$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: kSoHsw6k7YIcD8InFDgXRDs4peQfwE+1WfAqmf0jnF8= Subject key identifier: 73:67:AA:55:83:72:E9:EF:11:1E:71:C4:AD:4E:FD:BA:40:5A:14:D4 Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05D0 Signing time: Tue 22 Jul 2025 23:28:22 +0000 Manifest this update: Tue 22 Jul 2025 23:28:21 +0000 Manifest next update: Tue 29 Jul 2025 23:28:21 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: 4+IT7YNAxSV3tfpbbTPQIS7fk+TKt44x+hHKkc2dEjw=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 23:28:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1503 (0x5df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Jul 22 23:28:21 2025 GMT Not After : Jul 29 23:28:21 2025 GMT Subject: CN=68801e96-e1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:26:f4:dc:af:85:50:f0:a6:59:ec:96:3f:4f: e6:b6:99:16:2a:5b:44:4d:55:49:91:c3:94:f6:3e: 6b:fd:5f:d8:71:d2:d8:a2:95:25:db:f7:24:9c:39: 59:c9:a1:05:d8:ca:ef:e9:9c:90:fd:30:e9:55:ca: 44:2b:a6:6b:53:c4:28:f0:f8:87:82:78:98:4c:17: 15:bb:ed:98:fc:4b:76:d1:33:46:6b:63:11:8d:97: 65:e6:4f:84:c3:0e:c6:f7:d1:59:08:17:2b:c2:6a: d5:67:50:3d:53:82:12:b9:69:b9:07:2c:09:14:93: 31:ca:bf:37:f5:fe:ce:90:87:22:61:9c:21:67:de: 5c:2c:09:5b:82:18:a5:1f:20:cc:89:84:bc:97:38: c4:a5:ee:78:e7:53:12:15:8a:9b:dc:45:27:f9:5e: 7c:f7:fe:06:d0:62:1a:8e:c7:d1:1f:04:c4:f9:1b: 8a:b5:de:25:35:67:b6:33:9c:b5:32:67:5b:de:5c: 7a:3a:5c:11:e2:f2:4b:92:f3:67:69:0f:8b:5e:46: 52:8d:f4:5e:bc:06:15:c1:7b:c2:4f:b6:26:f1:48: ff:45:c5:d2:39:14:28:0d:81:65:28:5d:96:0e:b9: fd:85:cd:92:87:6f:7b:75:dd:7f:dc:fe:a1:ea:09: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:67:AA:55:83:72:E9:EF:11:1E:71:C4:AD:4E:FD:BA:40:5A:14:D4 X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:10:f3:a0:85:e8:25:f7:3e:70:a7:b7:85:e0:5f:ca:1d:2a: 0e:5c:37:36:cc:9b:96:d5:38:cb:01:b5:61:3e:42:c9:ec:d4: 9f:91:d3:76:2a:6c:22:4e:d1:85:98:ef:04:57:73:b4:c2:fd: b7:35:49:16:fa:b0:90:09:12:ec:f4:28:6d:a5:c5:de:c7:60: b7:a5:37:50:cb:bd:8b:a0:38:2b:6f:e2:f1:e0:0b:b1:90:a1: 7b:aa:28:c9:db:aa:6a:1b:b0:22:05:f5:4d:64:8f:68:6d:58: b5:94:f1:ed:6b:44:b0:98:1c:56:50:46:11:7c:9a:90:c0:db: b1:21:d9:7e:05:25:9b:c5:0a:ec:ba:d7:4b:c7:9f:91:ba:f2: c0:95:ae:37:bb:c1:2c:40:ae:0a:0e:6b:32:81:84:11:3c:14: d0:30:a6:c6:c1:a9:71:97:20:ea:59:e3:46:09:8c:71:97:60: 3e:e1:b9:25:25:95:d6:1f:f0:65:11:a8:06:8b:c7:71:eb:4e: e4:4a:9c:db:29:e2:6e:6c:f5:2d:ae:5e:64:df:3a:8e:33:d5: b8:3c:ed:7a:4c:0b:89:e7:0f:55:d5:58:8f:81:68:79:53:ac: 6b:59:d6:32:4c:cc:f8:57:ac:d4:32:bc:3e:ec:ff:da:53:73: c6:1f:53:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwNzIyMjMyODIxWhcNMjUwNzI5MjMyODIxWjAYMRYwFAYD VQQDEw02ODgwMWU5Ni1lMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Sb03K+FUPCmWeyWP0/mtpkWKltETVVJkcOU9j5r/V/YcdLYopUl2/cknDlZ yaEF2Mrv6ZyQ/TDpVcpEK6ZrU8Qo8PiHgniYTBcVu+2Y/Et20TNGa2MRjZdl5k+E ww7G99FZCBcrwmrVZ1A9U4ISuWm5BywJFJMxyr839f7OkIciYZwhZ95cLAlbghil HyDMiYS8lzjEpe5451MSFYqb3EUn+V589/4G0GIajsfRHwTE+RuKtd4lNWe2M5y1 Mmdb3lx6OlwR4vJLkvNnaQ+LXkZSjfRevAYVwXvCT7Ym8Uj/RcXSORQoDYFlKF2W Drn9hc2Sh297dd1/3P6h6gkZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNnqlWD cunvER5xxK1O/bpAWhTUMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSEPOghegl9z5wp7eF4F/KHSoOXDc2zJuW1TjLAbVhPkLJ7NSfkdN2 KmwiTtGFmO8EV3O0wv23NUkW+rCQCRLs9ChtpcXex2C3pTdQy72LoDgrb+Lx4Aux kKF7qijJ26pqG7AiBfVNZI9obVi1lPHta0SwmBxWUEYRfJqQwNuxIdl+BSWbxQrs utdLx5+RuvLAla43u8EsQK4KDmsygYQRPBTQMKbGwalxlyDqWeNGCYxxl2A+4bkl JZXWH/BlEagGi8dx607kSpzbKeJubPUtrl5k3zqOM9W4PO16TAuJ5w9V1ViPgWh5 U6xrWdYyTMz4V6zUMrw+7P/aU3PGH1PM -----END CERTIFICATE-----Generated at Wed Jul 23 12:50:38 2025 by rpki-client