$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: szm4A6foJdgIEosFmoB0c1YPpZ38qeqdPaBMITWWSaE= Subject key identifier: 6A:D3:AA:40:3F:72:3A:52:2E:81:0D:5E:8C:C4:DB:EA:5F:C9:01:00 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 0112 Signing time: Thu 03 Jul 2025 05:06:39 +0000 Manifest this update: Thu 03 Jul 2025 05:06:39 +0000 Manifest next update: Thu 10 Jul 2025 05:06:39 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: BuPC2hrrxG+aUCiU2lDRoAG+m6PkWbCzGtiiaEr1BRw=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Jul 3 05:06:39 2025 GMT Not After : Jul 10 05:06:39 2025 GMT Subject: CN=68660fdf-909c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:75:d7:98:64:20:da:fa:bb:23:09:e4:7d: 35:45:0e:ff:86:ca:09:10:4d:f8:77:33:46:03:87: 2b:d4:c5:67:66:86:0a:fe:b0:b3:9a:a4:fb:e5:c4: 6b:d5:aa:9a:44:2a:d5:7a:ff:a3:c3:f8:e5:6f:26: 96:f8:ef:2d:24:86:98:d4:f4:af:e0:d9:d4:f5:55: c9:0d:96:5b:b2:6e:00:2c:90:ea:24:b6:84:0d:b8: 2c:ce:82:9c:42:79:bf:c1:01:4b:d5:66:62:46:29: 54:d2:1f:ad:af:23:b5:23:b3:13:f0:dc:33:99:ed: fb:68:00:c4:37:38:1a:73:01:6c:3e:e2:8a:1a:43: 00:62:08:67:fb:d6:66:16:d0:19:6e:95:6d:22:d7: de:4f:d1:15:4d:85:a4:2c:28:18:ef:9d:aa:3a:a1: 7c:2e:f6:a7:c5:a8:02:81:c6:03:b2:ca:0e:b1:04: 02:d5:2b:0f:d8:18:6f:38:79:cb:d7:18:5a:af:31: 2e:d8:10:28:68:51:75:b0:48:7b:84:41:73:2e:72: 9e:ce:a9:bd:d4:0c:de:ff:ea:38:a0:c4:82:fc:46: 3b:58:6c:9d:8e:df:b8:8e:da:84:5f:96:9d:6c:12: 54:7a:c4:ad:b8:5b:a7:89:73:ea:ff:19:3f:84:72: 6a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:AA:40:3F:72:3A:52:2E:81:0D:5E:8C:C4:DB:EA:5F:C9:01:00 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a8:99:d8:39:5e:bd:59:b6:e3:55:11:49:53:f9:c4:7b:e3: 79:35:d7:b5:ed:0d:78:aa:1d:94:4e:c1:45:b9:8b:66:39:b8: 3d:75:26:33:bf:8a:03:53:74:02:a2:06:91:d5:0b:4c:96:5f: d8:10:81:1c:f6:9f:c5:d6:01:34:3b:80:f0:ff:38:82:e8:7c: ac:25:3b:37:66:a1:f7:6d:bd:b2:fa:65:54:dc:78:a4:7f:f5: 4d:e7:8c:a3:1b:f7:db:5c:60:8c:40:3b:89:e7:bb:c1:a6:ab: 88:0d:79:7e:a0:55:ca:ff:64:58:0e:41:b8:b5:f2:0f:dc:1e: 8e:00:7e:f1:15:46:21:4a:03:d3:76:ba:00:54:e2:28:e1:78: b5:7f:a3:7a:7f:44:24:23:79:18:7d:6a:a0:dd:e5:6d:63:73: b4:99:8d:b5:65:ac:82:f4:1b:55:6c:c1:2d:0a:e6:cc:08:7b: fb:b9:d9:21:b6:e8:ac:52:c6:2e:41:68:84:77:79:ae:48:e9: 9a:7e:2e:42:56:07:2e:df:da:51:5d:e7:3d:22:ff:65:43:96: 63:3b:e0:58:6d:f2:c9:d7:a7:e1:66:34:be:11:f3:77:4e:96: 8a:a0:92:8f:49:63:a2:78:54:e7:62:9d:3e:c2:97:2d:88:82: e5:d8:14:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUwNzAzMDUwNjM5WhcNMjUwNzEwMDUwNjM5WjAYMRYwFAYD VQQDEw02ODY2MGZkZi05MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzp115hkINr6uyMJ5H01RQ7/hsoJEE34dzNGA4cr1MVnZoYK/rCzmqT75cRr 1aqaRCrVev+jw/jlbyaW+O8tJIaY1PSv4NnU9VXJDZZbsm4ALJDqJLaEDbgszoKc Qnm/wQFL1WZiRilU0h+tryO1I7MT8Nwzme37aADENzgacwFsPuKKGkMAYghn+9Zm FtAZbpVtItfeT9EVTYWkLCgY752qOqF8LvanxagCgcYDssoOsQQC1SsP2BhvOHnL 1xharzEu2BAoaFF1sEh7hEFzLnKezqm91Aze/+o4oMSC/EY7WGydjt+4jtqEX5ad bBJUesStuFuniXPq/xk/hHJq4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrTqkA/ cjpSLoENXozE2+pfyQEAMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIqJnYOV69WbbjVRFJU/nEe+N5Nde17Q14qh2UTsFFuYtmObg9dSYz v4oDU3QCogaR1QtMll/YEIEc9p/F1gE0O4Dw/ziC6HysJTs3ZqH3bb2y+mVU3Hik f/VN54yjG/fbXGCMQDuJ57vBpquIDXl+oFXK/2RYDkG4tfIP3B6OAH7xFUYhSgPT droAVOIo4Xi1f6N6f0QkI3kYfWqg3eVtY3O0mY21ZayC9BtVbMEtCubMCHv7udkh tuisUsYuQWiEd3muSOmafi5CVgcu39pRXec9Iv9lQ5ZjO+BYbfLJ16fhZjS+EfN3 TpaKoJKPSWOieFTnYp0+wpctiILl2BS2 -----END CERTIFICATE-----Generated at Fri Jul 4 22:18:20 2025 by rpki-client