$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: 9UkLfyM3Thu9UKSYu9/3Jd98rBPP1aoeh5WVVOyPZys= Subject key identifier: BE:89:C9:77:43:58:06:BE:C4:D2:92:94:52:0D:15:FE:2A:9C:84:7E Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A98 Signing time: Wed 22 Jul 2026 20:02:26 +0000 Manifest this update: Wed 22 Jul 2026 20:02:26 +0000 Manifest next update: Wed 29 Jul 2026 20:02:26 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: mJ5m0aw5EeUSzuCHpHBgoWZK3vltV/xvhOKGp34zFNE=) 2: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) 4: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 5: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2770 (0xad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jul 22 20:02:26 2026 GMT Not After : Jul 29 20:02:26 2026 GMT Subject: CN=6a6121d2-e194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c4:46:2f:1d:75:b9:a3:e9:27:4f:ac:ba:55: 87:bb:36:1a:30:bc:67:9d:c3:37:83:ca:0d:07:5f: 19:1a:cd:e2:7a:fe:69:95:8b:fd:20:74:5c:27:63: ef:fb:06:04:c1:e8:07:af:11:68:82:af:b1:6e:b4: f5:fa:2d:c5:c9:da:e4:b2:0c:18:41:c2:58:b2:70: b2:bd:87:62:88:11:88:b8:fe:c2:74:74:31:58:97: a2:b4:0d:b0:fb:d8:4c:36:f1:7f:5d:96:48:62:d3: cf:5f:c4:6c:94:f3:1c:f9:35:fe:74:65:8c:0f:62: 9b:c3:76:d2:95:1a:b6:55:96:de:6a:fd:6d:e7:41: 6d:60:a5:8f:5d:ac:7a:a9:3c:30:a0:f7:1d:d1:60: 55:dd:3f:9b:3a:53:06:84:67:ca:94:c9:d4:f1:b8: d2:5a:36:be:ab:7e:5d:55:48:43:60:88:a3:3a:19: 4e:70:0f:70:cc:dd:84:bc:5b:b6:fa:91:63:26:3f: 7d:1e:d0:32:29:74:93:74:b3:a0:87:8a:72:d9:d7: 73:cd:78:9a:c5:c2:73:8a:19:9b:68:31:6a:43:08: f5:40:91:ec:14:fb:c1:f9:93:23:88:4f:0d:81:22: 28:a7:51:95:fe:96:c5:d5:f6:66:e6:be:af:fc:ff: ef:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:89:C9:77:43:58:06:BE:C4:D2:92:94:52:0D:15:FE:2A:9C:84:7E X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:4e:f3:f2:98:ca:a2:f2:1a:0a:e8:a9:24:1b:5c:a2:4c:32: 84:ca:89:02:15:be:e8:75:6f:82:c4:ac:f5:0e:7e:2d:29:f5: 46:45:d7:97:da:15:60:5b:43:96:2d:34:6b:a0:52:c3:9b:02: db:88:b9:9f:ed:3a:a1:cb:8b:57:68:73:9c:9a:04:d8:70:e9: 07:f2:97:15:17:5f:e0:de:e6:ae:06:d9:e7:92:5f:26:94:fa: 47:a7:c6:f2:b7:8d:a6:12:b9:66:44:30:c0:f8:a6:2e:d7:6b: 87:ab:1d:00:a2:0a:26:3e:01:13:34:17:09:7b:fd:62:6f:f6: ff:10:92:34:62:bf:25:25:ba:6b:c7:a6:fb:91:7a:ce:55:8c: f0:19:54:fe:03:f1:29:1a:cf:25:28:ec:5f:db:54:32:26:a2: 64:a3:f2:0f:d6:b4:5b:73:8d:14:90:d3:2d:b3:11:75:0f:39: 8b:ec:1c:8e:c2:40:e4:09:76:de:9c:28:90:04:d7:c1:64:d5: 81:85:38:03:ad:b8:e6:73:ee:53:c0:83:ea:07:20:e6:64:9d: d6:6f:01:b2:ef:66:68:bf:22:24:86:52:8c:78:6b:e3:00:4f: d9:09:ba:7d:bf:f9:9f:26:63:5a:1b:a2:5a:1d:b5:20:16:af: e2:51:17:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwNzIyMjAwMjI2WhcNMjYwNzI5MjAwMjI2WjAYMRYwFAYD VQQDEw02YTYxMjFkMi1lMTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcRGLx11uaPpJ0+sulWHuzYaMLxnncM3g8oNB18ZGs3iev5plYv9IHRcJ2Pv +wYEwegHrxFogq+xbrT1+i3FydrksgwYQcJYsnCyvYdiiBGIuP7CdHQxWJeitA2w +9hMNvF/XZZIYtPPX8RslPMc+TX+dGWMD2Kbw3bSlRq2VZbeav1t50FtYKWPXax6 qTwwoPcd0WBV3T+bOlMGhGfKlMnU8bjSWja+q35dVUhDYIijOhlOcA9wzN2EvFu2 +pFjJj99HtAyKXSTdLOgh4py2ddzzXiaxcJzihmbaDFqQwj1QJHsFPvB+ZMjiE8N gSIop1GV/pbF1fZm5r6v/P/vVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL6JyXdD WAa+xNKSlFINFf4qnIR+MB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYk7z8pjKovIaCuipJBtcokwyhMqJAhW+6HVvgsSs9Q5+LSn1RkXXl9oVYFtD li00a6BSw5sC24i5n+06ocuLV2hznJoE2HDpB/KXFRdf4N7mrgbZ55JfJpT6R6fG 8reNphK5ZkQwwPimLtdrh6sdAKIKJj4BEzQXCXv9Ym/2/xCSNGK/JSW6a8em+5F6 zlWM8BlU/gPxKRrPJSjsX9tUMiaiZKPyD9a0W3ONFJDTLbMRdQ85i+wcjsJA5Al2 3pwokATXwWTVgYU4A6245nPuU8CD6gcg5mSd1m8Bsu9maL8iJIZSjHhr4wBP2Qm6 fb/5nyZjWhuiWh21IBav4lEXDQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:23:43 2026 by rpki-client