$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: dDCyCBAiA200ILnEgS9r6E5p1EcxMoV9agpFv68IJ1Y= Subject key identifier: C0:A3:E6:32:E9:D6:91:92:58:B3:D7:E1:67:EE:34:F3:27:BA:7F:4D Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 09F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09CA Signing time: Fri 18 Jul 2025 20:16:59 +0000 Manifest this update: Fri 18 Jul 2025 20:16:59 +0000 Manifest next update: Fri 25 Jul 2025 20:16:59 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: Z0iWXl0NJsC33OaTqz4s4HpwrZi2qKNqfMlyskBHdv4=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2546 (0x9f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jul 18 20:16:59 2025 GMT Not After : Jul 25 20:16:59 2025 GMT Subject: CN=687aabbb-9009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:37:22:b2:14:c7:33:0d:5f:2f:e9:54:96:9c: b4:51:57:ad:fd:32:d4:d7:dc:e4:20:97:2a:79:10: 1a:4f:d3:e9:43:6a:32:1a:80:3f:12:9e:8b:cb:5c: e4:1c:7e:89:25:87:36:91:84:b3:a4:84:1a:ec:8b: ac:14:6b:1e:d5:a6:79:d9:c2:a3:10:19:5c:42:32: 77:c8:c2:1c:ef:84:b5:a4:44:33:9d:31:c5:fb:62: 9d:ab:4b:28:79:ab:42:9a:ae:dd:16:39:c3:3c:34: 61:5d:01:67:00:7d:55:fc:ca:52:60:97:3d:6b:4d: ef:4a:ea:26:37:1f:d8:61:c1:34:8c:55:b8:71:4a: 3e:1d:84:02:cf:3f:9a:3f:4b:1d:54:b7:ec:f9:5e: 89:7e:ce:f5:d1:5e:c6:3a:c3:2e:d9:24:f4:3a:16: 85:cc:6a:dd:d6:a9:70:c1:10:96:73:85:8f:14:38: 9d:44:3c:05:3a:ac:00:6a:97:77:de:b7:d7:66:2a: ca:f4:66:95:8c:6f:d4:f3:1c:b5:c2:c8:fd:7a:0b: b8:4f:c9:70:89:d3:dd:e2:3d:e1:4e:68:cc:9e:73: 44:20:6d:ee:20:43:b4:67:95:ac:f0:b6:56:4c:5d: 7d:87:bd:e4:f8:9b:eb:14:59:de:17:b5:de:d7:39: f5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A3:E6:32:E9:D6:91:92:58:B3:D7:E1:67:EE:34:F3:27:BA:7F:4D X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:60:cb:2d:d9:44:4f:cc:09:db:65:15:09:67:44:35:44:d8: 5a:76:6b:42:27:15:45:05:da:02:d1:3f:ad:96:b8:e0:d8:39: 3e:1c:ec:93:03:5c:35:51:c4:60:82:6b:f5:e2:ee:a8:f7:7e: f8:ba:b1:29:b5:50:4e:e6:aa:b4:63:d6:53:8a:70:15:2f:d0: 88:f9:6f:48:7c:6e:44:62:3e:10:c5:be:63:11:96:86:e7:3c: 46:5c:16:22:98:fc:74:d9:cb:b4:53:61:6c:fc:4d:45:1c:e2: 99:fb:c0:a1:c9:dc:39:84:aa:f1:70:83:51:62:da:1a:8b:8b: fa:1d:4c:9f:9d:5c:83:2c:32:3f:68:06:42:1c:b2:fc:18:08: 4e:7d:4d:ef:29:cf:9a:fd:db:f3:81:f1:bf:90:d1:b7:3e:7d: cb:bf:1f:36:11:b0:5b:6a:28:62:77:a5:ed:3d:b3:a2:a6:27: c2:f8:a2:4b:2a:f5:a8:a8:e9:ed:4a:37:98:7a:55:60:04:7f: 92:a5:b2:87:df:6c:05:12:5a:da:05:3e:32:12:d3:bd:62:b3: f8:4a:74:49:cd:66:81:36:24:2b:3a:85:bb:02:a0:32:ab:fa: 2f:d1:43:71:7b:ee:e0:9c:8f:90:c3:ad:ec:0b:c1:01:89:a2: f0:c1:f2:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUwNzE4MjAxNjU5WhcNMjUwNzI1MjAxNjU5WjAYMRYwFAYD VQQDEw02ODdhYWJiYi05MDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/TcishTHMw1fL+lUlpy0UVet/TLU19zkIJcqeRAaT9PpQ2oyGoA/Ep6Ly1zk HH6JJYc2kYSzpIQa7IusFGse1aZ52cKjEBlcQjJ3yMIc74S1pEQznTHF+2Kdq0so eatCmq7dFjnDPDRhXQFnAH1V/MpSYJc9a03vSuomNx/YYcE0jFW4cUo+HYQCzz+a P0sdVLfs+V6Jfs710V7GOsMu2ST0OhaFzGrd1qlwwRCWc4WPFDidRDwFOqwAapd3 3rfXZirK9GaVjG/U8xy1wsj9egu4T8lwidPd4j3hTmjMnnNEIG3uIEO0Z5Ws8LZW TF19h73k+JvrFFneF7Xe1zn1hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCj5jLp 1pGSWLPX4WfuNPMnun9NMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARYMst2URPzAnbZRUJZ0Q1RNhadmtCJxVFBdoC0T+tlrjg2Dk+HOyT A1w1UcRggmv14u6o9374urEptVBO5qq0Y9ZTinAVL9CI+W9IfG5EYj4Qxb5jEZaG 5zxGXBYimPx02cu0U2Fs/E1FHOKZ+8Chydw5hKrxcINRYtoai4v6HUyfnVyDLDI/ aAZCHLL8GAhOfU3vKc+a/dvzgfG/kNG3Pn3Lvx82EbBbaihid6XtPbOipifC+KJL KvWoqOntSjeYelVgBH+SpbKH32wFElraBT4yEtO9YrP4SnRJzWaBNiQrOoW7AqAy q/ov0UNxe+7gnI+Qw63sC8EBiaLwwfJq -----END CERTIFICATE-----Generated at Sun Jul 20 08:04:19 2025 by rpki-client