$ rpki-client -vvf rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft File: YbChG9lEvNqGW7mx-_fuBtVzvXE.mft (raw, json) Hash identifier: kotstG6UrkhmvdBIBwJ+z1CluWQy/WSYE7Mi+fNX8vk= Subject key identifier: 15:1C:40:65:36:45:22:E1:56:0D:AC:12:5A:86:F6:07:BC:7B:1B:7C Authority key identifier: 61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 Certificate issuer: /CN=A9127656/serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Certificate serial: 0620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft Manifest number: 061B Signing time: Sun 02 Nov 2025 22:48:33 +0000 Manifest this update: Sun 02 Nov 2025 22:48:33 +0000 Manifest next update: Sun 09 Nov 2025 22:48:33 +0000 Files and hashes: 1: YbChG9lEvNqGW7mx-_fuBtVzvXE.crl (hash: wpCaI1JpO6FIu0VZuEPEUU+inGjUxx9Tc9aJZxJdBvE=) 2: 6F706208BE0F11EB90239C1AC4F9AE02.roa (hash: aJNEKMighzJgRijL/uKI8yCdGKsKV/KJafHUF4cH4Rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127656, serialNumber=61B0A11BD944BCDA865BB9B1FBF7EE06D573BD71 Validity Not Before: Nov 2 22:48:33 2025 GMT Not After : Nov 9 22:48:33 2025 GMT Subject: CN=6907dfc1-be2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c5:97:fe:2d:36:e1:16:19:71:2d:2a:a3:65: 37:89:f2:9d:24:d5:a1:e3:95:0d:6e:42:2c:3a:89: 37:bb:37:c3:92:c7:2f:1f:4b:79:95:ba:98:ea:17: 51:cb:ba:d1:6a:ad:67:b2:04:fc:6d:7c:31:b3:a7: 6a:77:48:25:de:6a:9a:86:5b:eb:79:3a:a6:e3:9a: c1:07:92:e0:5e:2f:df:ba:57:b1:c2:59:19:ef:2b: cb:a5:5b:80:47:9c:f3:47:4a:21:c6:e4:02:bf:19: 0d:57:ad:1d:b4:40:d3:12:af:02:36:15:18:29:19: d5:2f:5e:ae:1b:64:b5:6b:e8:3c:f2:a5:c9:16:cb: f4:30:88:ba:de:0a:7c:48:e4:23:6e:38:be:1b:a0: 60:af:72:00:32:06:56:24:a8:97:ee:40:72:94:97: 83:43:70:73:45:ae:c9:9f:d7:a6:86:a0:56:53:a2: 7b:00:12:f5:14:59:e3:9e:4d:23:59:ea:9b:31:f6: f4:f9:c6:2c:49:44:ba:40:ff:43:b8:e4:c2:39:5f: 11:35:a4:64:84:4d:64:4a:54:39:fb:e9:fe:81:b3: 11:a7:af:c4:32:45:37:99:db:5b:40:fa:dc:d3:44: 99:6a:b7:01:f4:d1:76:b4:fb:89:ce:42:00:05:a7: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1C:40:65:36:45:22:E1:56:0D:AC:12:5A:86:F6:07:BC:7B:1B:7C X509v3 Authority Key Identifier: keyid:61:B0:A1:1B:D9:44:BC:DA:86:5B:B9:B1:FB:F7:EE:06:D5:73:BD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbChG9lEvNqGW7mx-_fuBtVzvXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127656/88E8E42EBE0C11EBA3BDAB18C4F9AE02/YbChG9lEvNqGW7mx-_fuBtVzvXE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:2d:21:78:3e:f0:a3:af:ff:71:ac:1a:a3:f0:29:26:55:24: b5:c9:d4:6b:e1:7c:ae:d2:e0:f8:f1:f1:63:b8:82:fd:8e:9b: 28:46:95:31:0b:58:8e:cd:17:e1:be:65:7c:64:a6:36:a1:4e: 23:e8:2b:c1:ac:57:23:d7:fb:0f:71:b3:c5:75:95:3a:7e:e7: 37:80:23:36:f7:78:f3:6c:e0:29:f1:2f:c1:c3:1c:3c:f0:ff: ae:3c:9a:2e:15:d3:ea:47:13:1a:d1:01:a4:72:f6:56:2e:f1: 35:63:98:93:fc:91:2d:6d:a8:35:88:f4:44:a7:d5:ec:55:1f: 1f:1d:06:77:7d:e1:14:85:ed:a3:44:09:54:1d:ee:28:4d:cc: 81:94:2b:cb:7f:77:b2:c3:bd:3a:8c:dd:ca:58:e5:a5:9d:2a: 52:c2:ee:15:7c:6e:f0:1b:50:7e:88:ec:b7:55:7f:32:7b:da: a6:79:d4:f2:db:2d:e1:88:f7:c8:9a:cb:cf:31:3a:99:17:66: f6:b3:a3:72:c4:07:c9:51:cf:22:7d:d5:ae:83:be:a4:96:5d: ce:7b:53:ac:ed:d6:43:70:ab:38:44:dd:13:41:e0:1d:1c:17: 5b:87:87:40:5b:f8:78:bc:6a:4e:54:ed:d1:d6:53:34:73:2e: dc:27:63:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NTYxMTAvBgNVBAUTKDYxQjBBMTFCRDk0NEJDREE4NjVCQjlCMUZCRjdFRTA2 RDU3M0JENzEwHhcNMjUxMTAyMjI0ODMzWhcNMjUxMTA5MjI0ODMzWjAYMRYwFAYD VQQDEw02OTA3ZGZjMS1iZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cWX/i024RYZcS0qo2U3ifKdJNWh45UNbkIsOok3uzfDkscvH0t5lbqY6hdR y7rRaq1nsgT8bXwxs6dqd0gl3mqahlvreTqm45rBB5LgXi/fulexwlkZ7yvLpVuA R5zzR0ohxuQCvxkNV60dtEDTEq8CNhUYKRnVL16uG2S1a+g88qXJFsv0MIi63gp8 SOQjbji+G6Bgr3IAMgZWJKiX7kBylJeDQ3BzRa7Jn9emhqBWU6J7ABL1FFnjnk0j WeqbMfb0+cYsSUS6QP9DuOTCOV8RNaRkhE1kSlQ5++n+gbMRp6/EMkU3mdtbQPrc 00SZarcB9NF2tPuJzkIABaedwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUcQGU2 RSLhVg2sElqG9ge8ext8MB8GA1UdIwQYMBaAFGGwoRvZRLzahlu5sfv37gbVc71x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY1Ni84OEU4RTQyRUJF MEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZOcUdXN214LV9mdUJ0Vnp2 WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liQ2hHOWxFdk5xR1c3bXgtX2Z1QnRWenZYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY1Ni84OEU4RTQyRUJFMEMxMUVCQTNCREFCMThDNEY5QUUwMi9ZYkNoRzlsRXZO cUdXN214LV9mdUJ0Vnp2WEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArLSF4PvCjr/9xrBqj8CkmVSS1ydRr4Xyu0uD48fFjuIL9jpsoRpUx C1iOzRfhvmV8ZKY2oU4j6CvBrFcj1/sPcbPFdZU6fuc3gCM293jzbOAp8S/Bwxw8 8P+uPJouFdPqRxMa0QGkcvZWLvE1Y5iT/JEtbag1iPREp9XsVR8fHQZ3feEUhe2j RAlUHe4oTcyBlCvLf3eyw706jN3KWOWlnSpSwu4VfG7wG1B+iOy3VX8ye9qmedTy 2y3hiPfImsvPMTqZF2b2s6NyxAfJUc8ifdWug76kll3Oe1Os7dZDcKs4RN0TQeAd HBdbh4dAW/h4vGpOVO3R1lM0cy7cJ2Pd -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:30 2025 by rpki-client