$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: 5pnOo+iRSKQoBQdkzF1fYFh/pGzqiaM580yZl4fAA9c= Subject key identifier: 64:A1:10:3E:1A:FF:0E:79:F4:FE:92:35:B1:87:3A:95:88:7E:70:6A Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05B3 Signing time: Fri 30 May 2025 23:34:30 +0000 Manifest this update: Fri 30 May 2025 23:34:30 +0000 Manifest next update: Fri 06 Jun 2025 23:34:30 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: SSR6wHYA8vqW/1ig6ohRqKif3nWi3TeWM/Hd4nDPPBE=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: 1qRqu4QH9HDd1EyRcy6qURNfK14QqgjZ5hEdOKADVjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:34:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: May 30 23:34:30 2025 GMT Not After : Jun 6 23:34:30 2025 GMT Subject: CN=683a4086-cbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2f:2c:72:4c:18:3e:4a:f5:1c:97:74:0f:33: 38:8f:9c:b9:80:8d:32:81:40:5f:63:1e:c6:fb:09: 07:ff:8f:e9:c1:8f:b9:48:0a:3a:90:95:ea:7d:7e: 75:ee:d3:a6:6a:b2:36:f0:e1:26:7c:d1:c3:6e:5f: 19:69:5a:c2:09:0a:b4:73:42:ee:8a:4f:b9:ca:3b: fe:6a:01:dc:06:6b:31:cc:d9:c0:79:68:78:1b:a3: db:34:6c:88:da:57:ff:24:00:8f:a6:fb:fd:bb:d7: b2:f2:1d:fd:d6:8d:f3:ee:36:ce:7a:ea:64:6b:59: a2:a8:97:c3:f9:8c:61:ff:41:3f:66:58:ff:b1:7d: 47:ae:65:6a:8d:57:13:66:8d:62:fc:36:2a:23:b4: 10:10:b7:a5:3d:b6:14:fa:81:1b:99:9e:18:27:96: 79:24:9d:fd:ee:a9:47:d4:fa:81:44:7b:21:10:ef: 60:e1:0c:67:c6:90:b5:01:09:ff:9d:43:39:3a:87: 25:78:bb:f3:a1:73:fa:00:e3:d1:f6:cd:27:7d:6d: 4c:39:1a:7c:df:ff:35:7f:ad:f1:ae:4c:fb:03:a1: d0:b9:c1:00:14:cf:7c:90:61:ba:7a:0d:77:90:23: 3e:2b:aa:a2:c8:f0:2c:d0:46:7b:00:6a:5d:67:96: fc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A1:10:3E:1A:FF:0E:79:F4:FE:92:35:B1:87:3A:95:88:7E:70:6A X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:32:50:95:4b:6f:d1:c0:f0:a0:68:15:be:f4:71:57:77:e0: 14:8f:98:7d:10:81:01:7d:69:89:ab:75:97:98:bb:b1:f9:eb: 55:a4:01:62:d7:7c:0d:71:c5:a0:3b:cc:eb:e3:69:88:c9:83: 62:ff:d6:27:b9:4f:3d:b9:ee:8c:07:8d:fd:c9:ac:ac:b9:1c: f4:77:89:88:71:26:47:09:92:68:7b:19:44:95:36:60:c6:00: d5:76:d3:95:4c:69:06:79:ed:d7:4d:17:20:3e:3d:2b:12:a5: 79:8b:a6:f3:9d:3d:d8:65:ce:92:52:d7:7f:31:fb:75:1c:15: d7:f8:55:b2:2a:03:e0:0f:88:ce:16:20:b8:13:7f:d4:4d:d1: eb:64:60:5d:f7:f0:5b:f9:28:b5:92:f8:bb:7b:ec:3a:45:19: c1:f7:b0:1d:d7:44:e5:29:df:96:14:22:c4:ea:33:de:02:79: 14:74:25:a0:f8:d9:dd:86:ea:2c:45:57:35:d7:85:04:cd:9f: db:d2:96:e3:20:b9:de:01:e0:32:b7:ec:1b:3d:02:a0:89:2a: a1:8f:5e:23:3d:d0:98:8c:62:d6:2b:d1:91:d3:25:9c:81:31: 4f:53:51:9c:93:4f:6f:fc:60:3d:70:9d:24:43:9d:c1:2b:59: c9:27:ab:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwNTMwMjMzNDMwWhcNMjUwNjA2MjMzNDMwWjAYMRYwFAYD VQQDEw02ODNhNDA4Ni1jYmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2i8sckwYPkr1HJd0DzM4j5y5gI0ygUBfYx7G+wkH/4/pwY+5SAo6kJXqfX51 7tOmarI28OEmfNHDbl8ZaVrCCQq0c0Luik+5yjv+agHcBmsxzNnAeWh4G6PbNGyI 2lf/JACPpvv9u9ey8h391o3z7jbOeupka1miqJfD+Yxh/0E/Zlj/sX1HrmVqjVcT Zo1i/DYqI7QQELelPbYU+oEbmZ4YJ5Z5JJ397qlH1PqBRHshEO9g4QxnxpC1AQn/ nUM5OocleLvzoXP6AOPR9s0nfW1MORp83/81f63xrkz7A6HQucEAFM98kGG6eg13 kCM+K6qiyPAs0EZ7AGpdZ5b8cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGShED4a /w559P6SNbGHOpWIfnBqMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANMlCVS2/RwPCgaBW+9HFXd+AUj5h9EIEBfWmJq3WXmLux+etVpAFi 13wNccWgO8zr42mIyYNi/9YnuU89ue6MB439yaysuRz0d4mIcSZHCZJoexlElTZg xgDVdtOVTGkGee3XTRcgPj0rEqV5i6bznT3YZc6SUtd/Mft1HBXX+FWyKgPgD4jO FiC4E3/UTdHrZGBd9/Bb+Si1kvi7e+w6RRnB97Ad10TlKd+WFCLE6jPeAnkUdCWg +NndhuosRVc114UEzZ/b0pbjILneAeAyt+wbPQKgiSqhj14jPdCYjGLWK9GR0yWc gTFPU1Gck09v/GA9cJ0kQ53BK1nJJ6t9 -----END CERTIFICATE-----Generated at Sat May 31 17:10:23 2025 by rpki-client