$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: Q9mkRWl0gzl5k8cv0CoXIpZKn4OHhe7g4KyjocDUVvc= Subject key identifier: C2:6A:C6:12:CA:EA:D9:00:E6:75:CF:01:C0:A3:9D:43:28:AC:15:DA Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0DB4 Signing time: Tue 24 Mar 2026 17:46:25 +0000 Manifest this update: Tue 24 Mar 2026 17:46:24 +0000 Manifest next update: Tue 31 Mar 2026 17:46:24 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: wrHxVrpRgm7qqc845yoDy25VwnPtUhuTnHb6zN3NcYg=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: o03RGCe0M4Rcb7aja2eQGJ8mh/lLVGkF7+Q0rj78MZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:46:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Mar 24 17:46:24 2026 GMT Not After : Mar 31 17:46:24 2026 GMT Subject: CN=69c2cdf1-49b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:e9:b9:c0:08:21:a0:27:b1:78:95:62:ce: ce:f6:fc:b8:be:7f:8d:e2:81:ea:65:1b:47:c6:20: f5:a9:5b:4a:29:7e:0d:af:db:fb:2b:5e:af:a5:4d: b7:7d:3c:41:d6:7f:1c:85:79:8d:a7:ea:ec:29:71: c6:63:5e:59:0e:52:63:bd:ca:04:49:94:56:e4:17: ed:75:0e:f9:07:45:74:93:ef:a6:1a:3c:a4:42:a2: d8:7e:ff:8e:2b:77:35:bf:5f:70:11:47:06:62:a6: 42:da:c3:5b:34:dc:ca:c1:9b:79:c8:59:92:c9:d9: 6b:db:0f:69:50:89:a5:47:0b:29:d5:73:3c:7b:40: b5:ad:6b:59:4d:64:04:88:ec:dd:8a:87:bf:bb:6e: b8:59:9f:a5:4f:c8:a6:2b:71:f7:35:cb:9f:bc:8f: 59:bf:56:86:6a:67:2c:9d:10:b7:96:6d:5c:76:9f: b4:92:ec:d7:10:54:74:22:a0:7d:7c:50:19:99:0d: c6:3d:da:bc:c7:33:ea:49:67:f4:9b:6f:ce:45:c2: 56:3c:1b:73:e0:0d:5e:79:c2:4a:22:0a:ce:59:93: 80:83:ac:8a:dc:a4:1b:bc:96:23:a3:e6:44:ea:ad: de:2d:3d:39:b1:6f:a6:ae:80:ad:89:2a:9c:db:9d: f0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:6A:C6:12:CA:EA:D9:00:E6:75:CF:01:C0:A3:9D:43:28:AC:15:DA X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:03:2e:62:81:c9:df:1d:4f:54:ba:9f:89:5d:b2:52:4a:59: 9b:ac:5a:27:a4:f8:9f:04:c2:df:b6:9d:0b:24:f3:b5:03:aa: 4a:18:8e:82:25:2e:78:a2:ff:41:8b:d4:72:65:9a:47:bc:ea: ca:b0:9a:73:14:3e:ba:85:8d:34:04:0d:95:93:34:b2:f1:40: 2d:bb:e1:39:8e:58:af:8d:a9:06:25:b1:b7:82:53:62:b8:a9: 9d:bd:55:c1:7f:de:49:65:61:03:5f:73:76:32:ea:f1:cc:d9: c9:f1:7c:d7:3f:9d:b0:eb:63:cc:c7:bb:c1:e6:67:db:a0:ef: aa:b8:09:e4:33:ea:e7:b1:de:33:1d:b4:97:cb:4c:14:dc:86: 9b:fd:e3:fd:28:3d:23:9d:82:7c:8a:7e:10:0b:0a:e3:db:cc: 2d:67:0a:62:42:f1:d2:40:04:4d:30:19:b3:3a:57:3f:ee:3c: 66:66:ee:d5:35:f1:79:95:cd:68:fe:f8:03:42:00:18:f9:24: 12:4e:64:83:54:69:85:20:d5:ef:99:b1:41:53:00:80:c1:58: af:0d:c4:3d:3b:5b:a5:c5:ac:35:fa:eb:09:f3:45:80:37:a0: ff:2f:47:0e:ad:c2:99:07:8c:68:a1:48:5d:b8:9b:51:58:6b: f8:fa:ad:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjYwMzI0MTc0NjI0WhcNMjYwMzMxMTc0NjI0WjAYMRYwFAYD VQQDEw02OWMyY2RmMS00OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTLpucAIIaAnsXiVYs7O9vy4vn+N4oHqZRtHxiD1qVtKKX4Nr9v7K16vpU23 fTxB1n8chXmNp+rsKXHGY15ZDlJjvcoESZRW5BftdQ75B0V0k++mGjykQqLYfv+O K3c1v19wEUcGYqZC2sNbNNzKwZt5yFmSydlr2w9pUImlRwsp1XM8e0C1rWtZTWQE iOzdioe/u264WZ+lT8imK3H3NcufvI9Zv1aGamcsnRC3lm1cdp+0kuzXEFR0IqB9 fFAZmQ3GPdq8xzPqSWf0m2/ORcJWPBtz4A1eecJKIgrOWZOAg6yK3KQbvJYjo+ZE 6q3eLT05sW+mroCtiSqc253wiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJqxhLK 6tkA5nXPAcCjnUMorBXaMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgAMuYoHJ3x1PVLqfiV2yUkpZm6xaJ6T4nwTC37adCyTztQOqShiOgiUueKL/ QYvUcmWaR7zqyrCacxQ+uoWNNAQNlZM0svFALbvhOY5Yr42pBiWxt4JTYripnb1V wX/eSWVhA19zdjLq8czZyfF81z+dsOtjzMe7weZn26DvqrgJ5DPq57HeMx20l8tM FNyGm/3j/Sg9I52CfIp+EAsK49vMLWcKYkLx0kAETTAZszpXP+48Zmbu1TXxeZXN aP74A0IAGPkkEk5kg1RphSDV75mxQVMAgMFYrw3EPTtbpcWsNfrrCfNFgDeg/y9H Dq3CmQeMaKFIXbibUVhr+PqtDg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:21 2026 by rpki-client