$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: 7HSfhhydG1ls7POw9RU1cPgNjjEDHs6+hvmmHqeYUBw= Subject key identifier: 2A:FC:59:A5:3F:72:AE:62:E4:FA:89:85:14:D4:B7:B7:45:93:8F:2E Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 0972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 096A Signing time: Thu 18 Sep 2025 20:22:45 +0000 Manifest this update: Thu 18 Sep 2025 20:22:44 +0000 Manifest next update: Thu 25 Sep 2025 20:22:44 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: YAQo2MvVkTJ47/mTLNPB+kS/8BKbTYMQYU5jljbaB/k=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: UPW2zn+2qw+0Yqrrnh/8eodDuScZl7h14KT7X1Bf96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2418 (0x972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Sep 18 20:22:44 2025 GMT Not After : Sep 25 20:22:44 2025 GMT Subject: CN=68cc6a15-7757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:60:d3:e9:f3:ff:6a:6c:73:43:3f:96:82:00: f7:c6:e1:f9:bd:34:26:b2:0c:7c:32:08:92:5d:21: c5:43:43:e0:72:bb:23:34:f8:44:ff:76:3f:3a:0c: 62:a0:9e:22:e2:14:7c:32:f2:88:e1:1c:45:4c:f8: 15:7b:9a:de:e8:b5:a0:27:6b:7d:cc:da:39:78:ab: b4:a0:d0:b1:5e:b0:89:e1:47:b1:e8:15:df:59:c1: 48:08:7b:31:82:ee:ab:62:c2:55:03:d3:93:ed:1c: fa:f7:6b:4a:63:52:f9:94:fc:a4:7c:5a:e3:35:f3: 7d:ce:fd:c3:56:e9:33:d4:e7:dc:0e:35:bc:96:e4: 97:72:cc:00:31:96:00:98:9b:1e:da:de:2f:b9:9e: fa:c4:2d:0a:b6:b7:7e:25:2f:9a:bd:2e:be:9e:25: b8:2f:e8:ad:f5:a5:46:f9:74:10:fc:c1:b1:5f:0e: 17:02:84:d0:a1:29:b7:5c:40:5a:43:89:60:f8:cb: 44:21:d1:d3:3d:4d:35:21:1f:bd:37:b2:8f:1c:2e: 82:77:59:67:38:39:87:8b:b6:99:21:37:ee:23:be: 20:c0:4e:e8:3c:c9:4a:1d:cc:57:56:40:bf:26:b5: ec:a6:32:82:62:17:5e:80:9d:5c:a9:8a:99:66:5e: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FC:59:A5:3F:72:AE:62:E4:FA:89:85:14:D4:B7:B7:45:93:8F:2E X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:37:7e:66:83:a2:12:8a:34:3b:3c:e6:6e:80:7e:92:a7:a5: cf:3a:67:dd:1e:13:33:62:fe:32:2c:79:83:83:4a:17:e7:5b: d0:30:d5:ea:21:34:f7:91:38:7c:93:b0:63:93:b4:15:2c:bc: c6:15:26:fc:81:4c:ea:6b:98:c8:03:58:cf:d4:b1:ad:37:bd: ab:38:94:d8:d1:c8:c0:20:ec:61:12:11:83:1b:b8:6f:bb:3b: ae:46:1c:9d:8f:5d:05:88:32:87:43:7e:19:11:e6:74:d2:57: 40:f3:41:23:83:62:ea:f6:15:3b:e2:98:c0:86:96:1d:dd:4a: 10:25:6d:01:c9:c7:94:d7:4c:b0:0f:e6:d7:0e:55:d8:d6:a2: de:3d:84:a9:0c:b4:1b:b1:63:5b:88:5f:cc:bc:30:b9:7b:61: a2:6e:31:f2:4d:88:cb:de:1d:33:c8:4b:c6:b3:53:f5:d8:9f: b0:db:a4:79:b8:db:31:cb:0f:d2:81:2e:5a:40:a4:91:90:28: af:fe:35:1e:9b:20:73:44:75:2b:ca:42:96:78:13:35:21:1d: b4:dc:e3:d4:e4:dc:c1:5c:fc:43:9e:f2:63:8c:70:2a:9f:e0: f6:25:b7:d1:6e:89:dd:78:c8:d0:07:b3:63:70:46:b0:0f:c0: 05:d6:f6:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUwOTE4MjAyMjQ0WhcNMjUwOTI1MjAyMjQ0WjAYMRYwFAYD VQQDEw02OGNjNmExNS03NzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GDT6fP/amxzQz+WggD3xuH5vTQmsgx8MgiSXSHFQ0PgcrsjNPhE/3Y/Ogxi oJ4i4hR8MvKI4RxFTPgVe5re6LWgJ2t9zNo5eKu0oNCxXrCJ4Uex6BXfWcFICHsx gu6rYsJVA9OT7Rz692tKY1L5lPykfFrjNfN9zv3DVukz1OfcDjW8luSXcswAMZYA mJse2t4vuZ76xC0Ktrd+JS+avS6+niW4L+it9aVG+XQQ/MGxXw4XAoTQoSm3XEBa Q4lg+MtEIdHTPU01IR+9N7KPHC6Cd1lnODmHi7aZITfuI74gwE7oPMlKHcxXVkC/ JrXspjKCYhdegJ1cqYqZZl6R7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr8WaU/ cq5i5PqJhRTUt7dFk48uMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjN35mg6ISijQ7POZugH6Sp6XPOmfdHhMzYv4yLHmDg0oX51vQMNXq ITT3kTh8k7Bjk7QVLLzGFSb8gUzqa5jIA1jP1LGtN72rOJTY0cjAIOxhEhGDG7hv uzuuRhydj10FiDKHQ34ZEeZ00ldA80Ejg2Lq9hU74pjAhpYd3UoQJW0ByceU10yw D+bXDlXY1qLePYSpDLQbsWNbiF/MvDC5e2GibjHyTYjL3h0zyEvGs1P12J+w26R5 uNsxyw/SgS5aQKSRkCiv/jUemyBzRHUrykKWeBM1IR203OPU5NzBXPxDnvJjjHAq n+D2JbfRbondeMjQB7NjcEawD8AF1vZf -----END CERTIFICATE-----Generated at Fri Sep 19 00:59:23 2025 by rpki-client