$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json) Hash identifier: nUt38fwtCbjhIMyCmjhowG5QusEkHBsF8V+oOAf9Erk= Subject key identifier: 39:B6:2E:C6:34:EE:78:EF:E4:6A:0C:F3:DA:64:DC:F5:A4:08:82:12 Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Certificate serial: 0606 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft Manifest number: 0600 Signing time: Sun 19 Oct 2025 00:31:23 +0000 Manifest this update: Sun 19 Oct 2025 00:31:22 +0000 Manifest next update: Sun 26 Oct 2025 00:31:22 +0000 Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: AVV7sx0ph/+3aQKGl4zfkm1jC9Gkf8eN/CEqGMYvUlQ=) 2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1542 (0x606) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Validity Not Before: Oct 19 00:31:22 2025 GMT Not After : Oct 26 00:31:22 2025 GMT Subject: CN=68f4315b-2a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:df:58:9f:ab:0f:e0:56:09:37:85:d1:35: b6:2a:10:2b:2f:49:4c:19:4c:d5:8e:a4:23:e0:01: ec:6e:56:ab:98:67:a1:a2:d1:2c:c0:99:bb:e9:d1: 0c:d8:b2:5d:ba:8e:a1:3c:14:92:23:4a:26:92:9d: e7:43:20:55:5c:a7:62:38:53:65:76:7a:c7:14:9b: b5:b6:35:9a:70:ef:7b:5d:e5:a7:99:ee:33:68:11: 0f:47:30:f5:9f:1b:d1:0f:7e:3e:ff:bd:11:f2:31: 5a:62:d4:4d:31:25:c8:2b:f2:21:36:f3:42:e5:4b: c5:50:c6:56:1e:1a:88:ef:d6:ad:50:c5:2f:3c:15: 56:cd:72:54:ca:41:f3:22:b0:9c:4e:96:82:63:ba: c9:ea:f8:c7:f1:0b:d2:83:cb:20:1c:39:1c:f4:5e: f1:95:65:f7:72:f4:1d:42:f0:7d:13:d9:dd:b5:81: 3c:26:ab:84:32:9a:31:b0:99:97:80:7c:6a:15:d5: bf:db:9d:7d:85:08:2b:7a:45:6e:c8:76:be:83:74: 8a:d8:bc:c6:e7:72:3b:74:7a:69:03:36:3c:b1:0d: 24:80:28:62:cb:60:03:1b:fd:99:b9:2d:19:55:e5: 30:df:07:52:9f:f5:f1:6a:ed:42:9f:c2:b0:97:df: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:B6:2E:C6:34:EE:78:EF:E4:6A:0C:F3:DA:64:DC:F5:A4:08:82:12 X509v3 Authority Key Identifier: keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:86:b2:99:dd:ce:46:f2:dc:76:cb:bf:8d:99:a8:5e:2c:55: cc:cb:5e:0f:6f:55:c7:db:6a:58:07:67:54:9e:b6:d5:d0:38: b9:98:bf:af:0b:27:ee:82:aa:fe:fb:55:f8:f0:31:f5:94:bb: 98:f6:4a:bc:0e:b2:15:01:3d:70:2c:63:0f:22:f9:f2:9d:18: 4c:1f:43:fb:3f:e7:5b:9e:18:7c:b9:5d:c3:f7:58:7b:4f:31: 5a:82:f6:d0:53:40:26:86:32:9c:86:c9:e9:c0:24:1a:f6:db: 5a:d8:7d:bd:83:93:13:21:f7:65:10:09:90:f8:10:9e:02:0d: 90:59:fb:2d:83:25:04:d6:c3:68:4e:09:db:0e:49:d7:5c:cf: 31:ec:d6:c1:63:68:76:b7:bf:1d:05:d5:d4:25:be:c8:c8:4c: 59:e4:66:5e:8b:00:cd:fe:57:4f:b9:23:12:44:d8:3b:b9:fb: 6d:cc:1e:b4:a7:b5:f7:aa:28:2a:53:30:eb:3d:4d:60:57:fa: 84:b8:b2:11:63:53:7d:86:56:cc:0c:95:61:cd:3b:5c:13:8a: 90:d6:de:dc:53:96:84:35:f8:70:64:76:88:27:0c:6c:0b:68: 6d:64:ef:1d:49:b5:5f:66:ac:87:ff:7c:99:ef:7f:5f:64:d0: 58:f9:73:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB MEMzMEJDODAwHhcNMjUxMDE5MDAzMTIyWhcNMjUxMDI2MDAzMTIyWjAYMRYwFAYD VQQDEw02OGY0MzE1Yi0yYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe3fWJ+rD+BWCTeF0TW2KhArL0lMGUzVjqQj4AHsblarmGehotEswJm76dEM 2LJduo6hPBSSI0omkp3nQyBVXKdiOFNldnrHFJu1tjWacO97XeWnme4zaBEPRzD1 nxvRD34+/70R8jFaYtRNMSXIK/IhNvNC5UvFUMZWHhqI79atUMUvPBVWzXJUykHz IrCcTpaCY7rJ6vjH8QvSg8sgHDkc9F7xlWX3cvQdQvB9E9ndtYE8JquEMpoxsJmX gHxqFdW/2519hQgrekVuyHa+g3SK2LzG53I7dHppAzY8sQ0kgChiy2ADG/2ZuS0Z VeUw3wdSn/Xxau1Cn8Kwl99QIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDm2LsY0 7njv5GoM89pk3PWkCIISMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2 MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J RXVfNDJLUDF3RVNnd3d2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEhrKZ3c5G8tx2y7+NmaheLFXMy14Pb1XH22pYB2dUnrbV0Di5mL+v Cyfugqr++1X48DH1lLuY9kq8DrIVAT1wLGMPIvnynRhMH0P7P+dbnhh8uV3D91h7 TzFagvbQU0AmhjKchsnpwCQa9tta2H29g5MTIfdlEAmQ+BCeAg2QWfstgyUE1sNo TgnbDknXXM8x7NbBY2h2t78dBdXUJb7IyExZ5GZeiwDN/ldPuSMSRNg7ufttzB60 p7X3qigqUzDrPU1gV/qEuLIRY1N9hlbMDJVhzTtcE4qQ1t7cU5aENfhwZHaIJwxs C2htZO8dSbVfZqyH/3yZ739fZNBY+XPr -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:13 2025 by rpki-client