$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: RYN1058nS5kI3Juyc6JdepbZiOAGBp46wM7xrJeonKU= Subject key identifier: 80:A1:BA:85:CE:6F:1D:8C:55:FE:FD:5D:15:F4:38:76:82:34:C0:D4 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 0149 Signing time: Sun 19 Oct 2025 07:03:41 +0000 Manifest this update: Sun 19 Oct 2025 07:03:41 +0000 Manifest next update: Sun 26 Oct 2025 07:03:41 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: tcaDCgt5tJDlbxRB6xEPbk36sUrZA/NsV8lT1sQzen0=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Oct 19 07:03:41 2025 GMT Not After : Oct 26 07:03:41 2025 GMT Subject: CN=68f48d4d-12fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:55:e5:66:36:3d:63:e0:71:21:8a:65:8e: 1f:1f:f2:bf:fc:c8:c6:94:63:af:ce:a0:b8:a9:d7: b7:5e:eb:a0:68:3d:33:04:26:9c:e5:f4:48:a1:86: e9:3f:37:2c:37:23:9b:88:ed:c5:02:99:98:81:42: b2:d8:15:4f:88:81:3e:f9:d2:b8:31:12:37:b9:1a: d1:d8:cd:bb:68:50:b2:4d:26:6a:86:2b:39:c2:8b: 83:3a:ed:3f:95:f1:a1:8b:bf:c6:18:5b:c5:d1:70: ea:5b:db:00:74:17:d1:f2:ba:c0:b0:c2:28:8c:2b: 5e:a8:79:e9:f3:6d:df:b9:5e:f2:30:67:b8:b0:dd: 88:59:43:80:74:cd:69:01:25:cf:78:06:03:4e:22: a4:c6:50:0e:43:64:1e:fa:d5:fd:65:22:f1:99:91: d9:e4:31:30:70:98:ac:ac:ff:54:ef:8b:05:f0:65: 3b:67:82:e5:56:0c:ef:25:6e:bc:44:70:9d:99:5e: d2:28:07:15:99:c4:cd:48:2e:55:d5:f3:fc:72:e3: 9d:eb:9e:91:74:16:9d:4b:f6:2a:44:31:5b:c8:72: 6e:04:08:38:bf:f1:7f:da:b0:71:1f:83:6a:2a:46: 49:3c:2e:40:33:c3:de:aa:8c:12:30:b2:45:32:db: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A1:BA:85:CE:6F:1D:8C:55:FE:FD:5D:15:F4:38:76:82:34:C0:D4 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:bc:3b:6f:d0:23:f5:e6:99:94:e1:54:18:8f:14:90:8a:90: fe:85:5b:5b:bb:43:3b:fd:8f:fc:e0:83:c0:70:5d:bc:7a:10: 2e:3c:21:4d:e9:60:92:a8:15:e2:52:ac:07:26:42:bd:a7:61: 1b:75:32:7b:b4:d0:4d:b7:05:cf:45:46:65:dd:0e:9c:2f:e8: ec:32:84:f8:4f:fd:fe:91:b8:99:9e:49:45:d0:81:f6:fe:4a: 05:d2:7e:d1:cb:85:90:c4:e2:c9:15:b0:86:8f:55:0a:25:4c: 2c:23:62:91:a6:48:37:61:43:37:2b:0e:05:bb:c0:2e:d6:84: f4:6c:c6:64:45:9a:98:13:72:9f:1e:c6:9e:0f:0e:8b:a4:71: ce:31:20:c6:68:86:a2:1d:c7:92:5a:25:1f:9b:de:f1:02:4e: 5c:2c:c0:70:c4:ad:2f:bb:40:85:ca:1b:ba:80:32:9c:6e:86: 9d:e3:30:c6:0b:b8:6c:cc:16:7c:ad:86:b0:5b:53:e0:8c:c3: 67:b0:65:2f:1b:5d:e6:ae:fd:41:ee:00:3f:66:5d:70:d4:0f: 2c:99:28:af:69:86:df:6e:d0:c5:64:1b:81:39:55:8a:1e:ec: 8d:30:58:28:bc:5a:32:93:9a:35:e1:c6:f1:74:58:ad:2d:69: c6:24:aa:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUxMDE5MDcwMzQxWhcNMjUxMDI2MDcwMzQxWjAYMRYwFAYD VQQDEw02OGY0OGQ0ZC0xMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlFV5WY2PWPgcSGKZY4fH/K//MjGlGOvzqC4qde3XuugaD0zBCac5fRIoYbp PzcsNyObiO3FApmYgUKy2BVPiIE++dK4MRI3uRrR2M27aFCyTSZqhis5wouDOu0/ lfGhi7/GGFvF0XDqW9sAdBfR8rrAsMIojCteqHnp823fuV7yMGe4sN2IWUOAdM1p ASXPeAYDTiKkxlAOQ2Qe+tX9ZSLxmZHZ5DEwcJisrP9U74sF8GU7Z4LlVgzvJW68 RHCdmV7SKAcVmcTNSC5V1fP8cuOd656RdBadS/YqRDFbyHJuBAg4v/F/2rBxH4Nq KkZJPC5AM8PeqowSMLJFMttgcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIChuoXO bx2MVf79XRX0OHaCNMDUMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFvDtv0CP15pmU4VQYjxSQipD+hVtbu0M7/Y/84IPAcF28ehAuPCFN 6WCSqBXiUqwHJkK9p2EbdTJ7tNBNtwXPRUZl3Q6cL+jsMoT4T/3+kbiZnklF0IH2 /koF0n7Ry4WQxOLJFbCGj1UKJUwsI2KRpkg3YUM3Kw4Fu8Au1oT0bMZkRZqYE3Kf HsaeDw6LpHHOMSDGaIaiHceSWiUfm97xAk5cLMBwxK0vu0CFyhu6gDKcboad4zDG C7hszBZ8rYawW1PgjMNnsGUvG13mrv1B7gA/Zl1w1A8smSivaYbfbtDFZBuBOVWK HuyNMFgovFoyk5o14cbxdFitLWnGJKqU -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:49 2025 by rpki-client