$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: BaPEnt4hPk4Bss2UWae2NkLlzKcDLbjkYMIsQbVgsyI= Subject key identifier: 12:C7:72:31:40:3F:58:3C:2E:5B:8B:B5:74:CC:79:04:52:8A:E4:F5 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0952 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 094B Signing time: Thu 24 Jul 2025 20:22:15 +0000 Manifest this update: Thu 24 Jul 2025 20:22:15 +0000 Manifest next update: Thu 31 Jul 2025 20:22:15 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: iDVaoYniNW6Bmximxd2YJG+TngzVveaUXyRXGGN0qEg=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: 2i86HvqqruP2HLn2/0YD1Ofb8VdhIBy3sY51fKOAOAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 20:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2386 (0x952) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Jul 24 20:22:15 2025 GMT Not After : Jul 31 20:22:15 2025 GMT Subject: CN=688295f7-7a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:93:09:2a:29:5c:26:ae:4b:41:28:de:fe:e7: 44:a8:4b:63:60:c2:8c:f8:4b:8f:5d:56:01:63:d2: 85:bc:eb:80:38:c3:ae:d9:88:a5:cd:90:c5:54:4b: b0:75:83:3a:f9:38:9b:38:2b:05:2a:10:ee:71:f1: 8e:bf:be:33:ce:8d:31:8a:15:d4:e4:7e:16:c0:a2: 91:25:95:b3:e4:10:47:18:2c:53:a2:c3:08:d3:55: fd:60:6d:51:fa:a4:fb:dc:a5:e8:c2:92:3a:1b:54: 60:73:26:58:23:d1:8c:e3:75:69:16:13:4e:77:3c: e6:8f:89:25:fe:d0:3f:db:8e:ce:9d:94:58:7a:3e: 55:75:2d:62:c0:70:5f:be:17:ef:f7:36:e0:ac:c3: 80:f2:ac:db:ea:33:ca:34:97:bc:3f:41:87:89:aa: 0b:7f:34:e0:57:62:26:e9:d9:58:f2:0e:27:0f:20: 61:29:9f:60:79:e0:49:9e:a0:93:eb:94:0d:6f:67: 1d:07:9d:3d:17:17:43:bb:49:fc:8a:69:c5:01:80: 0c:64:ea:7a:ba:c3:c1:d7:70:af:47:85:d8:1d:30: 88:ea:97:84:7b:73:ba:f8:15:2f:07:3d:68:a3:e4: f1:6e:c8:87:ce:67:42:e1:28:f8:09:67:a8:7e:f8: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C7:72:31:40:3F:58:3C:2E:5B:8B:B5:74:CC:79:04:52:8A:E4:F5 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:15:69:b9:6c:c2:c7:4f:41:68:92:83:23:5f:ee:6d:78:9b: 53:ac:4f:a3:ff:66:2b:d4:bc:81:1f:01:1a:f0:97:68:e8:70: be:b7:e8:17:9b:ee:49:ff:44:9e:34:63:d9:52:a4:7e:16:77: 23:a1:d5:25:e9:94:75:1a:01:9b:e6:aa:5e:32:cf:db:67:82: 9d:73:2a:20:2c:1d:3f:bb:e2:24:d0:17:e9:44:86:eb:6d:a7: cd:3a:67:45:28:b0:b4:e5:69:39:74:f7:6d:bd:1a:9b:d3:4b: bf:bd:c9:50:67:0e:4d:7c:3e:6b:6e:b5:85:9a:e7:01:a6:9b: 2a:c2:89:a8:f4:0a:6f:e9:63:55:2e:09:d4:ac:a5:40:fc:0e: 2e:7a:4b:72:3f:4e:48:b5:10:bd:0a:d6:13:b8:71:e8:b5:cf: 18:28:01:7d:b7:a5:3d:ad:54:59:d9:83:13:61:63:30:c8:74: 55:35:56:77:85:4b:9d:fb:d0:f6:42:e1:6c:dd:7a:4d:6d:b3: a1:d2:94:0b:96:ff:8b:25:82:80:40:d8:3b:46:75:a1:98:e9: d6:30:f4:d8:f7:24:9e:91:5e:cc:50:4a:74:81:2e:5a:00:b5: c0:45:77:39:37:92:dc:e2:67:75:38:55:8a:64:f5:48:f0:70: 2f:20:65:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwNzI0MjAyMjE1WhcNMjUwNzMxMjAyMjE1WjAYMRYwFAYD VQQDEw02ODgyOTVmNy03YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55MJKilcJq5LQSje/udEqEtjYMKM+EuPXVYBY9KFvOuAOMOu2YilzZDFVEuw dYM6+TibOCsFKhDucfGOv74zzo0xihXU5H4WwKKRJZWz5BBHGCxTosMI01X9YG1R +qT73KXowpI6G1RgcyZYI9GM43VpFhNOdzzmj4kl/tA/247OnZRYej5VdS1iwHBf vhfv9zbgrMOA8qzb6jPKNJe8P0GHiaoLfzTgV2Im6dlY8g4nDyBhKZ9geeBJnqCT 65QNb2cdB509FxdDu0n8imnFAYAMZOp6usPB13CvR4XYHTCI6peEe3O6+BUvBz1o o+TxbsiHzmdC4Sj4CWeofvg3fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLHcjFA P1g8LluLtXTMeQRSiuT1MB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABFWm5bMLHT0FokoMjX+5teJtTrE+j/2Yr1LyBHwEa8Jdo6HC+t+gX m+5J/0SeNGPZUqR+FncjodUl6ZR1GgGb5qpeMs/bZ4KdcyogLB0/u+Ik0BfpRIbr bafNOmdFKLC05Wk5dPdtvRqb00u/vclQZw5NfD5rbrWFmucBppsqwomo9Apv6WNV LgnUrKVA/A4uektyP05ItRC9CtYTuHHotc8YKAF9t6U9rVRZ2YMTYWMwyHRVNVZ3 hUud+9D2QuFs3XpNbbOh0pQLlv+LJYKAQNg7RnWhmOnWMPTY9ySekV7MUEp0gS5a ALXARXc5N5Lc4md1OFWKZPVI8HAvIGUk -----END CERTIFICATE-----Generated at Fri Jul 25 01:42:04 2025 by rpki-client