$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: 5gw/VnoDnyb6KFxIthcYmm/NXv+/+KajLJguWdkq4Gc= Subject key identifier: 8B:79:E0:74:67:00:11:35:2D:6B:04:CF:01:1C:1B:B6:91:DC:2B:A3 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D42 Signing time: Fri 22 Aug 2025 18:07:38 +0000 Manifest this update: Fri 22 Aug 2025 18:07:37 +0000 Manifest next update: Fri 29 Aug 2025 18:07:37 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: qsSZXszU6sPPoXnRZ1bq1BL0HR6ntFxGdNlHGH3K/5w=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3403 (0xd4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Aug 22 18:07:37 2025 GMT Not After : Aug 29 18:07:37 2025 GMT Subject: CN=68a8b1ea-aa87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:2f:d4:04:47:32:64:24:90:9e:d2:cd:80: 7e:e6:13:37:fc:4e:3e:86:ed:59:e1:95:86:16:a3: 81:a0:ee:b3:4d:f0:38:c9:91:35:5e:4a:d5:c6:3a: 38:a7:b2:59:b0:8e:06:c0:67:04:87:71:ed:80:0d: 63:ff:cb:0c:91:98:c7:4b:59:09:1f:bc:80:99:50: 17:0a:5c:80:18:d7:99:28:6e:20:7e:5e:66:41:6c: f6:69:3c:1c:58:aa:ad:fe:7b:f0:01:3f:8f:2f:68: 4f:d9:d3:94:16:57:9e:64:be:08:4f:1d:c1:cd:f4: 08:af:28:2f:09:ff:75:5e:f2:e0:98:95:88:ab:a0: a2:f9:f6:55:a8:06:7f:1c:eb:89:f9:d6:8f:c1:82: 91:1e:8a:a8:dc:11:b2:d5:82:b1:1d:0c:34:ec:a5: 79:fe:8a:f2:c3:b5:58:80:b7:93:5e:ea:04:4b:01: d3:88:e9:93:96:75:50:41:b9:ee:19:54:1e:f7:18: 9f:3f:19:46:b4:4b:5c:bb:62:04:91:ee:55:f1:2f: 92:5d:0c:fc:50:6b:02:27:06:bb:df:6d:28:73:96: 01:b9:4e:35:ae:6a:ae:ab:cb:72:88:bc:29:bd:b4: 8c:6d:03:43:28:00:2e:4f:04:d1:ef:f6:42:56:8f: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:79:E0:74:67:00:11:35:2D:6B:04:CF:01:1C:1B:B6:91:DC:2B:A3 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:87:88:9a:93:42:aa:fe:43:f5:70:00:0c:cd:42:99:a9:ec: 96:4c:de:e8:85:42:7e:13:3b:1b:b5:42:4f:b6:d8:93:4a:eb: 08:09:bc:1b:21:ea:46:14:a1:a1:a9:2f:35:d2:15:51:7b:01: b5:e0:dd:52:ba:95:47:63:30:89:3a:a9:b0:fe:5b:78:25:2b: 14:8a:a3:e7:99:03:db:cc:1d:6c:8f:87:86:02:89:7f:c1:2f: b2:c0:66:04:dd:f2:59:17:ed:4c:0e:88:09:01:d2:32:75:8c: e8:b9:68:dc:27:19:39:c0:22:aa:19:7c:83:33:c6:00:6d:e7: 33:28:e4:6e:8e:2e:2a:d9:b9:ea:65:58:8a:c3:4a:3f:7d:ab: f3:84:b7:88:03:e3:51:15:ab:1d:ee:b8:dc:98:e9:f5:44:9d: 8c:78:82:90:e1:39:87:5d:06:a5:54:c2:67:91:7b:b8:db:fb: 37:08:46:8e:f6:43:22:3e:55:11:c8:8f:70:25:ce:d3:88:ab: 27:ab:ec:41:c0:cf:77:ed:64:f9:23:78:10:02:93:d5:0c:1b: b9:7a:df:a5:67:63:1b:e6:29:a3:33:d6:48:20:b1:d2:96:c7: 10:a9:23:21:b9:4d:f7:c4:38:97:39:66:4a:df:43:93:30:74: 54:df:44:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUwODIyMTgwNzM3WhcNMjUwODI5MTgwNzM3WjAYMRYwFAYD VQQDEw02OGE4YjFlYS1hYTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqQv1ARHMmQkkJ7SzYB+5hM3/E4+hu1Z4ZWGFqOBoO6zTfA4yZE1XkrVxjo4 p7JZsI4GwGcEh3HtgA1j/8sMkZjHS1kJH7yAmVAXClyAGNeZKG4gfl5mQWz2aTwc WKqt/nvwAT+PL2hP2dOUFleeZL4ITx3BzfQIrygvCf91XvLgmJWIq6Ci+fZVqAZ/ HOuJ+daPwYKRHoqo3BGy1YKxHQw07KV5/oryw7VYgLeTXuoESwHTiOmTlnVQQbnu GVQe9xifPxlGtEtcu2IEke5V8S+SXQz8UGsCJwa7320oc5YBuU41rmquq8tyiLwp vbSMbQNDKAAuTwTR7/ZCVo95tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIt54HRn ABE1LWsEzwEcG7aR3CujMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANh4iak0Kq/kP1cAAMzUKZqeyWTN7ohUJ+EzsbtUJPttiTSusICbwb IepGFKGhqS810hVRewG14N1SupVHYzCJOqmw/lt4JSsUiqPnmQPbzB1sj4eGAol/ wS+ywGYE3fJZF+1MDogJAdIydYzouWjcJxk5wCKqGXyDM8YAbeczKORuji4q2bnq ZViKw0o/favzhLeIA+NRFasd7rjcmOn1RJ2MeIKQ4TmHXQalVMJnkXu42/s3CEaO 9kMiPlURyI9wJc7TiKsnq+xBwM937WT5I3gQApPVDBu5et+lZ2Mb5imjM9ZIILHS lscQqSMhuU33xDiXOWZK30OTMHRU30Rv -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:48 2025 by rpki-client