$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft File: x52oqmnxJno4UemSoGnAL1DoArw.mft (raw, json) Hash identifier: vGJg28QXOR23H2RHi0LLO6mHzcpAi1dmApfEEaoa33w= Subject key identifier: 31:01:83:21:57:9C:2F:A7:B1:28:1E:35:CF:67:B8:3F:56:F2:E0:42 Authority key identifier: C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC Certificate issuer: /CN=A91DC524/serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft Manifest number: 0187 Signing time: Sat 23 Aug 2025 03:41:52 +0000 Manifest this update: Sat 23 Aug 2025 03:41:52 +0000 Manifest next update: Sat 30 Aug 2025 03:41:52 +0000 Files and hashes: 1: x52oqmnxJno4UemSoGnAL1DoArw.crl (hash: clCHexiS7c0GyB+CW7CuuWCj9fEBh39785qTIAXrnBQ=) 2: 0D705F8A2C5911EEBB4C2C4BC4F9AE02.roa (hash: hOVAvRIUigVI0CAVOiiMzqa8BgN7YWxwOV488s7RJJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC524, serialNumber=C79DA8AA69F1267A3851E992A069C02F50E802BC Validity Not Before: Aug 23 03:41:52 2025 GMT Not After : Aug 30 03:41:52 2025 GMT Subject: CN=68a93880-3c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:65:b6:ba:3b:de:54:b7:57:94:e3:c6:52: 39:29:7b:2b:26:3b:d3:81:29:e5:8b:4d:e7:11:43: 13:d3:48:c3:e8:33:16:26:05:24:d6:37:c0:5a:a8: 8d:58:03:55:4d:b6:35:3f:26:10:dd:21:c3:b4:3d: aa:f8:71:17:42:35:25:6d:84:46:0d:bf:3c:71:12: 5e:fb:3c:d2:28:7d:0f:dd:46:20:fa:90:65:aa:e7: 95:9e:76:20:9a:20:b8:17:2c:45:83:fd:cc:90:91: 2e:77:45:39:c1:48:86:64:d0:bc:cf:05:99:fa:15: c1:c4:ac:c1:85:76:0d:ba:61:f9:30:be:03:e8:51: 21:ce:63:d9:6b:19:73:b8:ad:4e:9a:8c:55:2a:ca: 4b:d6:6d:fb:74:78:1f:b0:78:66:52:c3:46:88:c8: 05:76:69:f9:19:59:c7:6b:a8:ba:b0:14:94:78:e5: d8:56:3a:4e:8c:fc:00:e6:a8:e0:58:c6:38:c1:d1: a4:b0:47:06:d4:96:a8:96:17:f2:bd:ed:92:b0:d6: dc:e9:74:19:ae:f3:08:39:9b:fa:78:ec:e0:29:e5: 32:fb:70:92:7e:42:76:4a:ea:f9:bc:21:d0:91:62: c2:f0:50:6c:c5:b4:58:3e:9a:42:41:8b:f5:4e:5d: c3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:01:83:21:57:9C:2F:A7:B1:28:1E:35:CF:67:B8:3F:56:F2:E0:42 X509v3 Authority Key Identifier: keyid:C7:9D:A8:AA:69:F1:26:7A:38:51:E9:92:A0:69:C0:2F:50:E8:02:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x52oqmnxJno4UemSoGnAL1DoArw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC524/B5C2B7342C5711EEBB188629C4F9AE02/x52oqmnxJno4UemSoGnAL1DoArw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a5:53:60:87:54:fc:5f:2a:02:7e:35:b8:f8:2e:9c:91:bb: 4d:58:32:0c:57:c1:85:ca:ac:61:c5:48:05:67:d1:fa:cf:f4: 01:df:bc:51:76:77:78:14:68:05:56:88:ca:af:b3:e6:dd:66: f7:78:8f:28:3d:66:bb:44:d4:c2:c8:b3:49:92:2c:80:1a:ac: bd:45:db:da:40:89:25:a9:26:3d:ed:7b:dd:85:83:58:cd:97: 45:eb:3b:35:3e:9e:66:e9:ff:b7:29:47:16:48:7c:89:6f:1c: 70:44:9b:db:c1:92:a1:8b:f5:be:71:77:17:ac:30:60:d9:95: 12:16:e2:cb:82:09:f2:46:51:fa:96:f7:f2:c5:5a:d3:2a:70: 8e:e2:8b:71:90:ad:0c:84:25:2c:e5:79:66:b8:8c:2e:f3:bc: 4c:e4:7c:0e:97:a8:a0:85:58:41:61:f2:ea:85:87:6d:71:85: 88:93:60:10:0a:50:c2:af:f1:97:dd:c2:f1:06:53:e6:77:3f: a8:30:e0:1b:12:1e:fa:e1:49:a7:71:df:20:5a:2c:15:be:cf: cf:db:00:85:b0:b8:b6:7d:a2:70:d8:6d:ab:66:a6:87:c9:56: ce:de:bd:43:66:6d:b8:57:02:e7:e8:7a:8b:4b:4f:c2:29:dd: 0c:50:42:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM1MjQxMTAvBgNVBAUTKEM3OURBOEFBNjlGMTI2N0EzODUxRTk5MkEwNjlDMDJG NTBFODAyQkMwHhcNMjUwODIzMDM0MTUyWhcNMjUwODMwMDM0MTUyWjAYMRYwFAYD VQQDEw02OGE5Mzg4MC0zYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszZltro73lS3V5TjxlI5KXsrJjvTgSnli03nEUMT00jD6DMWJgUk1jfAWqiN WANVTbY1PyYQ3SHDtD2q+HEXQjUlbYRGDb88cRJe+zzSKH0P3UYg+pBlqueVnnYg miC4FyxFg/3MkJEud0U5wUiGZNC8zwWZ+hXBxKzBhXYNumH5ML4D6FEhzmPZaxlz uK1OmoxVKspL1m37dHgfsHhmUsNGiMgFdmn5GVnHa6i6sBSUeOXYVjpOjPwA5qjg WMY4wdGksEcG1Jaolhfyve2SsNbc6XQZrvMIOZv6eOzgKeUy+3CSfkJ2Sur5vCHQ kWLC8FBsxbRYPppCQYv1Tl3DHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEBgyFX nC+nsSgeNc9nuD9W8uBCMB8GA1UdIwQYMBaAFMedqKpp8SZ6OFHpkqBpwC9Q6AK8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzUyNC9CNUMyQjczNDJD NTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpubzRVZW1Tb0duQUwxRG9B cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1Mm9xbW54Sm5vNFVlbVNvR25BTDFEb0Fydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzUyNC9CNUMyQjczNDJDNTcxMUVFQkIxODg2MjlDNEY5QUUwMi94NTJvcW1ueEpu bzRVZW1Tb0duQUwxRG9BcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACpVNgh1T8XyoCfjW4+C6ckbtNWDIMV8GFyqxhxUgFZ9H6z/QB37xR dnd4FGgFVojKr7Pm3Wb3eI8oPWa7RNTCyLNJkiyAGqy9RdvaQIklqSY97XvdhYNY zZdF6zs1Pp5m6f+3KUcWSHyJbxxwRJvbwZKhi/W+cXcXrDBg2ZUSFuLLggnyRlH6 lvfyxVrTKnCO4otxkK0MhCUs5XlmuIwu87xM5HwOl6ighVhBYfLqhYdtcYWIk2AQ ClDCr/GX3cLxBlPmdz+oMOAbEh764Umncd8gWiwVvs/P2wCFsLi2faJw2G2rZqaH yVbO3r1DZm24VwLn6HqLS0/CKd0MUEIM -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:57 2025 by rpki-client