$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: 1+meC30cZ7e7I8EcITY/3Yaokt8IxnEHarxpKUQCtuA= Subject key identifier: 5D:AE:28:85:46:A7:66:48:3F:89:FB:93:B4:5D:15:53:D1:00:67:60 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 0109 Signing time: Sun 15 Jun 2025 04:11:53 +0000 Manifest this update: Sun 15 Jun 2025 04:11:52 +0000 Manifest next update: Sun 22 Jun 2025 04:11:52 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: yvcHr2URYm5YtWwsCedjq4Fgp3JcPiMvKRSOYjSzV60=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Jun 15 04:11:52 2025 GMT Not After : Jun 22 04:11:52 2025 GMT Subject: CN=684e4809-ad49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:b9:4e:1b:f8:8e:13:ee:ab:ce:8b:ef:27: 1e:99:84:35:46:cc:44:2d:6a:f8:e9:88:7e:a3:74: eb:82:09:ca:f8:5c:b4:01:56:81:11:f6:ee:eb:b7: bb:23:9c:54:b5:e8:1c:b4:76:e9:08:d9:70:aa:3d: 05:30:9c:aa:dc:2c:c7:e3:58:f8:6d:83:b4:64:cc: 4e:6b:79:c0:e2:4c:75:55:1a:6b:df:54:a0:52:22: 4c:f3:d9:75:86:4c:cc:4d:e5:90:fb:15:ed:8e:45: ab:cf:d3:9d:2d:1f:e4:4f:63:94:b6:bb:5f:4a:2d: 6b:13:07:1e:55:0c:30:d2:fc:2b:60:4e:35:32:fc: 67:55:2e:5e:aa:92:f9:d7:85:30:d2:5d:49:3f:08: 60:1b:19:e8:fb:cb:45:83:9e:ca:bb:8e:91:50:4f: eb:ec:df:4e:93:3e:70:67:15:76:6a:e1:b4:ed:71: cd:bd:4d:09:a7:2c:5e:90:9b:29:05:75:4a:f8:67: f8:62:28:46:02:7e:54:de:7d:fd:fb:10:e5:d2:d1: 2c:ca:53:5c:8d:6a:28:e1:4b:94:c7:02:64:30:68: 10:99:1b:47:2e:e5:18:a3:42:08:23:16:68:94:b8: 11:1e:42:66:c6:16:7d:f3:4c:40:ee:42:55:7f:8a: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AE:28:85:46:A7:66:48:3F:89:FB:93:B4:5D:15:53:D1:00:67:60 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:f5:9e:6f:ad:93:d4:77:2b:fc:e7:e9:b6:1a:08:97:57:1c: a1:65:84:66:ba:0b:a3:5f:05:2e:1b:87:e9:68:00:d3:f5:ed: 36:24:9b:80:9a:eb:6a:9b:e0:01:24:cc:df:f1:a4:94:e5:46: a1:8d:3a:0a:87:cf:22:50:6f:29:73:0a:42:a9:ee:4d:a8:f6: 30:dc:83:a3:e9:86:01:de:0b:bc:92:e4:15:ce:8d:5c:57:14: a9:fd:f9:78:fc:6f:e8:f0:0a:f4:e8:80:03:f0:49:73:c5:8a: cc:e8:4e:e4:d4:dd:df:8e:b2:3c:97:53:f5:c5:3e:40:66:42: 18:7b:1b:7d:20:54:1a:ee:75:be:57:da:63:46:a5:96:3b:10: 9e:9e:2b:bd:8c:1d:76:24:3a:9a:bd:17:24:09:aa:19:8a:f3: 68:03:70:d6:de:ca:e4:e9:88:0f:16:08:65:bb:a6:7d:b2:c6: 2f:72:6a:6c:79:34:8c:49:7a:68:04:1c:ee:58:b3:af:58:07: f1:54:58:94:88:03:0a:65:48:e9:ed:8c:be:f3:41:18:49:31: 37:4b:9f:48:f2:d6:ed:4b:c7:68:f9:97:cd:a6:82:1e:47:bb: f2:58:31:c6:c2:8a:37:1e:29:a7:ea:48:89:e4:00:c5:43:19: 64:9a:1d:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUwNjE1MDQxMTUyWhcNMjUwNjIyMDQxMTUyWjAYMRYwFAYD VQQDEw02ODRlNDgwOS1hZDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIe5Thv4jhPuq86L7ycemYQ1RsxELWr46Yh+o3TrggnK+Fy0AVaBEfbu67e7 I5xUtegctHbpCNlwqj0FMJyq3CzH41j4bYO0ZMxOa3nA4kx1VRpr31SgUiJM89l1 hkzMTeWQ+xXtjkWrz9OdLR/kT2OUtrtfSi1rEwceVQww0vwrYE41MvxnVS5eqpL5 14Uw0l1JPwhgGxno+8tFg57Ku46RUE/r7N9Okz5wZxV2auG07XHNvU0JpyxekJsp BXVK+Gf4YihGAn5U3n39+xDl0tEsylNcjWoo4UuUxwJkMGgQmRtHLuUYo0IIIxZo lLgRHkJmxhZ980xA7kJVf4pDHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF2uKIVG p2ZIP4n7k7RdFVPRAGdgMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE9Z5vrZPUdyv85+m2GgiXVxyhZYRmugujXwUuG4fpaADT9e02JJuA mutqm+ABJMzf8aSU5UahjToKh88iUG8pcwpCqe5NqPYw3IOj6YYB3gu8kuQVzo1c VxSp/fl4/G/o8Ar06IAD8ElzxYrM6E7k1N3fjrI8l1P1xT5AZkIYext9IFQa7nW+ V9pjRqWWOxCeniu9jB12JDqavRckCaoZivNoA3DW3srk6YgPFghlu6Z9ssYvcmps eTSMSXpoBBzuWLOvWAfxVFiUiAMKZUjp7Yy+80EYSTE3S59I8tbtS8do+ZfNpoIe R7vyWDHGwoo3Himn6kiJ5ADFQxlkmh2P -----END CERTIFICATE-----Generated at Sun Jun 15 08:52:08 2025 by rpki-client