$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: sLjSzTVWg5BRWsD40UMVglR3usH4tb0ugsDgeIFeOOI= Subject key identifier: E4:4E:2B:C2:16:EA:5E:12:4F:59:5C:08:F3:64:36:62:8D:54:7C:AD Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0981 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0979 Signing time: Sat 18 Oct 2025 21:10:06 +0000 Manifest this update: Sat 18 Oct 2025 21:10:05 +0000 Manifest next update: Sat 25 Oct 2025 21:10:05 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: d42XU+sW26Z+IbwplemuhZoafIkAQrjZe8sffoQNj1c=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: UPW2zn+2qw+0Yqrrnh/8eodDuScZl7h14KT7X1Bf96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:10:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2433 (0x981) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Oct 18 21:10:05 2025 GMT Not After : Oct 25 21:10:05 2025 GMT Subject: CN=68f4022e-989e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:b2:25:91:9d:45:75:ed:96:d6:17:c5:0f: af:e3:8e:77:f1:a2:11:97:01:03:10:15:1a:83:12: 66:e7:c5:27:05:54:31:ca:d2:9e:c7:fd:9e:75:9c: f4:2c:bb:6a:b3:99:41:eb:7b:42:87:a1:ec:a1:64: c6:e4:cb:e7:6f:c6:79:95:0b:5a:04:19:26:6f:28: 49:05:b9:98:95:7a:61:0a:13:92:90:45:69:64:a1: 3e:f1:76:1c:80:08:19:52:00:5c:6a:65:93:91:6a: 41:f8:4a:7e:38:55:d3:64:28:61:ee:ec:25:c3:05: b9:13:90:3c:66:dc:da:31:c6:69:20:ee:79:99:d7: 5a:5a:91:d8:4a:47:85:04:a7:8f:18:95:f0:a2:e5: d9:7d:52:f3:d1:f0:fe:8f:6f:e5:7a:9e:8c:f0:38: ae:49:5f:f7:fb:31:f3:35:66:50:a1:f8:ed:57:22: bd:b7:38:54:c4:f1:e7:74:42:8e:23:cc:d8:d4:42: 4e:e1:da:12:76:96:5e:b2:53:37:5f:ab:fb:11:75: 20:95:54:9b:8e:88:eb:2a:1f:46:32:d2:39:17:0d: 59:12:05:ed:bc:6c:c9:ab:c0:4b:7f:98:30:03:50: 9d:8e:50:83:41:c7:18:16:6b:90:ac:d3:1a:b7:38: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:4E:2B:C2:16:EA:5E:12:4F:59:5C:08:F3:64:36:62:8D:54:7C:AD X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:02:15:35:da:5a:b3:10:2e:53:0b:f0:d2:2e:13:b7:66:cb: 94:e7:53:bf:23:8d:8b:e0:4f:ac:0c:a8:9b:96:d2:69:52:ba: 34:08:38:0f:ea:fd:d6:f3:5b:cb:df:71:6e:f7:1a:d7:01:69: 6d:26:4b:93:78:0e:01:8f:13:80:3e:7a:29:25:26:73:36:dc: 7f:9f:82:b6:54:fe:e7:d6:f4:bd:61:4d:0f:b0:37:29:4e:44: 24:53:21:02:d5:d0:cc:33:b0:0f:d4:fa:7a:7a:2b:c2:a9:70: 98:fb:97:f0:fb:ed:7e:d9:69:64:74:f1:f1:f8:a4:45:2e:d6: da:44:78:a6:4b:b4:cc:36:eb:c6:99:33:8a:91:2d:ba:76:e2: 4f:8f:1a:65:6c:06:1c:9b:72:23:a5:ca:da:bc:f4:68:3c:78: a1:97:47:58:4f:b7:e2:f7:8c:3e:e1:28:9b:4e:27:68:65:18: 85:51:77:66:ab:7c:c4:10:d8:98:f5:d3:ec:44:65:47:38:84: bf:b1:65:13:93:e6:82:d5:f6:5f:cc:95:a5:8c:66:83:8c:da: 95:6a:8d:59:20:d1:b3:4f:8e:39:be:05:42:21:4f:b5:53:1a: 0b:fc:45:08:32:33:ed:32:ca:f4:53:7b:35:e7:f5:29:11:cf: 65:6f:1f:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUxMDE4MjExMDA1WhcNMjUxMDI1MjExMDA1WjAYMRYwFAYD VQQDEw02OGY0MDIyZS05ODllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwA+yJZGdRXXtltYXxQ+v44538aIRlwEDEBUagxJm58UnBVQxytKex/2edZz0 LLtqs5lB63tCh6HsoWTG5Mvnb8Z5lQtaBBkmbyhJBbmYlXphChOSkEVpZKE+8XYc gAgZUgBcamWTkWpB+Ep+OFXTZChh7uwlwwW5E5A8ZtzaMcZpIO55mddaWpHYSkeF BKePGJXwouXZfVLz0fD+j2/lep6M8DiuSV/3+zHzNWZQofjtVyK9tzhUxPHndEKO I8zY1EJO4doSdpZeslM3X6v7EXUglVSbjojrKh9GMtI5Fw1ZEgXtvGzJq8BLf5gw A1CdjlCDQccYFmuQrNMatzih8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOROK8IW 6l4ST1lcCPNkNmKNVHytMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBAhU12lqzEC5TC/DSLhO3ZsuU51O/I42L4E+sDKibltJpUro0CDgP 6v3W81vL33Fu9xrXAWltJkuTeA4BjxOAPnopJSZzNtx/n4K2VP7n1vS9YU0PsDcp TkQkUyEC1dDMM7AP1Pp6eivCqXCY+5fw++1+2WlkdPHx+KRFLtbaRHimS7TMNuvG mTOKkS26duJPjxplbAYcm3IjpcravPRoPHihl0dYT7fi94w+4SibTidoZRiFUXdm q3zEENiY9dPsRGVHOIS/sWUTk+aC1fZfzJWljGaDjNqVao1ZINGzT445vgVCIU+1 UxoL/EUIMjPtMsr0U3s15/UpEc9lbx+N -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:38 2025 by rpki-client