$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft File: YgeEx-RQt6kzUQsSM0umpo5KFEA.mft (raw, json) Hash identifier: d5kaXK547OP+AsGeJU3YnlTXGBYMMqbCfK/ilbhf9JA= Subject key identifier: 34:1E:99:01:91:F0:C8:8A:25:DA:E4:EC:A8:FC:D6:99:EC:05:A7:84 Authority key identifier: 62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40 Certificate issuer: /CN=A9170E77/serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440 Certificate serial: 27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft Manifest number: 27 Signing time: Wed 07 Oct 2026 09:24:27 +0000 Manifest this update: Wed 07 Oct 2026 09:24:27 +0000 Manifest next update: Wed 14 Oct 2026 09:24:27 +0000 Files and hashes: 1: YgeEx-RQt6kzUQsSM0umpo5KFEA.crl (hash: GSen96X1BXvpIy3BtMCHSyS98+b5w6mh+dpo+TmDKxM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 09:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170E77, serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440 Validity Not Before: Oct 7 09:24:27 2026 GMT Not After : Oct 14 09:24:27 2026 GMT Subject: CN=6ac60fcb-b34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:b1:c1:d8:4d:9f:8a:3b:13:e2:47:12:d4: cd:8c:78:5b:01:27:0b:0e:d8:26:53:4a:d5:f9:03: 06:dd:12:5e:64:0e:68:47:2c:11:5b:e5:08:6b:41: 90:7e:1a:79:1c:88:9f:66:0a:8f:df:78:8b:10:88: 34:15:86:4c:c7:c3:b9:e3:62:f8:c1:25:ba:15:f5: 45:ed:7b:e0:1f:74:36:4e:af:55:fd:ca:e7:ad:1e: b9:1e:13:b9:31:93:d4:a9:ef:a0:1f:db:98:33:cc: 82:2a:1a:ca:f8:d8:a2:78:43:2a:13:3b:d9:f9:d7: 8c:bd:8a:ed:54:3b:0b:17:fd:e3:50:f1:72:57:3e: 99:64:61:cf:db:12:29:84:f4:48:10:ca:37:9b:29: d5:2a:54:1d:25:9e:ed:cc:4a:4f:6d:e9:78:e1:a2: 33:8b:5f:5b:62:1b:4b:2c:0d:c5:38:5a:55:ea:ee: cd:a0:d8:57:04:79:09:38:8d:24:64:e8:25:ba:71: e8:fc:81:fd:b1:a9:0f:3a:6d:c9:c2:8a:c2:28:29: 1f:33:dd:4b:f6:da:b0:a1:31:72:93:e0:5f:9b:f7: 96:5b:15:6d:5a:0a:e0:72:e7:f2:9c:0e:9e:8f:ec: 2b:97:3b:29:19:83:b0:b9:65:91:84:cc:be:f1:ce: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1E:99:01:91:F0:C8:8A:25:DA:E4:EC:A8:FC:D6:99:EC:05:A7:84 X509v3 Authority Key Identifier: keyid:62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:89:aa:c5:59:70:98:a4:08:39:b8:85:a6:4d:b1:2f:7a:cc: 99:f4:83:bc:12:d2:45:3e:7b:bf:71:54:76:8f:20:a2:64:27: 84:59:24:a3:14:33:d6:7c:89:c0:72:ef:3b:e8:c1:77:a2:0a: da:a4:2c:72:55:e7:70:58:ad:01:97:81:29:f8:93:98:c0:53: 5b:02:2e:d2:7b:bb:85:d9:e3:83:0d:1e:d6:a3:09:89:bd:8f: ec:f0:8d:6c:d1:51:d7:bb:65:9d:cb:4b:ab:24:30:37:9e:ea: d4:78:33:cc:eb:26:6e:04:b0:3a:fd:66:d9:c9:9c:7a:3c:e1: c3:82:71:3c:fd:5f:e2:a8:fd:cf:48:32:db:89:f2:74:78:4d: 47:92:4f:65:25:af:90:e4:ed:d4:17:15:34:5e:4c:1f:c5:13: 16:4a:f6:5a:88:39:1a:57:f1:74:46:70:68:06:fa:75:0c:e6: d5:d9:ac:f9:a7:2b:9b:50:49:5c:14:1f:74:33:2d:15:8f:db: 5e:d9:20:ce:80:d3:7d:ea:f1:8d:3b:f9:30:98:72:98:14:c8: a3:e9:24:47:90:2b:af:1f:64:73:0f:d4:2f:55:05:b8:14:e6: 9b:27:23:dd:df:ae:63:f8:80:79:90:f6:cc:a3:ba:88:b7:9c: cd:19:53:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MEU3NzExMC8GA1UEBRMoNjIwNzg0QzdFNDUwQjdBOTMzNTEwQjEyMzM0QkE2QTY4 RTRBMTQ0MDAeFw0yNjEwMDcwOTI0MjdaFw0yNjEwMTQwOTI0MjdaMBgxFjAUBgNV BAMTDTZhYzYwZmNiLWIzNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8GbHB2E2fijsT4kcS1M2MeFsBJwsO2CZTStX5AwbdEl5kDmhHLBFb5QhrQZB+ GnkciJ9mCo/feIsQiDQVhkzHw7njYvjBJboV9UXte+AfdDZOr1X9yuetHrkeE7kx k9Sp76Af25gzzIIqGsr42KJ4QyoTO9n514y9iu1UOwsX/eNQ8XJXPplkYc/bEimE 9EgQyjebKdUqVB0lnu3MSk9t6XjhojOLX1tiG0ssDcU4WlXq7s2g2FcEeQk4jSRk 6CW6cej8gf2xqQ86bcnCisIoKR8z3Uv22rChMXKT4F+b95ZbFW1aCuBy5/KcDp6P 7CuXOykZg7C5ZZGEzL7xzsAhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNB6ZAZHw yIol2uTsqPzWmewFp4QwHwYDVR0jBBgwFoAUYgeEx+RQt6kzUQsSM0umpo5KFEAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwRTc3L0Q3Q0U2N0ZDODk4 MjExRjFBRjQyREI3RjMyMTFGOTcwL1lnZUV4LVJRdDZrelVRc1NNMHVtcG81S0ZF QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWdlRXgtUlF0Nmt6VVFzU00wdW1wbzVLRkVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw RTc3L0Q3Q0U2N0ZDODk4MjExRjFBRjQyREI3RjMyMTFGOTcwL1lnZUV4LVJRdDZr elVRc1NNMHVtcG81S0ZFQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCYiarFWXCYpAg5uIWmTbEvesyZ9IO8EtJFPnu/cVR2jyCiZCeEWSSjFDPWfInA cu876MF3ograpCxyVedwWK0Bl4Ep+JOYwFNbAi7Se7uF2eODDR7WowmJvY/s8I1s 0VHXu2Wdy0urJDA3nurUeDPM6yZuBLA6/WbZyZx6POHDgnE8/V/iqP3PSDLbifJ0 eE1Hkk9lJa+Q5O3UFxU0XkwfxRMWSvZaiDkaV/F0RnBoBvp1DObV2az5pyubUElc FB90My0Vj9te2SDOgNN96vGNO/kwmHKYFMij6SRHkCuvH2RzD9QvVQW4FOabJyPd 365j+IB5kPbMo7qIt5zNGVPI -----END CERTIFICATE-----Generated at Thu Oct 8 05:18:33 2026 by rpki-client