$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft File: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft (raw, json) Hash identifier: QErYmd4i/DXzqpLfPaTzGwkWgUjo3xJrhyV3DQTDr/M= Subject key identifier: 3B:E7:B9:08:C4:F6:25:52:A5:6D:45:51:14:0B:DD:BA:4C:C8:42:6F Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 Certificate issuer: /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft Manifest number: 31 Signing time: Thu 23 Jul 2026 10:39:06 +0000 Manifest this update: Thu 23 Jul 2026 10:39:06 +0000 Manifest next update: Thu 30 Jul 2026 10:39:06 +0000 Files and hashes: 1: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl (hash: t7dvclHDjLHKfKB1I6FsngeWVoBXWPFpkVLIAD2jBjQ=) 2: D13F8D3A3C9811F1A7092461A3833773.roa (hash: Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Validity Not Before: Jul 23 10:39:06 2026 GMT Not After : Jul 30 10:39:06 2026 GMT Subject: CN=6a61ef4a-9fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:47:22:a3:6e:75:7c:2e:09:60:d5:23:ae: 20:ae:b6:5f:95:20:43:fe:d2:ff:f4:3e:d2:ba:74: 12:0e:db:65:7c:c3:35:27:f0:fc:18:fd:37:81:a6: 5c:65:bf:71:79:f2:89:dd:24:0c:bf:1c:d1:05:61: 55:bb:63:cf:b3:4e:3e:83:b9:ed:43:a6:08:32:14: 95:75:af:4f:ef:a5:c9:74:57:37:2d:8e:aa:a2:5b: 01:44:6f:16:c2:0f:93:6a:ef:65:92:86:1c:71:2d: 6b:1c:de:6b:9c:7c:d0:b8:21:67:17:a5:b3:ad:49: 2e:72:44:52:cd:e4:7b:bd:0c:f7:a4:1b:d7:fd:54: ac:67:1b:c5:5c:47:5e:e3:d0:a4:eb:0b:00:38:37: 64:1a:ca:08:34:01:e1:d1:78:06:5a:53:83:bd:a5: 05:14:04:ba:01:e8:f4:66:0e:5d:a3:bc:0d:5c:f6: 94:41:bf:f6:62:76:12:77:e8:81:05:83:17:d6:3b: 8e:0e:69:fa:34:f4:f1:51:eb:5e:27:aa:00:34:17: 0e:58:b4:cb:e2:bd:97:34:17:96:2f:2d:a8:b6:00: 7f:8d:f4:8c:fa:ae:3e:00:90:b9:b3:80:9e:60:9c: c9:a7:6d:f6:95:0a:29:09:13:c3:61:62:73:35:2b: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E7:B9:08:C4:F6:25:52:A5:6D:45:51:14:0B:DD:BA:4C:C8:42:6F X509v3 Authority Key Identifier: keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:22:6b:67:b7:8a:c5:2c:8e:6d:c2:48:c7:24:c1:27:a5:4a: 33:e6:ad:e4:43:57:5d:75:32:7f:65:cd:ca:53:29:94:6b:8f: 1c:52:f3:ba:c3:29:d6:54:1f:d3:a5:22:78:0a:b8:3f:ef:a4: 6a:42:14:0e:87:ee:b2:87:77:d3:28:11:6d:c6:65:3c:5f:00: 43:3d:8f:62:3e:25:ab:ae:14:ee:82:64:c8:ef:06:8d:ad:d0: a4:75:9f:77:9c:f7:5b:0d:f1:39:1d:0b:1c:a2:60:c8:a5:24: 4a:a3:b2:e0:14:bf:47:c9:43:37:18:75:74:5b:e6:3f:0a:95: 19:f8:b9:cb:70:a6:cf:73:6c:d6:07:22:dc:18:8d:ec:d8:d9: f6:5b:5d:e0:30:21:05:80:3f:d7:fc:72:47:3b:f8:97:f4:74: ec:a3:d5:10:9a:e1:86:60:f6:78:37:b6:40:f2:e9:32:ce:93: 4a:87:37:28:d6:fd:dc:45:16:b8:9b:9b:12:3e:00:70:00:67: 52:b8:20:0c:db:ca:13:1b:18:fb:2d:53:d5:9f:e6:3e:4f:26: 19:36:4a:96:b5:9b:aa:a2:21:8c:4e:fd:bb:e7:9b:4e:82:d1: 2d:a6:2a:1c:2f:94:54:3c:33:e7:7a:6e:8f:ca:41:fc:f8:66: 12:c4:de:f1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0Y4NDExMC8GA1UEBRMoMjE4MUJGQkRBNDUzNkU5OEM4NTRCODNDMTJGQTZDQUNG M0M4RjZDNDAeFw0yNjA3MjMxMDM5MDZaFw0yNjA3MzAxMDM5MDZaMBgxFjAUBgNV BAMTDTZhNjFlZjRhLTlmYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrPEcio251fC4JYNUjriCutl+VIEP+0v/0PtK6dBIO22V8wzUn8PwY/TeBplxl v3F58ondJAy/HNEFYVW7Y8+zTj6Due1DpggyFJV1r0/vpcl0VzctjqqiWwFEbxbC D5Nq72WShhxxLWsc3mucfNC4IWcXpbOtSS5yRFLN5Hu9DPekG9f9VKxnG8VcR17j 0KTrCwA4N2Qaygg0AeHReAZaU4O9pQUUBLoB6PRmDl2jvA1c9pRBv/ZidhJ36IEF gxfWO44Oafo09PFR614nqgA0Fw5YtMvivZc0F5YvLai2AH+N9Iz6rj4AkLmzgJ5g nMmnbfaVCikJE8NhYnM1K25FAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUO+e5CMT2 JVKlbUVRFAvdukzIQm8wHwYDVR0jBBgwFoAUIYG/vaRTbpjIVLg8EvpsrPPI9sQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjg0Lzg2M0NDQ0I0M0Mz MjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBqSVZMZzhFdnBzclBQSTlz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVlHX3ZhUlRicGpJVkxnOEV2cHNyUFBJOXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD Rjg0Lzg2M0NDQ0I0M0MzMjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBq SVZMZzhFdnBzclBQSTlzUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApImtnt4rFLI5twkjHJMEnpUoz5q3kQ1dddTJ/Zc3KUymUa48cUvO6wynWVB/T pSJ4Crg/76RqQhQOh+6yh3fTKBFtxmU8XwBDPY9iPiWrrhTugmTI7waNrdCkdZ93 nPdbDfE5HQscomDIpSRKo7LgFL9HyUM3GHV0W+Y/CpUZ+LnLcKbPc2zWByLcGI3s 2Nn2W13gMCEFgD/X/HJHO/iX9HTso9UQmuGGYPZ4N7ZA8ukyzpNKhzco1v3cRRa4 m5sSPgBwAGdSuCAM28oTGxj7LVPVn+Y+TyYZNkqWtZuqoiGMTv2755tOgtEtpioc L5RUPDPnem6PykH8+GYSxN7x -----END CERTIFICATE-----Generated at Fri Jul 24 14:43:19 2026 by rpki-client