$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: T8qab8qcUS8sI6pFhaTvj2c9L7d+6G/9pGTwTO7zHdo= Subject key identifier: 4D:A8:33:A0:9C:06:46:F6:4F:36:8E:22:72:E3:01:F5:87:E1:D0:D9 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0ACA Signing time: Wed 28 Oct 2026 19:44:02 +0000 Manifest this update: Wed 28 Oct 2026 19:44:01 +0000 Manifest next update: Wed 04 Nov 2026 19:44:01 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: hZNusStN4miKkWc7istRQrI3lENH7IXNO6CoIoMKf4o=) 2: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 3: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 4: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 19:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Oct 28 19:44:01 2026 GMT Not After : Nov 4 19:44:01 2026 GMT Subject: CN=6ae25081-0ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c3:69:d0:5f:b3:e8:52:9c:33:23:e4:ea:03: de:90:a9:24:aa:bd:87:9f:b6:b5:bb:d4:3f:8c:37: b0:a7:03:f8:f5:a3:bf:0c:33:1c:46:ec:a4:57:cb: 7e:fd:5c:12:bb:2b:8f:d9:11:40:a3:84:09:09:6a: 1c:d5:07:04:99:d6:b3:f4:0f:f0:8a:af:9d:15:3c: 27:2d:f5:0a:44:43:d2:b7:d9:c4:16:28:a7:98:ed: b7:7a:74:46:89:eb:52:6b:68:fb:24:c2:8a:9e:9d: e2:98:24:fa:19:8d:f2:97:59:59:e8:eb:02:a4:23: 13:fc:aa:04:b7:e9:c9:05:c7:da:15:66:b3:8d:dd: 35:0d:0c:3a:53:03:b8:28:49:8b:26:e1:f6:fd:e0: e2:a1:bc:42:cf:db:4e:d4:e7:01:f8:85:cb:68:01: de:87:a4:dc:94:fc:d0:63:93:66:2b:9d:54:11:fe: f6:65:97:20:0c:1e:f8:51:4e:76:a3:9c:e9:ce:d1: 7f:eb:c7:1c:dc:ce:34:42:81:3e:c4:cf:21:5d:f9: 9b:ce:cb:c2:85:af:21:cc:74:d2:7e:b0:e5:d6:86: 62:27:28:42:0a:5b:5c:d0:ab:9f:32:d3:f7:67:65: 74:65:06:f1:8e:97:17:54:2a:8b:e4:fe:49:d9:81: e9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A8:33:A0:9C:06:46:F6:4F:36:8E:22:72:E3:01:F5:87:E1:D0:D9 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:51:ab:a0:d2:12:2b:fb:82:10:f0:16:87:56:6f:69:58: 0e:36:54:40:31:94:37:e9:93:f8:e5:ed:87:a5:52:99:c5:f6: 6d:8a:69:25:74:a3:48:e9:ce:a4:2d:7f:09:3f:c1:b0:77:ea: e7:ef:32:8d:31:05:db:d2:6b:8d:00:3a:40:3a:fa:be:1c:96: 37:ce:00:3b:55:b7:5f:92:fe:07:46:3e:49:91:8c:d8:bd:c7: 6b:37:07:d3:3a:e4:f1:07:8f:27:8e:f5:3f:e3:62:01:60:6e: 5a:9d:37:0f:72:06:14:26:f5:a6:8e:ad:3f:47:d3:2a:24:ac: 9a:44:f5:05:73:42:7d:7c:b3:1e:ab:0f:ba:72:35:5b:85:91: cb:85:14:de:38:b7:ad:1a:ca:c3:e2:3f:35:8f:c6:88:80:5a: e0:26:03:1b:c2:73:95:51:6d:6b:c0:b7:7f:dd:a4:58:82:31: 15:1c:a0:39:de:2d:cb:24:32:79:2d:d9:83:54:c6:00:b7:b3: 0a:94:36:68:39:58:19:0d:e2:b2:cd:33:f0:0d:b5:c8:b6:95: 7e:9f:67:d8:89:92:bb:6f:a2:72:86:f6:3c:cd:13:8f:90:b8: 55:c6:cb:db:43:28:4e:92:da:cd:83:9e:0b:d5:31:72:1e:17: 08:32:92:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYxMDI4MTk0NDAxWhcNMjYxMTA0MTk0NDAxWjAYMRYwFAYD VQQDEw02YWUyNTA4MS0wYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcNp0F+z6FKcMyPk6gPekKkkqr2Hn7a1u9Q/jDewpwP49aO/DDMcRuykV8t+ /VwSuyuP2RFAo4QJCWoc1QcEmdaz9A/wiq+dFTwnLfUKREPSt9nEFiinmO23enRG ietSa2j7JMKKnp3imCT6GY3yl1lZ6OsCpCMT/KoEt+nJBcfaFWazjd01DQw6UwO4 KEmLJuH2/eDiobxCz9tO1OcB+IXLaAHeh6TclPzQY5NmK51UEf72ZZcgDB74UU52 o5zpztF/68cc3M40QoE+xM8hXfmbzsvCha8hzHTSfrDl1oZiJyhCCltc0KufMtP3 Z2V0ZQbxjpcXVCqL5P5J2YHptQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE2oM6Cc Bkb2TzaOInLjAfWH4dDZMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU3FRq6DSEiv7ghDwFodWb2lYDjZUQDGUN+mT+OXth6VSmcX2bYppJXSjSOnO pC1/CT/BsHfq5+8yjTEF29JrjQA6QDr6vhyWN84AO1W3X5L+B0Y+SZGM2L3HazcH 0zrk8QePJ471P+NiAWBuWp03D3IGFCb1po6tP0fTKiSsmkT1BXNCfXyzHqsPunI1 W4WRy4UU3ji3rRrKw+I/NY/GiIBa4CYDG8JzlVFta8C3f92kWIIxFRygOd4tyyQy eS3Zg1TGALezCpQ2aDlYGQ3iss0z8A21yLaVfp9n2ImSu2+icob2PM0Tj5C4VcbL 20MoTpLazYOeC9Uxch4XCDKSQw== -----END CERTIFICATE-----Generated at Thu Oct 29 01:39:30 2026 by rpki-client