$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: ga6OUWxK6Y4F8LWaXKK0tARYbrd2DQIF81xffjY2KDE= Subject key identifier: 10:BA:09:4B:89:A4:F0:E6:CD:CE:3D:CA:C1:4C:9D:B1:E1:3C:3F:90 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 095A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0953 Signing time: Fri 08 Aug 2025 20:30:56 +0000 Manifest this update: Fri 08 Aug 2025 20:30:55 +0000 Manifest next update: Fri 15 Aug 2025 20:30:55 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: HHHP+Q7UsSyQ63/XkDYdCoVEBE0QFDfo3XVF4FQQeT8=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2394 (0x95a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Aug 8 20:30:55 2025 GMT Not After : Aug 15 20:30:55 2025 GMT Subject: CN=68965e80-0c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:0f:fb:56:d2:8a:4a:b2:9e:3e:4f:67:7a: aa:42:82:bf:03:8b:25:d5:98:26:5c:49:5c:61:a1: 5b:3d:b1:cd:01:a5:ff:28:11:55:f4:5c:52:75:9a: 6d:21:15:fd:2f:1d:8b:59:b3:fd:42:25:8b:40:20: 29:bf:2f:5c:79:e3:80:78:4c:3d:31:95:bd:a5:41: 6f:f4:c1:c6:e9:d6:45:b1:7c:66:d2:7d:89:b0:d9: 25:eb:f2:18:5e:60:c2:6b:6c:7e:87:ef:60:08:64: 6d:13:ad:42:d9:43:77:f9:fa:c7:28:cd:73:4b:5d: 54:9c:69:4e:9a:d6:9d:cd:cb:2c:5d:68:e1:94:6b: 09:57:f7:c6:58:0b:5f:47:e7:94:85:01:8a:d6:3f: 36:64:cb:8c:17:93:fd:67:94:fa:e5:f5:e3:6c:48: ce:65:ab:7a:49:37:e1:9c:96:fe:d5:dd:45:cc:b0: 42:30:d3:03:aa:69:a6:bd:f4:fc:ec:12:1a:fb:48: ab:82:fd:d3:d7:b3:46:6b:2b:50:99:4e:f2:6f:6f: 3b:41:b6:a6:c7:f1:56:57:bb:9f:71:65:41:f8:b6: ca:53:1a:d0:c9:f0:96:21:67:9e:65:b4:8d:d7:92: fc:c4:61:14:80:b9:0a:42:55:c3:d1:86:cf:48:93: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:09:4B:89:A4:F0:E6:CD:CE:3D:CA:C1:4C:9D:B1:E1:3C:3F:90 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:41:63:45:1b:87:7e:95:f0:da:35:4c:00:e9:3c:e8:63:e3: c7:62:00:d0:10:4f:8a:1c:ac:9f:ab:50:c6:04:88:da:fa:31: df:e9:f8:94:c7:56:99:17:78:89:82:99:0b:e4:5f:9c:6f:27: b8:94:4e:f1:9d:d6:b4:6b:dc:b7:22:5d:4f:f8:ba:f7:84:59: 3c:a8:df:4c:08:55:65:50:6d:a5:e2:1b:cc:d9:27:ff:86:f4: 4d:a2:95:57:8e:d6:45:3f:05:53:79:72:0a:ad:e5:dc:e3:50: f4:10:8f:75:da:54:e7:5e:cf:fc:d5:22:69:00:95:ce:46:76: 60:a3:bc:42:2f:9f:49:98:e8:cf:23:cd:f4:ba:c1:76:c4:c8: b8:4f:83:a9:7c:69:36:0b:dd:ad:f9:dd:24:80:d9:2a:c7:91: 36:4d:a9:a3:af:23:ca:3a:94:9c:42:15:b1:44:fd:e0:9a:65: cb:ea:ba:8b:49:c4:e1:6e:78:60:5b:67:a1:f6:de:f0:cb:3d: 25:c2:89:c0:61:c2:ca:3c:02:aa:8e:78:cd:7c:37:4c:b1:4b: 89:44:8c:1f:78:19:49:25:e4:2c:eb:2b:28:17:ea:99:05:d3: 4f:c3:5d:b6:b6:d2:22:5d:29:11:a4:56:35:03:28:ff:59:43: 8e:81:84:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwODA4MjAzMDU1WhcNMjUwODE1MjAzMDU1WjAYMRYwFAYD VQQDEw02ODk2NWU4MC0wYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEsP+1bSikqynj5PZ3qqQoK/A4sl1ZgmXElcYaFbPbHNAaX/KBFV9FxSdZpt IRX9Lx2LWbP9QiWLQCApvy9ceeOAeEw9MZW9pUFv9MHG6dZFsXxm0n2JsNkl6/IY XmDCa2x+h+9gCGRtE61C2UN3+frHKM1zS11UnGlOmtadzcssXWjhlGsJV/fGWAtf R+eUhQGK1j82ZMuMF5P9Z5T65fXjbEjOZat6STfhnJb+1d1FzLBCMNMDqmmmvfT8 7BIa+0irgv3T17NGaytQmU7yb287Qbamx/FWV7ufcWVB+LbKUxrQyfCWIWeeZbSN 15L8xGEUgLkKQlXD0YbPSJNzqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC6CUuJ pPDmzc49ysFMnbHhPD+QMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPQWNFG4d+lfDaNUwA6TzoY+PHYgDQEE+KHKyfq1DGBIja+jHf6fiU x1aZF3iJgpkL5F+cbye4lE7xnda0a9y3Il1P+Lr3hFk8qN9MCFVlUG2l4hvM2Sf/ hvRNopVXjtZFPwVTeXIKreXc41D0EI912lTnXs/81SJpAJXORnZgo7xCL59JmOjP I830usF2xMi4T4OpfGk2C92t+d0kgNkqx5E2TamjryPKOpScQhWxRP3gmmXL6rqL ScThbnhgW2eh9t7wyz0lwonAYcLKPAKqjnjNfDdMsUuJRIwfeBlJJeQs6ysoF+qZ BdNPw122ttIiXSkRpFY1Ayj/WUOOgYTf -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:36 2025 by rpki-client