$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: nVqJSdx9N72IRd+drOEXms9H6aECUEEulKmGGLrZX2k= Subject key identifier: AD:BB:51:DF:F4:C5:92:52:9C:42:CA:F1:BD:33:30:26:FC:AA:7C:4A Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0AB2 Signing time: Thu 10 Sep 2026 19:32:00 +0000 Manifest this update: Thu 10 Sep 2026 19:32:00 +0000 Manifest next update: Thu 17 Sep 2026 19:32:00 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: sjtTFEwGyLR3/PAkmQHh44uLVtvWEpviHvbEGu/aSWw=) 2: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) 4: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 5: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:31:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2796 (0xaec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Sep 10 19:32:00 2026 GMT Not After : Sep 17 19:32:00 2026 GMT Subject: CN=6aa305b0-3776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:41:98:14:ac:8e:38:21:88:05:f0:f6:bf:3b: 55:3d:70:63:9a:22:e8:46:fd:81:3c:3a:9b:f1:c6: d9:65:c2:ed:12:d5:4c:3a:d7:1f:a4:1f:02:fa:d6: 19:04:78:30:0a:e5:5a:bc:18:56:d5:17:47:2c:ce: 76:ec:69:ba:e4:7c:98:6c:8b:d9:73:17:e3:d2:7d: 22:59:77:8f:e9:20:c5:c2:77:8b:bd:dc:57:3a:43: 25:8c:f2:0a:e9:48:cb:a2:f9:59:c8:20:b9:45:3a: db:9e:dc:01:ff:f7:4e:b7:b2:f4:f4:ed:63:05:19: 07:f6:db:23:76:15:97:eb:5c:00:61:01:a9:bc:cf: 5f:05:f4:5f:9d:14:43:7a:f2:38:73:73:70:65:f7: db:b2:d9:04:a5:22:a3:c6:16:49:82:bf:dc:b9:5c: 83:bc:20:ec:e2:51:87:24:2e:ad:77:b3:57:b9:c2: c1:e0:88:53:36:79:c4:e0:b9:27:4e:55:5f:f5:47: 78:39:95:ee:81:9e:83:2f:90:65:89:8e:21:5b:ce: 56:83:86:cd:c9:d1:3a:7c:d1:0a:06:18:41:f2:5a: 8f:55:23:06:c7:51:c8:88:cb:c9:55:6c:00:f0:b1: 84:6e:60:74:75:dc:0a:20:6d:cc:f3:1d:cf:93:4f: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:51:DF:F4:C5:92:52:9C:42:CA:F1:BD:33:30:26:FC:AA:7C:4A X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:d1:1e:df:a6:c8:c9:4b:92:9d:d6:de:47:b6:a8:d4:02:ad: 9c:f5:34:e4:b8:f6:a8:07:5d:ed:14:8b:e2:c1:71:f0:69:0a: 1d:41:fe:7c:ac:c4:62:01:dc:23:bd:5a:b2:54:d8:db:8f:39: 9d:2f:28:95:ab:2a:bb:1f:7a:fb:b1:e3:df:d4:ed:49:27:0c: 4b:07:98:63:57:4e:7b:59:54:69:05:e8:1f:a1:4b:b9:2d:bd: 72:26:55:f1:4a:f3:b7:64:24:77:70:a7:fc:78:dc:05:e9:0f: 3f:18:4a:0a:77:e4:cd:dd:6c:2b:dc:d3:20:0a:5b:a8:b4:00: fa:09:3f:3a:43:b2:43:1f:e9:ed:33:a0:10:53:18:0b:84:71: 34:30:5c:5d:cd:92:f4:70:7f:2a:79:05:af:f7:d3:a7:ad:94: 07:2a:a4:2d:d0:9b:32:a1:7a:d9:9a:e7:ab:e8:5b:89:cb:ee: fa:f4:17:94:a2:c8:7a:0d:02:6b:b7:c5:87:3f:ae:65:17:68: 9d:f8:3b:30:ae:be:67:14:d6:b0:c7:21:35:87:09:78:e5:8e: b4:5a:4f:eb:78:18:81:59:15:9e:1e:ca:c6:e5:ce:a3:f2:e8: 6d:32:bf:c5:fb:b8:8d:94:50:d1:50:02:f2:c3:9c:bb:25:ce: a4:28:91:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwOTEwMTkzMjAwWhcNMjYwOTE3MTkzMjAwWjAYMRYwFAYD VQQDEw02YWEzMDViMC0zNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokGYFKyOOCGIBfD2vztVPXBjmiLoRv2BPDqb8cbZZcLtEtVMOtcfpB8C+tYZ BHgwCuVavBhW1RdHLM527Gm65HyYbIvZcxfj0n0iWXeP6SDFwneLvdxXOkMljPIK 6UjLovlZyCC5RTrbntwB//dOt7L09O1jBRkH9tsjdhWX61wAYQGpvM9fBfRfnRRD evI4c3NwZffbstkEpSKjxhZJgr/cuVyDvCDs4lGHJC6td7NXucLB4IhTNnnE4Lkn TlVf9Ud4OZXugZ6DL5BliY4hW85Wg4bNydE6fNEKBhhB8lqPVSMGx1HIiMvJVWwA 8LGEbmB0ddwKIG3M8x3Pk09O2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK27Ud/0 xZJSnELK8b0zMCb8qnxKMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAudEe36bIyUuSndbeR7ao1AKtnPU05Lj2qAdd7RSL4sFx8GkKHUH+fKzEYgHc I71aslTY2485nS8olasqux96+7Hj39TtSScMSweYY1dOe1lUaQXoH6FLuS29ciZV 8Urzt2Qkd3Cn/HjcBekPPxhKCnfkzd1sK9zTIApbqLQA+gk/OkOyQx/p7TOgEFMY C4RxNDBcXc2S9HB/KnkFr/fTp62UByqkLdCbMqF62Zrnq+hbicvu+vQXlKLIeg0C a7fFhz+uZRdonfg7MK6+ZxTWsMchNYcJeOWOtFpP63gYgVkVnh7KxuXOo/LobTK/ xfu4jZRQ0VAC8sOcuyXOpCiRpA== -----END CERTIFICATE-----Generated at Fri Sep 11 04:33:43 2026 by rpki-client