$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: LVfYqwJAkMqVab8kvo9PMrjDKc41b3ZbHh0QUFutHSM= Subject key identifier: 16:0E:AD:46:C7:29:62:61:15:84:EF:EC:5C:EF:2A:E1:ED:F1:09:7A Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A5B Signing time: Tue 24 Mar 2026 19:32:44 +0000 Manifest this update: Tue 24 Mar 2026 19:32:44 +0000 Manifest next update: Tue 31 Mar 2026 19:32:44 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: 2fBOcifjdEnOoLKrgpiT9gnwfcSuvycH952SrjepKpE=) 2: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 3: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 4: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) 5: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2709 (0xa95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Mar 24 19:32:44 2026 GMT Not After : Mar 31 19:32:44 2026 GMT Subject: CN=69c2e6dc-bd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:a4:40:a8:2c:86:2d:a2:6c:1e:8e:8f:df: ca:2f:b0:ac:21:c6:b1:e3:6f:d9:86:e8:1b:47:45: 0f:5c:6b:59:80:3f:f7:05:b7:8a:8a:3d:63:2e:35: 72:1e:5c:81:8c:37:e4:bb:fe:be:14:8c:0d:88:ef: 1e:e6:9c:6b:8e:34:af:4b:02:67:c7:ed:ff:60:ac: bd:c7:14:be:1c:1c:53:ad:9c:ec:11:3e:99:ef:42: e6:f8:47:a5:e1:0d:bc:6d:a0:f7:ff:7f:6a:bf:1e: e6:c0:20:c9:36:40:92:6e:5a:80:9f:4c:75:f5:90: a8:61:0e:b0:28:40:34:bc:3d:73:f2:9b:9c:48:cb: dd:c1:01:ea:26:76:76:31:33:52:ec:c6:60:7b:3c: b6:20:67:6f:cf:0b:ec:5d:59:d5:df:96:7d:42:13: d6:56:34:2b:d4:90:2c:95:57:d7:ac:5a:9b:2e:f4: 37:42:96:aa:3c:80:71:2a:e7:a0:9e:6b:8c:dd:5e: 4a:86:26:e7:f3:33:c8:6c:b8:09:8d:31:5e:5c:7c: 21:37:4e:74:89:3e:1b:30:dd:fe:52:37:90:af:01: a9:66:dd:f2:af:02:6f:88:27:2c:5d:25:48:8f:13: 25:c2:80:db:3f:7a:62:c9:25:53:70:03:34:dd:d6: 91:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0E:AD:46:C7:29:62:61:15:84:EF:EC:5C:EF:2A:E1:ED:F1:09:7A X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:02:86:e2:4a:80:bd:2a:cf:4f:17:61:82:a1:9d:94:e2:5b: 93:78:d1:2f:fd:69:69:f5:43:6b:49:47:3a:ba:64:fc:42:de: 69:d0:64:ce:26:a9:ab:f2:3c:71:6a:ce:a2:ba:3a:14:37:d6: 07:4a:74:07:35:57:c1:4a:fd:07:4a:b8:8e:ef:4a:17:f8:2e: 24:b4:5f:f3:f7:d8:53:ff:59:02:bb:80:e9:31:58:b9:fc:8d: 63:8a:d8:69:94:a4:b5:57:46:36:fc:e1:bd:1d:cc:43:9c:a8: b1:ea:40:15:a4:ea:08:e9:9c:22:85:d4:4b:18:cc:3f:10:e9: 1e:2a:1d:9f:c9:7c:77:ef:c0:c2:37:12:78:19:77:1b:f1:6d: 84:3a:c2:54:4a:1d:d3:7a:f5:98:26:0f:8f:0e:c3:13:58:c2: 44:5a:35:ee:a6:4b:44:e3:3b:23:d4:60:22:9f:3a:d1:53:d3: 8d:27:5d:17:58:4d:ba:24:75:69:b3:17:85:75:14:d0:6c:0e: 4c:34:cf:98:25:d0:6b:10:11:d3:17:47:f3:25:89:ce:10:80: 44:41:04:b5:a7:e4:90:12:8e:d6:5f:4e:03:f8:0a:46:c8:56: 2d:35:0e:15:cd:7c:9a:40:8b:65:13:51:ce:43:d4:8a:46:ac: 7e:78:96:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMzI0MTkzMjQ0WhcNMjYwMzMxMTkzMjQ0WjAYMRYwFAYD VQQDEw02OWMyZTZkYy1iZDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4GkQKgshi2ibB6Oj9/KL7CsIcax42/ZhugbR0UPXGtZgD/3BbeKij1jLjVy HlyBjDfku/6+FIwNiO8e5pxrjjSvSwJnx+3/YKy9xxS+HBxTrZzsET6Z70Lm+Eel 4Q28baD3/39qvx7mwCDJNkCSblqAn0x19ZCoYQ6wKEA0vD1z8pucSMvdwQHqJnZ2 MTNS7MZgezy2IGdvzwvsXVnV35Z9QhPWVjQr1JAslVfXrFqbLvQ3QpaqPIBxKueg nmuM3V5Khibn8zPIbLgJjTFeXHwhN050iT4bMN3+UjeQrwGpZt3yrwJviCcsXSVI jxMlwoDbP3piySVTcAM03daRjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBYOrUbH KWJhFYTv7FzvKuHt8Ql6MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHgKG4kqAvSrPTxdhgqGdlOJbk3jRL/1pafVDa0lHOrpk/ELeadBkziapq/I8 cWrOoro6FDfWB0p0BzVXwUr9B0q4ju9KF/guJLRf8/fYU/9ZAruA6TFYufyNY4rY aZSktVdGNvzhvR3MQ5yosepAFaTqCOmcIoXUSxjMPxDpHiodn8l8d+/AwjcSeBl3 G/FthDrCVEod03r1mCYPjw7DE1jCRFo17qZLROM7I9RgIp860VPTjSddF1hNuiR1 abMXhXUU0GwOTDTPmCXQaxAR0xdH8yWJzhCAREEEtafkkBKO1l9OA/gKRshWLTUO Fc18mkCLZRNRzkPUikasfniWnQ== -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:08 2026 by rpki-client