$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft File: YG6ylYJUrJi2M26qQayAstyxnG4.mft (raw, json) Hash identifier: 3eWwettPIkaG2jma83w+C1iEj5k1vFuNQRP7G3FTMF0= Subject key identifier: 1A:CA:09:FF:BF:3D:37:F5:C6:0C:57:B8:97:76:EE:B4:91:AD:4C:D0 Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E Certificate issuer: /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Certificate serial: 0175 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft Manifest number: 016E Signing time: Sat 17 Oct 2026 05:33:13 +0000 Manifest this update: Sat 17 Oct 2026 05:33:13 +0000 Manifest next update: Sat 24 Oct 2026 05:33:13 +0000 Files and hashes: 1: YG6ylYJUrJi2M26qQayAstyxnG4.crl (hash: hbTA164exbvMrZ7YdiIPcjXe7xjCBK27o17kfpk5MUE=) 2: 186DFCCABA8211F198D0A4F93811F970.roa (hash: 4ZIixXdvG3KYmU6SNe16q5BU1y1T2x6Uxw8VNDU+Jig=) 3: C74734B6BCCE11F1983EB77C3311F970.roa (hash: hZuMKp+WjoByqqRloDkIK97D/CXqLhxo7Gt3Z3ZU9YE=) 4: 17CE8226BA8211F198D0A4F93811F970.roa (hash: 5A2uxW9yni9/PalNJlLvBLx5M9eCnCn+mF9OihXJN3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 05:33:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 373 (0x175) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E Validity Not Before: Oct 17 05:33:13 2026 GMT Not After : Oct 24 05:33:13 2026 GMT Subject: CN=6ad30899-20a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:71:9a:52:99:74:e5:f3:f9:e1:e5:0a:6c: 8f:ae:af:ed:50:4d:2f:ce:58:e6:a0:62:d1:6d:ac: ec:1f:be:30:97:65:04:b8:a1:64:7c:10:52:7a:30: 9c:89:d9:a2:04:08:c6:6f:1e:a3:b0:b6:67:96:ad: e1:74:a5:05:fe:84:75:50:82:98:2b:2d:49:20:78: 63:92:96:6d:99:fd:42:be:87:11:2f:4a:b8:21:1c: ae:63:13:5f:9d:ba:32:43:e4:64:e5:07:2c:79:c4: 89:58:82:68:29:90:15:a6:8e:c2:1d:27:75:e7:0d: 11:6f:2b:00:b4:06:0d:79:59:15:c1:a0:da:c1:0c: 88:89:2f:fd:b4:d8:b8:7e:96:5b:f1:63:8a:96:3c: ad:3b:44:17:ea:26:57:93:46:96:81:9d:9b:24:7c: 93:6d:8b:b8:d5:23:d9:38:a6:a8:62:5e:dc:5e:1d: 23:9f:a9:ec:12:db:a6:07:7f:bb:cc:32:12:92:0b: 33:e3:cd:60:2e:59:d1:5a:e0:2d:7f:10:96:1c:13: 4b:c0:58:00:11:a7:73:20:1a:d1:a0:c3:3a:26:19: 03:95:b3:c8:41:a6:c1:85:40:b1:6f:d7:12:07:c5: c3:c0:ac:0a:10:39:12:44:54:80:98:67:06:26:b9: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CA:09:FF:BF:3D:37:F5:C6:0C:57:B8:97:76:EE:B4:91:AD:4C:D0 X509v3 Authority Key Identifier: keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:bb:b3:01:4a:e3:eb:bd:66:00:60:72:d1:bb:5c:68:28:17: b8:78:26:35:95:fb:55:4e:a9:64:10:c7:dd:1b:ed:f5:51:23: 81:39:d9:54:84:26:99:1a:8e:3b:70:6d:62:18:31:46:48:7c: 98:b1:28:6d:a3:22:35:8c:19:ff:f4:da:5a:9d:4a:c8:83:d6: 86:76:80:6e:a6:5a:15:b0:70:5c:d4:74:e9:05:c0:61:3d:6f: 21:97:15:6c:3a:7c:d9:fc:f6:b4:b3:1f:cb:04:e9:f6:58:f4: 29:eb:8d:2c:0a:a5:e8:34:69:8f:9f:6a:b3:c4:c9:45:d1:05: 32:24:27:97:53:88:c2:7f:3c:db:c3:cc:3b:c0:c4:cd:71:c4: ca:83:f8:8e:b8:da:7f:50:f0:b1:19:bf:fd:09:66:da:16:95: 33:94:cd:d2:cf:0f:54:3a:41:86:10:30:a9:6c:09:e4:8a:d9: 58:35:50:45:f6:77:bb:81:21:4e:5c:84:0b:ce:55:4a:4d:53: be:6c:69:2e:e8:cb:4b:a1:da:b1:36:da:98:db:9c:e0:c8:b6: ed:29:11:ae:15:45:76:83:57:a9:e1:3a:2e:6d:0a:02:c3:a3: 8f:98:d1:89:79:98:f1:42:a9:e7:88:4c:84:9a:0b:c7:f2:23: 53:d1:4b:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDYwNkVCMjk1ODI1NEFDOThCNjMzNkVBQTQxQUM4MEIy RENCMTlDNkUwHhcNMjYxMDE3MDUzMzEzWhcNMjYxMDI0MDUzMzEzWjAYMRYwFAYD VQQDEw02YWQzMDg5OS0yMGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1sNxmlKZdOXz+eHlCmyPrq/tUE0vzljmoGLRbazsH74wl2UEuKFkfBBSejCc idmiBAjGbx6jsLZnlq3hdKUF/oR1UIKYKy1JIHhjkpZtmf1CvocRL0q4IRyuYxNf nboyQ+Rk5QcsecSJWIJoKZAVpo7CHSd15w0RbysAtAYNeVkVwaDawQyIiS/9tNi4 fpZb8WOKljytO0QX6iZXk0aWgZ2bJHyTbYu41SPZOKaoYl7cXh0jn6nsEtumB3+7 zDISkgsz481gLlnRWuAtfxCWHBNLwFgAEadzIBrRoMM6JhkDlbPIQabBhUCxb9cS B8XDwKwKEDkSRFSAmGcGJrmeSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrKCf+/ PTf1xgxXuJd27rSRrUzQMB8GA1UdIwQYMBaAFGBuspWCVKyYtjNuqkGsgLLcsZxu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CNURGQzhDMDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJKaTJNMjZxUWF5QXN0eXhu RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1lHNnlsWUpVckppMk0yNnFRYXlBc3R5eG5HNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CNURGQzhDMDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9ZRzZ5bFlKVXJK aTJNMjZxUWF5QXN0eXhuRzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkruzAUrj671mAGBy0btcaCgXuHgmNZX7VU6pZBDH3Rvt9VEjgTnZVIQmmRqO O3BtYhgxRkh8mLEobaMiNYwZ//TaWp1KyIPWhnaAbqZaFbBwXNR06QXAYT1vIZcV bDp82fz2tLMfywTp9lj0KeuNLAql6DRpj59qs8TJRdEFMiQnl1OIwn8828PMO8DE zXHEyoP4jrjaf1DwsRm//Qlm2haVM5TN0s8PVDpBhhAwqWwJ5IrZWDVQRfZ3u4Eh TlyEC85VSk1TvmxpLujLS6HasTbamNuc4Mi27SkRrhVFdoNXqeE6Lm0KAsOjj5jR iXmY8UKp54hMhJoLx/IjU9FLig== -----END CERTIFICATE-----Generated at Sat Oct 17 12:40:25 2026 by rpki-client