$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: PuBTU4Ux8qtjP8giLsPKLAg1pD7jWl5ptj2zUFXwlLA= Subject key identifier: 04:02:48:84:58:9C:FE:EA:E7:0F:96:F6:96:53:1D:80:66:A4:C2:1B Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A9B Signing time: Tue 28 Jul 2026 19:56:59 +0000 Manifest this update: Tue 28 Jul 2026 19:56:59 +0000 Manifest next update: Tue 04 Aug 2026 19:56:59 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: j5bNQB2LVdnrt+P9XRGcIfZKMSXXUBEnVunjs8EZnZc=) 2: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 3: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jul 28 19:56:59 2026 GMT Not After : Aug 4 19:56:59 2026 GMT Subject: CN=6a69098b-5700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:88:79:d7:2f:b1:dd:52:16:e2:3c:ac:d2: a6:d5:5e:e5:63:aa:19:a3:dd:73:6d:05:1d:a1:f4: 89:1d:ad:7f:a9:61:2a:1a:43:96:b6:04:a8:b8:d5: 8b:a0:4a:fd:7d:14:32:98:7f:50:4f:41:82:e0:87: 7d:41:f3:7f:ec:43:d6:12:eb:d2:52:ed:ee:79:41: f0:d6:d8:b1:c4:1b:c4:74:2d:fe:e1:38:c6:bf:e3: 9d:e1:de:f2:c0:36:c2:84:ec:14:23:5a:f9:ad:8c: c8:be:3f:fe:98:1e:7b:72:95:31:2d:b9:82:03:0f: 7c:80:cd:9f:08:c0:18:5f:65:75:cc:44:ea:6c:40: e1:4f:64:a8:4c:15:d5:d4:57:8a:68:60:76:03:b2: 34:13:9e:18:2c:87:4c:5d:bf:28:90:c9:ee:2c:39: 54:4c:0b:e5:ad:fb:8f:cc:b1:90:b4:d8:3e:6c:24: dd:80:a4:12:2c:77:9b:a5:ce:63:13:44:c8:63:3a: 40:81:17:19:f5:f1:62:91:75:d8:03:b5:ed:13:6c: 24:26:35:c5:cd:8f:c1:0a:61:fd:dc:f7:03:24:f3: 16:ce:49:f1:54:51:f5:ee:2e:25:73:1e:53:41:35: 85:77:dc:f6:50:e4:b8:b4:1a:06:cb:00:d7:74:99: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:02:48:84:58:9C:FE:EA:E7:0F:96:F6:96:53:1D:80:66:A4:C2:1B X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c4:75:a9:fc:e5:92:13:d8:da:f4:22:56:bb:2a:43:40:d4: 31:05:96:e0:c0:0a:42:57:98:37:42:bd:3b:f6:46:b3:8b:51: af:08:e3:b6:96:85:a6:ce:c8:8d:0c:0f:0c:93:67:84:3e:11: 98:1c:90:59:b8:44:8b:09:15:d7:30:ab:2e:80:82:f2:1c:7e: 16:38:b6:05:41:e7:ae:33:2a:7f:dd:a8:1c:57:6d:6c:33:12: 24:3e:91:11:db:91:7c:7a:a1:06:0b:a5:05:38:18:5a:81:7c: 66:d4:6a:37:17:8a:3a:e8:07:83:96:5e:af:9b:68:ca:90:5d: a6:9f:41:1b:3e:e0:f6:68:61:bc:bd:61:fd:76:29:e2:48:b3: 49:44:b4:e9:71:a4:8f:41:be:9a:f0:a5:69:07:3c:5a:5a:99: 3c:4b:d6:7b:16:18:ef:c9:29:1d:15:5e:af:d4:d1:79:01:2c: 21:3d:d4:c9:61:8b:05:0f:98:df:5b:92:31:da:c4:03:45:2f: 0d:5c:e7:f3:1a:28:77:3b:90:8d:a4:5f:c4:81:2d:88:16:72: 15:c6:15:7f:bc:59:2b:6d:58:29:ee:94:b2:76:7e:23:ac:19: ec:c6:b8:02:7c:c9:c8:f3:ee:7d:bc:ca:86:3a:63:31:b4:1c: d3:b3:60:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwNzI4MTk1NjU5WhcNMjYwODA0MTk1NjU5WjAYMRYwFAYD VQQDEw02YTY5MDk4Yi01NzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjiIedcvsd1SFuI8rNKm1V7lY6oZo91zbQUdofSJHa1/qWEqGkOWtgSouNWL oEr9fRQymH9QT0GC4Id9QfN/7EPWEuvSUu3ueUHw1tixxBvEdC3+4TjGv+Od4d7y wDbChOwUI1r5rYzIvj/+mB57cpUxLbmCAw98gM2fCMAYX2V1zETqbEDhT2SoTBXV 1FeKaGB2A7I0E54YLIdMXb8okMnuLDlUTAvlrfuPzLGQtNg+bCTdgKQSLHebpc5j E0TIYzpAgRcZ9fFikXXYA7XtE2wkJjXFzY/BCmH93PcDJPMWzknxVFH17i4lcx5T QTWFd9z2UOS4tBoGywDXdJmK5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQCSIRY nP7q5w+W9pZTHYBmpMIbMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUMR1qfzlkhPY2vQiVrsqQ0DUMQWW4MAKQleYN0K9O/ZGs4tRrwjjtpaFps7I jQwPDJNnhD4RmByQWbhEiwkV1zCrLoCC8hx+Fji2BUHnrjMqf92oHFdtbDMSJD6R EduRfHqhBgulBTgYWoF8ZtRqNxeKOugHg5Zer5toypBdpp9BGz7g9mhhvL1h/XYp 4kizSUS06XGkj0G+mvClaQc8WlqZPEvWexYY78kpHRVer9TReQEsIT3UyWGLBQ+Y 31uSMdrEA0UvDVzn8xoodzuQjaRfxIEtiBZyFcYVf7xZK21YKe6UsnZ+I6wZ7Ma4 AnzJyPPufbzKhjpjMbQc07NgNw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:00 2026 by rpki-client