$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: YFBwi+Z32CPB3CThUO1auX1rqkWGgkuOwTU7CZDKAv4= Subject key identifier: 74:91:94:65:79:AD:AF:62:1C:AD:8D:5B:1F:DC:26:3B:47:69:73:B4 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A67 Signing time: Thu 16 Apr 2026 19:38:50 +0000 Manifest this update: Thu 16 Apr 2026 19:38:50 +0000 Manifest next update: Thu 23 Apr 2026 19:38:50 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: kfA9JE/01Sy9+sbna5ASszF5FxYKuPNKgcCabZgAbqU=) 2: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) 4: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 5: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2721 (0xaa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Apr 16 19:38:50 2026 GMT Not After : Apr 23 19:38:50 2026 GMT Subject: CN=69e13aca-7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:dc:9a:d4:f3:b1:c4:b8:48:95:bd:df:90: 7e:23:19:36:75:c6:4b:95:3d:08:84:b2:30:82:8c: c0:72:e6:19:64:11:fa:93:30:f1:f5:85:d0:b7:de: 3a:45:34:0b:0d:7f:39:bd:a1:54:d8:eb:74:2d:4a: 67:ff:df:c3:88:55:1e:6e:d1:51:d1:9f:2f:67:c4: e0:f0:4f:ee:d7:30:16:ee:de:f0:a9:2a:27:fa:bd: 00:a5:9c:2f:67:02:bb:8e:19:8e:b7:87:87:41:8d: 15:c0:fc:6a:b8:c8:c8:d1:e2:e0:87:99:3c:99:1d: 3c:47:56:17:08:04:5e:db:f5:a4:0f:4f:e4:d6:1b: 46:b0:94:55:6e:3b:cf:8d:20:07:ab:b7:f4:dd:c7: 30:e8:cf:77:9c:71:be:2d:85:1a:ea:1a:5c:43:8a: b3:02:3c:9e:ef:35:3e:3b:23:6d:ac:2b:fa:1e:ce: 0b:e6:d1:d6:42:1e:40:75:47:7d:15:1b:01:7a:ad: a2:c6:d9:ee:f2:29:aa:6b:c0:df:3f:4a:79:79:f2: 0e:29:02:8a:d1:93:d5:37:7a:16:a7:cb:e6:f6:12: f1:ae:21:4e:bf:0e:e7:9d:3a:10:fe:b5:30:b7:ff: d1:45:0f:be:00:79:3d:86:ee:b0:33:6c:f6:f1:98: e5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:94:65:79:AD:AF:62:1C:AD:8D:5B:1F:DC:26:3B:47:69:73:B4 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7b:4f:cc:4c:1a:2a:26:4f:e1:9f:f6:50:4a:7a:22:11:84: 2c:2d:e5:0c:44:38:24:c4:e1:e4:5a:99:ea:c7:d3:3e:d8:b6: eb:0c:de:4f:32:07:dc:c8:09:81:f3:cc:3a:7a:96:ad:98:26: 02:d0:21:73:ad:bc:d6:3d:01:94:61:d2:1b:54:3e:7c:96:a3: 31:7a:68:4e:85:4e:9e:16:ce:cd:ae:3e:ca:e3:1a:93:7b:ed: 9b:e8:26:1e:cf:f8:f6:0b:91:7b:58:11:f5:e1:ab:8b:92:21: c2:13:c5:af:59:bf:e1:f1:4f:69:f6:e8:fa:91:4e:e7:be:89: 47:04:8e:c1:13:69:4b:0f:76:f6:f3:f0:30:97:8f:2f:6b:2d: 0e:83:18:ca:7d:52:cd:79:57:a9:e1:fa:e8:1b:d0:eb:47:91: 8a:d2:e7:6b:a5:eb:e1:3e:1b:58:0b:6b:0d:b8:66:c9:f5:72: 4c:61:34:13:d1:0d:5f:89:5e:2c:42:46:4d:06:67:aa:67:ee: bd:5e:bd:29:71:82:c1:66:14:60:84:a7:ad:57:da:97:d1:51: d8:dd:1c:d5:4c:de:1d:d9:c2:45:4d:5a:6c:0e:c8:3f:44:39: 70:48:f6:b9:db:c4:e2:f6:24:bf:fe:dd:ba:4a:49:3c:bb:7c: cc:7d:20:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwNDE2MTkzODUwWhcNMjYwNDIzMTkzODUwWjAYMRYwFAYD VQQDEw02OWUxM2FjYS03MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yPcmtTzscS4SJW935B+Ixk2dcZLlT0IhLIwgozAcuYZZBH6kzDx9YXQt946 RTQLDX85vaFU2Ot0LUpn/9/DiFUebtFR0Z8vZ8Tg8E/u1zAW7t7wqSon+r0ApZwv ZwK7jhmOt4eHQY0VwPxquMjI0eLgh5k8mR08R1YXCARe2/WkD0/k1htGsJRVbjvP jSAHq7f03ccw6M93nHG+LYUa6hpcQ4qzAjye7zU+OyNtrCv6Hs4L5tHWQh5AdUd9 FRsBeq2ixtnu8imqa8DfP0p5efIOKQKK0ZPVN3oWp8vm9hLxriFOvw7nnToQ/rUw t//RRQ++AHk9hu6wM2z28ZjlrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHSRlGV5 ra9iHK2NWx/cJjtHaXO0MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfntPzEwaKiZP4Z/2UEp6IhGELC3lDEQ4JMTh5FqZ6sfTPti26wzeTzIH3MgJ gfPMOnqWrZgmAtAhc6281j0BlGHSG1Q+fJajMXpoToVOnhbOza4+yuMak3vtm+gm Hs/49guRe1gR9eGri5IhwhPFr1m/4fFPafbo+pFO576JRwSOwRNpSw929vPwMJeP L2stDoMYyn1SzXlXqeH66BvQ60eRitLna6Xr4T4bWAtrDbhmyfVyTGE0E9ENX4le LEJGTQZnqmfuvV69KXGCwWYUYISnrVfal9FR2N0c1UzeHdnCRU1abA7IP0Q5cEj2 udvE4vYkv/7dukpJPLt8zH0gAw== -----END CERTIFICATE-----Generated at Sat Apr 18 05:01:47 2026 by rpki-client