$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft File: YCgZkDDJlCoUSqFr-zB450H27CM.mft (raw, json) Hash identifier: vv4yc0QyrqkzUcaIr0fquV65ysib6NfVvEmGbTAfgLs= Subject key identifier: 4A:96:37:FE:06:3E:EA:6B:E3:C7:BE:F9:C2:D7:CB:F5:44:C4:77:E2 Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 Certificate issuer: /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Certificate serial: 0B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft Manifest number: 0AF0 Signing time: Sun 20 Sep 2026 19:18:44 +0000 Manifest this update: Sun 20 Sep 2026 19:18:43 +0000 Manifest next update: Sun 27 Sep 2026 19:18:43 +0000 Files and hashes: 1: YCgZkDDJlCoUSqFr-zB450H27CM.crl (hash: M5X8sJnkiQsUiswpdlhsfilgaznv4xnj4CMNhz6lyd8=) 2: 5D2B0616A9C011EABAAB4624C4F9AE02.roa (hash: ID5P6rejMOjyD1/9QNZxfu6Edv4l/BB2XuqFSG1EvOM=) 3: 5C1CF19EA9C011EABAAB4624C4F9AE02.roa (hash: N76m8mGbInfNEkPUCeKxXQd1avqi2DdrtdtXBvmx1bI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 19:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2820 (0xb04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23 Validity Not Before: Sep 20 19:18:43 2026 GMT Not After : Sep 27 19:18:43 2026 GMT Subject: CN=6ab03194-f65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c7:ff:f2:00:72:19:71:50:1b:97:25:22:08: de:63:de:4a:fd:d3:9c:77:c2:30:b1:9f:f0:18:e3: 8d:70:8a:f7:a0:5d:18:96:23:92:40:77:9b:57:6b: e6:c0:78:31:1a:a6:96:6c:0b:ee:c0:1e:38:7d:c5: ee:f5:80:d0:cd:9d:2c:9d:9f:96:20:67:6d:fe:14: 57:9f:78:23:8a:13:96:49:88:5e:1c:02:35:7e:89: 0c:9d:6c:c4:84:fb:72:34:59:b5:88:4d:bd:c0:36: bc:dd:57:f2:6c:9b:da:27:81:63:0e:8e:ff:5e:a1: 0a:65:8b:19:46:7d:64:0a:c1:b3:28:46:94:04:00: 78:2a:68:03:2b:98:9c:08:96:e9:9d:db:b9:77:da: f9:a0:74:63:b1:98:fd:2f:d2:30:b8:e3:ca:f7:31: 1f:dc:1f:c1:4b:f0:ed:55:0c:e9:b3:40:ff:8a:fa: a8:b6:eb:5d:7f:bb:4c:ee:f8:42:5f:2f:82:89:61: cf:7e:5d:15:cd:0f:6d:1d:1c:39:c6:cd:8b:f3:b9: eb:41:fb:c5:2b:3f:d9:da:25:83:ec:38:93:12:77: 0e:59:49:70:af:c2:a1:a2:23:7f:03:71:a7:cf:78: e1:3e:f0:2f:6f:3f:7b:79:96:7e:dd:99:70:0f:6b: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:96:37:FE:06:3E:EA:6B:E3:C7:BE:F9:C2:D7:CB:F5:44:C4:77:E2 X509v3 Authority Key Identifier: keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:42:dd:a5:0b:89:48:2d:c9:58:b4:46:0c:dc:57:11:3d: 52:ee:bc:e4:de:0e:07:8e:ab:f8:97:d3:3e:99:bd:06:d9:c2: 6d:c5:2c:5b:15:01:01:91:22:59:ef:bb:c5:23:45:91:38:6c: f1:33:2c:32:d3:6c:05:9b:b8:be:e4:ff:51:ba:93:91:7d:86: 94:6b:1f:db:15:06:57:dd:7e:66:94:10:52:27:c3:ac:df:44: 10:ab:32:a0:26:5b:1a:f9:35:5c:e2:97:cd:f8:09:a8:a4:07: 85:e0:44:41:bd:00:e3:24:39:e0:96:ec:48:1a:a0:0e:a3:3e: c2:83:03:8f:19:06:e4:f9:9a:f9:fd:08:e2:bb:a8:86:99:1d: 67:99:de:6c:16:38:da:bc:51:81:fe:48:d7:a5:14:93:d7:13: 05:23:28:18:ee:bd:b5:61:d6:73:e4:38:45:89:5d:7e:88:4c: 11:8b:5d:1c:07:ad:e3:6e:df:c0:34:49:27:04:7c:23:83:60: 90:e1:79:cc:e0:c8:56:9a:69:5a:6b:f9:5a:86:9e:73:29:cf: f3:cc:36:5d:f8:c1:26:2b:5e:25:4c:5f:26:b6:e5:e9:aa:05: 58:e3:44:1e:8f:04:36:1f:71:58:98:d5:b9:50:8d:3c:16:93: 7f:1c:db:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVENEYxMTAvBgNVBAUTKDYwMjgxOTkwMzBDOTk0MkExNDRBQTE2QkZCMzA3OEU3 NDFGNkVDMjMwHhcNMjYwOTIwMTkxODQzWhcNMjYwOTI3MTkxODQzWjAYMRYwFAYD VQQDEw02YWIwMzE5NC1mNjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cf/8gByGXFQG5clIgjeY95K/dOcd8IwsZ/wGOONcIr3oF0YliOSQHebV2vm wHgxGqaWbAvuwB44fcXu9YDQzZ0snZ+WIGdt/hRXn3gjihOWSYheHAI1fokMnWzE hPtyNFm1iE29wDa83VfybJvaJ4FjDo7/XqEKZYsZRn1kCsGzKEaUBAB4KmgDK5ic CJbpndu5d9r5oHRjsZj9L9IwuOPK9zEf3B/BS/DtVQzps0D/ivqotutdf7tM7vhC Xy+CiWHPfl0VzQ9tHRw5xs2L87nrQfvFKz/Z2iWD7DiTEncOWUlwr8KhoiN/A3Gn z3jhPvAvbz97eZZ+3ZlwD2svdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEqWN/4G Pupr48e++cLXy/VExHfiMB8GA1UdIwQYMBaAFGAoGZAwyZQqFEqha/sweOdB9uwj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUQ0Ri81ODVGNEQwRTc4 NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxDb1VTcUZyLXpCNDUwSDI3 Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lDZ1prRERKbENvVVNxRnItekI0NTBIMjdDTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUQ0Ri81ODVGNEQwRTc4NzkxMUVBQUVCQTNCMzhDNEY5QUUwMi9ZQ2daa0RESmxD b1VTcUZyLXpCNDUwSDI3Q00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZPBC3aULiUgtyVi0RgzcVxE9Uu685N4OB46r+JfTPpm9BtnCbcUsWxUBAZEi We+7xSNFkThs8TMsMtNsBZu4vuT/UbqTkX2GlGsf2xUGV91+ZpQQUifDrN9EEKsy oCZbGvk1XOKXzfgJqKQHheBEQb0A4yQ54JbsSBqgDqM+woMDjxkG5Pma+f0I4ruo hpkdZ5nebBY42rxRgf5I16UUk9cTBSMoGO69tWHWc+Q4RYldfohMEYtdHAet427f wDRJJwR8I4NgkOF5zODIVpppWmv5WoaecynP88w2XfjBJiteJUxfJrbl6aoFWONE Ho8ENh9xWJjVuVCNPBaTfxzbIQ== -----END CERTIFICATE-----Generated at Mon Sep 21 14:52:02 2026 by rpki-client