$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: MV25UiI9Uzs1bl8RJEFU8lWdkoMtd2Oi6xhcYvU+ZAM= Subject key identifier: AC:89:E0:4A:76:FA:53:08:A4:4D:EB:20:15:D2:12:3E:3A:EB:FC:6A Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0947 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0940 Signing time: Wed 02 Jul 2025 20:28:37 +0000 Manifest this update: Wed 02 Jul 2025 20:28:37 +0000 Manifest next update: Wed 09 Jul 2025 20:28:37 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: 1Dd5nMy16kN2+VNWuV5y2VtlK7vjoLLZPxpcQwT5bIU=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2375 (0x947) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Jul 2 20:28:37 2025 GMT Not After : Jul 9 20:28:37 2025 GMT Subject: CN=68659675-7283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4b:c4:09:dd:16:f5:ff:71:49:a1:81:19:9d: c7:7c:02:f2:a7:b2:21:40:77:d6:4b:a3:b1:de:7d: 5b:de:b2:3d:10:8c:eb:79:f4:0d:9f:de:b7:23:5a: c3:10:6a:12:e4:51:5b:7c:7c:de:d8:c5:d2:e2:9e: fa:8d:c2:81:70:6b:b5:d4:31:f8:48:e7:29:ad:cb: c2:cd:ec:13:ee:8b:22:15:4b:66:3c:9a:0e:70:03: 1b:18:7d:e4:9c:cd:1d:c3:b6:e6:59:bf:fe:e5:93: 1f:2c:75:ea:a7:c5:f6:c7:0f:2e:fc:87:36:83:a9: 72:51:1e:eb:48:95:ce:71:f6:f0:d6:73:11:6b:0d: 2b:c4:0e:a7:39:df:3b:84:6a:99:1a:11:57:a9:d4: 84:f1:26:b7:7a:c0:6b:5e:89:00:11:19:0f:d2:e6: c3:10:a4:45:53:21:bb:b4:ca:45:c3:34:af:5a:76: 8b:53:e4:9c:40:a4:2d:b0:f4:82:fd:da:8c:d3:41: e1:40:67:53:8d:31:16:51:37:a4:db:5a:a6:f7:4c: 63:ac:fe:a0:72:7f:5f:47:d5:10:80:b4:54:01:a0: 28:4a:67:ac:ef:d3:b9:bd:ea:12:5c:a1:b1:e5:64: ea:8d:35:46:63:9e:9b:9f:1b:3a:04:59:57:4d:d2: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:89:E0:4A:76:FA:53:08:A4:4D:EB:20:15:D2:12:3E:3A:EB:FC:6A X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:58:35:40:0f:fc:99:57:7b:ba:8e:ed:a8:07:c4:43:fd:f4: e7:41:b2:75:55:0d:f2:c3:e9:e1:cb:16:3d:a3:25:b5:d1:ea: bb:0c:58:3e:fa:92:cb:26:98:1d:70:a9:57:bd:fb:c8:5a:a7: a5:67:f5:32:b3:01:d4:70:ac:62:9e:d3:2e:99:34:91:d1:69: 05:23:a0:d4:3e:e5:ac:ff:76:bf:97:48:a1:1a:a4:0c:f9:64: 0a:c6:91:7a:46:0d:3c:36:f3:10:f8:0a:23:46:27:e0:73:13: 50:af:72:60:a7:7c:c6:eb:c3:c9:bb:e7:64:91:42:5f:84:35: 0d:ac:b4:dd:73:30:40:5e:39:01:0b:65:a5:1b:eb:b0:ef:55: 18:ea:6b:12:ef:df:58:ef:5c:db:2d:2b:b5:d4:48:08:01:25: 22:46:d4:bd:3a:b1:e1:aa:60:22:9e:a6:b1:02:13:f4:16:3d: 02:e5:d0:99:21:db:35:21:65:c7:01:87:dd:fa:39:f7:52:00: 9c:e8:0f:73:39:3f:67:f4:c1:94:6c:8f:e4:66:f2:d4:ff:81: 09:c4:8d:25:4c:a5:fa:e5:66:9a:e3:72:6c:89:c3:d2:87:e5: 7f:02:1b:28:1c:6e:77:83:03:fa:2f:85:7a:03:56:7f:a3:3e: d9:65:dc:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwNzAyMjAyODM3WhcNMjUwNzA5MjAyODM3WjAYMRYwFAYD VQQDEw02ODY1OTY3NS03MjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUvECd0W9f9xSaGBGZ3HfALyp7IhQHfWS6Ox3n1b3rI9EIzrefQNn963I1rD EGoS5FFbfHze2MXS4p76jcKBcGu11DH4SOcprcvCzewT7osiFUtmPJoOcAMbGH3k nM0dw7bmWb/+5ZMfLHXqp8X2xw8u/Ic2g6lyUR7rSJXOcfbw1nMRaw0rxA6nOd87 hGqZGhFXqdSE8Sa3esBrXokAERkP0ubDEKRFUyG7tMpFwzSvWnaLU+ScQKQtsPSC /dqM00HhQGdTjTEWUTek21qm90xjrP6gcn9fR9UQgLRUAaAoSmes79O5veoSXKGx 5WTqjTVGY56bnxs6BFlXTdLbJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyJ4Ep2 +lMIpE3rIBXSEj466/xqMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvWDVAD/yZV3u6ju2oB8RD/fTnQbJ1VQ3yw+nhyxY9oyW10eq7DFg+ +pLLJpgdcKlXvfvIWqelZ/UyswHUcKxintMumTSR0WkFI6DUPuWs/3a/l0ihGqQM +WQKxpF6Rg08NvMQ+AojRifgcxNQr3Jgp3zG68PJu+dkkUJfhDUNrLTdczBAXjkB C2WlG+uw71UY6msS799Y71zbLSu11EgIASUiRtS9OrHhqmAinqaxAhP0Fj0C5dCZ Ids1IWXHAYfd+jn3UgCc6A9zOT9n9MGUbI/kZvLU/4EJxI0lTKX65Waa43JsicPS h+V/AhsoHG53gwP6L4V6A1Z/oz7ZZdyf -----END CERTIFICATE-----Generated at Thu Jul 3 01:09:07 2025 by rpki-client