$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: 5iAfmwa+gH+45/MHYAjM8AHraU0q2iLFbd+AWzppoio= Subject key identifier: B7:2E:FD:32:24:8B:17:DE:E0:A6:81:3C:48:0A:8A:20:6F:80:5E:D2 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A55 Signing time: Thu 12 Mar 2026 19:28:56 +0000 Manifest this update: Thu 12 Mar 2026 19:28:56 +0000 Manifest next update: Thu 19 Mar 2026 19:28:56 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: jtp1grVTO4rHMQH4ZHbxqrSrg0ZxWNtwthIu1P2FmFA=) 2: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) 3: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 4: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 5: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 19:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Mar 12 19:28:56 2026 GMT Not After : Mar 19 19:28:56 2026 GMT Subject: CN=69b313f8-fcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a9:ba:0d:ed:97:f8:c2:14:81:85:0f:c8:21: e1:c9:29:26:9b:3b:2f:e1:e1:9d:48:ca:9e:6d:da: 44:6c:80:e1:50:7f:c4:7a:08:01:6d:f9:eb:a0:5b: 73:3c:b2:8d:4c:4b:67:64:2f:bf:5f:cd:60:dd:c7: e4:44:7d:61:2f:a1:9f:4d:fa:fe:a8:a1:b3:b1:0c: 7d:9a:73:de:cf:f7:f1:d3:95:e3:97:da:26:20:b4: bf:e3:f0:05:7e:9f:a1:09:61:ba:8b:86:08:cc:0e: d8:42:d7:92:bf:0b:d4:d9:19:ce:41:cc:12:52:07: cd:a2:0d:91:ec:d1:3e:0d:9f:5c:80:f7:4d:8b:04: 5a:4d:bb:e0:ea:2b:d0:e3:f1:ef:c1:f4:16:53:ed: 12:91:05:67:57:a7:24:91:8b:b9:8d:32:80:0a:bc: f7:1e:4f:a6:43:f8:a8:3f:9c:f6:9f:df:6a:3d:9a: 40:93:07:8e:88:10:f1:a0:77:4a:68:21:74:6c:2e: 61:87:92:60:dd:ed:06:54:69:be:a0:3f:2d:3d:3a: e8:86:a3:fd:f3:27:c5:1e:87:f5:50:66:f8:32:31: 7c:13:61:d0:f1:65:b9:d8:a2:71:84:7e:5b:88:74: e3:7e:33:6c:ec:cf:b9:c0:ff:d4:2a:fa:f4:c4:2e: 06:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:2E:FD:32:24:8B:17:DE:E0:A6:81:3C:48:0A:8A:20:6F:80:5E:D2 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9a:09:2f:43:ae:c0:10:d0:93:d2:ee:f9:e9:49:a2:8d:22: e9:5b:38:94:3d:73:a4:9f:0d:a1:2b:09:ad:cd:93:e9:99:80: a0:c2:2b:2c:e7:b0:91:55:1e:8e:a1:7c:06:58:46:63:fa:a4: d5:5f:09:ff:88:4d:64:0a:df:8a:a3:c2:83:cc:76:aa:7e:98: 4a:db:8f:f6:68:78:19:d8:c6:af:49:c9:60:e9:46:4e:52:e1: c1:88:f8:a1:9e:f5:b4:88:20:6b:96:ba:eb:ac:e8:62:9b:e3: c3:1f:a2:40:33:d3:ef:8c:d6:7e:85:a0:8f:8c:0f:87:c7:14: 52:c4:4e:e3:fa:a5:00:98:99:6e:a6:aa:fa:bc:99:29:a1:64: f5:b9:c1:2e:d2:09:f1:c7:28:d2:73:cc:b8:d6:83:1a:f7:36: 05:9e:14:72:6b:1e:87:89:b9:1d:05:35:15:10:f4:7c:15:f1: 88:e0:89:65:89:ed:3a:51:34:48:8b:c5:de:87:c3:61:a1:63: 00:ce:37:17:cb:18:46:a8:16:99:bc:d7:b1:c8:4b:6b:6e:51: ce:f7:0f:46:31:12:bf:fc:53:bd:25:12:4b:0b:be:b8:2d:9a: 80:8f:ba:ce:cb:3a:a1:db:b0:fc:2a:b6:d8:b2:65:a6:3c:49: 01:1e:03:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwMzEyMTkyODU2WhcNMjYwMzE5MTkyODU2WjAYMRYwFAYD VQQDEw02OWIzMTNmOC1mY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtam6De2X+MIUgYUPyCHhySkmmzsv4eGdSMqebdpEbIDhUH/EeggBbfnroFtz PLKNTEtnZC+/X81g3cfkRH1hL6GfTfr+qKGzsQx9mnPez/fx05Xjl9omILS/4/AF fp+hCWG6i4YIzA7YQteSvwvU2RnOQcwSUgfNog2R7NE+DZ9cgPdNiwRaTbvg6ivQ 4/HvwfQWU+0SkQVnV6ckkYu5jTKACrz3Hk+mQ/ioP5z2n99qPZpAkweOiBDxoHdK aCF0bC5hh5Jg3e0GVGm+oD8tPTrohqP98yfFHof1UGb4MjF8E2HQ8WW52KJxhH5b iHTjfjNs7M+5wP/UKvr0xC4GlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcu/TIk ixfe4KaBPEgKiiBvgF7SMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJoJL0OuwBDQk9Lu+elJoo0i6Vs4lD1zpJ8NoSsJrc2T6ZmAoMIrLOewkVUe jqF8BlhGY/qk1V8J/4hNZArfiqPCg8x2qn6YStuP9mh4GdjGr0nJYOlGTlLhwYj4 oZ71tIgga5a666zoYpvjwx+iQDPT74zWfoWgj4wPh8cUUsRO4/qlAJiZbqaq+ryZ KaFk9bnBLtIJ8cco0nPMuNaDGvc2BZ4Ucmseh4m5HQU1FRD0fBXxiOCJZYntOlE0 SIvF3ofDYaFjAM43F8sYRqgWmbzXschLa25RzvcPRjESv/xTvSUSSwu+uC2agI+6 zss6oduw/Cq22LJlpjxJAR4Djw== -----END CERTIFICATE-----Generated at Fri Mar 13 14:55:14 2026 by rpki-client