$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: up64PvFLxm7apvfbVSpF3/xWrPl07AkoxVmMJRU29ZA= Subject key identifier: 75:BF:0F:96:EF:13:F9:56:8E:C5:6E:C5:80:AF:90:1A:86:80:FD:B2 Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05A9 Signing time: Mon 12 May 2025 22:59:51 +0000 Manifest this update: Mon 12 May 2025 22:59:51 +0000 Manifest next update: Mon 19 May 2025 22:59:51 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: 5rW6gRAvt2zYq6et5Ty7WquD0AA0EaZgzg0p9IB1cRI=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: OrtHOETOrItjmKJ7KfMNKuUcSMEyCsCy/SOGjRGiw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1462 (0x5b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: May 12 22:59:51 2025 GMT Not After : May 19 22:59:51 2025 GMT Subject: CN=68227d67-8ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:64:e8:ae:07:04:8a:97:15:b1:fc:80:95:66: 0d:9b:1f:29:04:19:fe:5f:9e:44:53:90:20:e6:99: df:6c:35:65:3c:d5:64:e5:e0:07:b3:60:ac:6e:73: ce:65:b5:ce:74:ae:f5:fd:44:2d:c4:d3:8f:62:f8: b7:e4:9f:90:00:2c:a6:c6:3b:3e:fa:09:cf:e5:58: 34:d9:34:42:a0:cd:44:28:58:3d:c1:06:79:d2:09: e0:3d:3f:ee:e3:a0:9e:18:19:b3:e7:d9:61:63:c1: bb:6d:98:b5:a3:6d:9d:30:a5:eb:5d:77:0c:86:95: c1:a1:d0:1d:e4:ad:af:2d:b5:c5:1a:5b:98:7e:d7: e6:34:c8:86:bc:c6:05:df:9f:bc:19:1c:78:10:89: f2:05:4a:ea:1b:c0:4a:b2:4a:b7:38:50:89:cd:60: 59:fb:23:f5:0b:0e:b9:bb:bb:d7:ba:38:ae:1e:0c: 10:fa:c9:d7:b1:63:d0:95:7e:08:c4:4d:f8:ae:ce: 00:a2:f7:4f:45:a6:eb:54:21:03:de:a4:6a:be:09: b5:de:65:b4:ff:7f:73:d3:a4:64:34:3f:57:67:e3: 8a:bf:ad:8b:f8:20:10:ad:86:95:82:20:a1:39:6a: f3:9c:27:26:ee:17:32:53:03:26:04:7a:7f:5f:80: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BF:0F:96:EF:13:F9:56:8E:C5:6E:C5:80:AF:90:1A:86:80:FD:B2 X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:54:82:e3:34:72:46:d5:58:a8:59:c2:e8:4a:76:d4:b7:d3: 1f:3c:f6:f6:3e:01:8c:de:64:f2:4c:34:00:58:2e:64:a9:d1: 40:ea:f7:c7:de:16:6a:5e:de:4a:c8:5c:be:b3:6d:de:df:80: cd:7c:2c:1f:8b:7e:a8:84:d4:c2:20:66:ff:b3:e4:a7:fc:da: f8:17:8a:b6:f4:20:7f:de:a2:13:90:30:a0:a9:5b:6f:e3:da: ee:a6:80:fd:95:e7:03:a4:7d:45:95:d8:10:e1:23:79:2c:b6: 53:7a:16:7f:af:ef:ab:6e:d4:8b:d9:55:0e:71:34:c7:92:46: 31:b1:4e:f4:c9:ea:53:67:18:74:e3:23:88:43:30:c8:c9:b0: 9a:71:7c:24:c9:8f:e6:de:f0:8d:f4:2b:62:c9:16:4b:fa:d9: e2:af:b9:90:b4:0b:40:f3:f6:44:47:f5:9e:e4:ae:db:58:2b: 37:be:cf:f9:59:5c:c2:61:18:34:18:af:42:df:5f:ff:07:bc: 58:be:43:7f:c4:0d:4c:ee:b2:92:48:f0:57:6a:48:d0:0d:e0: 23:37:c1:29:1f:ce:3c:b5:32:09:07:f4:51:f2:21:60:e2:36: 6f:af:34:fa:a6:bd:7f:b6:4f:3a:3c:84:82:02:82:ef:bf:82: 30:ec:fd:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwNTEyMjI1OTUxWhcNMjUwNTE5MjI1OTUxWjAYMRYwFAYD VQQDEw02ODIyN2Q2Ny04ZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mTorgcEipcVsfyAlWYNmx8pBBn+X55EU5Ag5pnfbDVlPNVk5eAHs2CsbnPO ZbXOdK71/UQtxNOPYvi35J+QACymxjs++gnP5Vg02TRCoM1EKFg9wQZ50gngPT/u 46CeGBmz59lhY8G7bZi1o22dMKXrXXcMhpXBodAd5K2vLbXFGluYftfmNMiGvMYF 35+8GRx4EInyBUrqG8BKskq3OFCJzWBZ+yP1Cw65u7vXujiuHgwQ+snXsWPQlX4I xE34rs4AovdPRabrVCED3qRqvgm13mW0/39z06RkND9XZ+OKv62L+CAQrYaVgiCh OWrznCcm7hcyUwMmBHp/X4AwHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHW/D5bv E/lWjsVuxYCvkBqGgP2yMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEVILjNHJG1VioWcLoSnbUt9MfPPb2PgGM3mTyTDQAWC5kqdFA6vfH 3hZqXt5KyFy+s23e34DNfCwfi36ohNTCIGb/s+Sn/Nr4F4q29CB/3qITkDCgqVtv 49rupoD9lecDpH1FldgQ4SN5LLZTehZ/r++rbtSL2VUOcTTHkkYxsU70yepTZxh0 4yOIQzDIybCacXwkyY/m3vCN9CtiyRZL+tnir7mQtAtA8/ZER/We5K7bWCs3vs/5 WVzCYRg0GK9C31//B7xYvkN/xA1M7rKSSPBXakjQDeAjN8EpH848tTIJB/RR8iFg 4jZvrzT6pr1/tk86PISCAoLvv4Iw7P3n -----END CERTIFICATE-----Generated at Tue May 13 19:54:29 2025 by rpki-client