$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: HC+at4Bc4t6+2TxpHTh9cVEWbWij/XlrPrEkICKaC3w= Subject key identifier: 97:8C:53:52:C8:D4:E0:5B:E0:CA:81:0B:6F:06:A4:6D:74:35:59:0C Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 095A Signing time: Fri 22 Aug 2025 20:18:13 +0000 Manifest this update: Fri 22 Aug 2025 20:18:13 +0000 Manifest next update: Fri 29 Aug 2025 20:18:13 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: wPTIQ42xhmewAx1d3Vtk4EEAR6v/t1M7MF1jBNlciIM=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2401 (0x961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Aug 22 20:18:13 2025 GMT Not After : Aug 29 20:18:13 2025 GMT Subject: CN=68a8d085-c481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:40:af:2f:24:f5:b2:92:af:f2:43:79:e9: 85:20:d9:d5:74:d1:22:f5:9f:0d:a3:53:82:5d:90: 47:a8:ba:4d:03:e2:42:9e:01:0c:73:89:7d:6a:f0: dd:0f:52:6d:c8:43:50:c0:a5:19:e1:d1:03:12:2a: 90:f3:ff:2c:f4:d1:9c:73:9a:4d:a8:00:61:d4:ce: 65:04:70:ff:86:30:f6:29:28:c9:f6:63:03:c8:f2: 73:8d:7e:db:df:5e:46:d5:c8:20:6b:81:98:97:f3: f7:d1:5d:0a:d2:e9:aa:5f:e8:23:a3:4a:6b:4c:94: 46:cf:18:5d:cf:3a:a5:72:fb:5b:99:99:04:fe:58: b1:f5:58:79:4d:9b:8e:0e:bb:01:9a:b2:23:78:50: be:91:b5:56:b7:ef:a4:31:5d:07:5f:b4:6f:f1:b4: 8c:2d:05:bf:9a:5c:9a:0f:c9:06:78:52:6d:89:61: 93:12:ff:57:be:78:bf:9d:27:65:d8:70:6a:80:fd: 69:50:ad:8c:db:c4:02:e0:40:cd:43:05:f9:7d:dc: e1:63:2e:fc:df:12:6b:43:8b:97:9d:f7:a0:77:cf: 57:af:31:21:e0:c7:66:6b:0f:61:ce:74:c2:e3:59: 9e:e3:b8:3a:4c:d7:d5:4a:b3:60:fe:40:cc:c6:83: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:53:52:C8:D4:E0:5B:E0:CA:81:0B:6F:06:A4:6D:74:35:59:0C X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:21:3e:66:fb:b6:56:ca:0a:3f:68:91:0c:92:d1:e8:14:d2: 07:02:b5:16:ea:b2:8d:c2:f6:b2:43:dd:a8:0e:3c:7c:fb:89: b7:6c:d2:8a:29:fe:67:a2:45:ba:a7:93:9c:5d:44:be:ab:28: 8d:7a:15:37:43:82:5d:e4:b9:81:4b:40:0f:6c:f2:69:d3:4a: 73:61:e0:45:8d:33:38:13:68:dd:c3:37:9d:15:cd:2f:7f:70: 75:4e:79:99:32:88:70:40:5a:3d:c4:dc:a0:84:eb:20:d3:03: 3a:b5:42:fe:02:34:14:9e:71:15:65:05:e9:c8:4d:68:92:20: b1:61:12:48:ad:2d:e1:f3:5d:6a:89:08:b9:8d:48:b8:63:c6: 1e:93:f9:8e:95:73:1a:03:ad:39:fb:84:3e:55:f1:14:b1:e4: d6:cc:0f:a8:21:29:72:1f:82:8e:09:95:e2:cb:0d:73:63:e9: ca:a1:20:5e:d3:32:ed:fa:65:59:bc:a2:0c:08:c8:b9:a6:75: 90:c5:97:06:46:ac:40:3b:5a:32:83:49:b2:be:b2:53:16:95: c0:bc:a4:de:61:e5:6d:7c:b6:3c:2c:44:8b:db:72:cd:e7:22: 5e:f7:cc:50:58:3f:30:28:bc:74:7e:d3:5a:d2:35:4d:2a:cb: 35:db:76:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwODIyMjAxODEzWhcNMjUwODI5MjAxODEzWjAYMRYwFAYD VQQDEw02OGE4ZDA4NS1jNDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta9Ary8k9bKSr/JDeemFINnVdNEi9Z8No1OCXZBHqLpNA+JCngEMc4l9avDd D1JtyENQwKUZ4dEDEiqQ8/8s9NGcc5pNqABh1M5lBHD/hjD2KSjJ9mMDyPJzjX7b 315G1cgga4GYl/P30V0K0umqX+gjo0prTJRGzxhdzzqlcvtbmZkE/lix9Vh5TZuO DrsBmrIjeFC+kbVWt++kMV0HX7Rv8bSMLQW/mlyaD8kGeFJtiWGTEv9Xvni/nSdl 2HBqgP1pUK2M28QC4EDNQwX5fdzhYy783xJrQ4uXnfegd89XrzEh4Mdmaw9hznTC 41me47g6TNfVSrNg/kDMxoPLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeMU1LI 1OBb4MqBC28GpG10NVkMMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzIT5m+7ZWygo/aJEMktHoFNIHArUW6rKNwvayQ92oDjx8+4m3bNKK Kf5nokW6p5OcXUS+qyiNehU3Q4Jd5LmBS0APbPJp00pzYeBFjTM4E2jdwzedFc0v f3B1TnmZMohwQFo9xNyghOsg0wM6tUL+AjQUnnEVZQXpyE1okiCxYRJIrS3h811q iQi5jUi4Y8Yek/mOlXMaA605+4Q+VfEUseTWzA+oISlyH4KOCZXiyw1zY+nKoSBe 0zLt+mVZvKIMCMi5pnWQxZcGRqxAO1oyg0myvrJTFpXAvKTeYeVtfLY8LESL23LN 5yJe98xQWD8wKLx0ftNa0jVNKss123aY -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:51 2025 by rpki-client