$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft File: YgeEx-RQt6kzUQsSM0umpo5KFEA.mft (raw, json) Hash identifier: +YmHzbC//Xmq0JuRztHEfJKaezh82mjCrEKd0XTG2D0= Subject key identifier: BD:8F:CD:8E:0E:2D:26:E9:C0:A3:FB:38:AC:D3:E5:E5:37:18:64:19 Authority key identifier: 62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40 Certificate issuer: /CN=A9170E77/serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft Manifest number: 02 Signing time: Mon 27 Jul 2026 08:19:31 +0000 Manifest this update: Mon 27 Jul 2026 08:19:30 +0000 Manifest next update: Mon 03 Aug 2026 08:19:30 +0000 Files and hashes: 1: YgeEx-RQt6kzUQsSM0umpo5KFEA.crl (hash: NPW+uAuzV750mtEzzkr7pqTxvzLMdzSrlzzVpA0Gewo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E77, serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440 Validity Not Before: Jul 27 08:19:30 2026 GMT Not After : Aug 3 08:19:30 2026 GMT Subject: CN=6a671493-0b8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6f:c3:9a:07:19:d1:78:61:92:a9:42:fa:c8: a8:58:2d:2b:57:de:dd:f4:a2:cb:dd:87:04:f8:55: 9b:e8:41:0f:1d:31:91:51:88:83:a5:85:3a:41:5b: d1:a5:a9:2b:3a:42:e6:80:26:fb:70:ed:a1:d4:83: 49:6c:ac:60:28:00:eb:6e:5d:ff:59:13:50:17:94: 59:6d:55:df:24:b3:ea:63:56:ee:0b:76:f5:33:38: 39:56:b2:e0:ac:e0:e5:ec:47:c7:0b:db:ab:7f:6f: d2:4f:96:c5:d2:98:20:62:33:36:74:06:98:2a:c9: 3d:2c:57:0a:4d:06:6b:dd:af:60:65:75:0e:33:c5: 53:ff:cf:eb:f7:20:ef:9b:fc:bc:fb:28:90:3f:50: eb:1c:81:8a:72:17:f5:41:57:a0:b4:da:55:48:89: 6e:1c:f8:db:1d:47:a2:7a:7f:23:74:39:8d:4c:0c: 7b:df:d5:62:ef:97:56:69:46:ad:4d:c3:50:c7:18: 28:80:aa:c9:3b:8c:74:8f:b7:e2:5e:f5:7f:ab:4b: d8:ce:05:5a:97:7c:c3:54:88:94:7b:54:1b:67:30: d0:d4:72:9a:fc:61:0c:d6:7a:1c:05:b0:b3:05:76: d3:09:55:bc:dc:fe:02:85:c2:0a:29:de:40:48:a3: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8F:CD:8E:0E:2D:26:E9:C0:A3:FB:38:AC:D3:E5:E5:37:18:64:19 X509v3 Authority Key Identifier: keyid:62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:25:14:7c:5c:e8:60:70:0e:b3:c7:d0:e4:c9:9d:35:fb:1a: c6:ae:cb:6b:74:d8:46:4b:95:21:64:9b:93:9d:af:71:a0:e7: a2:d8:f5:3d:04:e1:f4:48:f9:45:ea:0a:89:1d:28:a8:65:11: 7b:47:24:96:8b:02:8e:e5:e4:fb:94:28:62:c9:e9:ad:e4:e7: 25:ef:64:1f:ea:f1:e4:44:a0:89:99:9a:a9:9e:05:d4:1e:ce: 59:51:ff:6d:c9:17:99:bc:50:80:7e:10:0f:b1:ba:a2:8e:e1: 82:f0:03:0b:ef:3e:88:87:ef:bf:80:7a:a2:59:df:8b:e2:11: 46:a1:d6:60:8f:21:0c:f6:99:bc:c7:e7:91:c7:70:82:6d:0f: fb:0f:09:7d:35:01:84:5a:30:38:34:5d:53:f0:8c:b8:01:2b: 8b:c1:37:55:57:48:03:93:8c:3e:10:6a:26:f3:d8:d4:a6:7f: 64:1d:f5:77:f7:c9:71:fb:71:a1:71:51:1b:dc:e0:28:47:37: 05:6b:00:ef:ab:37:cc:38:33:08:1a:0d:86:1e:34:8a:3a:17: 0c:b7:b9:1c:97:a8:eb:38:79:9b:a0:09:94:a6:33:82:03:cf: c6:f7:83:cd:16:98:4f:a1:47:14:4c:89:47:69:9b:5a:7e:3b: 4e:69:18:1b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEU3NzExMC8GA1UEBRMoNjIwNzg0QzdFNDUwQjdBOTMzNTEwQjEyMzM0QkE2QTY4 RTRBMTQ0MDAeFw0yNjA3MjcwODE5MzBaFw0yNjA4MDMwODE5MzBaMBgxFjAUBgNV BAMTDTZhNjcxNDkzLTBiOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVb8OaBxnReGGSqUL6yKhYLStX3t30osvdhwT4VZvoQQ8dMZFRiIOlhTpBW9Gl qSs6QuaAJvtw7aHUg0lsrGAoAOtuXf9ZE1AXlFltVd8ks+pjVu4LdvUzODlWsuCs 4OXsR8cL26t/b9JPlsXSmCBiMzZ0BpgqyT0sVwpNBmvdr2BldQ4zxVP/z+v3IO+b /Lz7KJA/UOscgYpyF/VBV6C02lVIiW4c+NsdR6J6fyN0OY1MDHvf1WLvl1ZpRq1N w1DHGCiAqsk7jHSPt+Je9X+rS9jOBVqXfMNUiJR7VBtnMNDUcpr8YQzWehwFsLMF dtMJVbzc/gKFwgop3kBIo5lZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvY/Njg4t JunAo/s4rNPl5TcYZBkwHwYDVR0jBBgwFoAUYgeEx+RQt6kzUQsSM0umpo5KFEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRTc3L0Q3Q0U2N0ZDODk4 MjExRjFBRjQyREI3RjMyMTFGOTcwL1lnZUV4LVJRdDZrelVRc1NNMHVtcG81S0ZF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWdlRXgtUlF0Nmt6VVFzU00wdW1wbzVLRkVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RTc3L0Q3Q0U2N0ZDODk4MjExRjFBRjQyREI3RjMyMTFGOTcwL1lnZUV4LVJRdDZr elVRc1NNMHVtcG81S0ZFQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAmJRR8XOhgcA6zx9DkyZ01+xrGrstrdNhGS5UhZJuTna9xoOei2PU9BOH0SPlF 6gqJHSioZRF7RySWiwKO5eT7lChiyemt5Ocl72Qf6vHkRKCJmZqpngXUHs5ZUf9t yReZvFCAfhAPsbqijuGC8AML7z6Ih++/gHqiWd+L4hFGodZgjyEM9pm8x+eRx3CC bQ/7Dwl9NQGEWjA4NF1T8Iy4ASuLwTdVV0gDk4w+EGom89jUpn9kHfV398lx+3Gh cVEb3OAoRzcFawDvqzfMODMIGg2GHjSKOhcMt7kcl6jrOHmboAmUpjOCA8/G94PN FphPoUcUTIlHaZtafjtOaRgb -----END CERTIFICATE-----Generated at Tue Jul 28 18:02:11 2026 by rpki-client