$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: 48WqLlRHvdTT1pTkTDQ4f4D4drXn76Ztsnt4Ixga4vc= Subject key identifier: F8:2F:7E:3B:6E:73:7E:91:E7:63:99:01:DC:59:07:9B:0B:87:BE:F1 Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05C3 Signing time: Mon 30 Jun 2025 23:31:41 +0000 Manifest this update: Mon 30 Jun 2025 23:31:40 +0000 Manifest next update: Mon 07 Jul 2025 23:31:40 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: DNu2C1VZU668Mbo5tdTFf3Y7QDmOznym4jt71H+FHBA=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: 1qRqu4QH9HDd1EyRcy6qURNfK14QqgjZ5hEdOKADVjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1489 (0x5d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Jun 30 23:31:40 2025 GMT Not After : Jul 7 23:31:40 2025 GMT Subject: CN=68631e5c-a852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:18:b6:39:4b:19:02:0e:b9:ad:57:82:36: ae:7d:fa:fd:23:a3:22:d4:00:78:f5:b6:d3:56:7f: d7:ef:37:a3:1d:50:c2:56:b8:6f:ca:44:ad:c3:4a: c5:d8:de:75:f3:5c:6a:04:a5:62:7c:28:c7:f3:1a: fa:e2:14:29:84:7c:fd:a0:b7:cc:97:97:c6:91:f5: 02:7c:1c:32:fb:36:6c:5e:c4:1f:71:e7:3c:1c:2d: 0d:8d:81:e6:2b:0a:33:cf:21:f4:c4:a8:05:18:5e: c6:6a:15:e5:81:33:93:16:5b:4e:f1:2e:6e:69:2c: de:18:a3:c8:15:5f:70:2e:0e:15:df:e7:4e:34:5d: d5:a0:e5:c8:e6:82:d7:e0:86:05:91:36:a5:27:b8: 64:a9:18:b3:c8:c6:45:11:2c:c5:3b:47:a9:63:fd: 2c:a5:1c:68:ae:e5:7e:aa:d4:59:f2:bd:4c:b4:93: c1:4d:bd:8f:9d:10:84:15:a2:78:8a:79:6e:78:52: 05:f1:e9:62:21:d1:3c:a5:da:c8:e3:cd:37:1a:c6: 60:ea:03:1e:9a:7d:9a:aa:3e:d9:9f:4e:cb:f8:5c: 59:6e:4c:ef:01:40:db:37:36:28:3e:ca:be:f9:4c: f2:ce:50:cc:4b:6b:e6:e4:c3:d4:9a:54:4f:c5:46: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:7E:3B:6E:73:7E:91:E7:63:99:01:DC:59:07:9B:0B:87:BE:F1 X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:55:18:99:e2:91:cd:2f:3a:0c:be:e8:f6:43:8b:37:f9:43: 21:b5:21:95:ab:b7:3f:52:21:5c:63:72:32:9d:72:c9:c1:60: 27:20:a4:2c:42:c4:9f:95:32:ac:78:f0:13:99:57:ad:8b:ea: 5a:60:5b:70:38:c1:46:08:17:49:a7:86:4d:47:42:84:81:d0: a4:2d:4c:a0:27:3f:d6:aa:63:a6:73:87:f3:03:80:cb:5f:03: ee:83:0e:b3:ed:24:51:d2:69:b1:7a:8b:d2:57:59:4e:11:3f: e8:f3:c2:ea:c6:41:81:1a:25:14:9c:2f:94:6e:a2:9b:62:a7: 26:31:ca:df:a6:6d:6e:eb:74:27:de:12:d0:da:0e:41:5b:2f: 1a:ae:7a:8e:2f:38:c1:52:65:3b:18:3c:f9:b5:c4:e1:d6:18: 3f:6b:66:9a:8d:88:3f:f3:67:91:8b:ea:bc:65:36:0a:c9:2f: 70:f9:58:1d:04:43:3d:32:02:5c:17:d2:81:5f:29:3a:e8:54: f5:98:32:61:49:a8:39:c4:dc:fe:a9:ba:0a:e1:97:11:c8:e1: b4:10:08:ef:30:d9:1e:11:33:3d:6b:af:57:4e:ce:a0:5f:f3: 4b:13:1e:de:a7:a9:e6:28:16:02:ad:9c:d3:f2:6b:2e:2d:d2: e2:e1:31:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwNjMwMjMzMTQwWhcNMjUwNzA3MjMzMTQwWjAYMRYwFAYD VQQDEw02ODYzMWU1Yy1hODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnAYtjlLGQIOua1Xgjauffr9I6Mi1AB49bbTVn/X7zejHVDCVrhvykStw0rF 2N5181xqBKVifCjH8xr64hQphHz9oLfMl5fGkfUCfBwy+zZsXsQfcec8HC0NjYHm KwozzyH0xKgFGF7GahXlgTOTFltO8S5uaSzeGKPIFV9wLg4V3+dONF3VoOXI5oLX 4IYFkTalJ7hkqRizyMZFESzFO0epY/0spRxoruV+qtRZ8r1MtJPBTb2PnRCEFaJ4 inlueFIF8eliIdE8pdrI4803GsZg6gMemn2aqj7Zn07L+FxZbkzvAUDbNzYoPsq+ +UzyzlDMS2vm5MPUmlRPxUakXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgvfjtu c36R52OZAdxZB5sLh77xMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeVRiZ4pHNLzoMvuj2Q4s3+UMhtSGVq7c/UiFcY3IynXLJwWAnIKQs QsSflTKsePATmVeti+paYFtwOMFGCBdJp4ZNR0KEgdCkLUygJz/WqmOmc4fzA4DL XwPugw6z7SRR0mmxeovSV1lOET/o88LqxkGBGiUUnC+UbqKbYqcmMcrfpm1u63Qn 3hLQ2g5BWy8arnqOLzjBUmU7GDz5tcTh1hg/a2aajYg/82eRi+q8ZTYKyS9w+Vgd BEM9MgJcF9KBXyk66FT1mDJhSag5xNz+qboK4ZcRyOG0EAjvMNkeETM9a69XTs6g X/NLEx7ep6nmKBYCrZzT8msuLdLi4TFa -----END CERTIFICATE-----Generated at Wed Jul 2 22:29:25 2025 by rpki-client