$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json) Hash identifier: Ditemk6BCCfUHEfTy7/IpPTyZEOIMq4ed03FXBOlxtA= Subject key identifier: 6D:6E:8E:24:39:06:A0:BA:E5:4C:FA:FA:5A:AD:F5:01:AB:07:94:DD Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Certificate serial: 05E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft Manifest number: 05E3 Signing time: Fri 22 Aug 2025 23:10:29 +0000 Manifest this update: Fri 22 Aug 2025 23:10:29 +0000 Manifest next update: Fri 29 Aug 2025 23:10:28 +0000 Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: PohL82w7YSEvZyiztZYDTKsapxv1Uet/I3qXT5qP5mM=) 2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1513 (0x5e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Validity Not Before: Aug 22 23:10:29 2025 GMT Not After : Aug 29 23:10:28 2025 GMT Subject: CN=68a8f8e5-5199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b4:1f:9e:ed:02:f4:0c:50:6e:ac:75:34:35: 95:5e:6a:31:a9:2a:9e:06:ca:8d:ea:6a:07:0c:4a: 02:eb:a1:d5:1a:d5:de:ed:ee:e2:59:75:ae:cd:3e: f0:73:05:47:3a:b7:08:a0:cc:f6:2e:ac:6a:68:90: 5e:67:f2:c0:eb:6b:82:bf:05:bc:50:ab:92:25:fb: 85:db:2b:d9:74:3d:3b:ed:9b:2a:1f:c3:49:9e:6f: 93:fb:75:37:4b:8e:d1:fa:9d:bf:19:48:e0:89:db: 30:c8:44:fd:8c:fb:01:b9:66:b3:d8:9f:0f:93:ea: 96:7e:81:2b:a1:cb:cc:02:93:5a:7f:16:e4:a1:16: 6e:4b:7c:5f:f7:f9:57:34:18:47:19:a8:82:f1:a7: c9:00:74:64:f7:ad:b2:4d:a7:d8:c2:44:bb:c9:41: 27:34:73:d3:1a:aa:fa:cb:d3:9d:60:31:39:5c:0a: 8a:40:e5:aa:b7:e2:76:84:3f:56:b5:88:e3:12:ad: 2f:13:84:d0:33:b5:8c:8e:fb:fa:d3:2d:fd:52:c2: a7:5f:a3:1e:7f:29:85:9d:e0:5b:bb:63:0a:01:ac: 49:12:82:1c:f5:60:9a:46:c3:4a:8a:36:96:21:e2: ae:35:4c:be:df:77:e7:c8:ae:6a:3d:91:61:b1:ee: b5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6E:8E:24:39:06:A0:BA:E5:4C:FA:FA:5A:AD:F5:01:AB:07:94:DD X509v3 Authority Key Identifier: keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:1a:b5:c0:e2:5f:a6:52:4c:09:30:b2:1f:f1:e4:6b:45:75: 19:b7:94:1a:37:75:e3:01:f5:6f:d3:7a:9a:aa:88:b5:ba:28: ec:2b:34:d6:0d:c7:6b:cb:6b:2c:4f:82:21:8f:9c:75:d4:83: 8c:f7:42:22:ca:31:83:d7:91:6f:88:22:37:3a:ae:e7:21:63: 76:40:4f:ae:6d:1c:11:71:b7:f9:46:47:ab:21:16:16:2e:97: 70:85:63:e8:ca:c7:0f:1f:30:1d:72:91:cc:b5:df:48:47:7f: 69:81:c9:7b:f1:5b:71:9e:27:43:e6:4a:54:a5:a7:0f:89:b0: da:b8:24:92:71:4a:20:75:fb:0a:28:6c:2c:0f:b9:97:c8:a8: 76:00:e0:75:73:3b:00:4a:04:dc:c8:0f:c8:a6:84:ce:d4:1a: 73:b7:97:03:96:55:73:f6:b5:2e:26:7b:75:bd:79:fb:7b:b8: b9:ed:f5:5c:20:75:a7:28:86:c8:53:d7:0d:ab:17:9a:7b:b6: 33:9b:08:6c:f0:42:3a:46:8d:13:30:2d:0f:fa:1d:c5:c8:b7: 7c:66:65:f6:be:8d:1e:bc:46:fa:e7:d2:1c:7b:96:b0:98:61: 3a:46:df:b3:56:f2:97:40:23:26:96:9a:11:2f:8f:ca:3b:56: 69:fe:c5:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB MEMzMEJDODAwHhcNMjUwODIyMjMxMDI5WhcNMjUwODI5MjMxMDI4WjAYMRYwFAYD VQQDEw02OGE4ZjhlNS01MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLQfnu0C9AxQbqx1NDWVXmoxqSqeBsqN6moHDEoC66HVGtXe7e7iWXWuzT7w cwVHOrcIoMz2LqxqaJBeZ/LA62uCvwW8UKuSJfuF2yvZdD077ZsqH8NJnm+T+3U3 S47R+p2/GUjgidswyET9jPsBuWaz2J8Pk+qWfoErocvMApNafxbkoRZuS3xf9/lX NBhHGaiC8afJAHRk962yTafYwkS7yUEnNHPTGqr6y9OdYDE5XAqKQOWqt+J2hD9W tYjjEq0vE4TQM7WMjvv60y39UsKnX6MefymFneBbu2MKAaxJEoIc9WCaRsNKijaW IeKuNUy+33fnyK5qPZFhse61KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1ujiQ5 BqC65Uz6+lqt9QGrB5TdMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2 MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J RXVfNDJLUDF3RVNnd3d2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBGrXA4l+mUkwJMLIf8eRrRXUZt5QaN3XjAfVv03qaqoi1uijsKzTW Dcdry2ssT4Ihj5x11IOM90IiyjGD15FviCI3Oq7nIWN2QE+ubRwRcbf5RkerIRYW LpdwhWPoyscPHzAdcpHMtd9IR39pgcl78VtxnidD5kpUpacPibDauCSScUogdfsK KGwsD7mXyKh2AOB1czsASgTcyA/IpoTO1Bpzt5cDllVz9rUuJnt1vXn7e7i57fVc IHWnKIbIU9cNqxeae7Yzmwhs8EI6Ro0TMC0P+h3FyLd8ZmX2vo0evEb659Ice5aw mGE6Rt+zVvKXQCMmlpoRL4/KO1Zp/sUE -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:13 2025 by rpki-client