$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: fFzyBQTyC38YgEhJD4TE+OLshufCqlNkDudzzYcdrmA= Subject key identifier: 15:B1:EF:D8:56:34:57:45:4B:4D:65:8B:73:17:AD:34:39:9A:E4:6B Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D1F Signing time: Sat 14 Jun 2025 17:56:30 +0000 Manifest this update: Sat 14 Jun 2025 17:56:30 +0000 Manifest next update: Sat 21 Jun 2025 17:56:30 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: x76dNk1gpNKpSjRaDdHX/AOpLcC7FB4sAryGjmAV05o=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Jun 14 17:56:30 2025 GMT Not After : Jun 21 17:56:30 2025 GMT Subject: CN=684db7ce-b59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:da:aa:3b:42:00:16:e4:46:db:47:3b:b6:f2: 1a:33:2c:31:1b:23:8f:6e:7c:71:f2:2d:8c:7e:23: 21:85:48:1c:50:01:79:07:f5:eb:59:c8:86:e2:a6: 7f:32:f7:c2:12:2f:73:95:d7:e1:86:5b:4c:ca:3c: 2a:17:1a:4d:4f:a7:46:88:97:40:b4:e7:60:15:93: f1:14:8a:80:4f:35:72:f6:c1:2d:ab:38:0b:4d:8e: 93:78:c3:8b:43:06:37:f2:3f:42:bc:1e:1f:3e:5f: a1:ed:b8:37:ba:c4:43:26:89:62:f5:99:02:cc:ef: 1c:27:5f:86:02:c6:b1:97:34:9f:58:a5:30:16:f3: 85:5d:42:7d:39:c2:1a:52:40:76:00:e0:9a:60:ea: 29:f1:e3:e7:ae:2a:9d:6a:50:c8:6b:f4:fb:9a:8b: f9:7e:dd:f5:83:05:4b:db:36:bb:bb:36:02:46:01: 6f:a7:e1:38:22:58:9d:2e:81:ae:c3:25:d7:57:a3: 58:43:53:0d:16:c3:bd:dc:32:69:d2:fc:72:9a:25: 06:3b:c7:a4:40:1a:75:c6:4f:d8:68:26:95:27:75: cb:33:ce:4f:2c:19:8e:5e:cd:1b:bd:9c:cf:75:fb: 6a:a7:7b:31:1d:5e:96:f2:89:b9:58:07:e5:3c:30: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B1:EF:D8:56:34:57:45:4B:4D:65:8B:73:17:AD:34:39:9A:E4:6B X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ca:67:11:b9:f3:77:13:4c:b3:dc:5a:4e:c6:92:ea:33:41: b6:f0:f1:0c:d1:dd:d6:c1:3b:06:34:d8:c4:72:90:95:12:5b: bd:61:09:3c:7c:f2:1a:72:c3:05:a6:6a:be:ac:a4:0f:24:e5: c2:ec:68:7f:22:ed:d1:6d:87:4e:8e:27:9b:d2:dc:3d:0d:f7: 98:99:a1:44:f1:70:76:20:11:55:d7:1c:8e:61:ef:ae:3c:24: 70:48:07:59:e6:8a:b8:1c:f7:b3:25:fb:61:69:33:c2:f5:4d: fd:50:b0:72:5e:76:12:c1:75:d7:87:e1:0d:0b:dc:7a:86:46: 95:4e:62:95:56:61:1b:c1:c4:2b:9c:3e:c5:00:95:29:90:e1: dc:59:5a:3e:5f:0d:aa:16:53:3f:ec:01:7e:2f:3b:2f:be:07: 73:d2:1d:26:bd:b4:28:56:ad:b8:42:b0:d0:27:3d:57:59:2c: f0:23:f0:d0:b1:b6:b2:b9:0a:e7:ec:6f:a6:49:da:f3:b4:6d: cb:23:d3:f6:51:9f:97:98:72:7d:c6:83:cb:ed:3c:4e:ae:d1: 3a:92:d2:a9:d1:7e:8a:7d:83:f3:ae:6a:8b:cc:00:14:d3:fb: 5a:a2:7d:91:af:8e:43:73:cb:bc:17:b6:d8:20:c5:cb:7b:f6: 33:c8:d6:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUwNjE0MTc1NjMwWhcNMjUwNjIxMTc1NjMwWjAYMRYwFAYD VQQDEw02ODRkYjdjZS1iNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdqqO0IAFuRG20c7tvIaMywxGyOPbnxx8i2MfiMhhUgcUAF5B/XrWciG4qZ/ MvfCEi9zldfhhltMyjwqFxpNT6dGiJdAtOdgFZPxFIqATzVy9sEtqzgLTY6TeMOL QwY38j9CvB4fPl+h7bg3usRDJoli9ZkCzO8cJ1+GAsaxlzSfWKUwFvOFXUJ9OcIa UkB2AOCaYOop8ePnriqdalDIa/T7mov5ft31gwVL2za7uzYCRgFvp+E4IlidLoGu wyXXV6NYQ1MNFsO93DJp0vxymiUGO8ekQBp1xk/YaCaVJ3XLM85PLBmOXs0bvZzP dftqp3sxHV6W8om5WAflPDANfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWx79hW NFdFS01li3MXrTQ5muRrMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZymcRufN3E0yz3FpOxpLqM0G28PEM0d3WwTsGNNjEcpCVElu9YQk8 fPIacsMFpmq+rKQPJOXC7Gh/Iu3RbYdOjieb0tw9DfeYmaFE8XB2IBFV1xyOYe+u PCRwSAdZ5oq4HPezJfthaTPC9U39ULByXnYSwXXXh+ENC9x6hkaVTmKVVmEbwcQr nD7FAJUpkOHcWVo+Xw2qFlM/7AF+Lzsvvgdz0h0mvbQoVq24QrDQJz1XWSzwI/DQ sbayuQrn7G+mSdrztG3LI9P2UZ+XmHJ9xoPL7TxOrtE6ktKp0X6KfYPzrmqLzAAU 0/taon2Rr45Dc8u8F7bYIMXLe/YzyNbM -----END CERTIFICATE-----Generated at Sun Jun 15 08:30:49 2025 by rpki-client