$ rpki-client -vvf rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft File: YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft (raw, json) Hash identifier: 606MqJBkyKdPuFgo7W5MOEOtcDL6XunT7fGBzpNXfrs= Subject key identifier: A0:32:B0:9D:06:7B:B8:F2:2D:58:14:D9:DD:BE:AB:FA:95:14:1A:86 Authority key identifier: 61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E Certificate issuer: /CN=A91388E0/serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft Manifest number: 0150 Signing time: Mon 03 Nov 2025 04:13:59 +0000 Manifest this update: Mon 03 Nov 2025 04:13:59 +0000 Manifest next update: Mon 10 Nov 2025 04:13:59 +0000 Files and hashes: 1: YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl (hash: iAHB8ze53NP56lNnXGR0OtUGslgaBLzGq/fxXvMsCbk=) 2: 128CE16E991311EF80CC5D53C4F9AE02.roa (hash: wbi/o+bFod95DU50hqJrS50iELN8OwXoWy8NrHxRmQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91388E0, serialNumber=61BBCB6DB8DC1337C1B8298F70C1FF2A5016ED6E Validity Not Before: Nov 3 04:13:59 2025 GMT Not After : Nov 10 04:13:59 2025 GMT Subject: CN=69082c07-824f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:76:a4:9c:a1:3c:58:a1:d5:ec:75:19:e7:42: 5d:5b:ef:c6:66:44:20:5b:24:41:c0:8d:aa:17:74: 7c:bc:37:73:9b:bb:65:89:77:b2:80:a1:7d:6f:51: 31:8c:b2:5c:57:53:0e:ea:f8:fd:0f:3b:81:93:64: b6:d1:c9:6f:db:42:83:3d:dd:8d:7a:36:68:ec:e1: f5:69:d4:cb:f6:39:39:74:0c:9b:77:e0:4f:3d:3a: dd:37:dd:33:0a:82:a9:b3:40:1a:e4:eb:f0:64:63: a2:6b:a6:45:c2:d8:b7:57:5d:f3:1a:b1:52:c9:46: 4c:b6:34:b1:55:c7:d5:be:f2:af:24:0e:17:e9:bf: 58:82:99:49:f2:e8:50:ec:81:35:e6:24:35:23:ae: 4f:9f:53:e0:9a:9c:93:e3:71:07:25:49:59:76:77: 16:af:3e:a0:e4:a7:3d:36:c4:26:6f:6c:95:40:71: 41:23:fd:34:e4:81:9d:46:59:d2:65:a3:4e:dd:5d: dd:c4:ed:3d:40:c6:e2:e2:92:fb:02:16:40:ac:2b: 90:44:7c:28:76:ad:e8:90:b5:f5:7c:42:bb:0a:07: af:57:c6:d2:9f:3a:d6:cc:86:cd:52:b2:0b:05:ce: 54:de:f8:6e:ae:81:3f:4d:23:5c:b1:29:be:03:b2: 23:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:32:B0:9D:06:7B:B8:F2:2D:58:14:D9:DD:BE:AB:FA:95:14:1A:86 X509v3 Authority Key Identifier: keyid:61:BB:CB:6D:B8:DC:13:37:C1:B8:29:8F:70:C1:FF:2A:50:16:ED:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YbvLbbjcEzfBuCmPcMH_KlAW7W4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91388E0/55E392FCB85211EE8ACAA96AC4F9AE02/YbvLbbjcEzfBuCmPcMH_KlAW7W4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:4f:33:5e:85:cd:9a:5c:2a:f1:32:08:21:41:ab:78:d6:fe: ba:0e:0e:bc:0e:58:b0:01:c7:c7:36:27:a0:11:35:82:53:76: 24:8e:a5:db:d7:fc:ec:d6:f4:3a:5a:2a:d8:e1:3d:f8:05:01: 50:61:68:90:7a:62:17:f4:d6:5a:7d:8c:f4:d1:83:e4:0e:9e: a9:fc:38:d2:4e:26:17:38:3d:16:7e:05:2f:ea:62:d8:27:d5: a6:f0:a5:c2:1c:90:7b:5e:56:72:01:ec:c5:1f:a2:4b:73:6d: 98:6a:bf:9e:98:b1:ab:ba:09:7e:c1:ab:b6:99:43:76:f5:7b: 01:6a:5f:20:81:ca:81:3d:99:91:fb:05:69:32:f0:c6:72:47: 7a:09:24:b8:7a:31:f9:01:f4:b9:5f:48:dc:c7:e0:4a:89:d9: 61:fb:93:e4:18:27:4f:07:27:cf:10:92:0e:29:c4:88:f6:62: 13:8c:4f:5c:f6:11:89:d4:ff:3b:08:96:aa:98:d0:d8:a3:5b: 72:34:9c:c0:13:9f:98:73:4d:91:ff:00:be:f5:97:03:5c:32: d6:3e:6c:09:4f:48:a1:e8:40:8e:2c:2f:04:58:19:b0:82:b3: 95:71:41:38:85:c7:3e:96:bc:cd:dd:48:2a:20:29:e3:b1:91: 75:4c:b1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg4RTAxMTAvBgNVBAUTKDYxQkJDQjZEQjhEQzEzMzdDMUI4Mjk4RjcwQzFGRjJB NTAxNkVENkUwHhcNMjUxMTAzMDQxMzU5WhcNMjUxMTEwMDQxMzU5WjAYMRYwFAYD VQQDEw02OTA4MmMwNy04MjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XaknKE8WKHV7HUZ50JdW+/GZkQgWyRBwI2qF3R8vDdzm7tliXeygKF9b1Ex jLJcV1MO6vj9DzuBk2S20clv20KDPd2NejZo7OH1adTL9jk5dAybd+BPPTrdN90z CoKps0Aa5OvwZGOia6ZFwti3V13zGrFSyUZMtjSxVcfVvvKvJA4X6b9YgplJ8uhQ 7IE15iQ1I65Pn1PgmpyT43EHJUlZdncWrz6g5Kc9NsQmb2yVQHFBI/005IGdRlnS ZaNO3V3dxO09QMbi4pL7AhZArCuQRHwodq3okLX1fEK7CgevV8bSnzrWzIbNUrIL Bc5U3vhuroE/TSNcsSm+A7Ij6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAysJ0G e7jyLVgU2d2+q/qVFBqGMB8GA1UdIwQYMBaAFGG7y2243BM3wbgpj3DB/ypQFu1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODhFMC81NUUzOTJGQ0I4 NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6ZkJ1Q21QY01IX0tsQVc3 VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lidkxiYmpjRXpmQnVDbVBjTUhfS2xBVzdXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODhFMC81NUUzOTJGQ0I4NTIxMUVFOEFDQUE5NkFDNEY5QUUwMi9ZYnZMYmJqY0V6 ZkJ1Q21QY01IX0tsQVc3VzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUTzNehc2aXCrxMgghQat41v66Dg68DliwAcfHNiegETWCU3YkjqXb 1/zs1vQ6WirY4T34BQFQYWiQemIX9NZafYz00YPkDp6p/DjSTiYXOD0WfgUv6mLY J9Wm8KXCHJB7XlZyAezFH6JLc22Yar+emLGrugl+wau2mUN29XsBal8ggcqBPZmR +wVpMvDGckd6CSS4ejH5AfS5X0jcx+BKidlh+5PkGCdPByfPEJIOKcSI9mITjE9c 9hGJ1P87CJaqmNDYo1tyNJzAE5+Yc02R/wC+9ZcDXDLWPmwJT0ih6ECOLC8EWBmw grOVcUE4hcc+lrzN3UgqICnjsZF1TLE4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:23 2025 by rpki-client