$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: vpsA0iwQDMEZE+JrG2yQ1qZJhIqo1edhvx2ZuYvmrX0= Subject key identifier: 98:2E:2C:19:05:1C:B7:31:40:AD:4C:22:6A:41:E5:0D:13:A2:DE:47 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 0125 Signing time: Sat 09 Aug 2025 05:06:38 +0000 Manifest this update: Sat 09 Aug 2025 05:06:38 +0000 Manifest next update: Sat 16 Aug 2025 05:06:37 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: mFvFt8LacBhb5GThdJneQS37GRkmYtu4IUmzAooYnZ4=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Aug 9 05:06:38 2025 GMT Not After : Aug 16 05:06:37 2025 GMT Subject: CN=6896d75e-ead2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:3a:32:9e:10:ea:48:41:25:06:60:25:c5: 6e:98:e9:eb:2d:7f:f1:37:ef:f8:c7:a4:53:e7:9f: e8:6c:9f:03:79:18:43:f7:71:c4:63:64:10:d4:74: 4d:ee:88:c3:1c:0a:5d:28:92:25:81:31:c4:b7:9a: 41:61:5b:a4:57:7d:f4:42:9f:d5:6e:e0:b0:01:8a: cd:a0:fe:eb:fe:76:ac:f5:38:10:65:93:ef:e4:7f: 57:18:7a:ae:b9:b1:52:05:b4:03:d6:26:cb:60:10: d0:7f:ad:f5:ae:47:cf:c3:96:d9:ea:67:58:1d:47: a9:b4:78:a8:f7:e8:cd:17:da:c8:57:98:2d:28:f8: 80:24:39:13:9c:c2:0b:35:23:0f:81:b7:cf:3c:71: 37:e5:46:4b:92:dd:dc:2f:c8:84:41:e4:6f:12:72: 38:dd:05:25:ef:bb:e1:b3:bf:49:5c:d3:0f:b9:0b: 3c:d3:b5:ee:00:ba:c1:fd:7d:03:f8:5d:5f:5f:e2: 5d:8d:f2:e9:ca:a5:36:a8:1a:49:ca:bb:5f:03:5c: f7:44:42:a0:2c:07:4e:df:0b:52:f9:cf:8c:6f:36: 88:98:6d:4c:72:9c:76:e9:13:d0:9f:81:24:df:d1: 28:85:c6:5a:77:4d:e8:bc:e3:7a:b0:cb:ac:42:2b: d0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2E:2C:19:05:1C:B7:31:40:AD:4C:22:6A:41:E5:0D:13:A2:DE:47 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:f7:88:1d:07:26:90:f0:e8:f0:00:fc:d2:de:05:34:f3:9f: 3c:6e:2a:73:f2:74:64:03:c0:1b:23:a6:10:10:2d:62:a2:44: 58:dc:e5:b0:00:cb:c1:c7:04:e4:d6:2d:bf:e4:d6:7f:11:3c: 92:e1:37:8d:2b:3b:3e:c3:42:42:20:9f:0f:39:5f:bd:17:ad: 38:80:78:03:0b:5c:a6:e6:00:14:32:12:7a:b0:e6:ed:1c:36: 97:77:19:7e:eb:f4:78:c2:23:fb:93:3c:35:9c:79:67:ce:1a: d6:65:f4:af:0f:b5:2a:6d:a7:35:15:c1:5b:95:a9:b2:24:45: cd:91:a0:51:3e:7e:97:f1:cf:a0:ce:5f:cb:6a:fa:9e:90:59: f0:a5:39:ea:4d:b1:c5:f3:e5:8f:8d:77:65:c6:19:3d:de:c8: 1f:ac:b7:af:fd:74:c4:bb:26:15:60:91:6c:fb:f9:af:39:4f: 71:e7:b3:d7:84:a3:23:50:c8:41:3f:6e:48:ec:2d:63:7e:c8: a2:64:b6:2c:a5:1e:55:44:9c:4e:c9:db:0d:0c:ac:45:25:93: 5a:fe:72:e9:21:3a:bc:24:59:cd:a1:3d:f7:68:97:f9:27:bc: 2a:9f:f4:85:19:30:31:a2:38:d7:d9:37:62:79:68:a4:8f:f3: ae:a9:44:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUwODA5MDUwNjM4WhcNMjUwODE2MDUwNjM3WjAYMRYwFAYD VQQDEw02ODk2ZDc1ZS1lYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxt46Mp4Q6khBJQZgJcVumOnrLX/xN+/4x6RT55/obJ8DeRhD93HEY2QQ1HRN 7ojDHApdKJIlgTHEt5pBYVukV330Qp/VbuCwAYrNoP7r/nas9TgQZZPv5H9XGHqu ubFSBbQD1ibLYBDQf631rkfPw5bZ6mdYHUeptHio9+jNF9rIV5gtKPiAJDkTnMIL NSMPgbfPPHE35UZLkt3cL8iEQeRvEnI43QUl77vhs79JXNMPuQs807XuALrB/X0D +F1fX+JdjfLpyqU2qBpJyrtfA1z3REKgLAdO3wtS+c+MbzaImG1Mcpx26RPQn4Ek 39EohcZad03ovON6sMusQivQ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJguLBkF HLcxQK1MImpB5Q0Tot5HMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDX94gdByaQ8OjwAPzS3gU08588bipz8nRkA8AbI6YQEC1iokRY3OWw AMvBxwTk1i2/5NZ/ETyS4TeNKzs+w0JCIJ8POV+9F604gHgDC1ym5gAUMhJ6sObt HDaXdxl+6/R4wiP7kzw1nHlnzhrWZfSvD7Uqbac1FcFblamyJEXNkaBRPn6X8c+g zl/LavqekFnwpTnqTbHF8+WPjXdlxhk93sgfrLev/XTEuyYVYJFs+/mvOU9x57PX hKMjUMhBP25I7C1jfsiiZLYspR5VRJxOydsNDKxFJZNa/nLpITq8JFnNoT33aJf5 J7wqn/SFGTAxojjX2TdieWikj/OuqUTe -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:29 2025 by rpki-client