$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: WJE2uI1f/6oJxGjGGQmu/4DR+x6J8nKQ86SHeuFTdK8= Subject key identifier: DD:AF:61:17:7F:32:B7:BF:30:80:00:16:34:18:84:1C:B7:90:F4:CA Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 09FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09D6 Signing time: Sun 10 Aug 2025 20:02:07 +0000 Manifest this update: Sun 10 Aug 2025 20:02:07 +0000 Manifest next update: Sun 17 Aug 2025 20:02:07 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: Hr4mhYb0lBNp60/0mqW07DXOA0IC0K06HMvNTZH2En8=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2558 (0x9fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Aug 10 20:02:07 2025 GMT Not After : Aug 17 20:02:07 2025 GMT Subject: CN=6898fabf-5f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:35:ff:ad:0d:24:6c:5c:90:f0:e6:35:41: d7:66:70:fe:67:3d:61:26:68:b0:6c:30:bf:3e:e4: cf:b3:55:8b:77:0c:3d:fd:56:82:37:54:8b:3e:74: 61:4b:06:aa:d7:41:9a:b7:ea:51:09:dd:82:4d:c9: 82:c9:ba:c9:7e:c0:19:9c:d2:3f:30:e8:29:fe:b8: 37:1b:91:80:96:db:21:41:81:c7:73:05:19:76:15: 79:f1:60:4c:ad:fc:d4:b6:47:a9:a3:e9:3c:59:89: 28:22:74:5d:4c:87:c9:82:61:40:be:27:16:96:93: e9:7c:5f:6e:cf:d9:f8:71:a6:04:8c:2e:86:11:fe: f1:58:45:e2:f5:46:65:a1:5e:ce:08:3a:62:70:53: 58:df:b4:ab:07:6b:48:4e:d4:7b:dd:4d:52:16:f7: 91:26:40:e9:d9:fe:59:f6:0f:a2:c8:ef:d0:01:61: 7d:d7:1a:f5:a9:3f:64:32:aa:e2:4d:e7:9e:cf:27: 7d:3d:8b:fb:25:44:8c:9a:c9:00:95:ee:c5:5c:de: 9a:3c:09:dc:f3:fe:e9:d9:ad:37:34:79:00:2b:22: 77:cf:bb:ef:c5:34:7e:e8:df:20:3c:3f:80:b0:6f: d0:44:14:7c:5e:09:a6:f0:1d:35:58:6d:f7:04:7d: 11:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AF:61:17:7F:32:B7:BF:30:80:00:16:34:18:84:1C:B7:90:F4:CA X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:77:b6:a5:14:6b:cf:32:6f:90:44:da:08:61:ad:8f:f2:9e: 18:1d:55:aa:77:67:c5:76:4d:33:10:59:a2:fb:7c:47:85:2d: 3f:54:78:fe:a8:91:40:20:49:f4:23:f6:70:c3:e7:34:38:87: d3:e9:ca:6c:48:bc:bd:e7:31:7e:36:ba:67:e5:c6:7b:f0:9c: 64:0e:77:ca:48:5f:67:a2:47:51:07:f2:e2:fa:56:d2:10:a2: a4:f0:65:45:2c:9e:3c:21:f3:37:60:d9:a7:6b:3f:e0:d3:25: b1:21:d7:46:5c:f7:fd:a0:e9:5b:a1:75:86:56:18:e2:1e:4c: 2e:b0:70:ba:8f:b3:fd:e2:b9:96:94:81:ee:b6:81:43:3d:62: a1:0d:ce:0e:17:ca:ff:78:69:ca:b2:26:4e:a2:59:1f:e5:39: 11:93:b1:b8:f1:d2:0f:b2:6f:8d:1a:67:1a:2b:b1:30:0f:ac: 30:0b:2c:56:9c:25:e0:11:c7:7e:3d:55:95:6d:27:5f:2b:35: d3:d4:18:fd:d4:ff:98:9a:76:48:82:4a:69:b5:d0:b6:43:b8: d2:af:f6:93:b8:52:9e:9b:af:fe:44:6a:ac:23:80:10:d3:29: 7e:e3:70:e3:87:07:f9:29:89:de:a8:6f:fc:62:8b:a4:b1:4c: 6e:83:ba:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUwODEwMjAwMjA3WhcNMjUwODE3MjAwMjA3WjAYMRYwFAYD VQQDEw02ODk4ZmFiZi01ZjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY01/60NJGxckPDmNUHXZnD+Zz1hJmiwbDC/PuTPs1WLdww9/VaCN1SLPnRh Swaq10Gat+pRCd2CTcmCybrJfsAZnNI/MOgp/rg3G5GAltshQYHHcwUZdhV58WBM rfzUtkepo+k8WYkoInRdTIfJgmFAvicWlpPpfF9uz9n4caYEjC6GEf7xWEXi9UZl oV7OCDpicFNY37SrB2tITtR73U1SFveRJkDp2f5Z9g+iyO/QAWF91xr1qT9kMqri Teeezyd9PYv7JUSMmskAle7FXN6aPAnc8/7p2a03NHkAKyJ3z7vvxTR+6N8gPD+A sG/QRBR8Xgmm8B01WG33BH0RNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2vYRd/ Mre/MIAAFjQYhBy3kPTKMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcd7alFGvPMm+QRNoIYa2P8p4YHVWqd2fFdk0zEFmi+3xHhS0/VHj+ qJFAIEn0I/Zww+c0OIfT6cpsSLy95zF+Nrpn5cZ78JxkDnfKSF9nokdRB/Li+lbS EKKk8GVFLJ48IfM3YNmnaz/g0yWxIddGXPf9oOlboXWGVhjiHkwusHC6j7P94rmW lIHutoFDPWKhDc4OF8r/eGnKsiZOolkf5TkRk7G48dIPsm+NGmcaK7EwD6wwCyxW nCXgEcd+PVWVbSdfKzXT1Bj91P+YmnZIgkpptdC2Q7jSr/aTuFKem6/+RGqsI4AQ 0yl+43Djhwf5KYneqG/8YouksUxug7oa -----END CERTIFICATE-----Generated at Mon Aug 11 11:48:21 2025 by rpki-client