$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: BD9/vuajXrg6T16+gsB7oztQDACofDf37svBZ1Typco= Subject key identifier: BC:CC:EE:63:47:09:27:EA:86:E9:3B:A9:8A:45:1A:52:B5:4D:F5:B4 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0E00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0DF4 Signing time: Tue 28 Jul 2026 17:58:58 +0000 Manifest this update: Tue 28 Jul 2026 17:58:57 +0000 Manifest next update: Tue 04 Aug 2026 17:58:57 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: t0cfjsr2MW9nxP4hKMqq4F/8RnbClmlea51HIpwjIGk=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3584 (0xe00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Jul 28 17:58:57 2026 GMT Not After : Aug 4 17:58:57 2026 GMT Subject: CN=6a68ede2-5c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1b:ed:8e:48:2e:d9:f2:cb:ec:ce:fb:d1:b7: cc:51:f2:32:56:1c:28:45:b8:93:63:82:6f:36:d0: 6d:71:8c:03:42:f6:d7:df:ca:5c:03:a3:8f:2c:6a: 7c:24:45:1e:b5:ea:0b:86:98:83:78:33:e4:d2:2e: 6e:14:4e:89:d9:93:6a:f2:eb:e3:12:b2:d1:06:85: de:e9:08:f3:a2:40:2a:77:a8:ec:0b:42:28:65:62: b7:e0:e4:6c:1a:7e:5e:00:5e:c8:b3:39:d1:ef:c6: 46:18:6a:ee:29:63:d1:4e:92:1a:2a:c6:55:d2:7f: 3e:70:82:f8:f2:e0:58:f1:18:ce:be:80:91:da:45: 6a:0d:12:d8:99:32:00:ae:2e:23:fc:cc:43:e8:03: 8d:01:f4:f6:7d:b1:69:25:bb:8b:2e:f5:04:b1:2a: a3:18:ab:c3:59:95:dd:27:5c:94:99:17:78:34:d6: 54:5e:1f:a3:0e:5c:2a:06:c8:c4:d3:42:ca:dd:8a: e3:fc:fe:bf:37:fa:ba:bd:32:53:94:4c:c6:e1:78: 6d:04:59:87:d9:cf:6d:a0:6c:7b:5f:5d:94:dd:ec: 40:19:b6:cc:ef:22:33:87:a9:55:c1:71:bb:2f:3f: a7:3b:be:96:5e:85:3d:5a:51:54:e5:23:ae:80:bd: 42:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CC:EE:63:47:09:27:EA:86:E9:3B:A9:8A:45:1A:52:B5:4D:F5:B4 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:da:e4:b5:43:ad:98:ae:8e:97:b6:2f:f2:91:15:b0:0f:f1: 86:10:c2:e0:35:38:45:ed:c5:8d:16:0e:9c:70:14:b6:e2:d2: 59:7c:d6:e1:54:b1:97:f8:36:54:5b:9c:65:43:dc:cd:ee:22: 85:ad:5f:be:a0:74:ee:f6:a3:65:da:4e:61:f8:49:10:d6:2d: 9d:5e:c7:ed:ac:85:a0:e5:61:df:a0:fd:9c:21:a8:e6:7e:30: 82:86:5f:0a:de:c7:36:13:45:5e:0a:8e:53:a5:f8:5c:62:41: 14:3e:b2:bf:c3:79:30:57:a5:f3:1e:35:fc:21:4a:a1:6b:6d: 52:95:dc:54:a9:ca:07:a9:fb:78:6b:82:72:25:67:24:a8:3e: 03:f9:d1:96:28:05:1f:99:2f:1c:70:f4:48:70:7b:7d:43:fe: a9:8f:95:09:76:8a:df:15:e0:6d:a4:95:56:07:6b:61:81:8d: c0:48:14:9d:cc:7d:5e:49:f2:9b:3d:e8:1d:87:36:18:0a:64: 4f:11:8b:fe:32:b3:e3:e0:05:9e:6a:8a:8d:27:17:b0:e9:2a: 3b:8a:2a:b5:bd:77:52:7a:d7:6e:d2:fc:08:ac:cb:11:61:77: 76:24:a5:3f:a5:42:b2:02:3a:c4:59:7e:75:68:5e:17:6e:9f: d2:58:5e:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjYwNzI4MTc1ODU3WhcNMjYwODA0MTc1ODU3WjAYMRYwFAYD VQQDEw02YTY4ZWRlMi01YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3hvtjkgu2fLL7M770bfMUfIyVhwoRbiTY4JvNtBtcYwDQvbX38pcA6OPLGp8 JEUeteoLhpiDeDPk0i5uFE6J2ZNq8uvjErLRBoXe6QjzokAqd6jsC0IoZWK34ORs Gn5eAF7IsznR78ZGGGruKWPRTpIaKsZV0n8+cIL48uBY8RjOvoCR2kVqDRLYmTIA ri4j/MxD6AONAfT2fbFpJbuLLvUEsSqjGKvDWZXdJ1yUmRd4NNZUXh+jDlwqBsjE 00LK3Yrj/P6/N/q6vTJTlEzG4XhtBFmH2c9toGx7X12U3exAGbbM7yIzh6lVwXG7 Lz+nO76WXoU9WlFU5SOugL1CuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLzM7mNH CSfqhuk7qYpFGlK1TfW0MB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMdrktUOtmK6Ol7Yv8pEVsA/xhhDC4DU4Re3FjRYOnHAUtuLSWXzW4VSxl/g2 VFucZUPcze4iha1fvqB07vajZdpOYfhJENYtnV7H7ayFoOVh36D9nCGo5n4wgoZf Ct7HNhNFXgqOU6X4XGJBFD6yv8N5MFel8x41/CFKoWttUpXcVKnKB6n7eGuCciVn JKg+A/nRligFH5kvHHD0SHB7fUP+qY+VCXaK3xXgbaSVVgdrYYGNwEgUncx9Xkny mz3oHYc2GApkTxGL/jKz4+AFnmqKjScXsOkqO4oqtb13UnrXbtL8CKzLEWF3diSl P6VCsgI6xFl+dWheF26f0lheBw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:21 2026 by rpki-client