$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: 0jJl3udY7nP1d5qim+3qvLPetKQ4xBL5XH29GjZER4s= Subject key identifier: CC:2C:64:84:03:6A:77:17:E6:CD:23:28:3F:78:57:FF:C0:B2:BC:8E Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 066A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 0654 Signing time: Tue 24 Mar 2026 22:25:53 +0000 Manifest this update: Tue 24 Mar 2026 22:25:53 +0000 Manifest next update: Tue 31 Mar 2026 22:25:53 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: eRZYTnDT7ukucn1GzUxIHsI2Suc6XTmBwrBam+ZpHrw=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: AZkz8RkQqtzDCsqbwXmPSPpVGalZTJZrGrvGM5gcWDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1642 (0x66a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Mar 24 22:25:53 2026 GMT Not After : Mar 31 22:25:53 2026 GMT Subject: CN=69c30f71-6eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:27:32:c8:28:75:e7:75:ca:06:5d:87:0f:7e: e9:fc:91:ae:79:d9:75:eb:d4:e5:f3:d8:99:93:7a: 58:4a:6c:a2:72:63:a2:a1:0c:16:82:42:19:3c:e0: 0a:25:a0:f4:47:27:39:9d:68:b6:cc:87:28:f0:85: 81:72:04:75:08:44:2c:b9:df:8a:90:ce:79:9e:ac: 57:ee:85:16:7f:43:6b:0c:1b:d0:f2:43:81:0d:68: 43:eb:05:27:c4:b2:71:a7:94:ec:07:c5:94:fc:1f: 61:ab:77:3b:0d:7d:75:80:44:67:a1:db:a3:00:34: 50:4d:2f:4d:43:16:4a:10:dc:ab:a7:bc:40:77:82: 93:a4:a7:40:f5:ae:9b:85:c2:eb:ee:6f:78:c9:ec: d5:26:d6:58:08:35:6d:ed:aa:8d:b0:bc:ba:6a:06: 73:a1:98:78:f4:7e:cc:f3:28:29:e4:e9:2f:4d:04: 29:0b:ac:e8:16:3c:85:da:c2:fe:df:0e:fe:1c:e7: 36:bc:09:ff:96:2d:87:57:0e:14:bf:02:1c:7c:3e: 1c:1c:0d:e5:9d:58:fd:61:e2:fd:66:28:e0:6e:1a: c7:e1:8f:49:11:c2:5c:ad:4c:f5:41:09:0c:cf:20: 86:8d:f6:58:ec:91:d6:13:76:4f:9b:ee:4f:a6:ff: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2C:64:84:03:6A:77:17:E6:CD:23:28:3F:78:57:FF:C0:B2:BC:8E X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:7d:9e:e5:a7:16:71:c5:a6:84:9d:ee:8a:72:28:5a:eb:78: cc:cf:ab:2a:87:7a:ca:6a:e7:54:bf:46:bb:90:be:b9:19:c0: 83:37:3d:c0:8c:fa:7a:5a:6d:97:c9:17:27:42:4f:38:fa:ff: f9:a0:33:f5:1f:78:c5:6d:f7:5f:c1:b4:5b:cc:3b:21:dc:ad: 80:30:a0:ad:84:cb:68:11:b9:e4:23:0d:ab:bb:6c:b9:87:48: 66:20:aa:ad:3e:59:a2:d2:e7:9a:4b:b9:d9:d6:42:23:93:db: 3d:fe:63:e0:3b:19:1e:1a:03:48:d1:31:f9:eb:85:26:d6:c3: 98:1a:9a:9f:40:42:95:04:6b:82:e6:b3:6f:1e:c2:43:09:c4: d8:67:c8:ed:07:04:c0:8e:b0:8e:79:b7:59:20:00:81:20:3d: 02:00:46:75:95:82:96:d3:49:03:7e:29:0c:e2:40:8d:b8:ad: a1:31:b5:70:6f:6f:80:98:10:57:4a:97:7a:28:94:be:9a:ba: 8c:a1:10:db:ba:56:4a:b0:6c:dc:32:bd:78:1b:cd:fa:cf:84: 6e:e2:86:3e:32:e6:58:9a:67:a3:0b:69:ea:69:b8:04:f8:6c: 10:5a:2e:97:ec:e1:f2:4a:86:66:80:2f:65:df:83:7d:a4:18: 5a:45:38:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjYwMzI0MjIyNTUzWhcNMjYwMzMxMjIyNTUzWjAYMRYwFAYD VQQDEw02OWMzMGY3MS02ZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyycyyCh153XKBl2HD37p/JGuedl169Tl89iZk3pYSmyicmOioQwWgkIZPOAK JaD0Ryc5nWi2zIco8IWBcgR1CEQsud+KkM55nqxX7oUWf0NrDBvQ8kOBDWhD6wUn xLJxp5TsB8WU/B9hq3c7DX11gERnodujADRQTS9NQxZKENyrp7xAd4KTpKdA9a6b hcLr7m94yezVJtZYCDVt7aqNsLy6agZzoZh49H7M8ygp5OkvTQQpC6zoFjyF2sL+ 3w7+HOc2vAn/li2HVw4UvwIcfD4cHA3lnVj9YeL9ZijgbhrH4Y9JEcJcrUz1QQkM zyCGjfZY7JHWE3ZPm+5Ppv/LdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMwsZIQD ancX5s0jKD94V//AsryOMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOH2e5acWccWmhJ3uinIoWut4zM+rKod6ymrnVL9Gu5C+uRnAgzc9wIz6elpt l8kXJ0JPOPr/+aAz9R94xW33X8G0W8w7IdytgDCgrYTLaBG55CMNq7tsuYdIZiCq rT5ZotLnmku52dZCI5PbPf5j4DsZHhoDSNEx+euFJtbDmBqan0BClQRrguazbx7C QwnE2GfI7QcEwI6wjnm3WSAAgSA9AgBGdZWCltNJA34pDOJAjbitoTG1cG9vgJgQ V0qXeiiUvpq6jKEQ27pWSrBs3DK9eBvN+s+EbuKGPjLmWJpnowtp6mm4BPhsEFou l+zh8kqGZoAvZd+DfaQYWkU4Xg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:09 2026 by rpki-client