$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: k2AujSvUGMOAUkTpELa5/i53ssBTeTK6xSlbPz8m9lA= Subject key identifier: A4:EA:13:BA:23:14:70:7F:92:51:DE:D4:69:9B:F1:F9:C9:75:F8:26 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D17 Signing time: Fri 30 May 2025 18:14:57 +0000 Manifest this update: Fri 30 May 2025 18:14:56 +0000 Manifest next update: Fri 06 Jun 2025 18:14:56 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: ebrNUZ/wIcavPNaIYTzhCQBEZc6CDwNzUg8DWXUSqHA=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: zaaI7glaXmXh9SgsYn6TR4c53oO0mNcbR/BG6cqEOFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: May 30 18:14:56 2025 GMT Not After : Jun 6 18:14:56 2025 GMT Subject: CN=6839f5a1-339c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:d8:7c:17:ac:08:75:dd:0b:ff:f7:67:6d: 73:f7:34:b0:9f:ad:15:3a:37:b0:92:01:08:dc:b1: 76:b5:84:18:08:0a:79:bd:46:92:f7:8f:8a:2d:3c: 16:f9:e5:94:15:ee:03:e1:ce:dc:2a:67:b1:c1:64: e5:37:5c:04:d7:b8:2e:bc:c9:dd:7b:6c:32:98:8a: 88:ac:3f:19:c9:fa:f5:92:3d:bd:c1:b6:4f:36:ac: 31:3d:1f:18:ea:65:eb:d0:e4:dd:28:01:e1:69:8f: 7d:dd:f5:2e:e9:f1:bc:ee:af:bf:f9:a7:78:f6:b9: 40:3b:da:13:78:86:91:f5:77:d0:fe:5e:11:ce:c9: 22:52:1b:34:75:f5:1f:d5:36:93:49:2a:88:3a:3e: 74:b8:b3:29:b8:6a:4c:38:11:5d:17:6d:6a:31:16: dd:09:ee:91:24:38:a9:b2:97:93:63:12:80:e1:dd: ed:f1:0f:4c:99:07:68:88:b1:0a:ab:68:49:dc:22: 03:39:51:30:61:c5:5b:eb:02:b8:2b:45:ae:15:84: 6e:3e:c7:05:fd:f1:8e:2d:9a:99:3d:35:53:75:cf: 3b:c1:88:24:18:3c:37:a3:49:e3:d2:c0:ea:d8:67: 99:d3:7c:08:85:6e:12:64:02:02:51:18:3e:8a:47: cf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:EA:13:BA:23:14:70:7F:92:51:DE:D4:69:9B:F1:F9:C9:75:F8:26 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:fa:01:d1:f7:6e:19:80:90:48:f7:9a:70:86:4d:92:24:62: 42:a7:85:d2:61:b5:95:25:43:7c:a6:20:79:78:da:13:e2:76: 11:e1:dd:1f:a1:16:74:eb:a6:38:a6:af:53:e9:6f:83:9f:3c: d0:69:e2:3e:86:ae:18:69:9a:1b:22:b5:12:7a:65:c6:f3:5e: 98:6d:00:2a:3e:76:47:48:ef:ae:1d:c0:41:ba:0f:61:46:cf: f3:3c:23:a8:22:64:5e:05:5a:bc:0b:aa:8f:14:35:95:77:3f: 15:31:60:77:ac:f6:9f:2d:3e:72:66:97:97:fa:3f:04:4c:e3: 6e:d0:15:79:2c:0a:49:aa:50:ce:25:fd:4d:4c:e1:a0:0e:10: 5d:5f:5a:8d:7c:c3:1e:29:10:59:13:13:66:44:33:de:71:f6: c3:4b:36:2a:4a:f3:a7:ac:74:e5:bb:7e:8f:49:8d:92:60:e7: 0e:c0:83:93:cb:9d:f9:c4:af:25:94:51:b8:96:aa:1b:6d:50: 56:2f:37:6f:83:38:6a:0d:ad:1e:19:8c:60:fb:a4:33:40:6a: 49:2b:ae:85:db:7a:4c:c0:f6:a8:b1:2d:0c:f4:0e:69:31:68: 7b:c2:9a:e5:84:05:e6:e3:97:bf:f3:d6:01:4d:6e:e1:80:36: fd:f5:bc:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUwNTMwMTgxNDU2WhcNMjUwNjA2MTgxNDU2WjAYMRYwFAYD VQQDEw02ODM5ZjVhMS0zMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHXYfBesCHXdC//3Z21z9zSwn60VOjewkgEI3LF2tYQYCAp5vUaS94+KLTwW +eWUFe4D4c7cKmexwWTlN1wE17guvMnde2wymIqIrD8Zyfr1kj29wbZPNqwxPR8Y 6mXr0OTdKAHhaY993fUu6fG87q+/+ad49rlAO9oTeIaR9XfQ/l4RzskiUhs0dfUf 1TaTSSqIOj50uLMpuGpMOBFdF21qMRbdCe6RJDipspeTYxKA4d3t8Q9MmQdoiLEK q2hJ3CIDOVEwYcVb6wK4K0WuFYRuPscF/fGOLZqZPTVTdc87wYgkGDw3o0nj0sDq 2GeZ03wIhW4SZAICURg+ikfPcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTqE7oj FHB/klHe1Gmb8fnJdfgmMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH+gHR924ZgJBI95pwhk2SJGJCp4XSYbWVJUN8piB5eNoT4nYR4d0f oRZ066Y4pq9T6W+DnzzQaeI+hq4YaZobIrUSemXG816YbQAqPnZHSO+uHcBBug9h Rs/zPCOoImReBVq8C6qPFDWVdz8VMWB3rPafLT5yZpeX+j8ETONu0BV5LApJqlDO Jf1NTOGgDhBdX1qNfMMeKRBZExNmRDPecfbDSzYqSvOnrHTlu36PSY2SYOcOwIOT y535xK8llFG4lqobbVBWLzdvgzhqDa0eGYxg+6QzQGpJK66F23pMwPaosS0M9A5p MWh7wprlhAXm45e/89YBTW7hgDb99bxy -----END CERTIFICATE-----Generated at Sat May 31 16:59:22 2025 by rpki-client