$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: 9GzjBSoCcrK3Gz7aZc7FdNFb9XA7A23HnQLn0P6Npys= Subject key identifier: B6:D6:22:DA:AF:1B:6C:1B:1B:02:1D:22:CD:A5:BC:9F:B5:54:52:88 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D06 Signing time: Thu 24 Apr 2025 18:02:37 +0000 Manifest this update: Thu 24 Apr 2025 18:02:36 +0000 Manifest next update: Thu 01 May 2025 18:02:36 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: bkDtMWLPD9vRter/uBb0Oq97JQ+1eEl6Q8wf0XzDLls=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3343 (0xd0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Apr 24 18:02:36 2025 GMT Not After : May 1 18:02:36 2025 GMT Subject: CN=680a7cbd-343b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e1:f4:6a:a6:59:ef:9c:18:51:2c:3c:61:3b: 67:e1:bf:54:28:68:b1:6c:84:8b:cb:0c:58:df:41: 3f:b5:38:35:7d:a5:c5:80:e8:0f:da:0c:c6:9d:65: b8:12:97:c4:32:1a:63:9a:24:3a:23:3c:6d:1a:aa: 05:cb:a8:8c:62:34:48:a1:9f:94:fc:33:70:6d:24: 63:dc:6a:16:b2:08:49:41:4a:d6:3f:9c:c0:9f:1c: e3:d3:35:63:58:af:d6:0e:7d:b1:17:f4:82:e2:65: c2:8b:ef:64:f9:9f:35:b8:97:ca:e3:75:d5:56:e3: b2:81:5e:9b:a7:9b:cf:54:8d:31:11:d3:f1:80:eb: 5b:fd:92:64:c4:ca:0a:5a:3d:05:70:64:d2:5e:d5: 7d:d0:ff:7b:88:c1:1e:23:39:38:ee:40:d4:5a:5a: 19:36:bb:81:30:08:d2:dc:f1:fd:fa:23:4e:5c:64: 28:92:49:ed:ee:be:1c:e4:bb:30:da:1d:a9:dc:67: ab:35:31:b2:18:4c:b1:1f:e7:da:08:a1:2d:84:34: 4c:06:0c:7c:93:9e:b3:8f:fa:2e:12:a8:1b:ee:ce: 42:a0:2a:ee:c1:63:e9:a9:bd:b8:75:bb:64:0f:a0: e9:5a:6b:9c:33:11:5d:55:3e:35:06:11:b7:1b:e7: ce:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D6:22:DA:AF:1B:6C:1B:1B:02:1D:22:CD:A5:BC:9F:B5:54:52:88 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:d3:15:4c:08:05:d4:ee:b2:39:bd:b2:cc:76:f1:5c:15:55: 91:73:52:4f:4f:22:a2:e2:03:ee:ce:54:37:12:6e:64:5c:38: e5:01:a8:da:8e:d8:85:84:c3:4d:fa:9a:dd:32:f2:a8:b6:17: 9c:92:8b:1a:2a:a3:b9:b1:f4:b5:f3:5a:5d:68:00:b1:58:63: 15:10:e5:35:36:c8:67:b6:b3:ca:d5:77:6f:56:31:77:2d:d4: 34:48:82:b3:c3:c9:5d:d4:74:2a:8d:40:43:15:d8:09:7d:09: 70:2b:88:61:d6:ab:52:aa:f1:6a:d3:35:a5:86:1a:ef:8e:bc: db:f5:41:63:1c:c8:a3:fa:17:61:b3:a0:de:68:3c:ca:ef:84: e3:6f:7f:14:fb:83:3a:c6:09:45:af:cf:98:27:69:66:3a:6a: a2:ea:fe:90:3a:b9:9d:55:3d:41:36:fd:b3:b8:0e:82:ef:bb: 0d:17:0b:a8:d5:ef:20:3f:c6:03:c1:10:dc:2d:bb:59:a3:ed: e8:bc:ad:2d:2f:3d:aa:8f:be:ab:fe:f7:9b:89:8b:5e:59:f5: cd:32:0f:df:3d:46:c5:7c:a2:9e:c3:65:80:fc:d2:c3:86:52: 8b:96:be:6d:d2:3e:e9:23:d5:1d:6a:10:98:ea:96:86:27:cc: 3f:bf:66:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUwNDI0MTgwMjM2WhcNMjUwNTAxMTgwMjM2WjAYMRYwFAYD VQQDEw02ODBhN2NiZC0zNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+H0aqZZ75wYUSw8YTtn4b9UKGixbISLywxY30E/tTg1faXFgOgP2gzGnWW4 EpfEMhpjmiQ6IzxtGqoFy6iMYjRIoZ+U/DNwbSRj3GoWsghJQUrWP5zAnxzj0zVj WK/WDn2xF/SC4mXCi+9k+Z81uJfK43XVVuOygV6bp5vPVI0xEdPxgOtb/ZJkxMoK Wj0FcGTSXtV90P97iMEeIzk47kDUWloZNruBMAjS3PH9+iNOXGQokknt7r4c5Lsw 2h2p3GerNTGyGEyxH+faCKEthDRMBgx8k56zj/ouEqgb7s5CoCruwWPpqb24dbtk D6DpWmucMxFdVT41BhG3G+fOcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbWItqv G2wbGwIdIs2lvJ+1VFKIMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS0xVMCAXU7rI5vbLMdvFcFVWRc1JPTyKi4gPuzlQ3Em5kXDjlAaja jtiFhMNN+prdMvKotheckosaKqO5sfS181pdaACxWGMVEOU1NshntrPK1XdvVjF3 LdQ0SIKzw8ld1HQqjUBDFdgJfQlwK4hh1qtSqvFq0zWlhhrvjrzb9UFjHMij+hdh s6DeaDzK74Tjb38U+4M6xglFr8+YJ2lmOmqi6v6QOrmdVT1BNv2zuA6C77sNFwuo 1e8gP8YDwRDcLbtZo+3ovK0tLz2qj76r/vebiYteWfXNMg/fPUbFfKKew2WA/NLD hlKLlr5t0j7pI9UdahCY6paGJ8w/v2Yj -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:35 2025 by rpki-client