$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json) Hash identifier: PO0g6oHXxSPpBAA001ucptMbBgPJJ26/N2HHOkzdggM= Subject key identifier: 3E:70:5B:B2:26:6A:76:51:65:4C:A7:53:CC:59:36:A3:B4:D2:57:4E Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Certificate serial: 0621 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft Manifest number: 061C Signing time: Tue 04 Nov 2025 22:53:46 +0000 Manifest this update: Tue 04 Nov 2025 22:53:45 +0000 Manifest next update: Tue 11 Nov 2025 22:53:45 +0000 Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: kwLhg1RNDMqADXT6HqjiKtjFpd3aivCnYyGLnK8SUHM=) 2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: aJNEKMighzJgRijL/uKI8yCdGKsKV/KJafHUF4cH4Rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1569 (0x621) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127656, serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Validity Not Before: Nov 4 22:53:45 2025 GMT Not After : Nov 11 22:53:45 2025 GMT Subject: CN=690a83fa-1152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:dc:d2:ee:20:de:2b:fa:0a:fb:f4:65:09:4f: 00:86:b4:ad:e3:be:ed:ca:d3:0a:af:c0:3e:4e:c4: 48:f1:d7:d9:41:a5:43:5b:8e:d5:f0:fb:8d:69:7e: 74:ff:40:7b:0e:e8:b5:0f:8e:8b:73:e2:11:cd:2e: 81:6f:fe:9c:67:d3:b3:ce:3b:21:07:77:39:42:ec: 1e:b0:76:49:63:47:cc:ee:4e:b7:2f:08:59:13:94: a9:e0:ab:56:dc:6c:e2:7e:68:2e:1c:64:39:14:ee: 06:c0:f4:f9:25:8c:69:8b:d7:b8:4c:85:0c:fb:7a: f6:08:52:1e:09:dc:34:51:b5:cf:89:ce:5d:d5:d1: 7c:0c:c5:ed:45:6c:e2:c3:fd:7c:41:ca:2e:0b:8c: 8f:69:40:35:55:7c:b4:24:9a:aa:23:d0:ed:42:a8: f8:59:d3:0c:1e:a6:20:8e:ef:a2:a7:8f:9f:f3:95: 38:40:30:15:59:53:dd:c3:ee:6d:22:ce:d8:18:a5: 49:e6:9c:7f:65:92:6e:7e:bd:4c:28:fd:ec:02:d6: fd:fd:12:9d:2d:a6:68:5e:aa:f2:7c:26:95:c0:08: 96:11:1e:39:de:c3:08:88:00:6c:3e:b4:27:ae:9f: 94:9f:51:4f:c4:00:3f:c5:39:e0:dd:4b:31:55:21: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:70:5B:B2:26:6A:76:51:65:4C:A7:53:CC:59:36:A3:B4:D2:57:4E X509v3 Authority Key Identifier: keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:36:52:8b:8d:9a:89:8a:06:fc:d1:52:b2:9e:67:99:02:38: 89:f3:d7:0c:db:e7:10:97:db:be:f1:63:da:e3:17:9d:41:76: 8f:50:65:be:4c:62:e7:88:8e:8f:d7:10:5e:5a:52:e3:bd:a6: 46:60:a5:70:81:a7:22:34:12:74:46:84:55:e3:4f:c9:09:51: 1c:88:3b:5f:75:41:f0:e7:47:d8:6c:36:1a:42:9e:11:82:f3: 59:8d:96:99:df:fa:18:8c:2e:50:34:3c:c8:a3:a6:7e:8a:13: 5d:e7:e2:60:50:2b:99:c3:e3:08:cc:ea:8d:88:f9:d0:46:c8: 40:63:10:56:e5:4f:e9:5d:63:e6:92:bf:af:8e:01:d5:2e:9f: c0:0b:02:db:6c:fc:79:5f:aa:5f:c2:30:66:10:12:65:9e:f9: c1:27:dc:d3:0e:c0:01:6f:50:f0:c5:f0:5a:b8:e6:2e:c1:94: 71:3d:24:95:30:ed:9f:30:db:cf:33:33:f8:bc:0a:0e:f3:a1: 75:b8:c1:62:79:43:22:53:94:0d:ca:27:54:bc:94:90:b0:07: 3e:36:80:5b:6a:f0:e0:ae:9b:8e:29:fe:91:bb:7c:6d:b7:65: 0d:7d:a8:69:4c:dd:b8:97:99:cc:f2:e0:7c:6a:37:6f:c9:34: b5:01:1e:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2 RDU3M0JENzEwHhcNMjUxMTA0MjI1MzQ1WhcNMjUxMTExMjI1MzQ1WjAYMRYwFAYD VQQDEw02OTBhODNmYS0xMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdzS7iDeK/oK+/RlCU8AhrSt477tytMKr8A+TsRI8dfZQaVDW47V8PuNaX50 /0B7Dui1D46Lc+IRzS6Bb/6cZ9OzzjshB3c5QuwesHZJY0fM7k63LwhZE5Sp4KtW 3GzifmguHGQ5FO4GwPT5JYxpi9e4TIUM+3r2CFIeCdw0UbXPic5d1dF8DMXtRWzi w/18QcouC4yPaUA1VXy0JJqqI9DtQqj4WdMMHqYgju+ip4+f85U4QDAVWVPdw+5t Is7YGKVJ5px/ZZJufr1MKP3sAtb9/RKdLaZoXqryfCaVwAiWER453sMIiABsPrQn rp+Un1FPxAA/xTng3UsxVSGiTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5wW7Im anZRZUynU8xZNqO00ldOMB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfNlKLjZqJigb80VKynmeZAjiJ89cM2+cQl9u+8WPa4xedQXaPUGW+ TGLniI6P1xBeWlLjvaZGYKVwgaciNBJ0RoRV40/JCVEciDtfdUHw50fYbDYaQp4R gvNZjZaZ3/oYjC5QNDzIo6Z+ihNd5+JgUCuZw+MIzOqNiPnQRshAYxBW5U/pXWPm kr+vjgHVLp/ACwLbbPx5X6pfwjBmEBJlnvnBJ9zTDsABb1DwxfBauOYuwZRxPSSV MO2fMNvPMzP4vAoO86F1uMFieUMiU5QNyidUvJSQsAc+NoBbavDgrpuOKf6Ru3xt t2UNfahpTN24l5nM8uB8ajdvyTS1AR7s -----END CERTIFICATE-----Generated at Wed Nov 5 17:19:38 2025 by rpki-client