$ rpki-client -vvf rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft File: YGWA927TklN9X8ollpTPkmFBfEE.mft (raw, json) Hash identifier: RnIwohWULCiTKjJXxtjnxyP9VO39oCPm2XZVbEOwjXo= Subject key identifier: CF:02:55:C2:DD:3A:4F:6E:3E:69:D0:4A:72:3E:AC:B2:C1:42:A4:37 Authority key identifier: 60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 Certificate issuer: /CN=A911F1E6/serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Certificate serial: 05AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft Manifest number: 05A0 Signing time: Thu 24 Apr 2025 23:01:40 +0000 Manifest this update: Thu 24 Apr 2025 23:01:40 +0000 Manifest next update: Thu 01 May 2025 23:01:40 +0000 Files and hashes: 1: YGWA927TklN9X8ollpTPkmFBfEE.crl (hash: WzqeKhT2fxZ9/ghQur1DTqt1HmEPGevAisR1MAN0TWo=) 2: 4C6FB118CDEC11EB85313B22C4F9AE02.roa (hash: OrtHOETOrItjmKJ7KfMNKuUcSMEyCsCy/SOGjRGiw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1453 (0x5ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F1E6, serialNumber=606580F76ED392537D5FCA259694CF9261417C41 Validity Not Before: Apr 24 23:01:40 2025 GMT Not After : May 1 23:01:40 2025 GMT Subject: CN=680ac2d4-395d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:0b:c2:f0:a2:c2:9f:de:bb:c5:f7:5b:a4: a2:82:1f:4b:6b:df:1c:be:1d:28:f2:00:f5:8c:8a: 27:97:0d:ad:85:8f:3f:3e:33:7a:8a:ad:21:ae:fc: ec:7d:95:81:a4:0a:bf:e8:db:bf:1f:79:bc:45:39: 94:49:87:73:27:91:4f:0b:3a:cf:d0:82:e8:81:53: ab:f4:78:fa:81:ee:e2:8e:dc:8c:7f:61:a2:d0:6f: 3f:36:e0:35:e1:16:2f:7f:70:db:6f:5d:7c:5d:2d: 15:34:28:98:44:73:ff:a8:63:b4:5e:8e:1a:29:e5: 79:26:ab:f5:a6:fa:8f:69:77:5a:ac:ca:ec:bd:65: 7e:7b:7d:50:94:54:65:37:e9:59:76:15:2e:70:7b: 54:13:db:e6:42:6f:71:cc:c6:91:22:8a:4e:71:8a: 9f:0e:48:9f:2e:0c:b0:74:78:c2:f3:12:93:d5:49: 9d:48:2f:94:0c:3e:51:62:58:40:fd:02:8a:53:3f: 60:64:7c:a5:7b:87:9b:9e:d6:a1:a7:45:f7:b6:56: 90:c5:4e:6a:94:a7:ad:e1:3c:1b:0e:41:d2:85:09: b0:c0:7f:77:32:1b:d1:84:93:74:dd:3f:e5:d2:a1: 15:9f:87:8f:97:c4:97:b4:a9:6d:2d:fc:d0:cd:41: 10:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:55:C2:DD:3A:4F:6E:3E:69:D0:4A:72:3E:AC:B2:C1:42:A4:37 X509v3 Authority Key Identifier: keyid:60:65:80:F7:6E:D3:92:53:7D:5F:CA:25:96:94:CF:92:61:41:7C:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YGWA927TklN9X8ollpTPkmFBfEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F1E6/627EF142CDE911EBB7E6BE1CC4F9AE02/YGWA927TklN9X8ollpTPkmFBfEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:37:37:6e:83:70:43:99:6c:69:fd:48:3b:06:af:b1:ad:67: ff:96:3a:8e:3e:6d:93:70:8d:3b:f9:17:57:fe:45:a6:70:7c: 10:c1:00:18:c9:09:0d:94:94:c3:73:6f:f6:27:e3:17:09:a1: 4d:58:67:f6:a9:69:d2:10:e1:7b:04:56:7f:ae:5b:6f:d0:25: 54:c8:9c:30:f0:e8:90:29:a0:93:75:63:1e:21:ef:c9:b4:0e: a6:54:b1:5d:64:f2:74:d8:33:9a:b2:0f:1d:51:c5:ad:1c:6b: d6:79:81:5f:67:73:89:7f:49:21:a6:cd:28:1f:c4:e0:7b:b4: 9b:de:30:ad:9d:3c:17:ef:4b:db:1d:62:79:33:97:70:8b:f9: 4d:a9:f4:c8:cb:28:7d:58:91:01:0a:09:97:f7:d3:99:b3:b1: 60:14:f9:e2:ae:ae:26:3d:cc:a3:2c:35:f6:06:f5:e2:39:d9: 09:e0:dc:e7:5a:3d:0f:e4:a6:a6:76:7a:9e:b8:03:66:31:59: 53:ac:11:a8:84:55:c2:4b:12:8c:84:eb:5e:5e:d9:46:99:1c: 69:f5:a7:91:e2:e8:44:4e:6a:1d:f3:9f:9b:6b:b4:c6:7b:26: 7d:dc:b5:cd:fd:95:64:a3:8a:9f:4f:c1:1d:dc:0d:fe:bf:02: d8:ec:76:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYxRTYxMTAvBgNVBAUTKDYwNjU4MEY3NkVEMzkyNTM3RDVGQ0EyNTk2OTRDRjky NjE0MTdDNDEwHhcNMjUwNDI0MjMwMTQwWhcNMjUwNTAxMjMwMTQwWjAYMRYwFAYD VQQDEw02ODBhYzJkNC0zOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoE4LwvCiwp/eu8X3W6Sigh9La98cvh0o8gD1jIonlw2thY8/PjN6iq0hrvzs fZWBpAq/6Nu/H3m8RTmUSYdzJ5FPCzrP0ILogVOr9Hj6ge7ijtyMf2Gi0G8/NuA1 4RYvf3Dbb118XS0VNCiYRHP/qGO0Xo4aKeV5Jqv1pvqPaXdarMrsvWV+e31QlFRl N+lZdhUucHtUE9vmQm9xzMaRIopOcYqfDkifLgywdHjC8xKT1UmdSC+UDD5RYlhA /QKKUz9gZHyle4ebntahp0X3tlaQxU5qlKet4TwbDkHShQmwwH93MhvRhJN03T/l 0qEVn4ePl8SXtKltLfzQzUEQYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8CVcLd Ok9uPmnQSnI+rLLBQqQ3MB8GA1UdIwQYMBaAFGBlgPdu05JTfV/KJZaUz5JhQXxB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjFFNi82MjdFRjE0MkNE RTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGtsTjlYOG9sbHBUUGttRkJm RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHV0E5MjdUa2xOOVg4b2xscFRQa21GQmZFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjFFNi82MjdFRjE0MkNERTkxMUVCQjdFNkJFMUNDNEY5QUUwMi9ZR1dBOTI3VGts TjlYOG9sbHBUUGttRkJmRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQNzdug3BDmWxp/Ug7Bq+xrWf/ljqOPm2TcI07+RdX/kWmcHwQwQAY yQkNlJTDc2/2J+MXCaFNWGf2qWnSEOF7BFZ/rltv0CVUyJww8OiQKaCTdWMeIe/J tA6mVLFdZPJ02DOasg8dUcWtHGvWeYFfZ3OJf0khps0oH8Tge7Sb3jCtnTwX70vb HWJ5M5dwi/lNqfTIyyh9WJEBCgmX99OZs7FgFPnirq4mPcyjLDX2BvXiOdkJ4Nzn Wj0P5KamdnqeuANmMVlTrBGohFXCSxKMhOteXtlGmRxp9aeR4uhETmod85+ba7TG eyZ93LXN/ZVko4qfT8Ed3A3+vwLY7Ha+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:52 2025 by rpki-client