$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: dw02l8LXvJDBemLTp8qh1fbT5ptmqOfR6f8qmh5rY9w= Subject key identifier: 03:B0:1D:9B:82:45:3A:F4:CC:66:19:00:AE:EA:44:27:46:0C:B9:75 Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 08A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 0888 Signing time: Sat 26 Sep 2026 20:51:20 +0000 Manifest this update: Sat 26 Sep 2026 20:51:19 +0000 Manifest next update: Sat 03 Oct 2026 20:51:19 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: EE3Cm9xGLud7Bn1GIhzBN1bXWLuqF0GfZrHRCu5iR60=) 2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=) 3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 18:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Sep 26 20:51:19 2026 GMT Not After : Oct 3 20:51:19 2026 GMT Subject: CN=6ab83048-3c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:ff:63:98:89:74:f2:aa:11:93:33:09:07: ea:51:38:5c:d4:14:a0:a1:e8:0c:a7:84:95:e0:d7: 2f:0d:a3:9b:66:0f:24:76:c8:f1:8a:31:82:dd:a6: e3:f6:2c:88:81:b7:2b:5b:c9:d0:a4:c0:62:e5:22: fb:84:ed:51:b1:53:a0:63:42:81:45:dc:cf:79:f2: 1c:60:4f:a2:33:93:47:30:e8:c4:cf:62:d2:e2:4c: 85:61:ea:64:ee:c1:ee:17:95:62:5a:bf:a0:69:b3: 1b:3a:91:ad:78:b8:48:01:cb:80:48:ac:d1:12:fb: 38:78:b3:fc:e3:bc:b0:06:e3:35:03:3b:fb:9d:db: 91:f9:66:d7:85:bf:90:61:17:fa:f1:24:8f:08:a0: c5:c6:e5:b5:19:d1:40:3e:41:b7:91:0a:cc:90:e0: a5:5b:93:5f:88:ca:ac:8d:c0:66:78:f1:61:b7:c5: eb:5a:b5:1c:a8:c3:3c:d7:e1:34:7f:fc:8d:be:3c: ea:91:28:fb:5b:4e:62:1b:37:d9:a8:77:4d:1c:cd: 3a:4d:3b:44:c8:b0:df:af:c7:c2:87:a8:78:1d:d8: b4:05:9d:66:4f:bf:ed:26:a9:c5:b2:37:83:0a:18: 47:40:6b:ec:59:25:e3:87:07:7d:81:eb:e3:c9:9f: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:1D:9B:82:45:3A:F4:CC:66:19:00:AE:EA:44:27:46:0C:B9:75 X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:90:8a:ba:56:50:17:d2:7c:ff:05:55:26:db:8f:47:50:26: 70:7b:5e:88:4f:6e:58:ee:a4:ee:6e:a4:b4:38:40:38:9e:bc: ca:18:4d:3b:0c:96:8f:06:d3:6b:81:c2:83:83:9b:19:7b:e8: 25:1f:8b:19:07:4b:24:97:ba:55:b1:96:74:d6:e0:99:c1:c5: ac:8e:a8:b8:c1:a1:7d:05:af:34:10:e5:74:ec:bf:fb:18:76: 65:e8:56:47:bb:cb:49:c7:85:cc:18:97:fa:d1:09:3b:b3:f3: a8:f7:34:ef:82:25:be:13:11:78:3d:d1:8e:95:c3:df:72:fb: ff:89:de:27:92:4c:37:e7:01:9c:02:70:67:a3:04:56:67:13: 5f:6a:21:7d:05:5d:3f:79:0a:78:9a:8a:3f:1b:95:b9:40:a4: e9:26:91:27:ce:98:47:19:cd:a6:15:05:0e:fd:ba:2c:2b:67: 15:1a:ec:57:35:39:2b:20:a1:fc:09:76:2d:e4:b8:2f:8f:36: 8a:65:5c:ff:49:d3:a3:10:1b:c2:0c:53:70:15:68:17:24:5d: 56:d2:bf:78:9f:91:8f:56:68:ad:16:68:36:86:66:4b:88:22: 6a:5d:35:b6:98:f7:bc:06:91:43:c7:bf:44:69:8a:09:9e:28: 63:0b:ca:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwOTI2MjA1MTE5WhcNMjYxMDAzMjA1MTE5WjAYMRYwFAYD VQQDEw02YWI4MzA0OC0zYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHL/Y5iJdPKqEZMzCQfqUThc1BSgoegMp4SV4NcvDaObZg8kdsjxijGC3abj 9iyIgbcrW8nQpMBi5SL7hO1RsVOgY0KBRdzPefIcYE+iM5NHMOjEz2LS4kyFYepk 7sHuF5ViWr+gabMbOpGteLhIAcuASKzREvs4eLP847ywBuM1Azv7nduR+WbXhb+Q YRf68SSPCKDFxuW1GdFAPkG3kQrMkOClW5NfiMqsjcBmePFht8XrWrUcqMM81+E0 f/yNvjzqkSj7W05iGzfZqHdNHM06TTtEyLDfr8fCh6h4Hdi0BZ1mT7/tJqnFsjeD ChhHQGvsWSXjhwd9gevjyZ/DWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOwHZuC RTr0zGYZAK7qRCdGDLl1MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfpCKulZQF9J8/wVVJtuPR1AmcHteiE9uWO6k7m6ktDhAOJ68yhhNOwyWjwbT a4HCg4ObGXvoJR+LGQdLJJe6VbGWdNbgmcHFrI6ouMGhfQWvNBDldOy/+xh2ZehW R7vLSceFzBiX+tEJO7PzqPc074IlvhMReD3RjpXD33L7/4neJ5JMN+cBnAJwZ6ME VmcTX2ohfQVdP3kKeJqKPxuVuUCk6SaRJ86YRxnNphUFDv26LCtnFRrsVzU5KyCh /Al2LeS4L482imVc/0nToxAbwgxTcBVoFyRdVtK/eJ+Rj1ZorRZoNoZmS4gial01 tpj3vAaRQ8e/RGmKCZ4oYwvKzg== -----END CERTIFICATE-----Generated at Sun Sep 27 02:44:52 2026 by rpki-client