$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft File: CrmfUsmtm-C5wERwz7G2wjYP0PU.mft (raw, json) Hash identifier: l3u2FQy4MXMUdA2se1xcA0o+wSssx+KlrRgLVIFOBo0= Subject key identifier: 93:9A:A4:BA:B8:D2:6F:4F:51:4F:C1:F1:7F:78:57:A9:63:F1:1B:A4 Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Certificate serial: 0A0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft Manifest number: 09E3 Signing time: Thu 04 Sep 2025 20:14:20 +0000 Manifest this update: Thu 04 Sep 2025 20:14:20 +0000 Manifest next update: Thu 11 Sep 2025 20:14:20 +0000 Files and hashes: 1: CrmfUsmtm-C5wERwz7G2wjYP0PU.crl (hash: XmlQluFHyR+hsl1Sf5uk+BbJa8xsbiRqxjxEX7lTx18=) 2: 2ABC9DCAE70111EE8CBD5443C4F9AE02.roa (hash: XqCmEMVbctn80tZMWt9KBtSYiAl81CKhVgV+0CIH65c=) 3: D8EA816A3EEE11EF98924D60C4F9AE02.roa (hash: 5hNv554rReK06N20/FH9rDWPnZEfKsGbqYpiIu4Udbg=) 4: 3EF6E4A4291D11EFBE3C7971C4F9AE02.roa (hash: SpBt7sDt3PRONHBV0bfhwVMq6dMRxKdSE97eOEgTO/c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2571 (0xa0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6943, serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5 Validity Not Before: Sep 4 20:14:20 2025 GMT Not After : Sep 11 20:14:20 2025 GMT Subject: CN=68b9f31c-acc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:55:d8:3d:fb:b2:06:37:7e:94:7a:87:51:f0: 0d:bd:a6:7d:a5:3b:1c:d3:68:84:e9:80:41:34:87: fd:7e:a8:1c:bb:dd:4e:f1:06:e9:c4:8c:c4:c5:7b: 3c:0c:31:6a:90:c7:14:e9:13:d7:c2:03:9d:52:89: a6:76:fa:e3:1d:61:39:72:13:c7:4c:28:50:32:78: d3:ef:24:a9:da:f3:f6:24:a7:82:4a:22:b6:3a:f0: 06:12:f8:a3:bd:e3:a7:e5:e6:e9:72:65:bc:eb:9c: b4:3d:e3:7f:f2:7f:cc:3f:2b:be:97:75:53:8d:6f: dd:05:7a:51:22:76:0e:8f:c8:f6:36:10:29:c7:87: ec:09:e0:6d:b2:fe:11:df:4f:22:f1:da:ff:5d:e7: 71:2d:ab:b0:9b:dd:98:4c:2e:2f:62:18:2d:90:04: 54:88:3c:43:11:f2:9a:b3:cb:e5:a6:aa:ab:ef:9c: c9:8e:c1:dc:c5:9e:81:26:4a:44:00:f1:28:2f:09: 01:5a:7d:2d:f1:35:fd:5f:ae:a6:5f:00:7d:32:3c: d6:d5:28:54:53:41:db:ee:5a:93:3e:14:97:ea:f2: 43:34:2a:85:23:81:c3:7c:4d:5d:dd:3d:aa:cf:57: 12:f7:3a:eb:01:07:35:da:07:b8:51:84:f3:48:c0: 33:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:A4:BA:B8:D2:6F:4F:51:4F:C1:F1:7F:78:57:A9:63:F1:1B:A4 X509v3 Authority Key Identifier: keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:0c:62:5d:c5:d4:b6:eb:3b:6c:73:b5:ab:7f:80:53:0a:6d: e0:d0:b1:a9:61:ac:a0:11:a3:eb:48:c9:8f:33:b9:7f:93:3d: b1:c1:83:d6:be:b8:b9:78:9a:d4:1b:3b:b3:7e:af:9b:db:07: e6:9b:12:7c:b4:81:3a:a1:bc:07:29:a0:f3:af:35:42:00:4c: b2:92:2b:bf:91:01:da:fd:b5:89:20:ef:eb:80:84:39:0e:d4: a0:01:f0:10:8a:f0:dd:ee:23:c4:ee:24:68:ef:01:c8:ae:dd: fb:82:8a:a4:79:45:aa:7b:06:5c:15:96:43:88:d3:63:b7:61: 14:cd:41:39:28:b8:ab:b5:69:e3:54:8c:94:bd:24:e6:e3:36: dd:b3:bd:f1:5f:54:c9:cb:6f:d1:8c:bf:3a:96:08:92:a2:f6: 5a:89:dd:7b:37:7f:13:71:74:67:20:d0:00:ef:56:ae:e9:7b: 32:77:98:ee:86:8e:dc:84:40:53:d1:5a:b4:92:61:c8:0d:92: 16:fc:7d:bd:0d:c0:80:f6:17:5e:80:90:f2:b1:68:36:11:9f: e1:24:06:4f:67:9d:83:15:98:a9:17:4d:1e:b7:16:7b:7a:34: 34:60:e0:9b:d4:67:ef:3f:30:b5:7f:2b:b7:2f:3f:42:88:65: 8b:e1:07:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTY5NDMxMTAvBgNVBAUTKDBBQjk5RjUyQzlBRDlCRTBCOUMwNDQ3MENGQjFCNkMy MzYwRkQwRjUwHhcNMjUwOTA0MjAxNDIwWhcNMjUwOTExMjAxNDIwWjAYMRYwFAYD VQQDEw02OGI5ZjMxYy1hY2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FXYPfuyBjd+lHqHUfANvaZ9pTsc02iE6YBBNIf9fqgcu91O8QbpxIzExXs8 DDFqkMcU6RPXwgOdUommdvrjHWE5chPHTChQMnjT7ySp2vP2JKeCSiK2OvAGEvij veOn5ebpcmW865y0PeN/8n/MPyu+l3VTjW/dBXpRInYOj8j2NhApx4fsCeBtsv4R 308i8dr/XedxLauwm92YTC4vYhgtkARUiDxDEfKas8vlpqqr75zJjsHcxZ6BJkpE APEoLwkBWn0t8TX9X66mXwB9MjzW1ShUU0Hb7lqTPhSX6vJDNCqFI4HDfE1d3T2q z1cS9zrrAQc12ge4UYTzSMAz7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOapLq4 0m9PUU/B8X94V6lj8RukMB8GA1UdIwQYMBaAFAq5n1LJrZvgucBEcM+xtsI2D9D1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjk0My9CNzE4MTE2ODhE NTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0tQzV3RVJ3ejdHMndqWVAw UFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NybWZVc210bS1DNXdFUnd6N0cyd2pZUDBQVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Njk0My9CNzE4MTE2ODhENTExMUVBQjhCMjYzODRDNEY5QUUwMi9Dcm1mVXNtdG0t QzV3RVJ3ejdHMndqWVAwUFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXDGJdxdS26ztsc7Wrf4BTCm3g0LGpYaygEaPrSMmPM7l/kz2xwYPW vri5eJrUGzuzfq+b2wfmmxJ8tIE6obwHKaDzrzVCAEyykiu/kQHa/bWJIO/rgIQ5 DtSgAfAQivDd7iPE7iRo7wHIrt37goqkeUWqewZcFZZDiNNjt2EUzUE5KLirtWnj VIyUvSTm4zbds73xX1TJy2/RjL86lgiSovZaid17N38TcXRnINAA71au6Xsyd5ju ho7chEBT0Vq0kmHIDZIW/H29DcCA9hdegJDysWg2EZ/hJAZPZ52DFZipF00etxZ7 ejQ0YOCb1GfvPzC1fyu3Lz9CiGWL4QcS -----END CERTIFICATE-----Generated at Sat Sep 6 17:22:32 2025 by rpki-client