$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: oAeMRsDsyQqSSDSQd/snJ0Wfb65N2DT0pE/7TK9pcfs= Subject key identifier: 17:C5:59:AD:BB:64:A8:E9:CE:C9:98:0C:AC:7E:AC:44:FA:E6:28:7F Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D0F Signing time: Mon 12 May 2025 17:56:30 +0000 Manifest this update: Mon 12 May 2025 17:56:30 +0000 Manifest next update: Mon 19 May 2025 17:56:30 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: gDYkD0LW1DD+3huXQkgneuKQm1WCQk60HzTgiHpRiwE=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: May 12 17:56:30 2025 GMT Not After : May 19 17:56:30 2025 GMT Subject: CN=6822364e-c115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:86:c0:d1:f0:55:27:20:13:d9:2b:58:34:0d: 4a:b0:fb:8e:4c:4d:f7:9d:c5:69:35:14:6c:28:6c: ca:61:3e:c2:4f:33:9a:e8:0a:b6:39:a9:47:69:7f: f2:0b:45:65:57:69:34:91:72:78:a0:d1:22:09:4d: c9:1b:7e:c5:52:54:8b:e6:5b:51:71:ed:fa:47:fc: 4d:35:28:81:bd:24:1b:b0:2e:d9:fd:b4:2e:b4:e9: 5d:67:85:61:bb:d7:c2:32:bb:74:81:ad:e1:bd:07: 21:66:ef:0a:92:c0:35:54:0b:22:0d:0c:7c:f7:93: fe:c1:6a:96:4c:e6:a8:0d:00:b9:9d:05:e0:bf:3e: e9:25:9e:9d:c7:47:54:b2:33:71:8f:15:9b:2e:61: 88:73:91:ed:0d:ac:27:1e:88:69:97:91:b9:30:92: 75:a6:a9:17:47:7c:10:ad:32:7e:03:fe:6e:11:e5: cf:6f:d6:1a:9f:11:31:a8:b4:f1:f1:f2:92:f2:79: 6e:ec:04:a1:0c:1a:1b:1c:bb:1c:d8:a7:45:5a:85: e4:4b:31:66:32:0e:f0:d1:e6:68:ea:2b:a3:33:bb: cf:d4:64:c4:37:c3:2c:c2:c7:e1:54:98:23:bc:d7: 66:85:0f:24:55:fb:cd:7b:89:70:fe:0a:02:b2:5f: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C5:59:AD:BB:64:A8:E9:CE:C9:98:0C:AC:7E:AC:44:FA:E6:28:7F X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:af:21:8c:32:23:63:c3:e5:de:13:00:1a:6c:69:7a:44:77: df:37:16:12:a1:ed:f0:e7:55:d5:99:72:89:e4:6b:8c:f8:9b: 23:d1:ea:1d:8b:1e:18:3e:3f:46:9a:41:05:3a:65:6e:e0:69: 40:03:27:eb:b4:18:26:24:a3:6d:86:01:31:ed:77:24:60:43: f7:a3:3a:47:d0:bd:27:19:aa:51:10:92:80:9f:17:e6:69:95: 08:cc:4a:de:e8:f0:9f:7c:77:e4:9a:00:bb:fe:c4:51:36:57: 35:bc:ff:34:82:6f:88:ae:92:e5:d9:cb:dc:1c:71:24:d8:86: 8f:da:e5:5a:54:e3:f7:8e:a9:23:c6:f2:2d:c5:1c:d7:2f:a7: 0f:6e:c0:ef:40:2a:0b:f6:5e:b4:44:cf:c4:16:19:d3:ef:55: a9:9c:2f:bb:e6:10:7d:b9:57:6a:30:47:a0:96:59:35:51:1a: fe:61:2f:56:be:7b:30:69:57:21:92:bf:37:a2:d0:0f:82:70: 56:cb:39:83:6e:f9:40:23:63:36:06:c3:d2:ac:bb:0d:73:4a: d6:40:e7:74:c4:ff:e6:c2:38:5f:c0:90:f8:91:ab:21:80:d2: d6:44:15:b1:09:15:4b:30:56:5b:87:15:52:09:5a:c9:8e:9a: 5b:07:5b:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUwNTEyMTc1NjMwWhcNMjUwNTE5MTc1NjMwWjAYMRYwFAYD VQQDEw02ODIyMzY0ZS1jMTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4bA0fBVJyAT2StYNA1KsPuOTE33ncVpNRRsKGzKYT7CTzOa6Aq2OalHaX/y C0VlV2k0kXJ4oNEiCU3JG37FUlSL5ltRce36R/xNNSiBvSQbsC7Z/bQutOldZ4Vh u9fCMrt0ga3hvQchZu8KksA1VAsiDQx895P+wWqWTOaoDQC5nQXgvz7pJZ6dx0dU sjNxjxWbLmGIc5HtDawnHohpl5G5MJJ1pqkXR3wQrTJ+A/5uEeXPb9YanxExqLTx 8fKS8nlu7AShDBobHLsc2KdFWoXkSzFmMg7w0eZo6iujM7vP1GTEN8MswsfhVJgj vNdmhQ8kVfvNe4lw/goCsl9j4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfFWa27 ZKjpzsmYDKx+rET65ih/MB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEryGMMiNjw+XeEwAabGl6RHffNxYSoe3w51XVmXKJ5GuM+Jsj0eod ix4YPj9GmkEFOmVu4GlAAyfrtBgmJKNthgEx7XckYEP3ozpH0L0nGapREJKAnxfm aZUIzEre6PCffHfkmgC7/sRRNlc1vP80gm+IrpLl2cvcHHEk2IaP2uVaVOP3jqkj xvItxRzXL6cPbsDvQCoL9l60RM/EFhnT71WpnC+75hB9uVdqMEegllk1URr+YS9W vnswaVchkr83otAPgnBWyzmDbvlAI2M2BsPSrLsNc0rWQOd0xP/mwjhfwJD4kash gNLWRBWxCRVLMFZbhxVSCVrJjppbB1vY -----END CERTIFICATE-----Generated at Mon May 12 22:45:23 2025 by rpki-client