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjYwNDI3MDMxODI1WhcNMjYwNTA0MDMxODI1WjAYMRYwFAYD VQQDEw02OWVlZDU4Mi1lNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+MmqkXd2TOwVZSjW7IDQeLoEtDE/oABN2pGl/Bq1WOWtDjdv82Z06cWD7M81 2BpjJ5GxBDdI45ljN/kbx42LrhZKSLpJCoZcW+7L1QAnkoTg2tqOqorNESgvOnxp A3WBn0VEuNbGvUg+SEahw8CS166UJ3m1y/1yydIZzKqeQPAKK22OZDxeB3iD4sMT r82brTr7ODm9s7CoFUdCWFMMgiCIyCLdkuiljloV6X1jBvrqhixbupPGG1ssxcS5 XO2AdGotJk2SsmCYj9WWCoMX0ao9lE5Dv/hclgGV0T/x4PUWFKr+s7OpxlVgO9B1 xwNARw8kLCpfhOnI0cyMfrM+EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKabU4u MYlC60+KJgrnpUXSrb7lMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQ6x/vJ4jQ+eu5rhFCLW181AwgeGoCDX5fcc0oW9NuoW/4r4OYr4m7UcMKWH ofvd8KkTkdcPYH1IRpa8cAqvscZ/UJn5KdJbL6lqrkJ+JIm2yr7yrER/TR1MtlZq dXnWitojnajWzUjSm2W13//P6Xia2ck7pa5b96Po/OYb1q25G+lvdfQevHUTNQsv QdotX6Yi+9G3OkGhCb3ZisPrwE4yKSJBEqSv1NRKJJAgRUAepdQDkkWaV43e6Bh8 dCKd/Fu6OZYAcMkaunSF+Fa6QptaT+vImpLWKQnbpJgt0jdM25W5KvPzMrXPju3h Hri20zRvlkYqUluMrcRS+FV6qQ== -----END CERTIFICATE-----Generated at Tue Apr 28 12:44:53 2026 by rpki-client