$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: Ql/aZzHQUolMIXAiFs3KmZ1iUPCydEHqOa7rUxrR3u0= Subject key identifier: BF:5E:D0:FE:AD:56:85:65:69:21:21:D6:3F:FD:E5:72:1D:4D:39:15 Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05E0 Signing time: Fri 22 Aug 2025 23:14:28 +0000 Manifest this update: Fri 22 Aug 2025 23:14:27 +0000 Manifest next update: Fri 29 Aug 2025 23:14:27 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: Xto3rAXCX98luK/ijEckTutWnMN8FeUg5q8F6D1FHhw=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1519 (0x5ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Aug 22 23:14:27 2025 GMT Not After : Aug 29 23:14:27 2025 GMT Subject: CN=68a8f9d3-1229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:98:5e:7e:ad:04:f1:64:32:c8:2d:52:12: b4:e3:34:95:3f:de:e8:11:a4:53:5b:02:8f:07:79: 25:1e:83:e1:ab:33:ec:84:96:35:4d:61:f3:5f:87: 21:2d:87:c9:50:4f:3d:e5:bf:3b:1d:d8:82:65:53: 71:e1:c4:2d:35:27:34:bc:e6:1f:71:93:a4:51:08: e1:14:1d:1d:36:25:81:a5:bf:3c:2d:42:2e:c9:e6: db:a9:c3:af:dd:eb:ee:d9:af:d4:ae:4e:c1:60:a8: 5b:bb:5f:87:c8:cb:ad:90:80:36:1f:08:06:5c:de: 0c:d9:02:fc:07:c3:d2:95:e7:fe:63:e8:95:ef:ba: cc:01:09:3e:b3:0b:96:58:b3:38:be:60:33:7f:40: 26:b4:06:17:27:6d:0e:fa:18:c8:12:ea:65:03:72: e3:af:ad:44:6e:a0:8e:fa:1f:5f:16:5a:5d:0b:cf: ca:1c:1d:32:cc:f7:0a:85:3c:ca:a1:03:4b:f2:7b: b9:7f:2f:d9:3d:ef:73:be:c3:01:08:94:b1:2f:6d: 2b:06:82:41:3e:7f:b1:45:64:b3:d5:96:c0:57:b6: 02:4b:79:b4:35:56:75:d0:f6:e5:21:6a:cd:52:11: ce:ba:78:3c:ef:95:83:de:e3:07:1c:2b:88:52:3a: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5E:D0:FE:AD:56:85:65:69:21:21:D6:3F:FD:E5:72:1D:4D:39:15 X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:c8:76:f4:bd:0f:cc:6e:86:02:ac:c8:4b:78:0a:c4:30: 8d:a3:a7:c4:d3:57:28:71:ce:b4:25:d1:d4:2a:f3:b2:4f:4a: 0b:74:1f:7d:8e:b4:52:89:f1:0e:9b:1c:9a:9b:cb:3a:9d:7b: 8d:12:78:54:9d:7e:49:c9:20:8a:21:73:d2:c4:c1:24:71:a9: 5f:24:96:17:20:5a:d0:37:92:2b:58:39:1e:17:90:90:99:9c: 31:53:d4:36:b9:5d:d7:bb:09:31:c3:4f:f3:0d:5a:ea:cd:14: 60:ea:13:1f:75:51:28:c6:1b:dc:9a:c3:de:e4:3a:e0:5b:ff: 4f:87:36:18:53:e0:f7:0a:ab:e9:f8:1a:1f:3e:37:dd:2d:55: b3:f9:1c:e4:89:48:31:f5:03:c8:3e:34:37:36:83:1c:2b:00: 35:0a:33:17:2a:c6:7b:f0:f9:d3:0e:13:bc:62:e7:ad:46:09: 07:88:ce:0a:ca:b4:3d:09:2d:d4:66:e3:6b:64:46:e2:b9:a7: 9a:20:17:9f:f2:14:d4:e1:4c:7d:f0:2a:8a:7a:8b:bf:54:b8: 74:8d:1d:b1:08:c5:19:1d:29:3e:fe:1d:31:e7:67:98:d8:ac: d7:16:61:57:12:ac:a3:0a:51:a9:39:e0:33:0d:c2:7b:0d:e4: 52:c1:1b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwODIyMjMxNDI3WhcNMjUwODI5MjMxNDI3WjAYMRYwFAYD VQQDEw02OGE4ZjlkMy0xMjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxTOYXn6tBPFkMsgtUhK04zSVP97oEaRTWwKPB3klHoPhqzPshJY1TWHzX4ch LYfJUE895b87HdiCZVNx4cQtNSc0vOYfcZOkUQjhFB0dNiWBpb88LUIuyebbqcOv 3evu2a/Urk7BYKhbu1+HyMutkIA2HwgGXN4M2QL8B8PSlef+Y+iV77rMAQk+swuW WLM4vmAzf0AmtAYXJ20O+hjIEuplA3Ljr61EbqCO+h9fFlpdC8/KHB0yzPcKhTzK oQNL8nu5fy/ZPe9zvsMBCJSxL20rBoJBPn+xRWSz1ZbAV7YCS3m0NVZ10PblIWrN UhHOung875WD3uMHHCuIUjookQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9e0P6t VoVlaSEh1j/95XIdTTkVMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPS8h29L0PzG6GAqzIS3gKxDCNo6fE01cocc60JdHUKvOyT0oLdB99 jrRSifEOmxyam8s6nXuNEnhUnX5JySCKIXPSxMEkcalfJJYXIFrQN5IrWDkeF5CQ mZwxU9Q2uV3Xuwkxw0/zDVrqzRRg6hMfdVEoxhvcmsPe5DrgW/9PhzYYU+D3Cqvp +BofPjfdLVWz+RzkiUgx9QPIPjQ3NoMcKwA1CjMXKsZ78PnTDhO8YuetRgkHiM4K yrQ9CS3UZuNrZEbiuaeaIBef8hTU4Ux98CqKeou/VLh0jR2xCMUZHSk+/h0x52eY 2KzXFmFXEqyjClGpOeAzDcJ7DeRSwRvk -----END CERTIFICATE-----Generated at Sat Aug 23 19:10:48 2025 by rpki-client