$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: sTOu1/xTVZqSBZ0VnGkiAXPzfP+4erOMrprLBYxnt+g= Subject key identifier: D2:E3:8F:91:EA:49:3D:CD:E8:7E:0D:F4:06:65:3C:2D:A2:32:B2:4C Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0DB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0DA8 Signing time: Sun 01 Mar 2026 23:39:40 +0000 Manifest this update: Sun 01 Mar 2026 23:39:40 +0000 Manifest next update: Sun 08 Mar 2026 23:39:40 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: 6zlH3pHKlQhWQtounPSYdJqAhxEaFdQtxVU5IO4oqcc=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3508 (0xdb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Mar 1 23:39:40 2026 GMT Not After : Mar 8 23:39:40 2026 GMT Subject: CN=69a4ce3c-c1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:82:a1:6a:8d:95:52:7d:d1:9f:74:ae:20:ae: 1d:55:5f:5c:ad:fe:ac:b9:e1:79:c0:72:37:d0:6d: 0b:26:c9:7f:05:2d:29:79:0b:c1:33:b6:98:e8:e4: df:23:3f:91:16:1b:33:bc:54:7a:31:f8:11:5e:a9: 10:af:5a:d5:f9:25:b1:5e:f9:bf:00:b2:80:d7:1a: cd:2a:6b:80:0d:a7:72:bb:2f:9f:a5:0e:54:66:74: 84:25:23:39:60:ad:b2:06:11:2b:b9:5f:14:e6:a1: 4a:f3:79:d0:cd:4c:b0:62:31:9f:fa:bf:de:c5:e4: ac:4e:09:6c:dc:12:db:8a:40:a6:9b:b0:06:43:31: 86:cc:1b:ba:19:4f:b9:be:78:4d:a3:d3:59:14:ce: 43:7a:4d:21:0d:26:42:fe:09:57:bb:d1:3b:cd:9c: 2a:65:ff:df:46:eb:eb:c0:96:a6:f3:e0:fe:08:6d: 9e:02:8c:5f:9a:1a:6b:e0:c8:bc:29:c1:86:4a:b7: f7:69:a1:e2:ec:0f:77:05:c0:09:e1:c7:87:c9:27: e6:54:ae:dc:31:44:d0:d3:28:0a:89:47:21:bf:22: 22:2d:2c:2e:32:66:8a:dd:d5:42:c0:7a:ff:c5:52: 98:a4:ab:ca:08:c1:e6:2a:0f:24:32:62:a5:82:cf: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E3:8F:91:EA:49:3D:CD:E8:7E:0D:F4:06:65:3C:2D:A2:32:B2:4C X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2d:f1:1e:82:9f:bb:f4:71:0c:dd:dd:41:7b:f2:c3:6d:5a: 2c:08:60:0b:9b:89:40:cf:63:01:10:92:24:62:90:b3:a8:37: 39:50:fc:31:03:b4:0a:94:a4:e5:ef:61:90:27:1a:a1:6a:35: a4:66:b0:80:e2:a1:b2:0a:f4:78:b6:4d:67:9b:c9:49:2a:22: cb:c3:ec:b2:db:7d:d3:f5:f4:a9:0a:dd:b2:29:dc:f1:50:8c: 0c:9d:00:b6:ba:34:ff:41:3e:d0:9b:e3:8d:4a:1f:48:22:d7: 6f:d1:83:85:ca:a5:ca:0c:08:71:16:d6:73:8c:f8:dc:8c:30: 22:cb:91:1d:9e:e1:13:2d:16:f3:c2:e6:c1:80:26:84:0a:1f: 53:fa:d3:d3:b0:3d:6f:d5:c4:b1:5c:93:02:90:70:79:1a:0a: 53:66:0a:87:c9:72:32:6d:aa:4d:9c:c0:d9:04:12:9c:50:b0: d2:08:8f:e1:d9:57:1b:c9:2b:2d:e9:7c:2c:23:24:62:f6:21: 9d:42:a4:be:6e:04:f7:12:7d:0d:25:3c:b4:d3:46:1c:3e:97: ba:81:10:29:5c:33:16:07:43:a8:60:6f:6d:8b:ea:b9:ee:07: cd:61:8e:b5:7c:7d:c8:fc:d1:e4:47:66:69:f4:18:a0:1c:6c: 03:48:09:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjYwMzAxMjMzOTQwWhcNMjYwMzA4MjMzOTQwWjAYMRYwFAYD VQQDEw02OWE0Y2UzYy1jMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5oKhao2VUn3Rn3SuIK4dVV9crf6sueF5wHI30G0LJsl/BS0peQvBM7aY6OTf Iz+RFhszvFR6MfgRXqkQr1rV+SWxXvm/ALKA1xrNKmuADadyuy+fpQ5UZnSEJSM5 YK2yBhEruV8U5qFK83nQzUywYjGf+r/exeSsTgls3BLbikCmm7AGQzGGzBu6GU+5 vnhNo9NZFM5Dek0hDSZC/glXu9E7zZwqZf/fRuvrwJam8+D+CG2eAoxfmhpr4Mi8 KcGGSrf3aaHi7A93BcAJ4ceHySfmVK7cMUTQ0ygKiUchvyIiLSwuMmaK3dVCwHr/ xVKYpKvKCMHmKg8kMmKlgs+w6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLjj5Hq ST3N6H4N9AZlPC2iMrJMMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEy3xHoKfu/RxDN3dQXvyw21aLAhgC5uJQM9jARCSJGKQs6g3OVD8MQO0CpSk 5e9hkCcaoWo1pGawgOKhsgr0eLZNZ5vJSSoiy8Psstt90/X0qQrdsinc8VCMDJ0A tro0/0E+0JvjjUofSCLXb9GDhcqlygwIcRbWc4z43IwwIsuRHZ7hEy0W88LmwYAm hAofU/rT07A9b9XEsVyTApBweRoKU2YKh8lyMm2qTZzA2QQSnFCw0giP4dlXG8kr Lel8LCMkYvYhnUKkvm4E9xJ9DSU8tNNGHD6XuoEQKVwzFgdDqGBvbYvque4HzWGO tXx9yPzR5EdmafQYoBxsA0gJJQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:12:30 2026 by rpki-client