$ rpki-client -vvf rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft File: YgNWI5rPPPQIizzmK88YvKgIncc.mft (raw, json) Hash identifier: TcDfP7rJ/VPK49iDlzU5X4E5ehkkFzxzWJvGPN5BjAc= Subject key identifier: 4F:33:22:4B:4E:C2:9B:F5:0F:12:AD:EC:F5:30:94:09:9E:81:DA:1F Authority key identifier: 62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7 Certificate issuer: /CN=A9168497/serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7 Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft Manifest number: 64 Signing time: Thu 23 Jul 2026 10:00:17 +0000 Manifest this update: Thu 23 Jul 2026 10:00:17 +0000 Manifest next update: Thu 30 Jul 2026 10:00:17 +0000 Files and hashes: 1: YgNWI5rPPPQIizzmK88YvKgIncc.crl (hash: NqYO5MdXKMfLCzOIeQGhsT1ARwLdxaaX6VGdhd5yoec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168497, serialNumber=620356239ACF3CF4088B3CE62BCF18BCA8089DC7 Validity Not Before: Jul 23 10:00:17 2026 GMT Not After : Jul 30 10:00:17 2026 GMT Subject: CN=6a61e631-2d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:71:a0:ff:f7:19:87:74:24:67:01:3e:06: 66:e1:b6:15:e4:9f:46:1d:4a:df:a5:37:27:c3:23: f3:02:88:0b:6c:ae:e2:ad:c8:2b:93:2d:38:ec:f5: 8e:03:8e:52:b5:a0:8f:89:8e:bd:39:e2:52:8b:fb: 15:73:a6:ce:78:08:00:a5:ac:bb:f5:ca:8b:d9:df: f4:a3:d8:85:c3:cd:c5:7e:b3:e2:0d:dc:64:d3:6e: cc:80:2c:88:09:06:a0:76:90:bc:4c:92:83:f2:c7: 44:2a:a1:e0:66:9e:60:b1:b7:fc:35:69:7c:f7:70: 04:37:e4:3d:95:54:bc:69:d2:70:b9:df:8e:dc:65: b6:22:e7:72:04:ee:5a:61:71:f8:c6:7e:72:40:71: 1d:92:ee:6f:ce:67:2e:62:f2:de:a8:a5:2d:a8:ba: 67:98:56:49:29:72:09:cc:c3:6d:a6:34:b2:7d:63: 14:5b:65:96:af:7a:ba:75:7b:6a:51:0d:48:6a:bb: 8f:f4:97:1b:89:15:a1:8e:67:fc:1d:49:ee:30:18: ea:5f:7c:22:c4:d9:60:f5:c7:dc:b3:0a:b1:19:fe: 38:da:c3:cc:e1:f4:71:82:ce:00:0d:3c:8d:b2:3d: 10:53:ed:42:f2:29:87:1b:60:a0:2a:58:2e:5e:22: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:33:22:4B:4E:C2:9B:F5:0F:12:AD:EC:F5:30:94:09:9E:81:DA:1F X509v3 Authority Key Identifier: keyid:62:03:56:23:9A:CF:3C:F4:08:8B:3C:E6:2B:CF:18:BC:A8:08:9D:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YgNWI5rPPPQIizzmK88YvKgIncc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168497/E8E64A4CF13311F0BED1F870536F56BC/YgNWI5rPPPQIizzmK88YvKgIncc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:d7:16:81:fd:ab:d1:da:aa:52:e9:4d:69:ea:7a:e5:be: d7:ac:b5:cc:1e:f6:09:52:ac:92:5b:c7:81:80:11:80:f6:59: 86:3b:d1:7f:4d:fc:22:0d:19:e4:f2:19:5f:43:37:98:45:76: 39:98:ec:65:60:47:07:39:8b:a8:f7:f9:45:e5:98:30:b8:ed: b1:7a:11:85:85:31:b8:93:81:c6:25:4e:68:a5:97:f1:ed:77: 6a:7f:c9:be:75:3c:22:ca:e5:33:a9:30:8a:90:78:f3:db:34: 22:34:56:c1:04:3d:60:19:9b:6c:3b:fe:f8:2a:a1:1e:61:22: f7:5a:c7:c0:dc:a8:44:93:ff:84:58:30:8d:18:7c:02:06:99: 0d:76:8b:de:b8:f3:c2:e4:57:9d:07:ab:bb:e8:0f:fc:f1:32: 83:61:66:82:a3:5d:8f:4b:43:c9:0c:16:42:fb:95:60:d0:cb: 48:f0:da:36:0c:1b:53:f3:13:98:a2:9a:15:5e:ac:bc:b4:a5: a3:da:b4:b0:37:cf:f7:42:d2:47:e4:91:3b:64:5e:db:ad:e3: ca:b0:64:4e:e2:ac:01:a2:64:fa:8e:96:d2:54:cd:8c:7e:64: da:17:4f:5b:0b:dd:62:ab:e4:bd:56:32:d0:28:76:5c:66:8e: 19:17:d7:c8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODQ5NzExMC8GA1UEBRMoNjIwMzU2MjM5QUNGM0NGNDA4OEIzQ0U2MkJDRjE4QkNB ODA4OURDNzAeFw0yNjA3MjMxMDAwMTdaFw0yNjA3MzAxMDAwMTdaMBgxFjAUBgNV BAMTDTZhNjFlNjMxLTJkNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7KHGg//cZh3QkZwE+BmbhthXkn0YdSt+lNyfDI/MCiAtsruKtyCuTLTjs9Y4D jlK1oI+Jjr054lKL+xVzps54CAClrLv1yovZ3/Sj2IXDzcV+s+IN3GTTbsyALIgJ BqB2kLxMkoPyx0QqoeBmnmCxt/w1aXz3cAQ35D2VVLxp0nC5347cZbYi53IE7lph cfjGfnJAcR2S7m/OZy5i8t6opS2oumeYVkkpcgnMw22mNLJ9YxRbZZaverp1e2pR DUhqu4/0lxuJFaGOZ/wdSe4wGOpffCLE2WD1x9yzCrEZ/jjaw8zh9HGCzgANPI2y PRBT7ULyKYcbYKAqWC5eIp77AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTzMiS07C m/UPEq3s9TCUCZ6B2h8wHwYDVR0jBBgwFoAUYgNWI5rPPPQIizzmK88YvKgInccw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4NDk3L0U4RTY0QTRDRjEz MzExRjBCRUQxRjg3MDUzNkY1NkJDL1lnTldJNXJQUFBRSWl6em1LODhZdktnSW5j Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWdOV0k1clBQUFFJaXp6bUs4OFl2S2dJbmNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 NDk3L0U4RTY0QTRDRjEzMzExRjBCRUQxRjg3MDUzNkY1NkJDL1lnTldJNXJQUFBR SWl6em1LODhZdktnSW5jYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAgQdcWgf2r0dqqUulNaep65b7XrLXMHvYJUqySW8eBgBGA9lmGO9F/TfwiDRnk 8hlfQzeYRXY5mOxlYEcHOYuo9/lF5ZgwuO2xehGFhTG4k4HGJU5opZfx7Xdqf8m+ dTwiyuUzqTCKkHjz2zQiNFbBBD1gGZtsO/74KqEeYSL3WsfA3KhEk/+EWDCNGHwC BpkNdoveuPPC5FedB6u76A/88TKDYWaCo12PS0PJDBZC+5Vg0MtI8No2DBtT8xOY opoVXqy8tKWj2rSwN8/3QtJH5JE7ZF7brePKsGRO4qwBomT6jpbSVM2MfmTaF09b C91iq+S9VjLQKHZcZo4ZF9fI -----END CERTIFICATE-----Generated at Thu Jul 23 21:51:04 2026 by rpki-client