$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: KnOQxWOPsC/bTC9V4Kxb78oP3/nbwPRBrM3pkI3sBFw= Subject key identifier: DA:34:FF:C5:F8:16:1D:E5:B3:A7:24:9A:7B:83:EB:23:8B:36:2B:84 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 0A9A Signing time: Sun 26 Jul 2026 20:07:19 +0000 Manifest this update: Sun 26 Jul 2026 20:07:18 +0000 Manifest next update: Sun 02 Aug 2026 20:07:18 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: JrlfyA6XtgrAsCurIrulPz8lPRqZnQTrmpP/uF28F2M=) 2: 61FA8E20DCD011F0B585C4234F6F56BC.roa (hash: ARIBgc5PRdm5bU6GvvbYxDZ27NqTi/kpI0F2rttG86Y=) 3: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: ez0ZpxEc2H6SHwlieDmykICyUSOd9UTMrzq/iSE9yDQ=) 4: 9366C58C0FE311F1B3351C56063D8C67.roa (hash: uqLGB0HuBh7kjQEmB2nN8vhFGWn0NtmJ1iZK/AngvUw=) 5: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: kg/DeRbbtaP30LDOf+aHvBRH226iADLbyZhZvaOi5ew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Jul 26 20:07:18 2026 GMT Not After : Aug 2 20:07:18 2026 GMT Subject: CN=6a6668f7-4143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c8:4e:84:89:58:3e:2b:b3:a5:a1:66:61:64: 1f:ad:36:da:80:08:47:f4:09:be:98:d3:0f:35:25: 0e:46:64:fc:b4:a0:ba:1b:8c:b6:93:f0:4c:1a:70: df:0b:d0:05:fb:f3:de:9a:5d:1e:7b:1b:0c:69:c1: 64:08:fa:ab:68:a5:c6:37:58:3e:b3:0c:bb:71:d6: 07:cf:4b:b5:3e:48:13:70:b1:b2:4c:30:d2:d5:38: 2c:e0:1b:f2:23:cd:94:25:d0:76:1e:45:1f:08:b4: d1:d0:79:59:14:5b:67:24:12:9b:4e:b2:05:24:05: b1:8c:9b:cc:fc:2f:07:05:de:f4:53:3d:83:cd:37: ac:c2:93:99:c5:5b:b5:de:71:ae:6d:d5:e3:0e:35: f1:59:a7:f6:f1:69:f8:5f:ab:b4:f7:cd:dd:86:eb: 39:e2:bc:46:15:16:fd:da:3f:85:ab:dd:84:ad:55: f0:ee:d0:95:b2:ec:a2:9f:1a:ca:62:44:c5:a8:aa: 3f:e8:e5:2a:55:71:4a:69:91:a9:dc:f6:2a:d4:f0: eb:0f:16:5f:04:3d:0c:f1:d5:06:1a:be:89:1d:1e: 3f:1d:ad:1b:06:91:fc:19:c7:f8:9a:b3:59:e4:f2: 0e:33:e8:24:2a:6a:07:11:4e:8a:05:c2:c8:b9:35: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:34:FF:C5:F8:16:1D:E5:B3:A7:24:9A:7B:83:EB:23:8B:36:2B:84 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:ac:83:28:d4:ae:56:c5:1d:52:65:59:f3:8d:d5:5c:9e:a9: 71:f1:4f:37:9d:95:3e:05:00:5b:93:4b:e4:ad:08:2c:71:c0: 2c:e1:66:04:02:6c:bf:d8:fe:4b:be:00:4c:3d:1b:b0:39:7a: e5:24:c3:4a:33:79:5a:c6:bc:13:12:1b:7b:58:01:bf:fd:ae: 30:33:38:79:07:cb:13:82:14:5c:e7:7a:3f:8c:e4:66:af:b6: 7a:3b:fb:4e:96:9a:51:a7:8b:8e:29:d4:63:b5:3d:89:d7:23: be:b2:e0:ac:f3:60:04:96:ef:b9:fd:70:e9:d5:02:20:3b:a3: 70:dd:c1:e2:e2:52:71:ef:f0:42:87:5f:43:35:49:d4:1c:e9: 42:76:64:51:00:26:25:7f:58:55:ba:a7:21:71:af:3a:a4:2e: 3a:97:e5:06:4a:29:ea:4a:ec:af:02:de:45:a8:d3:14:9e:f5: 1c:a8:85:27:9c:05:1c:7e:18:d4:f5:a2:91:7a:a6:3a:3d:09: 01:f1:6f:39:93:f7:2c:dd:f2:c5:ab:c6:c6:60:02:b1:bb:67: d4:fe:fe:be:0c:06:24:99:0d:09:f9:77:28:ff:95:8f:3e:4b: bb:e8:a5:dd:24:b3:73:68:3e:d7:99:1e:cc:0f:90:c8:b2:33: d4:16:12:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjYwNzI2MjAwNzE4WhcNMjYwODAyMjAwNzE4WjAYMRYwFAYD VQQDEw02YTY2NjhmNy00MTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmshOhIlYPiuzpaFmYWQfrTbagAhH9Am+mNMPNSUORmT8tKC6G4y2k/BMGnDf C9AF+/Peml0eexsMacFkCPqraKXGN1g+swy7cdYHz0u1PkgTcLGyTDDS1Tgs4Bvy I82UJdB2HkUfCLTR0HlZFFtnJBKbTrIFJAWxjJvM/C8HBd70Uz2DzTeswpOZxVu1 3nGubdXjDjXxWaf28Wn4X6u0983dhus54rxGFRb92j+Fq92ErVXw7tCVsuyinxrK YkTFqKo/6OUqVXFKaZGp3PYq1PDrDxZfBD0M8dUGGr6JHR4/Ha0bBpH8Gcf4mrNZ 5PIOM+gkKmoHEU6KBcLIuTWz5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNo0/8X4 Fh3ls6ckmnuD6yOLNiuEMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUqyDKNSuVsUdUmVZ843VXJ6pcfFPN52VPgUAW5NL5K0ILHHALOFmBAJsv9j+ S74ATD0bsDl65STDSjN5Wsa8ExIbe1gBv/2uMDM4eQfLE4IUXOd6P4zkZq+2ejv7 TpaaUaeLjinUY7U9idcjvrLgrPNgBJbvuf1w6dUCIDujcN3B4uJSce/wQodfQzVJ 1BzpQnZkUQAmJX9YVbqnIXGvOqQuOpflBkop6krsrwLeRajTFJ71HKiFJ5wFHH4Y 1PWikXqmOj0JAfFvOZP3LN3yxavGxmACsbtn1P7+vgwGJJkNCfl3KP+Vjz5Lu+il 3SSzc2g+15kezA+QyLIz1BYSXQ== -----END CERTIFICATE-----Generated at Mon Jul 27 19:41:57 2026 by rpki-client