$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json) Hash identifier: DA7ISmSIzxMiUsEdyFhjoT+h8bCgOPo9Cdueqn81vao= Subject key identifier: EC:3D:F4:A7:89:9B:BC:E8:D4:91:4F:B3:C9:10:69:AC:D3:6F:40:8F Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft Manifest number: 05DE Signing time: Tue 12 Aug 2025 23:24:51 +0000 Manifest this update: Tue 12 Aug 2025 23:24:51 +0000 Manifest next update: Tue 19 Aug 2025 23:24:51 +0000 Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: b/KmZdFTxnYDkWN5vYI7JZX7sPZsAthHf3NvhtP8OKY=) 2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 23:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Validity Not Before: Aug 12 23:24:51 2025 GMT Not After : Aug 19 23:24:51 2025 GMT Subject: CN=689bcd43-faf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:9a:27:e2:69:b9:1f:08:7b:02:4c:89:ac: 49:f9:47:c3:26:3b:bf:97:67:6f:4c:9d:09:eb:25: 11:be:c0:21:92:ce:48:b0:3c:56:c6:b5:31:c1:17: 9c:75:79:d9:43:b4:f6:85:ed:40:17:3a:1c:c4:45: df:1d:1d:c6:a5:93:0a:2f:db:bc:44:ac:4b:8b:69: 53:e3:b8:4a:1e:3a:a6:86:23:ed:aa:a2:dc:5b:5f: 03:53:a6:c7:ce:ff:de:eb:77:ed:a2:04:96:e8:ea: 9b:81:36:17:1d:e0:a3:b0:fd:76:a3:af:17:3e:01: a1:5c:23:b9:a6:b8:de:d9:2c:dd:ab:02:04:2b:c6: 9f:52:01:64:25:26:87:ba:9f:47:5a:1f:bc:06:f1: 1c:18:35:d8:db:bc:c9:9b:f0:fb:f8:5d:d7:9a:72: 9d:32:94:72:c3:2f:cd:24:ef:4e:a2:66:68:32:42: 6f:f1:36:bf:db:c0:bc:4b:03:1c:44:16:0f:14:42: 84:75:2b:16:ce:36:b3:b2:e2:13:4d:54:95:08:af: e5:22:d6:85:f5:1f:65:42:3f:36:3a:f9:a6:a8:57: a2:54:10:19:ee:d8:c2:75:8b:6a:76:2b:a2:48:58: ca:3f:6f:e6:dd:1e:77:c9:aa:cb:a0:86:9e:8e:c4: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3D:F4:A7:89:9B:BC:E8:D4:91:4F:B3:C9:10:69:AC:D3:6F:40:8F X509v3 Authority Key Identifier: keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:da:51:be:c0:0b:01:91:75:f1:8f:8b:3d:8c:13:c0:68:bf: 5c:c8:13:d6:7b:56:ee:19:11:fb:e8:d4:f5:2e:46:fc:30:c5: 3e:e7:34:18:09:95:de:6b:42:5f:3d:b5:88:8a:80:ae:d3:b4: 42:00:07:43:0f:54:2e:e3:85:b0:cc:91:22:1c:5a:ed:89:c6: 47:b5:18:8e:f4:83:77:98:75:e7:32:3d:61:5c:9f:33:98:ac: ef:a4:56:0c:13:3f:4a:aa:2f:1b:34:3b:2f:39:7a:a7:0b:0b: 2a:1c:9f:7d:2e:60:37:56:74:f3:9c:f6:51:29:c4:47:79:3f: 82:5c:7a:b9:92:94:9d:cb:55:7a:ed:57:8a:9f:35:21:50:63: 36:ad:4a:5b:f7:c6:c5:11:4f:35:5a:30:6d:b6:45:ed:6a:74: a7:01:63:cb:8a:91:34:df:9e:96:28:ca:30:a5:a3:8e:d2:54: 26:14:47:99:4d:5a:ee:f3:33:92:45:50:1e:ec:e1:ec:0b:f5: 88:a2:48:43:05:bd:10:16:ba:0a:37:31:61:da:99:fb:76:95: 4e:fb:94:74:7e:b2:35:95:56:95:0e:f7:97:77:4a:93:40:82: cc:c8:3d:d3:b3:b4:29:df:42:ee:47:c6:75:a5:60:34:f6:e6: 59:b7:d9:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB MEMzMEJDODAwHhcNMjUwODEyMjMyNDUxWhcNMjUwODE5MjMyNDUxWjAYMRYwFAYD VQQDEw02ODliY2Q0My1mYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBuaJ+JpuR8IewJMiaxJ+UfDJju/l2dvTJ0J6yURvsAhks5IsDxWxrUxwRec dXnZQ7T2he1AFzocxEXfHR3GpZMKL9u8RKxLi2lT47hKHjqmhiPtqqLcW18DU6bH zv/e63ftogSW6OqbgTYXHeCjsP12o68XPgGhXCO5prje2SzdqwIEK8afUgFkJSaH up9HWh+8BvEcGDXY27zJm/D7+F3XmnKdMpRywy/NJO9OomZoMkJv8Ta/28C8SwMc RBYPFEKEdSsWzjazsuITTVSVCK/lItaF9R9lQj82OvmmqFeiVBAZ7tjCdYtqdiui SFjKP2/m3R53yarLoIaejsQw8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOw99KeJ m7zo1JFPs8kQaazTb0CPMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2 MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J RXVfNDJLUDF3RVNnd3d2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi2lG+wAsBkXXxj4s9jBPAaL9cyBPWe1buGRH76NT1Lkb8MMU+5zQY CZXea0JfPbWIioCu07RCAAdDD1Qu44WwzJEiHFrticZHtRiO9IN3mHXnMj1hXJ8z mKzvpFYMEz9Kqi8bNDsvOXqnCwsqHJ99LmA3VnTznPZRKcRHeT+CXHq5kpSdy1V6 7VeKnzUhUGM2rUpb98bFEU81WjBttkXtanSnAWPLipE0356WKMowpaOO0lQmFEeZ TVru8zOSRVAe7OHsC/WIokhDBb0QFroKNzFh2pn7dpVO+5R0frI1lVaVDveXd0qT QILMyD3Ts7Qp30LuR8Z1pWA09uZZt9mE -----END CERTIFICATE-----Generated at Wed Aug 13 02:42:19 2025 by rpki-client