$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: ZIQDH8xVoZUIUEoBUKyfwRjY7TuTZr6N2KIjdZOd9YA= Subject key identifier: D2:EA:5D:19:6A:5F:E3:08:BA:7E:AD:F8:EB:CE:20:60:5D:81:90:B9 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09C2 Signing time: Wed 02 Jul 2025 20:18:30 +0000 Manifest this update: Wed 02 Jul 2025 20:18:29 +0000 Manifest next update: Wed 09 Jul 2025 20:18:29 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: 6oVhokEmh1F82UesdV2EmbxGY5DFMhaGNFHk4troX4I=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jul 2 20:18:29 2025 GMT Not After : Jul 9 20:18:29 2025 GMT Subject: CN=68659415-7cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:5a:73:3a:0a:f5:1b:61:c4:61:9e:0e:79: cc:6d:a2:05:26:13:d6:c5:95:94:e6:6c:f0:37:5d: 2e:58:0e:85:6a:f8:bf:90:19:47:7e:dc:cb:fc:68: b9:80:3a:18:b4:5c:21:37:22:8b:74:6e:5f:7e:84: 0d:f2:60:f8:0a:77:e8:85:bd:ab:be:d0:0f:dd:be: cd:4e:b0:86:46:fa:d6:9b:fd:42:e6:e1:15:82:b2: e6:f4:56:93:f5:1c:08:72:96:90:09:eb:67:c8:a8: cc:e3:3a:b0:68:e9:e3:25:f5:ac:1b:f7:41:28:cc: 04:69:a2:1f:55:3f:aa:5b:0d:f6:52:93:4d:b6:3a: 5d:59:2e:82:cc:27:82:88:c7:c2:a4:f7:f5:25:0f: 96:46:ac:5e:5f:a6:eb:47:bf:43:35:d5:e8:a4:0c: 7e:c6:4f:d0:8d:c9:a8:ea:99:9f:57:ca:e1:cd:e8: 18:2b:6b:a9:18:17:3a:b7:d5:7e:fa:9d:9a:65:d0: 9c:f7:54:c5:21:2c:73:15:9b:3b:d0:a4:59:48:1a: 32:b9:1d:9c:94:f2:6b:82:82:73:bc:33:92:66:44: 23:31:13:9d:cb:73:42:10:81:ec:d5:b2:53:ca:96: 02:8d:59:d1:60:24:91:e1:d7:44:3b:f9:b0:26:45: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EA:5D:19:6A:5F:E3:08:BA:7E:AD:F8:EB:CE:20:60:5D:81:90:B9 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1a:f4:81:d2:88:ae:12:79:80:2d:af:e0:6e:85:5a:d4:31: 7b:a1:12:8b:4d:bf:93:ce:96:26:d5:fe:ae:9f:8b:e2:3c:9f: c2:5f:2c:ae:49:20:ab:fe:83:44:20:0c:43:2b:3f:33:0a:97: b6:b8:ad:01:5e:bd:35:2b:ff:c0:2b:41:52:12:92:18:4e:d3: 5c:d6:db:f6:9e:4e:fc:f1:cf:a4:90:4d:c9:ee:79:7f:1f:86: 61:8a:7b:71:8f:a2:b6:6f:e0:1b:0c:18:3d:0e:84:8e:f0:cc: 00:7c:4e:db:14:c8:53:c9:00:be:30:25:33:4b:4f:a9:25:34: 5a:d1:96:6d:0b:bd:bd:2b:4d:1a:61:7f:7f:97:28:b9:af:15: 74:b0:31:63:bf:b0:55:b0:8f:7a:6f:f4:f6:3e:b0:36:4a:62: 20:26:a9:00:73:92:97:6c:8c:f6:b4:b1:4e:da:ee:89:be:33: a2:e0:8a:df:00:88:a2:f6:a1:67:71:93:ef:18:6d:bd:4a:32: 3e:96:0f:dd:a6:94:15:6d:c1:eb:64:8d:23:9c:26:33:e5:d2: 67:25:a6:a8:89:d1:a4:e4:1b:36:e7:0d:53:14:e5:73:3a:e9: f8:d8:2d:b5:3b:d2:04:b6:a7:aa:9c:ef:93:33:de:a0:29:a7: 38:ff:81:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUwNzAyMjAxODI5WhcNMjUwNzA5MjAxODI5WjAYMRYwFAYD VQQDEw02ODY1OTQxNS03Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+JaczoK9RthxGGeDnnMbaIFJhPWxZWU5mzwN10uWA6Favi/kBlHftzL/Gi5 gDoYtFwhNyKLdG5ffoQN8mD4Cnfohb2rvtAP3b7NTrCGRvrWm/1C5uEVgrLm9FaT 9RwIcpaQCetnyKjM4zqwaOnjJfWsG/dBKMwEaaIfVT+qWw32UpNNtjpdWS6CzCeC iMfCpPf1JQ+WRqxeX6brR79DNdXopAx+xk/Qjcmo6pmfV8rhzegYK2upGBc6t9V+ +p2aZdCc91TFISxzFZs70KRZSBoyuR2clPJrgoJzvDOSZkQjMROdy3NCEIHs1bJT ypYCjVnRYCSR4ddEO/mwJkXzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLqXRlq X+MIun6t+OvOIGBdgZC5MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8GvSB0oiuEnmALa/gboVa1DF7oRKLTb+TzpYm1f6un4viPJ/CXyyu SSCr/oNEIAxDKz8zCpe2uK0BXr01K//AK0FSEpIYTtNc1tv2nk788c+kkE3J7nl/ H4Zhintxj6K2b+AbDBg9DoSO8MwAfE7bFMhTyQC+MCUzS0+pJTRa0ZZtC729K00a YX9/lyi5rxV0sDFjv7BVsI96b/T2PrA2SmIgJqkAc5KXbIz2tLFO2u6JvjOi4Irf AIii9qFncZPvGG29SjI+lg/dppQVbcHrZI0jnCYz5dJnJaaoidGk5Bs25w1TFOVz Oun42C21O9IEtqeqnO+TM96gKac4/4F4 -----END CERTIFICATE-----Generated at Fri Jul 4 11:51:04 2025 by rpki-client