$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: UKBmRHmuKpshUUjNid0cIP4TJpoLRH4Y2rfv6SDJSNU= Subject key identifier: 69:B4:42:B4:76:92:6A:77:FF:80:3D:40:6D:CC:B2:E5:23:C9:B9:6A Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05D9 Signing time: Fri 08 Aug 2025 23:30:49 +0000 Manifest this update: Fri 08 Aug 2025 23:30:48 +0000 Manifest next update: Fri 15 Aug 2025 23:30:48 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: AsVfsgaOXXvYnc3SeE4vlJzItbnuvVEdVzh0sixH6Wc=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: c8i5qCn+gNkfv/5fNHvXAX8xBeJK6Bb9xy8HlWH9b64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Aug 8 23:30:48 2025 GMT Not After : Aug 15 23:30:48 2025 GMT Subject: CN=689688a9-a8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:e2:0b:5f:bc:4c:b3:48:73:7c:2c:8b:77: 16:e1:b4:d1:90:18:92:2d:4a:ae:83:02:9d:86:4a: cc:65:ea:a2:08:d4:29:83:df:0e:f8:2b:8c:70:31: a7:58:e3:2e:03:10:63:d4:e3:47:b8:c4:b5:d6:89: 1b:e2:9f:de:5d:69:b3:80:bc:58:61:37:9d:1f:2b: 64:25:5f:15:c1:e4:f6:82:6f:b9:b3:ae:7f:a8:a4: 37:11:22:eb:77:e3:fd:cc:8b:5e:fd:bb:c0:e1:32: 0f:d3:52:3d:23:a5:da:35:81:af:9a:a5:05:92:c8: e1:7a:62:3c:9f:f0:19:3c:46:2e:75:be:b4:4b:b4: 77:fd:0b:7a:a9:1a:90:48:cb:c9:30:20:77:5c:ce: 64:12:2a:80:e2:00:da:4d:ff:f8:38:9a:c1:9a:cf: 4b:81:d5:ba:f4:79:c3:08:db:a7:72:d5:d4:76:8c: 2f:6f:e8:23:bc:f3:00:dd:01:d0:0c:89:68:7d:bf: 94:bc:98:1f:4f:99:78:4e:ba:5b:28:86:e4:39:7b: d3:76:24:04:53:bc:4d:10:33:4e:32:32:93:b3:8d: 83:d5:ab:b0:b6:98:ff:41:71:d7:47:6e:76:49:ec: 8e:2e:80:08:01:fd:ed:79:6f:4d:67:e1:2d:16:95: f8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B4:42:B4:76:92:6A:77:FF:80:3D:40:6D:CC:B2:E5:23:C9:B9:6A X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:3e:11:f1:e0:6c:da:28:0f:77:89:7a:32:b7:37:ea:77: 5f:79:84:6e:d6:b0:ec:fc:ef:bf:e9:21:8f:16:66:82:3c:48: da:59:55:02:70:d6:2f:1f:4b:c5:f0:24:9f:81:56:af:ec:42: b1:3f:e5:ae:16:32:2d:03:e9:ea:cc:f8:6c:65:c7:c3:c9:33: 3a:ee:ea:9b:b8:42:1d:eb:71:c6:b2:3e:9e:28:c9:a2:96:04: c2:cd:94:73:2c:f4:22:54:f3:40:90:c8:ac:2e:87:93:86:5b: 5f:0f:b8:d7:99:99:45:47:6f:3b:d2:a3:e3:40:8c:a0:75:87: 60:de:ca:06:07:6e:87:ed:7b:f7:60:20:04:72:61:c5:51:07: cc:84:76:29:f0:5f:ba:11:08:1d:b7:ab:db:28:ac:c2:66:cb: 4b:7e:2d:df:d6:41:f2:ee:3d:a3:7e:d4:e1:2b:a5:f7:9b:cf: 02:5b:fa:19:91:aa:4c:61:28:ff:7b:5d:04:3f:9a:87:33:5c: 77:0f:07:cb:84:09:5d:60:24:b0:52:a1:a0:64:f8:c4:61:15: 7e:83:5a:cb:4e:d7:cb:3d:cb:58:44:60:81:f1:f8:eb:5e:3c: 92:00:71:2d:c7:3a:be:ee:c4:28:db:9d:e8:69:2e:9a:8e:2c: d2:71:8f:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwODA4MjMzMDQ4WhcNMjUwODE1MjMzMDQ4WjAYMRYwFAYD VQQDEw02ODk2ODhhOS1hOGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoviC1+8TLNIc3wsi3cW4bTRkBiSLUqugwKdhkrMZeqiCNQpg98O+CuMcDGn WOMuAxBj1ONHuMS11okb4p/eXWmzgLxYYTedHytkJV8VweT2gm+5s65/qKQ3ESLr d+P9zIte/bvA4TIP01I9I6XaNYGvmqUFksjhemI8n/AZPEYudb60S7R3/Qt6qRqQ SMvJMCB3XM5kEiqA4gDaTf/4OJrBms9LgdW69HnDCNunctXUdowvb+gjvPMA3QHQ DIlofb+UvJgfT5l4TrpbKIbkOXvTdiQEU7xNEDNOMjKTs42D1auwtpj/QXHXR252 SeyOLoAIAf3teW9NZ+EtFpX4YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGm0QrR2 kmp3/4A9QG3MsuUjyblqMB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMZj4R8eBs2igPd4l6Mrc36ndfeYRu1rDs/O+/6SGPFmaCPEjaWVUC cNYvH0vF8CSfgVav7EKxP+WuFjItA+nqzPhsZcfDyTM67uqbuEId63HGsj6eKMmi lgTCzZRzLPQiVPNAkMisLoeThltfD7jXmZlFR2870qPjQIygdYdg3soGB26H7Xv3 YCAEcmHFUQfMhHYp8F+6EQgdt6vbKKzCZstLfi3f1kHy7j2jftThK6X3m88CW/oZ kapMYSj/e10EP5qHM1x3DwfLhAldYCSwUqGgZPjEYRV+g1rLTtfLPctYRGCB8fjr XjySAHEtxzq+7sQo253oaS6ajizScY8o -----END CERTIFICATE-----Generated at Sun Aug 10 10:34:57 2025 by rpki-client