$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft File: 4bmm6wyPr_f1TGjAViSijP0_rew.mft (raw, json) Hash identifier: jEOt4eoJgmDMqMgXCtL6vmHGeoU/bRgyfnhEEfUVE2U= Subject key identifier: BD:1B:E7:EE:5A:39:74:95:52:51:5A:30:D2:2B:77:F1:81:8C:BD:E4 Authority key identifier: E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC Certificate issuer: /CN=A91F39EC/serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft Manifest number: 024B Signing time: Sun 01 Nov 2026 03:33:57 +0000 Manifest this update: Sun 01 Nov 2026 03:33:57 +0000 Manifest next update: Sun 08 Nov 2026 03:33:57 +0000 Files and hashes: 1: 4bmm6wyPr_f1TGjAViSijP0_rew.crl (hash: 2nME5fkFUblpNTw1du3AC/idKES3z/UIi5HIX49Ops0=) 2: 178B9C16ACF711F0B9188A81C4F9AE02.roa (hash: UCOGo0vFc7hJMV6fhe23b/w+i7NQJo9puLUyJFDD4sw=) 3: BEC51400CAA011F080BFA487C4F9AE02.roa (hash: FD4V0DWod1Q3Tr13+NJIK1ULxDqkX6KBtcnJ6tLJOZU=) 4: 94467BCE95EE11F0B275FA48C4F9AE02.roa (hash: w96wheZvIa4b3Y+fs6mzOokLL39tdOI0xokRtBcFWgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 03:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F39EC, serialNumber=E1B9A6EB0C8FAFF7F54C68C05624A28CFD3FADEC Validity Not Before: Nov 1 03:33:57 2026 GMT Not After : Nov 8 03:33:57 2026 GMT Subject: CN=6ae6b325-2205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8f:ff:02:9b:46:b2:d6:c1:ff:44:1a:02:a1: 90:be:82:f0:33:b7:17:ad:14:88:46:60:f3:6e:fd: 3e:a8:8f:91:d1:f5:45:d4:8c:d1:35:85:6f:02:e2: 4e:4c:87:76:2e:19:78:8a:3b:c8:37:18:ff:a9:af: 77:ae:81:28:fd:50:31:b2:cb:28:45:35:d6:05:b1: af:82:8d:90:8d:e6:e3:38:99:64:18:2c:d1:32:a2: 9a:e2:ce:2f:89:af:4c:31:c2:23:a0:b1:7b:35:5a: 27:c4:1f:cb:1a:84:f3:50:0e:ee:cb:f4:37:f8:ee: 5a:b2:b4:57:c5:ba:26:32:d2:9f:8e:0e:37:66:df: 7e:ce:72:6a:29:5a:4d:58:1b:65:1a:66:85:bd:07: 53:94:6d:19:b4:12:d2:44:25:66:62:f2:e9:83:62: 40:09:c0:9f:34:79:0f:74:a9:1c:02:6f:03:45:59: e1:8d:74:ec:4f:8b:70:00:60:63:ad:66:55:65:c4: 47:e9:e0:0c:da:45:93:a0:07:bf:05:4e:b4:95:40: e9:19:c9:02:5e:a9:9d:ee:d5:3e:44:ff:29:e8:b6: c3:a8:9a:b8:90:7d:ff:1a:8e:0b:06:76:59:4e:12: 09:5e:44:97:09:70:d3:3f:46:c1:3f:70:be:63:70: 3f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1B:E7:EE:5A:39:74:95:52:51:5A:30:D2:2B:77:F1:81:8C:BD:E4 X509v3 Authority Key Identifier: keyid:E1:B9:A6:EB:0C:8F:AF:F7:F5:4C:68:C0:56:24:A2:8C:FD:3F:AD:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bmm6wyPr_f1TGjAViSijP0_rew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F39EC/1355E75266BB11EE8462EE84C4F9AE02/4bmm6wyPr_f1TGjAViSijP0_rew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:76:cc:12:d4:96:3d:0f:60:8f:61:87:3d:ef:81:ed:a6:dd: 86:ad:b2:ef:29:94:a7:97:b8:3a:fe:96:07:66:c4:77:3b:b2: 30:d1:23:ac:ea:4a:c6:bf:2b:57:9a:26:39:60:7a:09:66:9b: 95:5d:9f:09:46:76:45:3f:f6:d5:24:74:f0:89:06:90:97:86: 77:b7:0f:69:65:cc:f9:f9:38:13:72:13:13:5c:41:04:a4:f2: 28:4e:87:40:2d:db:f5:28:6c:df:4b:91:1c:44:2d:1d:f1:5f: 6d:9c:f0:28:8f:bb:85:e1:6b:08:84:1c:f2:24:e0:35:de:30: 4c:e2:a0:de:a7:14:db:8f:93:34:01:6c:16:10:f9:5e:37:5a: df:86:1f:11:02:62:c0:f5:4f:05:9d:55:dd:c6:36:b2:c2:a9: ac:4a:d9:b0:aa:f8:ad:21:23:88:95:9e:51:e3:da:6a:bb:2f: c6:a5:5b:d6:bf:e4:b3:eb:31:2a:02:c5:c5:fe:fb:0d:a4:96: 54:91:7a:c4:de:6d:b7:66:48:c1:ca:e4:83:9b:04:dc:7b:2e: 73:db:ff:f3:b6:8e:19:d7:2b:bd:ca:16:42:3c:ca:a6:2f:c5: 3f:db:00:4a:3e:96:e5:6f:4d:06:7a:f9:47:de:d2:1f:0b:43: d7:1b:c7:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5RUMxMTAvBgNVBAUTKEUxQjlBNkVCMEM4RkFGRjdGNTRDNjhDMDU2MjRBMjhD RkQzRkFERUMwHhcNMjYxMTAxMDMzMzU3WhcNMjYxMTA4MDMzMzU3WjAYMRYwFAYD VQQDEw02YWU2YjMyNS0yMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Y//AptGstbB/0QaAqGQvoLwM7cXrRSIRmDzbv0+qI+R0fVF1IzRNYVvAuJO TId2Lhl4ijvINxj/qa93roEo/VAxsssoRTXWBbGvgo2QjebjOJlkGCzRMqKa4s4v ia9MMcIjoLF7NVonxB/LGoTzUA7uy/Q3+O5asrRXxbomMtKfjg43Zt9+znJqKVpN WBtlGmaFvQdTlG0ZtBLSRCVmYvLpg2JACcCfNHkPdKkcAm8DRVnhjXTsT4twAGBj rWZVZcRH6eAM2kWToAe/BU60lUDpGckCXqmd7tU+RP8p6LbDqJq4kH3/Go4LBnZZ ThIJXkSXCXDTP0bBP3C+Y3A/0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0b5+5a OXSVUlFaMNIrd/GBjL3kMB8GA1UdIwQYMBaAFOG5pusMj6/39UxowFYkooz9P63s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzlFQy8xMzU1RTc1MjY2 QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJfZjFUR2pBVmlTaWpQMF9y ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRibW02d3lQcl9mMVRHakFWaVNpalAwX3Jldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzlFQy8xMzU1RTc1MjY2QkIxMUVFODQ2MkVFODRDNEY5QUUwMi80Ym1tNnd5UHJf ZjFUR2pBVmlTaWpQMF9yZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA3bMEtSWPQ9gj2GHPe+B7abdhq2y7ymUp5e4Ov6WB2bEdzuyMNEjrOpKxr8r V5omOWB6CWablV2fCUZ2RT/21SR08IkGkJeGd7cPaWXM+fk4E3ITE1xBBKTyKE6H QC3b9Shs30uRHEQtHfFfbZzwKI+7heFrCIQc8iTgNd4wTOKg3qcU24+TNAFsFhD5 Xjda34YfEQJiwPVPBZ1V3cY2ssKprErZsKr4rSEjiJWeUePaarsvxqVb1r/ks+sx KgLFxf77DaSWVJF6xN5tt2ZIwcrkg5sE3Hsuc9v/87aOGdcrvcoWQjzKpi/FP9sA Sj6W5W9NBnr5R97SHwtD1xvHZg== -----END CERTIFICATE-----Generated at Sun Nov 1 14:47:21 2026 by rpki-client