$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: BnJEvU2vMRmK7PLk/VqbPymXJ/NoAqeOfMFBw+M/7Cg= Subject key identifier: 24:0A:B2:F1:96:EB:DF:0D:F1:45:A7:88:DD:DE:BC:01:C4:30:58:0E Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09FB Signing time: Wed 22 Oct 2025 20:37:45 +0000 Manifest this update: Wed 22 Oct 2025 20:37:44 +0000 Manifest next update: Wed 29 Oct 2025 20:37:44 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: qh6L2IH1vZy+18Zl/niwaTIXpHisPCU7eEB9LbIsm1k=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2595 (0xa23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Oct 22 20:37:44 2025 GMT Not After : Oct 29 20:37:44 2025 GMT Subject: CN=68f94098-3537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ae:43:9e:cf:cd:cd:b2:eb:b5:99:cf:31:9e: 0e:11:27:db:30:85:6a:9a:44:8d:1f:f1:c1:5b:b5: 77:fd:97:3a:e0:0d:08:9f:32:96:e4:ba:9a:de:a9: b1:ac:ad:c5:e8:37:3e:c2:a2:a0:b9:86:50:86:f0: 60:11:84:06:ee:33:56:ba:34:76:31:1c:47:16:a8: db:39:e6:61:c4:8c:d5:73:cb:32:a8:8d:d8:dc:56: 99:89:e3:6e:04:7f:28:e9:f9:c8:67:7b:bb:da:0d: 43:f1:35:46:d9:7b:79:c3:81:62:d5:21:53:2e:00: 1e:1a:68:ab:47:83:d8:02:af:0a:c9:c4:33:77:8c: d9:b1:69:8f:dc:9c:a4:fc:be:b8:25:5c:2f:a4:d4: d3:c8:20:19:a4:82:11:97:55:1b:f2:6f:54:c9:9a: 55:9a:e4:63:ec:5f:38:1f:23:67:be:dd:25:64:76: 47:9c:ec:69:31:79:ca:c1:20:45:bf:f2:be:77:4c: 69:56:ef:d5:46:f3:cf:fd:26:88:0e:b0:58:09:15: 33:fe:62:f9:bd:a9:da:f6:c7:79:23:b8:4e:ed:3a: b6:4d:76:be:76:42:58:95:fe:e7:85:cf:5b:cb:22: 6c:fe:70:b3:5e:32:58:ec:82:eb:d3:78:f7:80:0f: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0A:B2:F1:96:EB:DF:0D:F1:45:A7:88:DD:DE:BC:01:C4:30:58:0E X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:78:8d:ff:f5:fd:ac:8d:07:ff:83:e6:86:68:f9:2e:9f:d6: 6e:98:57:c4:bc:3b:ef:3b:0c:55:f6:bf:ef:6b:37:c8:10:65: a9:9e:23:e0:a0:0f:bc:13:0f:13:68:8a:c4:68:74:b8:ba:8f: 8b:1a:f7:ee:67:70:41:5c:03:9a:3e:57:42:c8:0f:44:01:ff: 6c:a0:14:2a:b9:1d:11:76:58:5e:99:39:25:2f:02:0a:57:a6: 08:97:c2:7f:15:18:a4:31:3d:7e:50:8f:ca:f9:e9:0d:38:99: 05:d8:6c:00:d5:41:36:08:43:25:4e:46:10:4a:14:08:03:9d: 36:20:80:40:85:af:9a:0a:d2:02:c7:85:1e:5d:6d:b7:8b:8b: 3c:ec:c1:a1:44:a5:c9:be:0e:76:2a:75:ae:cf:fa:73:5d:9f: bb:c4:da:88:ce:43:95:83:b9:a1:fc:7a:0f:46:bd:fc:9d:08: 5e:57:5f:e6:35:ca:64:bc:07:89:63:10:00:95:07:d7:8c:67: 02:a7:53:70:9c:7d:28:97:25:55:d9:ab:f2:0b:31:b8:57:45: ef:e5:f9:3f:fb:b6:e1:60:d2:26:18:cc:74:ce:4d:05:d3:dc: ed:5e:a0:47:50:15:86:7d:91:8c:4e:dd:8e:66:58:c2:91:a4: c9:23:00:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUxMDIyMjAzNzQ0WhcNMjUxMDI5MjAzNzQ0WjAYMRYwFAYD VQQDEw02OGY5NDA5OC0zNTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA365Dns/NzbLrtZnPMZ4OESfbMIVqmkSNH/HBW7V3/Zc64A0InzKW5Lqa3qmx rK3F6Dc+wqKguYZQhvBgEYQG7jNWujR2MRxHFqjbOeZhxIzVc8syqI3Y3FaZieNu BH8o6fnIZ3u72g1D8TVG2Xt5w4Fi1SFTLgAeGmirR4PYAq8KycQzd4zZsWmP3Jyk /L64JVwvpNTTyCAZpIIRl1Ub8m9UyZpVmuRj7F84HyNnvt0lZHZHnOxpMXnKwSBF v/K+d0xpVu/VRvPP/SaIDrBYCRUz/mL5vana9sd5I7hO7Tq2TXa+dkJYlf7nhc9b yyJs/nCzXjJY7ILr03j3gA/eKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCQKsvGW 698N8UWniN3evAHEMFgOMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCweI3/9f2sjQf/g+aGaPkun9ZumFfEvDvvOwxV9r/vazfIEGWpniPg oA+8Ew8TaIrEaHS4uo+LGvfuZ3BBXAOaPldCyA9EAf9soBQquR0RdlhemTklLwIK V6YIl8J/FRikMT1+UI/K+ekNOJkF2GwA1UE2CEMlTkYQShQIA502IIBAha+aCtIC x4UeXW23i4s87MGhRKXJvg52KnWuz/pzXZ+7xNqIzkOVg7mh/HoPRr38nQheV1/m NcpkvAeJYxAAlQfXjGcCp1NwnH0olyVV2avyCzG4V0Xv5fk/+7bhYNImGMx0zk0F 09ztXqBHUBWGfZGMTt2OZljCkaTJIwA3 -----END CERTIFICATE-----Generated at Wed Oct 22 22:42:08 2025 by rpki-client