$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: fI51dwuctW2/dt99sqw+XxSdowHUpKUGeXx3IFPRAiI= Subject key identifier: 6B:36:8C:0F:E5:59:6E:51:76:C3:A6:5A:FE:9C:B1:55:AD:26:9F:AA Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D3B Signing time: Fri 08 Aug 2025 18:13:53 +0000 Manifest this update: Fri 08 Aug 2025 18:13:53 +0000 Manifest next update: Fri 15 Aug 2025 18:13:53 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: ulYENMTYZWiLuG3vxHae9fKJsu5vKcHS/dGQfS3HUSk=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3396 (0xd44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Aug 8 18:13:53 2025 GMT Not After : Aug 15 18:13:53 2025 GMT Subject: CN=68963e61-a0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:70:48:fd:81:da:fc:2a:b3:cb:41:90:91:e5: 95:e3:61:87:e7:a9:26:06:28:87:b0:a4:2d:48:4a: fd:e7:98:ac:6e:e5:2a:17:6e:1f:cd:7f:95:9b:dd: 36:64:4e:83:b9:c4:23:b9:de:aa:c1:53:f9:01:56: 83:6d:15:ff:ec:82:3b:32:7b:54:fe:05:8c:c3:59: 81:82:2f:b5:94:46:91:a2:18:e5:01:73:eb:25:4b: a5:27:c0:0c:4e:e6:17:ed:be:e5:83:dd:c5:ce:86: a2:e1:fa:7f:0c:d0:fe:8b:b2:8a:b2:56:d1:5f:4c: fe:c3:9d:5d:c7:01:92:b2:e4:6a:46:37:ad:c4:d0: 19:97:ff:aa:58:26:b0:1b:69:e6:9b:6c:ba:01:0f: 04:cc:ff:bf:7f:30:7f:5e:9e:89:9d:13:9f:aa:6f: 90:2b:96:e5:9f:09:0a:17:49:6e:38:0e:73:02:2d: 0e:52:ec:4a:cf:29:71:5f:85:9c:b3:7d:c2:fd:66: 56:43:87:e8:cf:35:b9:ea:81:c7:b5:51:46:97:36: f5:79:fc:a0:03:e9:27:df:59:d5:05:5f:37:8f:43: 0a:c4:95:55:f4:28:70:34:7f:80:78:b4:bf:29:58: 27:2d:34:33:a7:25:53:d4:73:65:a3:d0:97:74:77: 9d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:36:8C:0F:E5:59:6E:51:76:C3:A6:5A:FE:9C:B1:55:AD:26:9F:AA X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5c:24:df:fb:d9:c2:33:82:ba:60:8a:89:b8:78:81:10:0a: be:26:c4:92:6c:63:fa:1d:c7:b7:b4:5b:a3:a1:f5:44:bb:3b: 9c:dd:bf:28:c2:4e:c7:cf:21:d4:2b:1d:65:41:d2:94:ce:15: ca:08:f7:72:43:c1:00:ca:19:e5:ca:77:fe:ce:32:04:2d:1a: f4:02:bc:87:8f:27:af:5c:b9:6e:bd:9c:f9:d2:f5:87:f1:38: cf:19:92:8e:6a:82:fd:bd:c3:b2:3e:4a:cf:3f:70:51:be:53: b6:37:48:84:54:94:db:0a:74:bd:d4:58:3e:80:f7:71:11:6c: bd:7c:e3:66:6e:e5:cd:b8:30:a7:ab:2e:c8:55:90:d0:4a:3c: bb:da:62:19:cd:de:3e:42:32:1a:e1:6b:e8:f9:66:99:18:a3: c0:fe:97:84:92:6e:1a:d6:55:93:ba:c6:8b:79:bf:9a:7b:60: 65:61:04:c3:28:1d:0e:11:8a:9b:46:a5:1c:4c:d7:0c:0a:2e: ee:c1:7a:19:8d:b6:1e:06:04:d0:ca:f5:04:ef:f5:f9:6b:b5: 7e:ee:66:d6:ef:5d:d6:91:84:4f:91:42:f8:b9:b2:4e:ff:58: 66:fe:f9:7e:74:4c:c8:ab:fb:16:ae:50:40:79:27:2b:51:90: 85:ee:55:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUwODA4MTgxMzUzWhcNMjUwODE1MTgxMzUzWjAYMRYwFAYD VQQDEw02ODk2M2U2MS1hMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHBI/YHa/Cqzy0GQkeWV42GH56kmBiiHsKQtSEr955isbuUqF24fzX+Vm902 ZE6DucQjud6qwVP5AVaDbRX/7II7MntU/gWMw1mBgi+1lEaRohjlAXPrJUulJ8AM TuYX7b7lg93Fzoai4fp/DND+i7KKslbRX0z+w51dxwGSsuRqRjetxNAZl/+qWCaw G2nmm2y6AQ8EzP+/fzB/Xp6JnROfqm+QK5blnwkKF0luOA5zAi0OUuxKzylxX4Wc s33C/WZWQ4fozzW56oHHtVFGlzb1efygA+kn31nVBV83j0MKxJVV9ChwNH+AeLS/ KVgnLTQzpyVT1HNlo9CXdHedFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGs2jA/l WW5RdsOmWv6csVWtJp+qMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPXCTf+9nCM4K6YIqJuHiBEAq+JsSSbGP6Hce3tFujofVEuzuc3b8o wk7HzyHUKx1lQdKUzhXKCPdyQ8EAyhnlynf+zjIELRr0AryHjyevXLluvZz50vWH 8TjPGZKOaoL9vcOyPkrPP3BRvlO2N0iEVJTbCnS91Fg+gPdxEWy9fONmbuXNuDCn qy7IVZDQSjy72mIZzd4+QjIa4Wvo+WaZGKPA/peEkm4a1lWTusaLeb+ae2BlYQTD KB0OEYqbRqUcTNcMCi7uwXoZjbYeBgTQyvUE7/X5a7V+7mbW713WkYRPkUL4ubJO /1hm/vl+dEzIq/sWrlBAeScrUZCF7lVn -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:57 2025 by rpki-client