$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: wQkWisOlHgdZbo8v0iGLk2dVBew30w5y2/rKjghIkko= Subject key identifier: 91:F2:CD:9D:C4:47:EC:12:4E:D3:A8:D5:73:CC:10:22:85:47:20:2D Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05EB Signing time: Fri 12 Sep 2025 23:04:29 +0000 Manifest this update: Fri 12 Sep 2025 23:04:28 +0000 Manifest next update: Fri 19 Sep 2025 23:04:28 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: Cy+1NqE9nx8bnulhwrhu2L5m4QxSPr80AU2CE1QYvDE=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 22:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1530 (0x5fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Sep 12 23:04:28 2025 GMT Not After : Sep 19 23:04:28 2025 GMT Subject: CN=68c4a6fd-7d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:b0:b1:05:43:df:54:0e:b8:e1:cd:52:80: 09:8e:e4:68:e5:fc:6e:61:9b:e4:2e:71:be:e3:81: 01:2d:00:bd:b0:1c:c3:8a:99:78:75:0e:8d:de:68: bb:2d:d0:b1:09:a9:92:ac:dd:b8:0e:cc:3a:8f:61: d5:e4:c9:40:a7:d9:d0:82:4d:8c:15:67:c9:1f:b3: 7f:6b:3a:41:53:7a:41:89:80:75:f5:47:53:36:1d: 7e:0c:74:98:7f:37:e9:45:1a:39:5d:14:c2:b6:9a: c6:7d:0d:4b:9d:3d:8c:64:ec:2a:3e:12:de:23:a7: 53:a1:2e:f4:a1:ee:f6:0c:8d:9e:6d:14:d9:1a:f5: 1f:52:95:7e:c2:cf:8c:21:61:4f:e5:a3:9b:fe:d1: 02:75:74:72:e3:ef:8f:31:75:69:8b:ca:2e:0c:32: bb:61:2b:4d:06:28:76:af:f0:f7:70:b1:0b:bf:90: b6:8f:da:47:4e:23:70:7e:e9:20:2b:f5:a9:24:a9: b7:3c:c6:3c:3b:72:6f:f6:3e:ad:12:28:d4:54:c0: 13:99:12:4b:94:e7:40:ca:a4:b6:ee:b9:11:62:a0: cb:1a:3e:a5:e2:db:8a:f4:6c:91:f1:69:f6:42:19: e2:b6:92:0c:0b:94:52:ec:43:bf:e0:ee:b8:d6:3e: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F2:CD:9D:C4:47:EC:12:4E:D3:A8:D5:73:CC:10:22:85:47:20:2D X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:7a:ee:41:4a:8e:3f:46:fa:fb:2a:98:f1:b6:ce:dd:46:00: 7b:84:ca:6e:94:1e:d3:5c:c9:0b:18:0f:4f:2d:e3:f3:be:55: 81:1e:47:aa:ab:f3:f0:3d:96:cd:6b:d3:dd:b8:a2:81:b8:50: d7:e6:39:97:08:d2:b7:90:61:46:f1:b5:22:90:ae:94:70:b9: 98:3e:fe:a8:4c:54:e3:69:fe:e6:a6:6c:ed:48:dc:2c:a8:18: 6e:79:fd:87:ae:41:e2:48:ca:66:41:47:10:ad:c4:0e:42:7a: 90:ca:2e:ec:5b:fb:5e:1f:f7:ea:6d:14:3f:f2:28:5a:9e:83: cf:a2:4a:47:1e:5d:66:bb:73:a9:59:e3:a1:c5:5b:b4:72:d1: 3d:28:37:e6:49:a9:98:3b:d1:4f:df:4b:22:4f:6d:b2:0f:08: f8:50:7e:90:6a:9f:91:fc:eb:ae:44:c2:a6:65:57:fc:69:6a: 67:81:65:2a:ab:e8:7b:38:e9:0b:60:3c:9f:e3:bf:a1:fc:c3: 27:78:8e:3e:fc:da:70:d4:ff:65:df:f7:18:f8:48:a1:db:83: e7:94:e6:79:84:61:ee:e3:09:5b:10:b4:96:6a:fd:80:ae:01: 6f:a1:21:e7:a4:5f:a3:14:c4:ee:03:f8:c7:0c:70:ef:22:e1: 0e:bf:84:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwOTEyMjMwNDI4WhcNMjUwOTE5MjMwNDI4WjAYMRYwFAYD VQQDEw02OGM0YTZmZC03ZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nGwsQVD31QOuOHNUoAJjuRo5fxuYZvkLnG+44EBLQC9sBzDipl4dQ6N3mi7 LdCxCamSrN24Dsw6j2HV5MlAp9nQgk2MFWfJH7N/azpBU3pBiYB19UdTNh1+DHSY fzfpRRo5XRTCtprGfQ1LnT2MZOwqPhLeI6dToS70oe72DI2ebRTZGvUfUpV+ws+M IWFP5aOb/tECdXRy4++PMXVpi8ouDDK7YStNBih2r/D3cLELv5C2j9pHTiNwfukg K/WpJKm3PMY8O3Jv9j6tEijUVMATmRJLlOdAyqS27rkRYqDLGj6l4tuK9GyR8Wn2 QhnitpIMC5RS7EO/4O641j7pTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHyzZ3E R+wSTtOo1XPMECKFRyAtMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMeu5BSo4/Rvr7Kpjxts7dRgB7hMpulB7TXMkLGA9PLePzvlWBHkeq q/PwPZbNa9PduKKBuFDX5jmXCNK3kGFG8bUikK6UcLmYPv6oTFTjaf7mpmztSNws qBhuef2HrkHiSMpmQUcQrcQOQnqQyi7sW/teH/fqbRQ/8ihanoPPokpHHl1mu3Op WeOhxVu0ctE9KDfmSamYO9FP30siT22yDwj4UH6Qap+R/OuuRMKmZVf8aWpngWUq q+h7OOkLYDyf47+h/MMneI4+/Npw1P9l3/cY+Eih24PnlOZ5hGHu4wlbELSWav2A rgFvoSHnpF+jFMTuA/jHDHDvIuEOv4Qm -----END CERTIFICATE-----Generated at Sun Sep 14 03:10:09 2025 by rpki-client