$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: L/DY5Kov9URlPwyxw03pMkMEVRR4oh8E2jGtoLmq1L8= Subject key identifier: E7:26:A2:D1:0B:69:EF:0C:32:DA:7F:5C:7D:C8:13:E3:76:95:09:87 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 093E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0937 Signing time: Sat 14 Jun 2025 20:03:53 +0000 Manifest this update: Sat 14 Jun 2025 20:03:53 +0000 Manifest next update: Sat 21 Jun 2025 20:03:53 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: /mASsi6t13LgwqGz6VDaHAq+EW7Q+0RCr9H/M/3RMOI=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Jun 14 20:03:53 2025 GMT Not After : Jun 21 20:03:53 2025 GMT Subject: CN=684dd5a9-b95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:51:67:bf:c8:02:73:42:fb:4e:48:45:8e:b5: ce:e0:14:9b:17:c9:8f:79:ce:f3:15:6c:98:a4:e6: 84:69:34:95:83:a7:4d:c6:6e:67:35:90:e2:25:6b: 37:2e:b4:68:ea:6e:cf:5e:fe:46:5c:3f:d8:7e:22: f7:3c:31:4f:7c:ed:ea:1d:de:70:f0:9d:88:fd:84: d8:7e:b4:0f:0a:3c:ce:55:3a:e0:58:53:3c:69:a3: 7e:0f:50:a1:77:10:6e:e4:16:73:b3:e0:85:d5:f0: 3f:2b:59:09:bc:58:96:6e:cd:9c:11:be:22:b4:bf: 9f:b4:5b:ef:0a:44:c7:30:66:3a:80:26:91:1d:9b: cf:6c:8d:fc:63:95:6a:f5:e1:df:f8:65:dc:8c:f9: d5:5b:9a:ac:92:16:cc:e0:94:5e:b4:15:89:53:6d: 00:47:c9:2f:a3:33:d3:5b:1f:2d:98:41:2d:3b:1b: c1:b2:eb:04:fb:dd:79:0f:3d:7c:ae:92:eb:08:57: 82:3e:c7:f9:7f:1f:a3:36:ac:2b:d0:bf:30:9e:ec: 9e:8c:75:25:4b:ae:a3:49:be:8b:fd:de:51:ef:83: ae:1f:b5:9c:a7:57:aa:e2:4f:18:4f:fd:46:ca:8f: a4:bb:94:50:73:30:64:3a:e4:ee:2a:71:75:61:c7: 9a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:26:A2:D1:0B:69:EF:0C:32:DA:7F:5C:7D:C8:13:E3:76:95:09:87 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e7:1d:fc:3e:33:1a:0b:3e:97:e2:a3:f2:40:b0:e4:4c:cc: a9:9b:43:71:f7:95:19:2a:74:5a:6c:51:99:4c:88:2b:46:a4: b6:e6:fa:db:c8:ab:2a:fe:34:d8:4a:c9:aa:73:fa:8b:35:35: 34:c3:0a:a6:b6:b0:b3:c0:19:4d:cf:58:06:82:80:5d:29:34: 30:8b:09:df:87:44:00:1f:23:d2:a0:17:69:1f:c3:0c:5d:bc: b8:6e:75:fa:a9:e2:b1:28:01:b2:46:b0:c9:3a:ff:3a:91:11: 24:07:e7:47:1d:3f:ca:d3:ef:f3:3e:cd:80:dc:67:b3:5c:1a: 78:30:77:68:4d:34:12:71:ad:14:50:93:3e:3f:01:5a:dd:a3: 98:96:cb:ed:7c:a4:de:d0:d5:77:45:7d:1c:fd:13:e3:64:74: cd:23:47:3a:35:fe:45:f0:6e:77:c2:e2:2e:23:cb:4f:24:56: 9f:bb:71:e6:8c:a3:a3:17:28:ec:7c:1a:a8:da:b7:2f:76:14: e3:5f:11:c8:9b:e6:a4:9b:a5:68:3b:b6:aa:a1:2c:89:2b:eb: e8:22:09:f4:b3:28:3e:30:14:b8:99:9d:d5:dd:86:4e:e7:41: 38:c0:ee:4c:36:df:fd:6b:2a:19:09:60:d0:37:a8:b5:4a:1f: 6c:3e:4b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwNjE0MjAwMzUzWhcNMjUwNjIxMjAwMzUzWjAYMRYwFAYD VQQDEw02ODRkZDVhOS1iOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVFnv8gCc0L7TkhFjrXO4BSbF8mPec7zFWyYpOaEaTSVg6dNxm5nNZDiJWs3 LrRo6m7PXv5GXD/YfiL3PDFPfO3qHd5w8J2I/YTYfrQPCjzOVTrgWFM8aaN+D1Ch dxBu5BZzs+CF1fA/K1kJvFiWbs2cEb4itL+ftFvvCkTHMGY6gCaRHZvPbI38Y5Vq 9eHf+GXcjPnVW5qskhbM4JRetBWJU20AR8kvozPTWx8tmEEtOxvBsusE+915Dz18 rpLrCFeCPsf5fx+jNqwr0L8wnuyejHUlS66jSb6L/d5R74OuH7Wcp1eq4k8YT/1G yo+ku5RQczBkOuTuKnF1YceaHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcmotEL ae8MMtp/XH3IE+N2lQmHMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn5x38PjMaCz6X4qPyQLDkTMypm0Nx95UZKnRabFGZTIgrRqS25vrb yKsq/jTYSsmqc/qLNTU0wwqmtrCzwBlNz1gGgoBdKTQwiwnfh0QAHyPSoBdpH8MM Xby4bnX6qeKxKAGyRrDJOv86kREkB+dHHT/K0+/zPs2A3GezXBp4MHdoTTQSca0U UJM+PwFa3aOYlsvtfKTe0NV3RX0c/RPjZHTNI0c6Nf5F8G53wuIuI8tPJFafu3Hm jKOjFyjsfBqo2rcvdhTjXxHIm+akm6VoO7aqoSyJK+voIgn0syg+MBS4mZ3V3YZO 50E4wO5MNt/9ayoZCWDQN6i1Sh9sPksJ -----END CERTIFICATE-----Generated at Sun Jun 15 08:36:35 2025 by rpki-client