$ rpki-client -vvf rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft File: ybbzh3rMoIEu_42KP1wESgwwvIA.mft (raw, json) Hash identifier: IbLviM309MSkG3CwKbwMCG8hRdKPBOHVJEWu5666F5s= Subject key identifier: 36:C5:5A:D9:0E:C2:41:89:DB:06:D2:6B:2C:EF:76:6E:A6:46:E7:0F Authority key identifier: C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 Certificate issuer: /CN=A91A77C2/serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft Manifest number: 05D2 Signing time: Sun 20 Jul 2025 23:13:16 +0000 Manifest this update: Sun 20 Jul 2025 23:13:15 +0000 Manifest next update: Sun 27 Jul 2025 23:13:15 +0000 Files and hashes: 1: ybbzh3rMoIEu_42KP1wESgwwvIA.crl (hash: mg3bGrSDLFq50egHLHCcaVCG39mrxMRKhSilsXEHZl4=) 2: E5692882C63411EB9E5F5F30C4F9AE02.roa (hash: NtEKqe9K8qVaWm1bTRQ0N6CeN9vSLJhLoVuJfNIm9AY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A77C2, serialNumber=C9B6F3877ACCA0812EFF8D8A3F5C044A0C30BC80 Validity Not Before: Jul 20 23:13:15 2025 GMT Not After : Jul 27 23:13:15 2025 GMT Subject: CN=687d780b-c4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b6:bd:8a:c7:0f:44:51:60:03:56:13:b7:5d: 1d:9f:7a:80:3b:18:3a:fa:3b:0e:0c:7b:a6:7c:a4: 44:1e:48:1d:f1:c3:a9:0d:d4:2e:da:2c:a9:8a:47: 22:d0:8a:48:f9:6f:66:91:51:e8:84:ce:61:79:8e: 05:f2:dc:17:63:e3:83:34:48:f2:bf:d9:c6:44:c0: 26:8b:97:63:52:53:b9:11:af:47:8a:7a:22:2e:84: 19:ff:fa:ef:41:a1:ba:0d:67:14:af:4a:73:2c:c1: 2b:fd:03:c0:bc:e3:cb:8e:f5:71:30:da:8c:29:b2: 62:95:c9:14:d7:78:7e:3c:c4:45:6d:39:cd:42:58: ff:a3:31:32:af:59:33:2c:f5:79:d2:c0:5c:5c:15: dd:9d:cd:3b:9e:b3:c3:ec:e8:3d:2a:f7:e9:61:69: fc:67:bd:22:fe:f0:9e:34:c5:fe:85:8a:3b:aa:61: 99:44:46:a6:15:b1:6c:b1:27:b0:f3:70:6d:ed:83: e7:ce:fc:c9:0f:ea:21:05:53:31:10:e1:bc:47:0b: 31:6c:ac:38:31:40:20:89:36:35:99:d8:8d:6a:35: 96:90:b3:7a:ac:6a:7c:b2:6f:00:0c:d6:0c:0c:6e: ba:82:27:ff:17:e1:ff:fd:99:cd:67:c0:2b:85:75: 5c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:5A:D9:0E:C2:41:89:DB:06:D2:6B:2C:EF:76:6E:A6:46:E7:0F X509v3 Authority Key Identifier: keyid:C9:B6:F3:87:7A:CC:A0:81:2E:FF:8D:8A:3F:5C:04:4A:0C:30:BC:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ybbzh3rMoIEu_42KP1wESgwwvIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A77C2/3EDAD10CC63211EBAAD74A2EC4F9AE02/ybbzh3rMoIEu_42KP1wESgwwvIA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:00:76:ee:b3:cf:07:7b:a8:95:a6:82:3c:6c:2c:07:b4: 80:be:fb:16:15:06:d4:8a:96:aa:a0:94:ed:92:8e:d1:fd:5f: fc:42:d3:e1:25:aa:0b:7b:ba:9d:3c:84:87:c1:5d:1b:8c:f2: 95:7d:3d:ff:18:02:02:70:17:92:15:2b:d9:18:89:78:7f:07: b7:3f:64:f3:62:3a:8e:31:78:94:1e:e8:fe:b5:12:c1:37:32: f5:79:d0:a7:6e:b4:a0:00:6b:f5:75:7d:96:01:d5:67:37:47: 0f:68:ec:1a:23:36:fb:1a:47:04:57:c0:5c:75:63:bd:e5:c2: 92:a7:b2:6c:a3:5d:d2:97:c9:df:45:4d:85:1c:d0:91:d4:f6: 77:78:f6:04:e6:36:3a:e7:dd:65:5a:2d:b5:5f:f4:dd:d4:79: 5d:e0:ca:e3:98:dd:df:20:a8:11:c6:a9:7a:2f:b8:8f:55:c4: 39:61:0f:06:d0:50:29:17:72:8e:93:d0:1d:03:1b:26:95:6a: 00:42:45:b3:f7:1c:dd:4a:bf:04:ed:79:91:0c:94:32:b8:9c: 55:2d:74:5f:3d:2d:b4:f7:84:da:ec:f9:37:8e:9b:03:ca:33: 06:f8:cb:6d:02:3d:51:3a:7b:3e:75:58:a5:13:e7:d3:a8:f5: 6f:51:44:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc3QzIxMTAvBgNVBAUTKEM5QjZGMzg3N0FDQ0EwODEyRUZGOEQ4QTNGNUMwNDRB MEMzMEJDODAwHhcNMjUwNzIwMjMxMzE1WhcNMjUwNzI3MjMxMzE1WjAYMRYwFAYD VQQDEw02ODdkNzgwYi1jNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ba9iscPRFFgA1YTt10dn3qAOxg6+jsODHumfKREHkgd8cOpDdQu2iypikci 0IpI+W9mkVHohM5heY4F8twXY+ODNEjyv9nGRMAmi5djUlO5Ea9HinoiLoQZ//rv QaG6DWcUr0pzLMEr/QPAvOPLjvVxMNqMKbJilckU13h+PMRFbTnNQlj/ozEyr1kz LPV50sBcXBXdnc07nrPD7Og9KvfpYWn8Z70i/vCeNMX+hYo7qmGZREamFbFssSew 83Bt7YPnzvzJD+ohBVMxEOG8RwsxbKw4MUAgiTY1mdiNajWWkLN6rGp8sm8ADNYM DG66gif/F+H//ZnNZ8ArhXVcFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbFWtkO wkGJ2wbSayzvdm6mRucPMB8GA1UdIwQYMBaAFMm284d6zKCBLv+Nij9cBEoMMLyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzdDMi8zRURBRDEwQ0M2 MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9JRXVfNDJLUDF3RVNnd3d2 SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3liYnpoM3JNb0lFdV80MktQMXdFU2d3d3ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzdDMi8zRURBRDEwQ0M2MzIxMUVCQUFENzRBMkVDNEY5QUUwMi95YmJ6aDNyTW9J RXVfNDJLUDF3RVNnd3d2SUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfFgB27rPPB3uolaaCPGwsB7SAvvsWFQbUipaqoJTtko7R/V/8QtPh JaoLe7qdPISHwV0bjPKVfT3/GAICcBeSFSvZGIl4fwe3P2TzYjqOMXiUHuj+tRLB NzL1edCnbrSgAGv1dX2WAdVnN0cPaOwaIzb7GkcEV8BcdWO95cKSp7Jso13Sl8nf RU2FHNCR1PZ3ePYE5jY6591lWi21X/Td1Hld4MrjmN3fIKgRxql6L7iPVcQ5YQ8G 0FApF3KOk9AdAxsmlWoAQkWz9xzdSr8E7XmRDJQyuJxVLXRfPS2094Ta7Pk3jpsD yjMG+MttAj1ROns+dVilE+fTqPVvUUQv -----END CERTIFICATE-----Generated at Mon Jul 21 02:18:59 2025 by rpki-client