$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft File: YgeEx-RQt6kzUQsSM0umpo5KFEA.mft (raw, json) Hash identifier: jBtd68ipmKftk/MtV9PyDpWPgXY6ZFJXDmMDuzsBNt8= Subject key identifier: BD:D3:7A:0D:51:D3:B3:64:F8:81:BB:DC:72:64:B8:51:CB:62:59:98 Authority key identifier: 62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40 Certificate issuer: /CN=A9170E77/serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft Manifest number: 1E Signing time: Sat 19 Sep 2026 08:55:05 +0000 Manifest this update: Sat 19 Sep 2026 08:55:05 +0000 Manifest next update: Sat 26 Sep 2026 08:55:05 +0000 Files and hashes: 1: YgeEx-RQt6kzUQsSM0umpo5KFEA.crl (hash: 5lZjqCC2Jvs5J3r4yQkQZk3BOyS4ubPy9CQ3e+V7AYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E77, serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440 Validity Not Before: Sep 19 08:55:05 2026 GMT Not After : Sep 26 08:55:05 2026 GMT Subject: CN=6aae4de9-b8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:e7:f5:79:07:87:3a:e8:a3:e3:bb:d3:30: 3e:93:33:70:1e:45:91:1e:cb:99:cc:65:9d:72:67: b6:97:d6:df:8f:00:80:d9:72:f2:ec:06:28:64:ac: 92:7e:15:90:1f:4e:31:01:43:89:55:26:f5:db:c8: a7:5c:35:86:8e:6b:3c:c0:a5:7d:4d:77:60:7c:7a: 39:35:4a:b6:bb:c4:9f:c7:26:6a:d5:6a:f3:77:0f: da:18:e8:01:25:f2:b6:42:2c:0a:54:15:80:d1:cb: 27:31:88:a9:33:04:6c:4e:40:9f:7e:5e:ba:de:ba: 1b:26:f9:84:48:d8:4f:b3:b2:c2:83:c5:0a:3d:39: e1:d3:77:17:69:74:b6:3d:a4:07:d0:74:b0:98:64: 7f:43:55:90:f3:f7:0f:7a:4d:5c:b2:ca:96:43:12: 38:52:d1:a3:21:19:df:f2:48:f4:88:e9:f5:26:37: db:a2:a7:31:89:bc:eb:d8:b5:86:e1:09:25:0c:90: 5c:3f:11:7e:48:2f:0a:8f:fe:4d:74:39:c8:65:13: cc:18:94:3f:72:77:32:83:84:e1:18:8d:7e:a2:c5: f4:10:b8:a1:fe:a4:da:9c:c0:a4:08:ce:ab:c0:49: dc:04:63:65:d7:73:0d:a7:2f:a2:2f:55:c3:58:82: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D3:7A:0D:51:D3:B3:64:F8:81:BB:DC:72:64:B8:51:CB:62:59:98 X509v3 Authority Key Identifier: keyid:62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8b:a5:d6:10:3f:aa:e3:ba:28:ae:57:13:03:86:cc:b8:48: 88:0f:ae:30:2d:2c:bf:90:d7:05:e4:6f:b8:0f:2f:2f:d2:ff: 25:5f:c7:1d:e4:f7:a2:19:5d:a9:67:29:a7:8f:7e:3e:4d:eb: a2:96:6d:3e:a1:9f:08:20:cd:64:e3:f9:7d:22:01:5b:2f:8f: be:7b:bb:30:95:c7:e8:0b:dc:da:10:82:5d:c3:ff:47:8b:7b: fc:f5:88:1f:36:46:41:14:2f:3f:b4:ff:c7:ea:da:6c:0a:df: 08:7c:9e:76:1d:6e:87:59:1a:cd:ce:62:56:fe:b7:58:b5:30: 6d:9c:49:d7:e9:11:84:f9:0b:6d:7c:65:69:90:0a:9f:6a:9f: 66:2a:ae:05:15:74:30:51:eb:a0:b7:26:e2:0a:48:43:d5:6b: e6:66:04:68:1f:fe:32:c2:8f:fb:31:ea:26:31:d2:5a:b6:54: 58:f2:7e:54:1d:44:b7:ac:a8:88:cc:f3:97:1e:67:4e:2e:28: 53:d9:57:49:a1:ba:2a:7b:7f:fd:65:0c:be:3e:be:92:c7:9d: db:2d:ce:c5:19:f6:e1:ea:c1:90:ed:a1:27:b0:e6:4d:29:a4: 66:d6:4f:1f:63:9f:89:18:12:e0:5a:d9:12:8e:c5:9f:bd:63: 0e:a9:93:fa -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEU3NzExMC8GA1UEBRMoNjIwNzg0QzdFNDUwQjdBOTMzNTEwQjEyMzM0QkE2QTY4 RTRBMTQ0MDAeFw0yNjA5MTkwODU1MDVaFw0yNjA5MjYwODU1MDVaMBgxFjAUBgNV BAMTDTZhYWU0ZGU5LWI4ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMXuf1eQeHOuij47vTMD6TM3AeRZEey5nMZZ1yZ7aX1t+PAIDZcvLsBihkrJJ+ FZAfTjEBQ4lVJvXbyKdcNYaOazzApX1Nd2B8ejk1Sra7xJ/HJmrVavN3D9oY6AEl 8rZCLApUFYDRyycxiKkzBGxOQJ9+Xrreuhsm+YRI2E+zssKDxQo9OeHTdxdpdLY9 pAfQdLCYZH9DVZDz9w96TVyyypZDEjhS0aMhGd/ySPSI6fUmN9uipzGJvOvYtYbh CSUMkFw/EX5ILwqP/k10OchlE8wYlD9ydzKDhOEYjX6ixfQQuKH+pNqcwKQIzqvA SdwEY2XXcw2nL6IvVcNYginlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvdN6DVHT s2T4gbvccmS4UctiWZgwHwYDVR0jBBgwFoAUYgeEx+RQt6kzUQsSM0umpo5KFEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRTc3L0Q3Q0U2N0ZDODk4 MjExRjFBRjQyREI3RjMyMTFGOTcwL1lnZUV4LVJRdDZrelVRc1NNMHVtcG81S0ZF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWdlRXgtUlF0Nmt6VVFzU00wdW1wbzVLRkVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RTc3L0Q3Q0U2N0ZDODk4MjExRjFBRjQyREI3RjMyMTFGOTcwL1lnZUV4LVJRdDZr elVRc1NNMHVtcG81S0ZFQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyi6XWED+q47oorlcTA4bMuEiID64wLSy/kNcF5G+4Dy8v0v8lX8cd5PeiGV2p Zymnj34+Teuilm0+oZ8IIM1k4/l9IgFbL4++e7swlcfoC9zaEIJdw/9Hi3v89Ygf NkZBFC8/tP/H6tpsCt8IfJ52HW6HWRrNzmJW/rdYtTBtnEnX6RGE+QttfGVpkAqf ap9mKq4FFXQwUeugtybiCkhD1WvmZgRoH/4ywo/7MeomMdJatlRY8n5UHUS3rKiI zPOXHmdOLihT2VdJoboqe3/9ZQy+Pr6Sx53bLc7FGfbh6sGQ7aEnsOZNKaRm1k8f Y5+JGBLgWtkSjsWfvWMOqZP6 -----END CERTIFICATE-----Generated at Sun Sep 20 21:05:29 2026 by rpki-client