$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: Dmkl2WlUAk7JUZ/s5K6T7xAyLJjVuRLZ7LSU/EnYa+w= Subject key identifier: DE:FB:C4:19:2E:CF:63:82:CF:55:5C:F7:95:60:99:BA:1E:97:01:8F Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0AC1 Signing time: Sat 10 Oct 2026 19:37:35 +0000 Manifest this update: Sat 10 Oct 2026 19:37:35 +0000 Manifest next update: Sat 17 Oct 2026 19:37:35 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: 1kWrqGcsuhpTtuiUnBxfI+SSm/lPkr+3NlGHHJGU6fs=) 2: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 3: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 4: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2811 (0xafb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Oct 10 19:37:35 2026 GMT Not After : Oct 17 19:37:35 2026 GMT Subject: CN=6aca93ff-d3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:5a:34:09:34:e8:51:46:a1:ab:55:9f:2b: 24:c3:46:45:dd:f8:2c:16:f7:a8:6f:af:8f:1b:bc: f5:e5:22:1b:01:77:8d:25:45:7d:f1:fd:fa:c5:84: 12:f7:0b:c7:23:99:2d:15:67:69:88:5e:24:a0:41: f3:16:ef:d9:2a:cb:be:7d:8c:6b:c0:16:b1:ac:b8: 26:ad:a2:75:0e:38:d3:77:f4:e7:30:e3:5d:1f:28: 6e:2f:d3:19:28:ec:65:7a:13:fb:7c:d4:69:cc:92: 86:29:23:b0:b4:1a:ed:a0:d4:d8:74:6b:82:51:07: 57:e0:26:e9:ca:c2:5f:07:9a:3e:3f:25:12:b5:bc: d5:db:d8:82:00:2e:45:91:02:60:78:f7:ea:8e:92: 8c:2f:9b:b4:7d:f9:f3:ab:5d:ca:1e:5a:64:ea:54: d3:c8:f0:91:c0:14:73:bb:9c:5e:16:32:02:24:59: 2f:7a:cf:f7:9a:db:eb:09:13:24:79:65:91:a9:46: 00:d8:d8:0b:52:11:d4:d0:ec:e0:cb:12:37:62:46: ee:6c:86:16:6c:67:47:e0:23:9e:65:67:89:a1:fa: 47:31:97:26:90:2a:8e:11:30:20:fc:68:a5:3e:e9: 11:95:33:24:9d:09:14:b3:1c:be:86:14:e7:f6:58: bc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FB:C4:19:2E:CF:63:82:CF:55:5C:F7:95:60:99:BA:1E:97:01:8F X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bb:cb:00:de:8e:bd:5f:64:d9:2d:fd:cd:9c:84:1e:65:a2: 77:56:73:dd:1b:62:16:c7:09:ef:86:35:58:c0:d5:46:64:1f: 93:64:83:1d:b3:c2:e9:50:57:44:c8:f4:bc:38:0f:3e:93:aa: 10:50:60:7e:44:23:ff:e6:fa:3e:2d:ea:f0:96:20:08:24:8d: cc:66:96:c7:95:aa:57:9d:89:e6:5d:93:3f:6c:10:96:52:76: 50:bc:36:71:c7:86:e3:26:10:81:43:38:af:d1:41:9d:25:b4: 76:d0:b1:1f:f1:41:ba:ac:5c:30:d7:e9:b3:5f:d5:40:ac:92: 9d:dc:a4:91:30:50:77:db:ef:4f:cd:0c:00:90:dc:0f:f7:26: 17:8b:91:32:ff:41:22:3f:ed:f4:15:ac:62:00:14:9d:21:07: de:a1:82:0e:e3:08:8a:17:cf:10:33:f9:ef:a3:ad:98:d6:b1: c0:01:de:da:58:e8:69:0e:a6:c5:17:ef:cd:a6:c3:a9:de:b4: 0b:ea:b3:71:61:d6:58:68:b1:b0:57:6f:ea:7f:90:c2:e9:3f: d2:5c:e8:87:fc:51:fc:09:d0:99:f1:65:98:8b:01:73:62:0c: 99:e1:f7:95:6a:e1:cd:2e:a0:e2:cb:fb:45:15:b8:ea:5f:7b: c8:7c:b4:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYxMDEwMTkzNzM1WhcNMjYxMDE3MTkzNzM1WjAYMRYwFAYD VQQDEw02YWNhOTNmZi1kM2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoglaNAk06FFGoatVnyskw0ZF3fgsFveob6+PG7z15SIbAXeNJUV98f36xYQS 9wvHI5ktFWdpiF4koEHzFu/ZKsu+fYxrwBaxrLgmraJ1DjjTd/TnMONdHyhuL9MZ KOxlehP7fNRpzJKGKSOwtBrtoNTYdGuCUQdX4CbpysJfB5o+PyUStbzV29iCAC5F kQJgePfqjpKML5u0ffnzq13KHlpk6lTTyPCRwBRzu5xeFjICJFkves/3mtvrCRMk eWWRqUYA2NgLUhHU0OzgyxI3YkbubIYWbGdH4COeZWeJofpHMZcmkCqOETAg/Gil PukRlTMknQkUsxy+hhTn9li85wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN77xBku z2OCz1Vc95VgmboelwGPMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR7vLAN6OvV9k2S39zZyEHmWid1Zz3RtiFscJ74Y1WMDVRmQfk2SDHbPC6VBX RMj0vDgPPpOqEFBgfkQj/+b6Pi3q8JYgCCSNzGaWx5WqV52J5l2TP2wQllJ2ULw2 cceG4yYQgUM4r9FBnSW0dtCxH/FBuqxcMNfps1/VQKySndykkTBQd9vvT80MAJDc D/cmF4uRMv9BIj/t9BWsYgAUnSEH3qGCDuMIihfPEDP576OtmNaxwAHe2ljoaQ6m xRfvzabDqd60C+qzcWHWWGixsFdv6n+Qwuk/0lzoh/xR/AnQmfFlmIsBc2IMmeH3 lWrhzS6g4sv7RRW46l97yHy0/A== -----END CERTIFICATE-----Generated at Sun Oct 11 14:59:41 2026 by rpki-client