$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: 5KO3IMFL7S0OwbGmf57JTGQY5ikzwZN9hHkbPuN2EI4= Subject key identifier: 88:E1:AF:AA:E7:9F:86:F9:2C:E6:06:B4:5D:6E:4D:31:6C:69:76:4D Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A01 Signing time: Sun 02 Nov 2025 19:53:13 +0000 Manifest this update: Sun 02 Nov 2025 19:53:13 +0000 Manifest next update: Sun 09 Nov 2025 19:53:13 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: jSBaDa1Z4c5pRtT6iRsWFvKVZ3mtviRc2aHlPosBiVQ=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2601 (0xa29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Nov 2 19:53:13 2025 GMT Not After : Nov 9 19:53:13 2025 GMT Subject: CN=6907b6a9-0a1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:f5:14:6a:19:18:34:79:61:50:1b:a3:2a: f9:1c:62:92:56:5d:93:23:20:f0:ed:29:50:02:aa: 36:3f:b7:86:01:d4:fa:38:ce:22:8f:f1:c6:4d:dd: 98:f7:0c:2b:49:ff:af:a7:9d:90:07:30:9b:0b:e3: ea:25:2b:cf:f8:67:8e:ae:ba:20:06:df:3e:69:03: f1:48:aa:7e:2f:90:20:d7:4d:b3:1d:3a:83:c7:61: 28:ec:24:74:29:78:8c:77:d9:8e:35:01:88:4c:19: 64:35:77:cb:f9:0a:e6:1d:72:4b:57:ea:e0:d9:75: 95:ba:f2:ad:be:a2:bf:fa:19:3b:e2:53:7a:db:11: 17:5b:5b:00:fb:cb:d9:45:2f:66:73:84:48:1b:c5: 8d:1b:76:98:97:fa:32:78:43:c1:e6:91:ab:29:5c: f6:ca:29:50:02:4c:92:c7:09:60:0b:92:8c:6e:87: 3d:d0:b7:ef:9a:39:40:89:f7:c8:94:87:1b:d7:ef: 61:3d:97:aa:8f:14:11:f0:a5:30:0f:1a:41:cc:b2: 47:66:65:06:a2:a4:63:45:a4:a8:f6:96:a7:f5:6a: ff:17:dd:b2:94:48:cd:53:95:53:16:07:46:97:45: 21:1e:28:bf:d7:65:37:5a:89:4e:fa:8a:f8:ba:ae: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E1:AF:AA:E7:9F:86:F9:2C:E6:06:B4:5D:6E:4D:31:6C:69:76:4D X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7e:4d:a4:c5:38:0a:34:58:ab:34:28:4f:3b:50:78:c1:8a: 3f:0a:54:4d:2c:f3:60:e8:d4:ca:dc:29:5d:c5:e6:b1:36:76: ab:68:d5:62:d0:cb:f2:87:d8:7d:75:d8:4c:c4:d4:4a:c0:2b: d2:06:33:e9:00:8d:98:96:44:86:b9:b9:a0:76:da:4b:05:1a: f5:61:16:16:e1:a9:89:29:d3:ba:21:22:35:21:75:1f:75:9d: ad:5e:9a:04:e7:cc:27:15:e7:f5:a3:44:5b:64:11:4b:59:63: 2e:ed:b8:63:b7:17:6f:ad:ce:e2:8e:1d:75:cb:c3:f8:a2:a5: 15:6a:0c:0c:d9:f8:e5:db:f2:95:cf:16:40:3d:40:37:73:eb: 54:9c:c9:ff:0d:b2:6a:19:53:9a:bc:40:f9:ed:35:81:82:e1: 86:7c:30:6b:2b:51:61:d1:b0:6b:d1:72:a4:61:be:ba:dd:cb: 50:46:f7:30:57:21:25:3d:d7:bf:1a:8e:4a:62:70:eb:64:db: d6:64:d4:08:63:42:ef:8d:7e:f0:8e:de:f9:55:4a:2d:9c:a3: a9:b1:05:eb:c3:69:04:b5:cd:70:fd:09:fa:c5:cf:df:8e:9c: e3:b5:6b:da:1f:db:a1:b4:0e:e9:70:52:e2:6e:02:32:41:64: f4:f3:6c:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUxMTAyMTk1MzEzWhcNMjUxMTA5MTk1MzEzWjAYMRYwFAYD VQQDEw02OTA3YjZhOS0wYTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrD1FGoZGDR5YVAboyr5HGKSVl2TIyDw7SlQAqo2P7eGAdT6OM4ij/HGTd2Y 9wwrSf+vp52QBzCbC+PqJSvP+GeOrrogBt8+aQPxSKp+L5Ag102zHTqDx2Eo7CR0 KXiMd9mONQGITBlkNXfL+QrmHXJLV+rg2XWVuvKtvqK/+hk74lN62xEXW1sA+8vZ RS9mc4RIG8WNG3aYl/oyeEPB5pGrKVz2yilQAkySxwlgC5KMboc90LfvmjlAiffI lIcb1+9hPZeqjxQR8KUwDxpBzLJHZmUGoqRjRaSo9pan9Wr/F92ylEjNU5VTFgdG l0UhHii/12U3WolO+or4uq4k9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjhr6rn n4b5LOYGtF1uTTFsaXZNMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAffk2kxTgKNFirNChPO1B4wYo/ClRNLPNg6NTK3CldxeaxNnaraNVi 0Mvyh9h9ddhMxNRKwCvSBjPpAI2YlkSGubmgdtpLBRr1YRYW4amJKdO6ISI1IXUf dZ2tXpoE58wnFef1o0RbZBFLWWMu7bhjtxdvrc7ijh11y8P4oqUVagwM2fjl2/KV zxZAPUA3c+tUnMn/DbJqGVOavED57TWBguGGfDBrK1Fh0bBr0XKkYb663ctQRvcw VyElPde/Go5KYnDrZNvWZNQIY0LvjX7wjt75VUotnKOpsQXrw2kEtc1w/Qn6xc/f jpzjtWvaH9uhtA7pcFLibgIyQWT082yE -----END CERTIFICATE-----Generated at Tue Nov 4 20:23:33 2025 by rpki-client