$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: S8JlUK8Vqiy+a1kXlZ59CdhDSTKXoTWO79U3Gqi4LwU= Subject key identifier: A5:65:4E:AC:B9:D6:7E:A2:72:88:BD:51:48:40:53:72:4E:69:C0:F4 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0AC2 Signing time: Mon 12 Oct 2026 19:41:32 +0000 Manifest this update: Mon 12 Oct 2026 19:41:32 +0000 Manifest next update: Mon 19 Oct 2026 19:41:32 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: mGPvpumx2H4z0rOJcjpSugoR1xRNR/9nhyXfUTzbzAY=) 2: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 3: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 4: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) 5: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 19:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Oct 12 19:41:32 2026 GMT Not After : Oct 19 19:41:32 2026 GMT Subject: CN=6acd37ec-56fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:75:82:fe:91:de:9e:a1:8e:92:25:ce:9b: 5d:06:e2:b2:27:36:a5:92:3a:f5:43:82:cd:05:2f: 44:2b:67:f1:49:bd:52:aa:23:86:08:65:13:80:f6: dd:13:6c:a2:fe:76:09:1f:bb:64:ef:8d:c1:67:a9: b5:f8:03:c3:ea:81:54:e6:1a:3b:d9:fa:27:f2:f5: 71:85:9d:68:92:91:b8:79:48:61:d7:72:ee:97:d3: 57:68:98:ab:23:0c:2f:6f:5c:a4:eb:96:fb:5b:9b: 58:be:6a:77:ea:87:34:c0:08:b9:5a:fd:66:a4:fd: f1:a8:b6:45:eb:5b:6e:77:e7:ca:d3:20:b2:62:9c: c5:90:bf:8f:df:19:3a:52:79:38:53:6b:d3:83:c3: a3:12:ad:ac:ac:c0:4b:49:37:a1:bb:b5:3d:ad:69: 15:e5:e7:95:aa:c0:71:a3:9a:f7:ce:7e:b1:3a:43: 60:dd:42:f2:0d:f4:e3:8f:bd:be:79:f5:cb:57:ca: 44:e4:9b:84:a9:a1:7f:40:47:d3:2a:9f:f7:91:28: cd:7a:99:95:7b:a0:09:bb:70:d1:b9:93:f4:c0:98: ce:e0:4f:c7:c6:98:65:2c:34:44:20:3e:8f:96:c0: e9:be:ac:e8:0c:ea:a9:ed:30:88:86:5a:e3:50:1b: 92:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:4E:AC:B9:D6:7E:A2:72:88:BD:51:48:40:53:72:4E:69:C0:F4 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3e:00:3d:8a:7c:0f:20:23:15:07:b6:dc:08:18:37:25:a4: df:65:72:2d:c9:2b:63:2b:b1:3b:7a:a5:d5:8a:01:a4:e6:64: 2b:33:1e:6f:5e:ea:e9:33:b5:2e:c9:21:6e:d3:28:e6:b1:46: 54:57:33:e2:6f:d9:fe:f1:bb:4a:19:0c:07:e7:1c:69:4c:08: 45:fe:1a:6e:d1:3e:0c:5d:f0:86:b7:60:a6:da:b0:82:e1:0d: 25:c8:e9:c5:78:0c:7a:5c:f1:e5:b1:4d:57:ca:2e:c3:f5:d7: d2:11:87:65:85:98:15:6e:13:3a:1d:f4:2c:ed:5b:67:33:e4: 1b:97:21:36:2d:2a:d6:e7:cc:92:bd:37:64:12:14:f2:6a:60: 39:fd:5c:b5:62:ec:cb:3c:20:43:d6:70:f9:a1:d8:08:3f:b4: 08:58:c0:fc:e4:d7:14:e9:5b:44:6d:f9:73:c8:83:6e:3a:9d: f9:45:22:24:c0:f7:d7:7f:0e:43:41:b5:78:d0:d1:a0:ea:d1: e8:95:b0:8b:7f:21:f3:12:de:da:91:23:7b:c4:a1:fe:0e:44: 3a:b9:ff:ba:d8:16:ad:82:7d:e6:59:ef:12:01:a3:18:f0:da: 8b:dd:05:51:60:3e:e4:6e:33:19:c4:3e:80:53:de:65:2e:ee: 7d:90:30:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYxMDEyMTk0MTMyWhcNMjYxMDE5MTk0MTMyWjAYMRYwFAYD VQQDEw02YWNkMzdlYy01NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4l1gv6R3p6hjpIlzptdBuKyJzalkjr1Q4LNBS9EK2fxSb1SqiOGCGUTgPbd E2yi/nYJH7tk743BZ6m1+APD6oFU5ho72fon8vVxhZ1okpG4eUhh13Lul9NXaJir Iwwvb1yk65b7W5tYvmp36oc0wAi5Wv1mpP3xqLZF61tud+fK0yCyYpzFkL+P3xk6 Unk4U2vTg8OjEq2srMBLSTehu7U9rWkV5eeVqsBxo5r3zn6xOkNg3ULyDfTjj72+ efXLV8pE5JuEqaF/QEfTKp/3kSjNepmVe6AJu3DRuZP0wJjO4E/HxphlLDREID6P lsDpvqzoDOqp7TCIhlrjUBuSbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKVlTqy5 1n6icoi9UUhAU3JOacD0MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnz4APYp8DyAjFQe23AgYNyWk32VyLckrYyuxO3ql1YoBpOZkKzMeb17q6TO1 LskhbtMo5rFGVFcz4m/Z/vG7ShkMB+ccaUwIRf4abtE+DF3whrdgptqwguENJcjp xXgMelzx5bFNV8ouw/XX0hGHZYWYFW4TOh30LO1bZzPkG5chNi0q1ufMkr03ZBIU 8mpgOf1ctWLsyzwgQ9Zw+aHYCD+0CFjA/OTXFOlbRG35c8iDbjqd+UUiJMD3138O Q0G1eNDRoOrR6JWwi38h8xLe2pEje8Sh/g5EOrn/utgWrYJ95lnvEgGjGPDai90F UWA+5G4zGcQ+gFPeZS7ufZAwsw== -----END CERTIFICATE-----Generated at Wed Oct 14 00:46:10 2026 by rpki-client