$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: GhxWKfKkJdhp1PGiRfkdNkPm0Fi47mW3oZSkGiKMQG8= Subject key identifier: 37:26:E7:1B:59:A0:A6:E3:73:3B:73:C2:FA:C3:A9:79:68:B8:FA:87 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 012C Signing time: Sat 23 Aug 2025 04:46:47 +0000 Manifest this update: Sat 23 Aug 2025 04:46:46 +0000 Manifest next update: Sat 30 Aug 2025 04:46:46 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: m2691I2FzVM8LyzXOwOEzK5XNjA1Bb+888rOczlXEts=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Aug 23 04:46:46 2025 GMT Not After : Aug 30 04:46:46 2025 GMT Subject: CN=68a947b7-33f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:98:8a:ef:a1:13:03:e9:e5:6c:3b:37:36: 7f:62:a3:8a:dd:e5:52:7f:6f:e3:66:1e:4e:e0:c7: c0:41:7d:3e:2a:67:26:c7:9e:85:dc:86:cb:2b:a1: 25:2e:01:1d:54:86:ac:ab:58:ab:ff:ff:7a:93:76: c1:23:7e:8f:23:8b:82:aa:da:1d:77:89:13:c1:30: 4b:a4:32:90:9a:cc:19:5d:75:d3:41:d7:e4:78:cc: 6b:7f:32:30:96:7b:88:b5:7c:c0:8a:67:b6:63:d4: 1f:0b:a2:e4:8b:6b:5a:d7:86:dd:6c:bb:f1:99:0e: 34:d1:d6:dc:3f:6a:05:2e:cb:25:dc:f7:a6:ee:62: 2b:90:bc:0a:59:e7:a5:b7:20:b1:7c:de:ea:8c:13: 66:58:d3:2c:2a:b3:44:1b:f8:6c:8e:a0:ce:29:df: a6:fd:72:e3:ce:a1:90:fe:08:0d:6d:ae:ba:b3:81: c2:9e:7c:82:25:6e:b6:09:b2:f9:76:1a:ee:c9:1c: a9:53:40:46:cc:9d:a9:ae:08:11:80:92:e3:2f:5e: 0c:82:47:15:24:34:d8:79:e5:8a:5f:c3:b0:f5:04: c7:e1:9b:5d:de:63:c0:ac:06:5e:45:7d:83:2a:cb: 63:a0:b6:dd:9c:68:33:e1:74:8c:43:e8:5e:38:4a: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:26:E7:1B:59:A0:A6:E3:73:3B:73:C2:FA:C3:A9:79:68:B8:FA:87 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a8:89:00:f8:cf:4c:7f:b8:c4:9a:b1:48:a0:a3:ee:8a:fa: c6:00:c9:73:73:56:73:e3:8f:d2:00:78:f1:21:6c:34:1a:fc: 10:5a:fc:be:40:42:44:50:56:9e:a5:54:3e:af:b4:e6:72:85: 7f:c4:f6:a0:a1:05:92:69:a4:a6:fe:0e:8d:9a:48:b2:85:6f: 4e:18:4d:d1:ee:29:c1:4e:b6:95:60:46:99:c4:6c:69:4b:61: af:ed:82:b4:02:99:0c:f3:d6:69:0b:e9:c2:6a:b2:3d:07:43: ca:09:16:21:89:68:34:16:37:3e:89:77:38:56:42:71:6b:2d: 55:e9:a4:c9:24:96:e1:43:e9:59:19:34:4b:b0:c9:d6:06:49: 34:aa:fa:85:2b:0a:59:ba:00:f0:22:73:32:3b:93:60:c7:ba: b0:75:4c:f1:ca:c7:fc:b7:b7:a2:b2:dc:cd:0d:5e:d1:24:b6: a3:a0:0e:75:66:86:6b:ef:07:65:e8:9d:43:e2:8e:7f:71:7e: ce:26:26:52:16:89:69:6a:08:bc:28:31:d6:90:3d:87:2d:f5: e4:eb:aa:6c:0c:9d:e1:eb:f7:c4:27:91:6b:01:c3:e1:0f:b2: b8:bb:5d:99:f1:2a:fa:16:91:78:b1:ea:a1:75:7e:7c:23:fa: 76:ee:28:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUwODIzMDQ0NjQ2WhcNMjUwODMwMDQ0NjQ2WjAYMRYwFAYD VQQDEw02OGE5NDdiNy0zM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4KYiu+hEwPp5Ww7NzZ/YqOK3eVSf2/jZh5O4MfAQX0+Kmcmx56F3IbLK6El LgEdVIasq1ir//96k3bBI36PI4uCqtodd4kTwTBLpDKQmswZXXXTQdfkeMxrfzIw lnuItXzAime2Y9QfC6Lki2ta14bdbLvxmQ400dbcP2oFLssl3Pem7mIrkLwKWeel tyCxfN7qjBNmWNMsKrNEG/hsjqDOKd+m/XLjzqGQ/ggNba66s4HCnnyCJW62CbL5 dhruyRypU0BGzJ2prggRgJLjL14MgkcVJDTYeeWKX8Ow9QTH4Ztd3mPArAZeRX2D KstjoLbdnGgz4XSMQ+heOEr9vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcm5xtZ oKbjcztzwvrDqXlouPqHMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmqIkA+M9Mf7jEmrFIoKPuivrGAMlzc1Zz44/SAHjxIWw0GvwQWvy+ QEJEUFaepVQ+r7TmcoV/xPagoQWSaaSm/g6NmkiyhW9OGE3R7inBTraVYEaZxGxp S2Gv7YK0ApkM89ZpC+nCarI9B0PKCRYhiWg0Fjc+iXc4VkJxay1V6aTJJJbhQ+lZ GTRLsMnWBkk0qvqFKwpZugDwInMyO5Ngx7qwdUzxysf8t7eistzNDV7RJLajoA51 ZoZr7wdl6J1D4o5/cX7OJiZSFolpagi8KDHWkD2HLfXk66psDJ3h6/fEJ5FrAcPh D7K4u12Z8Sr6FpF4seqhdX58I/p27igO -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:38 2025 by rpki-client