$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json) Hash identifier: oUIx+fq9wjSn1ieZJu0AwCrleJmIyhY2FGr3TU41T5I= Subject key identifier: CF:2F:03:A1:13:09:E0:12:E6:93:4E:60:B4:7E:7D:F3:53:B5:42:BF Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft Manifest number: 01AB Signing time: Mon 03 Nov 2025 03:11:50 +0000 Manifest this update: Mon 03 Nov 2025 03:11:49 +0000 Manifest next update: Mon 10 Nov 2025 03:11:49 +0000 Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: lufbQxGUf2xMvhmbrIxDKPmXn78CU2ABFu2Dm94Cq80=) 2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: hOVAvRIUigVI0CAVOiiMzqa8BgN7YWxwOV488s7RJJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Validity Not Before: Nov 3 03:11:49 2025 GMT Not After : Nov 10 03:11:49 2025 GMT Subject: CN=69081d75-1763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:0f:75:4f:bd:0d:d7:2a:c1:1b:3a:87:ca: ba:4e:b0:ad:0c:a3:7d:5f:5c:d4:44:b0:e3:d4:08: c6:a2:4a:07:f9:ab:b5:0c:b0:50:6a:62:d2:5a:0c: 70:30:ef:56:72:5d:9e:59:8b:9a:ce:95:9b:37:e7: ef:b6:ec:d8:b7:3c:7a:16:35:ff:8b:e3:c7:2b:7f: ba:47:7e:8e:8f:77:3b:af:e4:91:97:95:95:d1:56: bf:ed:8c:9e:e4:7f:e0:15:4f:a2:c9:7e:60:57:a9: 2c:b9:22:82:74:51:f9:52:4f:93:b6:e8:1b:4b:76: 2a:44:c0:0a:33:bb:af:45:e8:3e:34:54:c3:8a:1a: 16:eb:60:fb:85:0b:e3:da:f6:62:2b:40:7e:69:2a: 58:ee:7d:f0:04:45:2f:25:4b:34:3d:ec:ab:d1:3a: 0b:7a:b6:1f:be:d0:85:b3:9e:06:42:19:76:b7:26: 90:a6:96:c6:4a:4a:9d:e1:5a:c6:13:0b:8f:ec:f0: a6:42:3f:ee:41:43:f7:93:0f:4f:e2:37:ee:96:a8: 5d:e1:e8:35:8f:31:f9:29:70:ad:05:a3:42:2b:49: 89:18:10:44:f8:c6:26:e8:60:f2:01:e4:30:d5:2a: f2:7d:99:51:25:70:f3:d5:31:a3:a7:be:e3:e6:4e: ed:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2F:03:A1:13:09:E0:12:E6:93:4E:60:B4:7E:7D:F3:53:B5:42:BF X509v3 Authority Key Identifier: keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:ee:1b:76:91:9c:cc:30:ec:f2:1d:f1:a1:34:3e:a8:c2: 01:9a:bf:a4:0c:c3:75:ef:8b:c4:d1:35:f3:18:4d:b2:df:1d: 8f:50:56:2f:f2:bd:7d:3d:b9:59:16:3a:b1:d3:9a:3c:cd:1f: a8:14:da:7e:1e:6d:43:11:6a:96:62:94:13:04:0a:f6:39:f7: 01:22:7e:7e:d4:d8:51:b6:0f:c8:16:c2:89:7d:d2:69:b4:63: c1:fd:5d:c4:a9:01:75:8c:3f:08:e5:9d:1a:36:9d:36:82:d4: 97:f5:04:9c:7a:ff:9c:ad:4e:68:ea:a8:57:f9:d3:a2:4d:10: 27:f0:d3:42:bf:c8:f9:fa:95:9c:ad:08:ac:4d:b4:47:c1:d0: 56:64:1c:66:bc:a3:35:77:90:26:d3:e0:50:b9:1c:dd:6a:0f: cd:a8:75:e1:c6:e2:07:59:a2:47:ce:ad:00:e4:f2:0b:4a:16: 10:2c:62:6c:d6:37:b2:59:f3:a3:2d:91:74:d6:5b:fe:0a:01: 14:35:50:f7:e4:07:19:e4:fd:4a:41:f8:2c:93:ef:c6:f0:d7: 8b:a5:fc:18:09:d3:6f:14:e9:c7:e2:65:4b:c4:e8:32:67:a9: 11:fb:e1:6c:30:55:73:cf:0e:31:1d:a9:11:03:2f:69:c2:55: 4c:44:6f:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1MjQxMTAvBgNVBAUTKEM3OURBOEFBNjlGMTI2N0EzODUxRTk5MkEwNjlDMDJG NTBFODAyQkMwHhcNMjUxMTAzMDMxMTQ5WhcNMjUxMTEwMDMxMTQ5WjAYMRYwFAYD VQQDEw02OTA4MWQ3NS0xNzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwEPdU+9DdcqwRs6h8q6TrCtDKN9X1zURLDj1AjGokoH+au1DLBQamLSWgxw MO9Wcl2eWYuazpWbN+fvtuzYtzx6FjX/i+PHK3+6R36Oj3c7r+SRl5WV0Va/7Yye 5H/gFU+iyX5gV6ksuSKCdFH5Uk+TtugbS3YqRMAKM7uvReg+NFTDihoW62D7hQvj 2vZiK0B+aSpY7n3wBEUvJUs0Peyr0ToLerYfvtCFs54GQhl2tyaQppbGSkqd4VrG EwuP7PCmQj/uQUP3kw9P4jfulqhd4eg1jzH5KXCtBaNCK0mJGBBE+MYm6GDyAeQw 1SryfZlRJXDz1TGjp77j5k7t9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8vA6ET CeAS5pNOYLR+ffNTtUK/MB8GA1UdIwQYMBaAFMedqKpp8SZ6OFHpkqBpwC9Q6AK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzUyNC9CNUMyQjczNDJD NTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpubzRVZW1Tb0duQUwxRG9B cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpu bzRVZW1Tb0duQUwxRG9BcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMdO4bdpGczDDs8h3xoTQ+qMIBmr+kDMN174vE0TXzGE2y3x2PUFYv 8r19PblZFjqx05o8zR+oFNp+Hm1DEWqWYpQTBAr2OfcBIn5+1NhRtg/IFsKJfdJp tGPB/V3EqQF1jD8I5Z0aNp02gtSX9QScev+crU5o6qhX+dOiTRAn8NNCv8j5+pWc rQisTbRHwdBWZBxmvKM1d5Am0+BQuRzdag/NqHXhxuIHWaJHzq0A5PILShYQLGJs 1jeyWfOjLZF01lv+CgEUNVD35AcZ5P1KQfgsk+/G8NeLpfwYCdNvFOnH4mVLxOgy Z6kR++FsMFVzzw4xHakRAy9pwlVMRG/v -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:18 2025 by rpki-client