
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft
File: YgeEx-RQt6kzUQsSM0umpo5KFEA.mft (raw, json)
Hash identifier: aHsYG88IJbKw8J1CWbkJFeO3vp8ylu9SfcL3Zxl0mOM=
Subject key identifier: 3E:15:7D:8B:F7:EE:91:B2:F3:89:EB:46:66:A6:E4:36:69:0F:42:EB
Authority key identifier: 62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40
Certificate issuer: /CN=A9170E77/serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440
Certificate serial: 0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft
Manifest number: 0E
Signing time: Wed 19 Aug 2026 09:50:24 +0000
Manifest this update: Wed 19 Aug 2026 09:50:23 +0000
Manifest next update: Wed 26 Aug 2026 09:50:23 +0000
Files and hashes: 1: YgeEx-RQt6kzUQsSM0umpo5KFEA.crl (hash: EwpyZ8cHjEoedkSpAoDV3IQKUDBTJ2oENp9hD+UknA4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl
rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 26 Aug 2026 09:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14 (0xe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170E77, serialNumber=620784C7E450B7A933510B12334BA6A68E4A1440
Validity
Not Before: Aug 19 09:50:23 2026 GMT
Not After : Aug 26 09:50:23 2026 GMT
Subject: CN=6a857c5f-1147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:f6:ee:70:57:f0:cc:0f:78:48:69:6f:61:
50:3d:75:0e:de:fa:cc:96:e5:b0:e5:17:05:79:bd:
33:71:5c:70:fd:c0:44:0b:f6:98:aa:2a:e9:dc:b4:
0a:00:ab:00:2a:25:10:22:e3:7f:59:5b:ee:80:00:
a0:94:6b:3e:e7:66:73:17:b1:b3:21:cb:a9:f6:b9:
e1:3c:c4:94:9d:0b:03:9a:e2:3d:f5:d5:f1:26:eb:
3d:61:ef:ce:cf:c8:fe:47:33:2d:54:6d:5f:54:67:
9f:89:1e:04:dc:22:dc:48:ed:a5:e7:f1:81:ec:13:
21:94:a4:7d:a7:17:99:ec:4d:6d:60:94:74:8e:0b:
ab:fc:90:54:bd:e2:98:9b:63:a6:3a:52:87:95:05:
73:82:a8:aa:fa:73:9d:9d:e2:e4:e5:af:6b:44:79:
68:5d:91:53:fe:d5:52:46:96:2e:e9:3d:8e:ea:29:
fd:ac:1e:50:f0:c1:2c:b5:48:c5:5e:d0:6a:a7:ad:
af:67:ee:ca:1a:92:9f:1a:38:c1:1c:d2:a2:da:d7:
ff:5f:b0:d5:66:92:b8:61:c7:c2:9e:e0:63:c6:a8:
7a:93:fb:a2:d1:a4:0e:52:8c:02:19:ab:81:f2:e4:
81:71:63:5f:1e:12:7b:36:5f:98:1a:d6:b5:0b:b7:
6f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:15:7D:8B:F7:EE:91:B2:F3:89:EB:46:66:A6:E4:36:69:0F:42:EB
X509v3 Authority Key Identifier:
keyid:62:07:84:C7:E4:50:B7:A9:33:51:0B:12:33:4B:A6:A6:8E:4A:14:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgeEx-RQt6kzUQsSM0umpo5KFEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E77/D7CE67FC898211F1AF42DB7F3211F970/YgeEx-RQt6kzUQsSM0umpo5KFEA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:d9:61:aa:38:92:e5:9b:5b:ae:d4:2d:ee:04:e9:e2:ae:43:
0c:31:a8:6c:33:85:35:f9:ba:7a:88:f6:75:c1:dd:09:3e:da:
a8:f4:dd:6e:94:6e:43:f6:23:f2:3b:ba:a5:b3:10:ea:09:f1:
98:b4:b8:f8:5e:bc:de:31:7a:c5:16:d7:93:bb:21:b2:5a:96:
c7:51:b1:e1:61:d3:c5:a3:9e:1c:37:b1:da:3d:71:cf:04:ce:
ea:3d:0a:0d:a9:91:50:bc:50:e3:1b:ed:76:2c:3f:5b:16:78:
a9:f8:4c:0c:06:a8:0e:b8:b0:e0:c0:1a:9b:49:ca:89:f9:49:
8c:28:4b:84:65:71:15:bb:b9:dd:8e:97:90:a3:9d:29:07:22:
1a:f7:a7:19:f7:e6:c9:a8:bd:73:ec:5b:79:80:4d:e7:da:70:
b4:75:74:03:10:2c:0d:5f:7d:55:a6:d5:f5:5d:f5:3c:54:68:
8b:c5:d5:04:a0:2c:16:1d:50:34:c1:1e:52:3e:59:74:f7:70:
87:79:29:aa:50:79:a7:a1:59:ad:0c:72:6f:5e:9a:0d:65:cb:
52:a2:ce:51:0e:69:2b:ba:07:5f:5e:ae:10:01:53:4c:21:83:
bb:7f:09:f8:76:96:a6:50:99:2d:01:a9:be:80:dc:bc:c6:f8:
33:61:78:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:43:37 2026 by rpki-client