$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: FYpwjtun0gqlyRG6L8RUbPrIRWvsIRWr4GhKgC/2Weo= Subject key identifier: 39:FE:CD:DD:03:7A:22:E5:20:E1:5D:F0:2B:E7:6F:3A:C3:1F:53:D2 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: F9 Signing time: Tue 13 May 2025 04:25:11 +0000 Manifest this update: Tue 13 May 2025 04:25:10 +0000 Manifest next update: Tue 20 May 2025 04:25:10 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: S1sgnYzR1oywxjF93JfOq3FxbEBBStAryJ8e6KDvcYQ=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:25:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: May 13 04:25:10 2025 GMT Not After : May 20 04:25:10 2025 GMT Subject: CN=6822c9a6-ac75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b7:98:17:82:5c:bd:47:f1:cc:95:7a:30:33: 7b:7b:cf:80:28:01:cc:25:fc:3e:8b:03:b5:95:81: 58:a2:6b:b5:86:85:e4:fd:b6:eb:e8:3c:eb:1d:2f: eb:1e:35:7c:30:2f:cf:51:dc:c2:01:fe:11:1b:5a: 12:9a:0f:2f:95:d7:43:f7:da:d7:fe:3c:96:d5:4d: 5b:1b:40:b2:27:24:ee:c2:7a:b9:b9:82:86:ff:d9: 97:d7:21:3a:0c:21:10:4a:9a:fc:69:0c:3c:98:0d: 13:12:f9:45:f1:bf:03:56:56:ab:89:2d:bf:f9:03: d3:8e:37:dc:60:43:0f:70:08:ef:5a:95:eb:a1:f9: cb:8c:c5:17:df:c9:c1:52:e3:24:21:2f:c6:82:7b: 38:12:03:22:2b:e5:12:fc:b9:bb:f8:99:77:df:b5: 91:a6:35:35:bb:7d:f0:31:cb:61:68:9d:64:44:1c: 03:cd:a3:a7:7b:60:fc:c0:21:00:c9:c7:5f:48:a4: 28:4d:44:a1:e1:a4:b3:69:e8:79:39:7b:ff:a7:b2: 40:d0:76:64:f3:59:8a:e8:ae:10:48:b8:95:bf:ee: 94:43:62:e7:c3:a6:04:ef:ef:30:49:28:47:24:b1: 19:84:da:f7:2d:00:88:9c:21:64:b0:d5:97:55:2e: 05:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FE:CD:DD:03:7A:22:E5:20:E1:5D:F0:2B:E7:6F:3A:C3:1F:53:D2 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:d6:c0:71:ae:d5:ad:f1:d6:4e:fe:45:92:b3:80:e0:5f:7c: 75:18:d8:87:6f:4a:93:b7:fc:f3:2a:fe:86:c1:1b:51:e0:b4: e7:23:d6:51:11:3b:45:30:2c:fa:3a:56:e5:1d:bc:85:c6:3d: 69:d7:be:da:3c:71:3c:f7:a3:33:67:0c:22:b1:06:c2:06:83: 10:1b:ca:ba:6d:3c:61:29:80:4c:d7:8d:8f:97:0c:d9:68:53: d6:60:2e:f2:e8:f1:90:7b:ad:94:fc:c8:04:75:2a:fd:51:64: 42:48:b3:f3:b8:b1:ae:f7:3c:d8:33:3b:fd:9c:c1:06:f6:47: a8:e2:42:0d:07:d7:60:cf:77:b8:43:0b:a8:84:e9:8f:de:22: c2:b8:7d:69:c3:cc:97:31:40:61:c4:71:3c:f8:71:b2:e6:2c: 8c:c2:d3:5f:7b:a7:c1:87:15:d5:af:67:d6:f3:1c:4f:bc:af: 7b:18:6e:e4:9b:2e:5f:00:f2:0a:ea:0e:e5:7d:c8:cb:26:75: 11:b4:98:53:de:98:f0:cf:56:d6:de:13:d6:71:33:b1:07:04: b2:22:0f:61:a2:89:2d:1c:a4:58:20:96:1f:16:fa:6f:27:63: e4:27:a0:ff:95:93:9f:58:61:ab:fe:03:c9:0c:9b:02:f6:50: 26:90:82:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUwNTEzMDQyNTEwWhcNMjUwNTIwMDQyNTEwWjAYMRYwFAYD VQQDEw02ODIyYzlhNi1hYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvreYF4JcvUfxzJV6MDN7e8+AKAHMJfw+iwO1lYFYomu1hoXk/bbr6DzrHS/r HjV8MC/PUdzCAf4RG1oSmg8vlddD99rX/jyW1U1bG0CyJyTuwnq5uYKG/9mX1yE6 DCEQSpr8aQw8mA0TEvlF8b8DVlariS2/+QPTjjfcYEMPcAjvWpXrofnLjMUX38nB UuMkIS/Ggns4EgMiK+US/Lm7+Jl337WRpjU1u33wMcthaJ1kRBwDzaOne2D8wCEA ycdfSKQoTUSh4aSzaeh5OXv/p7JA0HZk81mK6K4QSLiVv+6UQ2Lnw6YE7+8wSShH JLEZhNr3LQCInCFksNWXVS4FDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn+zd0D eiLlIOFd8CvnbzrDH1PSMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT1sBxrtWt8dZO/kWSs4DgX3x1GNiHb0qTt/zzKv6GwRtR4LTnI9ZR ETtFMCz6OlblHbyFxj1p177aPHE896MzZwwisQbCBoMQG8q6bTxhKYBM142PlwzZ aFPWYC7y6PGQe62U/MgEdSr9UWRCSLPzuLGu9zzYMzv9nMEG9keo4kINB9dgz3e4 QwuohOmP3iLCuH1pw8yXMUBhxHE8+HGy5iyMwtNfe6fBhxXVr2fW8xxPvK97GG7k my5fAPIK6g7lfcjLJnURtJhT3pjwz1bW3hPWcTOxBwSyIg9hooktHKRYIJYfFvpv J2PkJ6D/lZOfWGGr/gPJDJsC9lAmkIJU -----END CERTIFICATE-----Generated at Wed May 14 13:29:08 2025 by rpki-client