$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: CzJwjsaERzE4/Tv0ib+RFIwsvBdgf4ZLtnfPF0Q1Igg= Subject key identifier: BD:95:2D:F2:1E:E1:36:7F:04:DA:DC:42:EB:FA:68:8D:C6:5D:93:A2 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D60 Signing time: Mon 20 Oct 2025 18:31:36 +0000 Manifest this update: Mon 20 Oct 2025 18:31:35 +0000 Manifest next update: Mon 27 Oct 2025 18:31:35 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: BzX3rL3R2dd5/UW8YoQR/d1jxxJNOrL/1HDePrfO23U=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3433 (0xd69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Oct 20 18:31:35 2025 GMT Not After : Oct 27 18:31:35 2025 GMT Subject: CN=68f68007-83f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e5:c2:11:06:d3:69:a7:7a:7a:f5:a6:2f:e7: ff:1d:ae:95:17:36:fd:da:d1:30:86:18:0a:50:0d: 5d:26:b2:80:9e:15:5f:07:2f:39:f8:45:d7:df:02: 51:56:7f:53:41:52:01:e8:59:95:c9:1e:47:f1:49: e8:ec:75:81:db:f9:ff:b8:f8:87:34:44:c0:bc:74: a4:02:45:b1:f9:cc:04:86:24:2e:59:f1:97:4e:48: d4:90:10:f5:17:4c:d5:93:cf:b3:3b:6a:db:2b:ec: 2a:fe:bd:9d:25:30:f8:ff:39:e0:70:f6:93:69:46: 71:01:75:78:04:c1:dc:c7:d9:2c:db:ae:29:8f:d1: 4f:9f:a2:ac:a8:23:cc:7c:99:74:da:31:dc:7c:03: 0a:34:5a:97:dc:46:6f:e3:ef:35:8b:67:58:b8:17: d8:92:e2:e8:8b:c3:84:cb:b2:ad:1a:af:b2:94:35: 23:76:a4:3f:72:b8:21:4f:52:74:a2:54:5b:fb:12: bc:7b:a2:70:45:b1:1b:a5:57:56:a3:ee:36:79:80: ae:bb:e7:5b:3e:ce:2a:00:da:64:a7:7a:5c:04:58: f5:e4:03:91:e0:a3:cf:52:88:8b:b8:00:37:cc:71: b4:42:20:9d:5d:40:bf:42:60:fd:82:0d:e8:03:a0: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:95:2D:F2:1E:E1:36:7F:04:DA:DC:42:EB:FA:68:8D:C6:5D:93:A2 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:2f:8c:d3:bd:0b:11:c7:69:34:9a:07:34:6f:79:02:7c:93: ca:ef:ae:07:d7:dc:e8:e4:09:f7:29:bc:45:57:e1:5a:a1:b8: 30:3e:e2:b3:5d:a1:a7:ba:42:e9:1d:2b:ea:22:09:46:f2:b5: 52:16:6e:12:b0:7e:f0:15:15:f2:dc:81:20:68:ff:c8:94:47: a6:90:a1:70:54:e6:eb:20:90:86:a7:cf:8a:95:34:38:86:06: b2:ab:93:52:87:01:bf:de:10:d9:fd:05:24:98:fd:84:bc:97: f6:f0:7f:d8:48:2e:8a:f8:2d:ca:1a:ec:ba:da:c8:c0:65:fe: 5c:f2:30:8e:5d:45:d6:db:e9:f2:8d:07:eb:45:c7:b6:de:13: 2a:5b:48:91:fe:30:4a:ee:a2:de:33:f6:ee:44:6c:e4:77:ae: 0b:7b:ea:f2:b8:d1:f9:85:58:17:46:2b:cf:de:4d:61:2f:fe: ae:81:c5:20:43:e8:d5:d9:4a:00:6b:37:0f:2c:f1:4d:de:48: fb:e9:05:aa:bf:fe:98:01:0e:a8:ef:2d:3a:05:ed:02:70:cf: b3:d8:e0:aa:45:e5:4d:6e:e3:8e:71:75:ee:36:1f:4f:25:d7: c2:27:49:25:82:7b:08:d7:34:5e:9d:29:56:7f:84:c2:a4:40: 14:9a:a7:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUxMDIwMTgzMTM1WhcNMjUxMDI3MTgzMTM1WjAYMRYwFAYD VQQDEw02OGY2ODAwNy04M2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeXCEQbTaad6evWmL+f/Ha6VFzb92tEwhhgKUA1dJrKAnhVfBy85+EXX3wJR Vn9TQVIB6FmVyR5H8Uno7HWB2/n/uPiHNETAvHSkAkWx+cwEhiQuWfGXTkjUkBD1 F0zVk8+zO2rbK+wq/r2dJTD4/zngcPaTaUZxAXV4BMHcx9ks264pj9FPn6KsqCPM fJl02jHcfAMKNFqX3EZv4+81i2dYuBfYkuLoi8OEy7KtGq+ylDUjdqQ/crghT1J0 olRb+xK8e6JwRbEbpVdWo+42eYCuu+dbPs4qANpkp3pcBFj15AOR4KPPUoiLuAA3 zHG0QiCdXUC/QmD9gg3oA6AMIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2VLfIe 4TZ/BNrcQuv6aI3GXZOiMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKL4zTvQsRx2k0mgc0b3kCfJPK764H19zo5An3KbxFV+FaobgwPuKz XaGnukLpHSvqIglG8rVSFm4SsH7wFRXy3IEgaP/IlEemkKFwVObrIJCGp8+KlTQ4 hgayq5NShwG/3hDZ/QUkmP2EvJf28H/YSC6K+C3KGuy62sjAZf5c8jCOXUXW2+ny jQfrRce23hMqW0iR/jBK7qLeM/buRGzkd64Le+ryuNH5hVgXRivP3k1hL/6ugcUg Q+jV2UoAazcPLPFN3kj76QWqv/6YAQ6o7y06Be0CcM+z2OCqReVNbuOOcXXuNh9P JdfCJ0klgnsI1zRenSlWf4TCpEAUmqcP -----END CERTIFICATE-----Generated at Mon Oct 20 21:40:39 2025 by rpki-client