$ rpki-client -vvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: Ryp/ylEHzbReEgljGBBBdZfhuiBNN8MaF6jf+TfOa+I= Subject key identifier: 76:6D:23:A6:85:9C:D8:27:E2:80:29:54:E3:9D:77:DA:08:3A:E8:7F Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 016F Signing time: Tue 09 Sep 2025 03:58:50 +0000 Manifest this update: Tue 09 Sep 2025 03:58:49 +0000 Manifest next update: Tue 16 Sep 2025 03:58:49 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: 1n+aHa2htozZpI2V+5rqIxivHwmZ0Oc59EXsrQiU/74=) 2: B0D084CC9AAB11EFAEA9A178C4F9AE02.roa (hash: fjyX2RfOmg6f9yVXW0sBxbxsI7qZZGdjm0T3kgyFLM4=) 3: 17FCF7A0CE7011EF928B4F3BC4F9AE02.roa (hash: CQbFQYBGgN4cPicwihuMngPy/DYvAdUX5/XQle8VCXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Sep 9 03:58:49 2025 GMT Not After : Sep 16 03:58:49 2025 GMT Subject: CN=68bfa5fa-9e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7d:df:8f:49:a0:b5:d5:84:e1:17:71:fc:e1: 50:4e:1f:b2:4e:02:38:be:f5:71:47:8a:e5:6f:1c: 3f:22:09:db:6b:19:7b:0d:27:e2:f0:53:54:18:58: d4:ac:b4:54:18:36:95:99:c2:7b:77:5a:bf:3f:05: 9d:4b:9b:0e:75:0f:15:60:98:d1:15:5a:25:c1:ca: ed:04:f0:57:41:45:75:18:88:2e:7e:84:ee:ae:b9: ef:d9:1d:a2:d1:a5:6e:fb:63:86:d4:06:3c:c9:d5: 28:b3:49:44:d9:33:70:23:e3:93:a3:4b:12:3d:22: df:90:61:8c:48:1a:4e:a9:38:9f:c9:07:70:14:51: 28:66:e2:3a:0a:49:46:32:eb:bb:ca:88:76:4c:bf: 0b:6c:3b:f7:e9:3b:87:b2:b9:17:c6:bc:c9:54:6d: 24:33:c5:e9:55:b8:83:1a:58:a0:c4:05:18:4b:86: 0a:df:d4:0d:c3:1c:51:17:0f:36:a5:f9:37:3a:79: 0e:85:f5:a4:31:f6:a6:c1:42:e0:34:a9:18:cc:fd: 0a:75:b1:27:ca:88:65:08:b8:07:da:e3:d5:33:94: 4a:b7:1f:7a:fb:7d:8e:ac:d2:37:0e:ab:d7:1f:1c: 4d:05:8d:cc:e3:74:7e:c9:fd:30:cd:a1:11:98:a5: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6D:23:A6:85:9C:D8:27:E2:80:29:54:E3:9D:77:DA:08:3A:E8:7F X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:41:e9:6d:aa:72:4c:7d:1e:ae:1e:28:dc:30:43:0c:dc:0d: 34:d0:2b:7b:fb:13:b0:5f:46:bc:13:14:b9:1f:fd:36:ba:34: c9:12:71:45:b1:9a:19:7e:98:96:58:34:63:81:7e:02:7d:13: 88:98:d8:1a:7b:d7:52:d9:a4:a3:dc:1c:32:e7:fc:3d:c3:ef: f8:c9:e7:55:42:f6:6a:08:66:ee:5c:58:fc:13:9d:26:be:63: 82:c8:7f:60:34:96:8d:6f:86:5c:0d:94:27:a8:e9:ac:a3:c8: 11:7f:54:80:75:ef:bd:0d:ef:01:fe:9b:75:a3:5a:4e:38:e2: 4b:df:3e:d0:18:cc:05:d3:83:c7:57:31:5a:a3:64:e3:dd:e6: 3c:c3:6a:37:8f:69:e6:71:10:fb:74:8b:0e:ce:17:a9:d0:6a: 28:68:61:dc:5c:db:64:ad:7c:82:95:6b:1e:7b:c0:12:1a:b0: 92:4d:2c:ac:2e:cf:d5:80:93:5d:64:04:4f:75:95:9e:fb:07: 84:92:02:b0:47:37:7f:0f:47:15:37:29:49:2a:22:35:64:fe: 13:1e:65:1d:3c:ed:e6:6d:e8:be:87:ce:96:41:4c:4e:a7:8f: 08:09:18:14:92:b3:97:2b:a9:2f:19:c9:0d:9c:f7:a4:f5:15: 0d:13:42:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjUwOTA5MDM1ODQ5WhcNMjUwOTE2MDM1ODQ5WjAYMRYwFAYD VQQDEw02OGJmYTVmYS05ZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3X3fj0mgtdWE4Rdx/OFQTh+yTgI4vvVxR4rlbxw/Ignbaxl7DSfi8FNUGFjU rLRUGDaVmcJ7d1q/PwWdS5sOdQ8VYJjRFVolwcrtBPBXQUV1GIgufoTurrnv2R2i 0aVu+2OG1AY8ydUos0lE2TNwI+OTo0sSPSLfkGGMSBpOqTifyQdwFFEoZuI6CklG Muu7yoh2TL8LbDv36TuHsrkXxrzJVG0kM8XpVbiDGligxAUYS4YK39QNwxxRFw82 pfk3OnkOhfWkMfamwULgNKkYzP0KdbEnyohlCLgH2uPVM5RKtx96+32OrNI3DqvX HxxNBY3M43R+yf0wzaERmKXtowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZtI6aF nNgn4oApVOOdd9oIOuh/MB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmQeltqnJMfR6uHijcMEMM3A000Ct7+xOwX0a8ExS5H/02ujTJEnFF sZoZfpiWWDRjgX4CfROImNgae9dS2aSj3Bwy5/w9w+/4yedVQvZqCGbuXFj8E50m vmOCyH9gNJaNb4ZcDZQnqOmso8gRf1SAde+9De8B/pt1o1pOOOJL3z7QGMwF04PH VzFao2Tj3eY8w2o3j2nmcRD7dIsOzhep0GooaGHcXNtkrXyClWsee8ASGrCSTSys Ls/VgJNdZARPdZWe+weEkgKwRzd/D0cVNylJKiI1ZP4THmUdPO3mbei+h86WQUxO p48ICRgUkrOXK6kvGckNnPek9RUNE0LZ -----END CERTIFICATE-----Generated at Tue Sep 9 13:20:57 2025 by rpki-client