$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: 2eQucepa9jMEriXCsI4pFccFMYX7gnpgi+qdTlEqKVA= Subject key identifier: 26:47:18:F0:6B:82:7B:22:8E:3C:E5:26:CA:EC:01:FD:24:5D:D1:3E Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A4F Signing time: Mon 02 Mar 2026 01:12:40 +0000 Manifest this update: Mon 02 Mar 2026 01:12:39 +0000 Manifest next update: Mon 09 Mar 2026 01:12:39 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: vyCKdIvNJ6auxzxjMOCtO20VK01txrbHkUitYy6u4T0=) 2: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 3: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 4: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2697 (0xa89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Mar 2 01:12:39 2026 GMT Not After : Mar 9 01:12:39 2026 GMT Subject: CN=69a4e408-d205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bd:b4:99:c4:a7:23:03:ff:d7:77:86:5e:d2: df:af:11:b6:38:cb:06:5f:03:0a:a4:a0:5e:af:92: ba:d5:ca:b3:92:2b:c6:c4:69:cc:b8:01:ba:81:43: 29:f8:0a:7a:56:bb:64:26:48:2d:e3:bd:82:6a:7a: 04:9d:73:a3:3a:33:e9:64:55:1f:cf:1d:5b:1f:19: b6:8f:f1:8c:ff:27:a1:78:05:d7:69:ed:d6:a9:f3: a8:54:dc:02:e0:ff:b8:f2:63:96:0c:8b:c6:63:2d: 29:f4:3d:fa:00:91:d6:d2:6f:72:b2:96:ef:e4:63: e8:af:11:b4:5f:76:2b:d6:06:a9:31:21:9a:80:10: a1:4f:33:c3:7c:0e:03:e2:a9:3c:ab:27:c6:f9:f6: 4e:e4:3b:6f:f7:8d:91:cd:00:aa:1e:e1:97:94:ab: b6:5a:39:93:75:b1:0d:1c:db:7f:aa:09:15:31:6e: 5d:09:65:e0:dd:e0:16:00:3e:92:65:72:2d:9f:11: c6:90:56:7c:27:4f:7e:17:9f:bd:2f:a9:b6:d0:86: e1:11:66:a5:d0:72:ab:b6:eb:a7:4c:fb:25:1d:d0: ec:e7:2c:9c:0b:67:46:3f:73:82:0e:3e:3b:e5:2a: ee:05:66:02:54:ac:54:d5:69:ea:82:9f:8c:34:44: 51:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:47:18:F0:6B:82:7B:22:8E:3C:E5:26:CA:EC:01:FD:24:5D:D1:3E X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:45:47:c1:26:58:4e:05:b9:ee:ea:33:f3:de:fe:cf:79:79: 32:16:7b:00:93:74:75:bd:c1:16:f8:9d:bb:4e:b0:5a:39:94: 19:9a:d3:98:b8:87:cb:15:0e:11:5b:67:2e:6a:19:d8:ba:e3: 0f:77:7e:c4:18:20:8c:bb:53:b3:5a:68:01:b9:7e:19:12:e3: 2b:a1:d9:72:16:7b:30:61:9a:3b:eb:d1:33:3e:dd:88:d7:93: fd:86:2a:71:5c:30:45:fb:1a:ee:13:2c:5c:2f:ba:ed:a1:9e: e9:b2:fd:f4:49:38:47:e6:bc:ef:a3:1f:9e:f0:2a:00:9e:48: 21:3e:82:db:98:aa:82:de:33:13:50:50:5f:ba:57:91:6c:20: ef:a1:9a:c6:9a:ad:21:de:40:ce:f0:5f:d0:59:2d:16:34:61: 75:8b:3d:ef:28:4a:85:16:61:ff:65:b3:ef:1a:f5:d0:c4:06: 62:97:f5:86:0d:e5:14:14:5b:ea:12:72:c1:50:0c:d7:81:4b: 8b:84:c2:f0:9a:2e:bf:b7:ee:3c:b6:30:c8:51:fe:cc:47:55: ca:3f:0e:2d:e1:18:d7:cc:03:90:68:48:7b:24:ad:44:1e:c6: 45:6c:f4:17:61:f1:cb:1a:d3:d8:94:f7:42:1b:83:d5:0e:d4: 91:b2:b0:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMzAyMDExMjM5WhcNMjYwMzA5MDExMjM5WjAYMRYwFAYD VQQDEw02OWE0ZTQwOC1kMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyL20mcSnIwP/13eGXtLfrxG2OMsGXwMKpKBer5K61cqzkivGxGnMuAG6gUMp +Ap6VrtkJkgt472CanoEnXOjOjPpZFUfzx1bHxm2j/GM/yeheAXXae3WqfOoVNwC 4P+48mOWDIvGYy0p9D36AJHW0m9yspbv5GPorxG0X3Yr1gapMSGagBChTzPDfA4D 4qk8qyfG+fZO5Dtv942RzQCqHuGXlKu2WjmTdbENHNt/qgkVMW5dCWXg3eAWAD6S ZXItnxHGkFZ8J09+F5+9L6m20IbhEWal0HKrtuunTPslHdDs5yycC2dGP3OCDj47 5SruBWYCVKxU1Wnqgp+MNERRFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCZHGPBr gnsijjzlJsrsAf0kXdE+MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkVHwSZYTgW57uoz897+z3l5MhZ7AJN0db3BFvidu06wWjmUGZrTmLiHyxUO EVtnLmoZ2LrjD3d+xBggjLtTs1poAbl+GRLjK6HZchZ7MGGaO+vRMz7diNeT/YYq cVwwRfsa7hMsXC+67aGe6bL99Ek4R+a876MfnvAqAJ5IIT6C25iqgt4zE1BQX7pX kWwg76GaxpqtId5AzvBf0FktFjRhdYs97yhKhRZh/2Wz7xr10MQGYpf1hg3lFBRb 6hJywVAM14FLi4TC8Jouv7fuPLYwyFH+zEdVyj8OLeEY18wDkGhIeyStRB7GRWz0 F2HxyxrT2JT3QhuD1Q7UkbKwqg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:35:51 2026 by rpki-client