$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: waHbybhPtNkVXGnJWPW4Ej8vZA/pkVI69W868uKtKDg= Subject key identifier: 4A:F1:F1:EE:4C:C4:48:4D:D9:57:F9:D8:CB:18:8C:AB:96:17:E3:13 Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 0605 Signing time: Tue 04 Nov 2025 23:01:34 +0000 Manifest this update: Tue 04 Nov 2025 23:01:33 +0000 Manifest next update: Tue 11 Nov 2025 23:01:33 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: oPkxan0HszskJBFGTyqp5DRiDXuBry4eoXCTKbrUrPI=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Nov 4 23:01:33 2025 GMT Not After : Nov 11 23:01:33 2025 GMT Subject: CN=690a85ce-1c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:1a:b6:2c:da:05:4f:ed:e6:59:99:26:35: cc:4b:3e:ab:09:ee:a4:51:9f:04:75:52:49:4c:ba: 90:a0:25:4b:06:5f:c5:bf:ad:52:7f:57:59:44:34: 98:76:46:c3:85:6e:1f:cb:f6:65:b7:2c:b1:5e:f5: 88:71:49:cc:f1:4b:45:a5:30:b0:f5:32:41:f3:31: 0c:0f:46:ac:22:87:62:cf:a1:75:53:ab:92:58:42: bf:e8:52:97:d0:92:7c:23:de:a9:b9:f7:db:26:a4: ea:89:2e:22:90:ba:df:1f:c4:d0:3b:33:95:c2:47: bd:76:88:4e:ce:f3:05:21:e2:10:31:73:bb:2a:dd: f1:cf:03:82:9f:29:20:5e:33:b5:e4:25:cd:64:37: 57:e2:5b:de:05:fb:df:d2:47:1f:07:7d:19:f4:0e: 07:84:fd:85:2e:3d:85:ef:91:13:e5:98:8b:c9:ff: 69:b9:be:63:8d:38:d2:81:b3:21:76:af:ac:46:5b: 25:0c:dc:f2:2e:ec:5c:e5:36:a9:96:26:e0:0b:fc: 8e:65:a1:0f:35:61:19:c3:45:ef:da:3f:b8:a8:af: ea:07:54:42:7c:16:5a:e9:fd:62:ef:10:7e:f3:6a: 51:d2:b1:97:60:f8:17:49:eb:9a:17:9d:1b:89:bd: 6b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F1:F1:EE:4C:C4:48:4D:D9:57:F9:D8:CB:18:8C:AB:96:17:E3:13 X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:e3:5c:be:10:ae:cd:e2:82:4e:d5:cf:ad:28:36:86:f9:57: 95:f8:8a:ba:38:78:97:5e:c8:42:25:1f:ef:48:41:98:5f:8b: 51:46:85:c2:6c:38:b8:ec:99:7c:4e:a1:d4:12:2a:32:1b:de: 20:c4:b5:d4:57:03:b5:59:89:55:f4:84:1d:e3:84:98:06:32: 20:40:df:3a:89:dc:8d:e0:2c:bb:ff:07:9d:04:f0:cb:3a:a1: a6:96:80:76:d7:d0:40:4d:7c:da:54:c2:89:e7:b4:65:d6:5e: cf:f9:0c:78:33:14:ca:f2:c6:55:14:92:37:7c:5c:ef:71:ea: 60:78:c5:1c:05:45:21:e5:46:47:a4:24:9d:e2:46:49:1b:fc: 2f:78:0e:67:b7:2e:69:0b:35:eb:9a:38:fa:ff:ca:d5:a9:48: 13:a0:88:da:b7:a8:ed:e2:f5:f4:d5:9a:cd:f9:13:85:50:25: 9c:41:04:a6:36:64:67:57:9a:8d:07:da:c5:85:ef:c8:a1:34: 19:de:80:db:b1:b9:5b:77:7f:05:c1:7a:e2:a4:71:1c:d1:0b: bf:9d:6e:d6:88:a6:a7:0b:17:11:ec:fc:2f:d4:65:f3:c3:b5: 32:58:e9:b7:8d:86:bb:6f:a9:c1:88:cb:c4:a1:ec:83:7c:92: 7f:75:ff:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUxMTA0MjMwMTMzWhcNMjUxMTExMjMwMTMzWjAYMRYwFAYD VQQDEw02OTBhODVjZS0xYzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+4atizaBU/t5lmZJjXMSz6rCe6kUZ8EdVJJTLqQoCVLBl/Fv61Sf1dZRDSY dkbDhW4fy/ZltyyxXvWIcUnM8UtFpTCw9TJB8zEMD0asIodiz6F1U6uSWEK/6FKX 0JJ8I96puffbJqTqiS4ikLrfH8TQOzOVwke9dohOzvMFIeIQMXO7Kt3xzwOCnykg XjO15CXNZDdX4lveBfvf0kcfB30Z9A4HhP2FLj2F75ET5ZiLyf9pub5jjTjSgbMh dq+sRlslDNzyLuxc5TaplibgC/yOZaEPNWEZw0Xv2j+4qK/qB1RCfBZa6f1i7xB+ 82pR0rGXYPgXSeuaF50bib1rcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErx8e5M xEhN2Vf52MsYjKuWF+MTMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD41y+EK7N4oJO1c+tKDaG+VeV+Iq6OHiXXshCJR/vSEGYX4tRRoXC bDi47Jl8TqHUEioyG94gxLXUVwO1WYlV9IQd44SYBjIgQN86idyN4Cy7/wedBPDL OqGmloB219BATXzaVMKJ57Rl1l7P+Qx4MxTK8sZVFJI3fFzvcepgeMUcBUUh5UZH pCSd4kZJG/wveA5nty5pCzXrmjj6/8rVqUgToIjat6jt4vX01ZrN+ROFUCWcQQSm NmRnV5qNB9rFhe/IoTQZ3oDbsblbd38FwXripHEc0Qu/nW7WiKanCxcR7Pwv1GXz w7UyWOm3jYa7b6nBiMvEoeyDfJJ/df9t -----END CERTIFICATE-----Generated at Wed Nov 5 17:59:43 2025 by rpki-client