$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft File: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft (raw, json) Hash identifier: Gck9lS+ogZHeBLlFhoeQU/zOqktN8G1USD9Qy92/XPE= Subject key identifier: C6:0D:A7:81:42:FE:C7:14:3C:A0:7D:FE:C5:04:D3:98:84:6E:77:FF Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 Certificate issuer: /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft Manifest number: 57 Signing time: Mon 05 Oct 2026 08:36:32 +0000 Manifest this update: Mon 05 Oct 2026 08:36:32 +0000 Manifest next update: Mon 12 Oct 2026 08:36:32 +0000 Files and hashes: 1: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl (hash: /DnmIR/7sqEkeggxt6yCgyffnCln6Y0KRZMg8dM2+d0=) 2: D13F8D3A3C9811F1A7092461A3833773.roa (hash: Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 07:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Validity Not Before: Oct 5 08:36:32 2026 GMT Not After : Oct 12 08:36:32 2026 GMT Subject: CN=6ac36190-f1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9d:0a:48:1c:c2:19:0e:67:ce:38:06:0b:66: 9b:a3:83:7e:b9:94:fb:a7:71:45:24:23:3a:2b:78: ac:cd:00:aa:13:8e:94:f9:45:ba:9d:42:87:c4:e9: 2e:70:97:04:ee:77:f0:2a:2a:e2:ab:d6:86:a0:fc: 46:fe:69:91:9a:a6:76:c9:f4:86:0b:a6:08:cd:d0: 0e:33:5a:9c:fd:86:27:12:a2:4e:f9:73:9a:e6:22: 0e:c5:c4:09:48:f2:27:a4:ac:c3:6f:c2:37:a9:d6: 12:a6:52:74:21:a6:7e:eb:27:68:8a:d4:da:c5:f3: cb:26:dd:18:a8:c0:dd:f9:10:14:52:b3:67:e8:e6: 7d:51:9c:9c:ff:fa:49:af:eb:5a:8b:62:81:1e:d4: 58:f4:ab:ee:70:62:3c:17:66:e1:a4:9b:8e:01:31: 44:6b:13:3e:41:3b:f5:41:b4:bd:1c:7a:02:ff:d9: 7f:21:2d:41:b5:74:d9:99:1b:ee:db:d4:1d:9a:e1: 11:f5:17:46:9f:4c:a3:39:99:fa:77:95:1e:16:f2: cd:da:03:84:41:fb:b7:e9:1f:11:ac:80:09:1d:c2: 2d:8c:93:f2:fe:cc:71:29:06:13:ae:d2:1e:2b:79: bd:c3:4f:47:d1:fc:d7:c0:3f:c8:f4:ca:6a:14:74: f6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0D:A7:81:42:FE:C7:14:3C:A0:7D:FE:C5:04:D3:98:84:6E:77:FF X509v3 Authority Key Identifier: keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:1c:57:d7:c4:0c:a4:e5:c9:ed:ee:5c:aa:1b:2a:90:6f:13: f9:42:d5:8c:e7:3c:4a:06:6b:ee:86:e7:ed:11:9b:5e:3d:d5: d0:16:7a:6e:d9:4e:87:13:28:79:28:0b:3d:2d:bd:f9:5f:fb: 58:b7:9c:74:55:60:4e:a3:ba:16:3b:c3:7b:6b:3f:63:5a:98: da:9e:6e:00:01:32:1b:9b:28:04:e2:c6:c5:99:da:1c:5f:a8: 34:62:8b:fd:a2:b4:de:31:46:98:85:aa:51:6b:38:f7:7b:cb: 70:c0:8d:2f:e9:37:8c:be:8f:59:40:53:2c:46:c5:ea:cf:64: 91:e9:04:f0:29:2c:ab:7f:7d:f0:f1:2b:1c:4b:5e:3f:2f:7c: d5:ab:40:bd:6d:d6:c4:08:ae:fc:0b:47:5e:dd:cc:44:fa:71: ae:52:41:1f:88:37:6c:a4:cf:1b:34:a5:1a:92:56:86:11:04: bc:55:41:db:59:67:5c:94:52:2c:31:e1:5a:26:26:1e:b7:62: 20:6e:40:59:39:5c:5f:70:ab:ef:a0:7c:81:58:f6:6f:66:75: d1:63:19:18:dd:ee:64:1c:c2:57:a5:dd:90:63:df:14:25:f2: 1f:c0:62:85:bf:5d:5d:16:5e:bd:27:40:e6:75:e9:a0:34:f6: 27:5e:9e:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0Y4NDExMC8GA1UEBRMoMjE4MUJGQkRBNDUzNkU5OEM4NTRCODNDMTJGQTZDQUNG M0M4RjZDNDAeFw0yNjEwMDUwODM2MzJaFw0yNjEwMTIwODM2MzJaMBgxFjAUBgNV BAMTDTZhYzM2MTkwLWYxYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXnQpIHMIZDmfOOAYLZpujg365lPuncUUkIzoreKzNAKoTjpT5RbqdQofE6S5w lwTud/AqKuKr1oag/Eb+aZGapnbJ9IYLpgjN0A4zWpz9hicSok75c5rmIg7FxAlI 8iekrMNvwjep1hKmUnQhpn7rJ2iK1NrF88sm3RiowN35EBRSs2fo5n1RnJz/+kmv 61qLYoEe1Fj0q+5wYjwXZuGkm44BMURrEz5BO/VBtL0cegL/2X8hLUG1dNmZG+7b 1B2a4RH1F0afTKM5mfp3lR4W8s3aA4RB+7fpHxGsgAkdwi2Mk/L+zHEpBhOu0h4r eb3DT0fR/NfAP8j0ymoUdPazAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUxg2ngUL+ xxQ8oH3+xQTTmIRud/8wHwYDVR0jBBgwFoAUIYG/vaRTbpjIVLg8EvpsrPPI9sQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjg0Lzg2M0NDQ0I0M0Mz MjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBqSVZMZzhFdnBzclBQSTlz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVlHX3ZhUlRicGpJVkxnOEV2cHNyUFBJOXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD Rjg0Lzg2M0NDQ0I0M0MzMjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBq SVZMZzhFdnBzclBQSTlzUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJHFfXxAyk5cnt7lyqGyqQbxP5QtWM5zxKBmvuhuftEZtePdXQFnpu2U6HEyh5 KAs9Lb35X/tYt5x0VWBOo7oWO8N7az9jWpjanm4AATIbmygE4sbFmdocX6g0Yov9 orTeMUaYhapRazj3e8twwI0v6TeMvo9ZQFMsRsXqz2SR6QTwKSyrf33w8SscS14/ L3zVq0C9bdbECK78C0de3cxE+nGuUkEfiDdspM8bNKUaklaGEQS8VUHbWWdclFIs MeFaJiYet2IgbkBZOVxfcKvvoHyBWPZvZnXRYxkY3e5kHMJXpd2QY98UJfIfwGKF v11dFl69J0DmdemgNPYnXp7t -----END CERTIFICATE-----Generated at Mon Oct 5 15:10:39 2026 by rpki-client