$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: bIWdoD7bC9WrSf5v+/jcyyySbHE2t5UMR7cbimQ0GEc= Subject key identifier: D7:BF:2F:B3:5D:15:09:CF:79:27:F1:B5:FF:7D:F0:29:F5:D9:57:2C Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A74 Signing time: Tue 12 May 2026 19:45:53 +0000 Manifest this update: Tue 12 May 2026 19:45:52 +0000 Manifest next update: Tue 19 May 2026 19:45:52 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: dSWeLncmRD2SeL3NFWwsuYBIF+xpyDl5QpiaAGCcG1M=) 2: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 3: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: May 12 19:45:52 2026 GMT Not After : May 19 19:45:52 2026 GMT Subject: CN=6a038371-25bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:16:d4:0a:01:9e:6c:bb:55:47:86:e3:20:de: 1c:3f:1b:1c:77:12:f3:6f:cf:b4:bc:ed:ed:73:3c: 2c:3e:78:8e:ef:eb:cf:24:dc:7e:07:e8:52:e3:00: ea:eb:8e:d3:0c:c1:a9:b6:96:f6:49:11:ab:26:d4: c1:56:0f:ea:7e:ef:56:43:b4:ff:e3:85:49:bb:10: 60:90:f9:ab:d0:47:e0:12:b2:df:79:78:13:96:ca: c9:f4:63:dc:ed:33:13:ff:cb:f6:75:57:1e:88:38: e6:f4:19:e4:7d:39:88:31:55:7e:7d:bb:98:84:8f: cf:bd:b0:77:76:25:80:58:4a:5a:a6:bd:16:a0:28: f6:c4:8d:4f:b8:20:3f:3d:e0:11:01:2c:ac:b6:d6: 51:a2:f3:87:64:94:34:b0:c1:40:da:6d:01:d8:64: 2c:8c:96:0a:41:64:83:76:66:4c:1b:11:15:7f:49: 4e:a6:ee:72:dd:f8:46:26:e2:6b:b6:ed:19:90:dc: e1:df:f9:56:e0:7b:37:28:e3:24:b7:5e:6a:0c:f6: 20:e2:b1:96:08:c1:20:b8:29:5b:c0:d5:2a:da:6b: 33:de:62:43:f0:cc:3d:f3:8e:83:6a:9b:db:61:27: f4:91:64:03:a4:ac:1e:31:3b:bc:ce:6f:b2:ef:c2: 3d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:BF:2F:B3:5D:15:09:CF:79:27:F1:B5:FF:7D:F0:29:F5:D9:57:2C X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:80:35:3d:2e:d0:fa:ed:ff:84:68:d4:ee:e3:c5:23:eb:ba: 16:4b:11:28:e3:ea:75:23:db:1f:7b:e8:c0:b8:0b:84:e7:7b: f9:55:fb:4b:a1:a7:2a:20:43:0e:fb:59:b9:b7:68:8e:1e:ef: 75:b8:4b:76:52:4c:18:be:ad:b0:7b:71:2e:bd:52:aa:67:c1: 1f:68:f6:1a:51:9e:70:1a:c1:59:32:22:a6:f7:f6:f8:37:4c: 60:32:cd:33:6a:50:b4:08:4d:3d:e2:64:0e:56:07:8e:6d:85: 86:bc:f5:0a:71:42:49:ed:78:9d:4a:e6:a5:a4:17:32:80:22: a2:20:ed:40:f9:43:ab:df:6b:c5:cd:65:f7:50:75:f1:fd:e0: 15:29:d9:f4:2f:3d:39:ff:22:dd:ab:c2:cb:16:2f:be:0f:bf: d0:ff:ec:49:13:5e:ee:77:50:d0:7d:dd:eb:69:af:fa:b8:82: 37:3f:47:1c:c2:55:28:b5:f2:43:85:3c:a5:8b:d7:41:9d:87: 4a:73:87:b4:b6:ac:a8:03:f6:65:d4:51:c9:8a:78:79:68:7a: 10:f1:29:52:b0:a5:3b:df:bc:18:07:4e:aa:19:ee:83:09:11: cb:de:94:74:ed:43:ae:1d:7e:ac:91:94:24:d7:e0:67:84:cb: 42:5d:8a:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwNTEyMTk0NTUyWhcNMjYwNTE5MTk0NTUyWjAYMRYwFAYD VQQDEw02YTAzODM3MS0yNWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBbUCgGebLtVR4bjIN4cPxscdxLzb8+0vO3tczwsPniO7+vPJNx+B+hS4wDq 647TDMGptpb2SRGrJtTBVg/qfu9WQ7T/44VJuxBgkPmr0EfgErLfeXgTlsrJ9GPc 7TMT/8v2dVceiDjm9BnkfTmIMVV+fbuYhI/PvbB3diWAWEpapr0WoCj2xI1PuCA/ PeARASysttZRovOHZJQ0sMFA2m0B2GQsjJYKQWSDdmZMGxEVf0lOpu5y3fhGJuJr tu0ZkNzh3/lW4Hs3KOMkt15qDPYg4rGWCMEguClbwNUq2msz3mJD8Mw9846Dapvb YSf0kWQDpKweMTu8zm+y78I90wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNe/L7Nd FQnPeSfxtf998Cn12VcsMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoYA1PS7Q+u3/hGjU7uPFI+u6FksRKOPqdSPbH3vowLgLhOd7+VX7S6GnKiBD DvtZubdojh7vdbhLdlJMGL6tsHtxLr1SqmfBH2j2GlGecBrBWTIipvf2+DdMYDLN M2pQtAhNPeJkDlYHjm2Fhrz1CnFCSe14nUrmpaQXMoAioiDtQPlDq99rxc1l91B1 8f3gFSnZ9C89Of8i3avCyxYvvg+/0P/sSRNe7ndQ0H3d62mv+riCNz9HHMJVKLXy Q4U8pYvXQZ2HSnOHtLasqAP2ZdRRyYp4eWh6EPEpUrClO9+8GAdOqhnugwkRy96U dO1Drh1+rJGUJNfgZ4TLQl2K1g== -----END CERTIFICATE-----Generated at Wed May 13 15:55:24 2026 by rpki-client