$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: iAfq6nU0D5h0/zH4hfL812UJU8T7TNWDbIchFRX3zAc= Subject key identifier: AF:ED:AF:48:53:EB:0B:2E:C2:EF:FD:EB:D1:10:75:BA:09:F3:62:BD Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 0866 Signing time: Wed 22 Jul 2026 21:22:14 +0000 Manifest this update: Wed 22 Jul 2026 21:22:14 +0000 Manifest next update: Wed 29 Jul 2026 21:22:14 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: O7B8Ovqzxw7jIZwtvC4BzWjDxA6JeCvUT5YWqLK01yY=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Jul 22 21:22:14 2026 GMT Not After : Jul 29 21:22:14 2026 GMT Subject: CN=6a613486-39b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2b:8c:2e:c2:44:62:7a:53:2f:6a:80:b1:40: 84:7e:67:8c:c7:8c:5e:e5:bd:70:f0:4c:94:67:90: 27:42:a5:ae:eb:19:f5:ac:0f:e0:0b:c2:e7:fc:61: 30:a2:23:bd:1d:01:3a:02:82:3c:d0:d5:a0:d7:85: 16:5c:9f:c0:0d:82:05:2a:3a:a4:ba:8d:43:e5:a7: a2:7e:fd:b7:45:c4:70:70:c3:15:45:3e:a0:e7:1b: 64:84:83:66:ff:20:98:c9:17:9b:91:9a:a3:09:95: 02:1c:9e:d5:e9:80:07:bf:15:5c:e8:2a:42:75:7b: a3:9c:c3:27:ed:67:05:61:60:ea:7a:58:56:17:cb: d3:23:e8:a9:6f:a4:40:d3:df:ca:e3:61:f0:e3:24: 62:ae:28:d7:74:8c:52:da:cd:51:c2:68:1c:7d:4a: b5:dd:61:11:08:87:09:b7:18:78:be:1e:9b:46:88: d9:1c:c8:36:ae:25:7c:1d:95:5d:54:91:cb:e7:33: 17:38:7c:49:e6:92:45:35:0e:f8:da:44:7f:55:be: db:a0:e3:bb:c7:0f:ae:d3:ea:e3:64:18:df:9d:46: 18:87:90:2e:c5:8f:89:c1:65:6f:4b:5f:7a:94:78: 3e:d7:de:32:6a:91:41:f7:33:8b:ce:15:b8:05:6e: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:ED:AF:48:53:EB:0B:2E:C2:EF:FD:EB:D1:10:75:BA:09:F3:62:BD X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:44:bd:ce:19:17:8d:94:d5:5e:b3:a7:75:2b:bf:23:9a:cf: 48:b4:5c:f7:04:26:24:3f:ff:0a:ae:79:04:22:de:f6:f8:d2: 34:44:10:e0:e7:4c:6b:8d:56:67:8f:c7:08:37:a8:86:ca:4a: 07:ad:6d:0b:9a:f3:2c:ee:aa:b8:f3:36:d7:e5:68:62:7a:c0: 18:8e:61:a3:93:ef:b8:8c:38:62:46:11:e8:dd:2a:b4:94:2b: fc:6b:e1:a1:1b:c2:86:9d:9d:4f:dc:ce:3c:52:3a:62:c3:6f: 9b:32:ca:18:76:ec:75:d9:24:04:6b:67:07:5b:b6:0f:7e:30: 06:3a:0e:39:57:45:2e:b4:ba:ec:d1:ed:21:59:f2:51:86:df: 4e:2c:8e:54:f8:57:cc:4b:e9:32:d3:b2:09:23:76:45:89:96: 38:01:c1:ca:8e:d6:03:94:1c:59:b1:fa:ee:e7:21:79:f2:bb: 7f:68:cc:5e:1b:d1:5e:ca:df:50:71:0d:5c:cb:a2:f1:78:44: 0b:10:a0:2c:a9:bb:32:44:25:fb:90:b7:04:d7:81:aa:6d:df: f5:b4:75:20:95:e6:cd:c6:9b:ce:e5:fd:04:b0:e7:af:85:b4: 02:11:1f:d5:d0:0e:0c:fe:dc:b1:c2:89:85:6f:15:41:e1:54: 62:5a:b8:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwNzIyMjEyMjE0WhcNMjYwNzI5MjEyMjE0WjAYMRYwFAYD VQQDEw02YTYxMzQ4Ni0zOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSuMLsJEYnpTL2qAsUCEfmeMx4xe5b1w8EyUZ5AnQqWu6xn1rA/gC8Ln/GEw oiO9HQE6AoI80NWg14UWXJ/ADYIFKjqkuo1D5aeifv23RcRwcMMVRT6g5xtkhINm /yCYyRebkZqjCZUCHJ7V6YAHvxVc6CpCdXujnMMn7WcFYWDqelhWF8vTI+ipb6RA 09/K42Hw4yRirijXdIxS2s1RwmgcfUq13WERCIcJtxh4vh6bRojZHMg2riV8HZVd VJHL5zMXOHxJ5pJFNQ742kR/Vb7boOO7xw+u0+rjZBjfnUYYh5AuxY+JwWVvS196 lHg+194yapFB9zOLzhW4BW7oaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/tr0hT 6wsuwu/969EQdboJ82K9MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADES9zhkXjZTVXrOndSu/I5rPSLRc9wQmJD//Cq55BCLe9vjSNEQQ4OdMa41W Z4/HCDeohspKB61tC5rzLO6quPM21+VoYnrAGI5ho5PvuIw4YkYR6N0qtJQr/Gvh oRvChp2dT9zOPFI6YsNvmzLKGHbsddkkBGtnB1u2D34wBjoOOVdFLrS67NHtIVny UYbfTiyOVPhXzEvpMtOyCSN2RYmWOAHByo7WA5QcWbH67uchefK7f2jMXhvRXsrf UHENXMui8XhECxCgLKm7MkQl+5C3BNeBqm3f9bR1IJXmzcabzuX9BLDnr4W0AhEf 1dAODP7cscKJhW8VQeFUYlq4+w== -----END CERTIFICATE-----Generated at Fri Jul 24 17:06:58 2026 by rpki-client