$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: vE2ZiGlD7FfQDkE+UlYn7GrWANFgR7rlwhd7jeI5F18= Subject key identifier: E8:F3:86:05:A9:C5:12:BB:29:90:2E:11:D5:09:AA:6F:73:0A:AA:3A Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 085D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 0844 Signing time: Wed 20 May 2026 20:56:48 +0000 Manifest this update: Wed 20 May 2026 20:56:47 +0000 Manifest next update: Wed 27 May 2026 20:56:47 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: yJrRJAkL8T4Y3V9SCr5/FBTGH/hIwyqA8FSe7wgejhA=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: /CLRSnh9CYZydXvA+OqGb8vFSm9uhhWBDEam371xnzI=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: leO2JqGKVdqcNczUkd0IAjGki7oPjl2kK1j+hgCcFLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 20:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2141 (0x85d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: May 20 20:56:47 2026 GMT Not After : May 27 20:56:47 2026 GMT Subject: CN=6a0e2010-fbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8c:56:53:1a:aa:ea:af:22:cb:b5:c6:6c:1c: be:fd:e1:c0:8e:fd:01:be:e5:fd:e9:9e:87:db:88: 33:84:b5:c3:0d:ce:95:87:ed:ae:79:5c:77:2a:d0: 59:d1:b1:5e:96:a3:e3:2d:d2:d0:ab:3c:f0:8a:d9: 18:e6:85:2b:4f:ad:1c:90:5e:70:74:18:54:55:f1: b2:63:bb:ee:89:6d:9e:43:3c:b0:0e:a1:d2:a0:ad: c1:7f:e4:7a:a1:61:b5:4e:02:94:9c:1b:ec:ba:0a: ee:b0:01:a7:d1:ba:02:2e:94:91:f7:de:c2:6c:67: 29:8e:f7:35:94:97:3d:94:5a:0d:04:36:0b:60:7d: ec:69:fe:b8:3d:c7:3d:30:a7:7d:cf:a1:a4:af:13: 09:92:25:dc:47:bb:59:47:fa:8b:e3:70:87:de:09: 60:3f:b4:84:4c:9f:5d:68:ed:d0:27:22:6a:f9:96: a8:6d:d5:fb:2d:26:01:96:e9:8e:3f:54:87:f8:f1: b3:43:dc:40:f1:7f:2e:f2:48:e8:2e:9a:fe:c1:74: 9a:d9:0a:2a:4b:45:1f:d9:78:ed:d8:12:39:aa:e2: 8a:9c:b8:93:a2:ce:07:49:36:1e:b5:d7:7f:e6:b1: d8:63:33:b9:6f:06:2b:81:b7:1e:0b:e2:74:51:4a: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F3:86:05:A9:C5:12:BB:29:90:2E:11:D5:09:AA:6F:73:0A:AA:3A X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:2c:d6:14:04:66:5c:ef:7f:27:25:87:4f:f0:bc:4a:2c:22: bc:60:75:98:7e:bd:8f:2a:fd:2e:13:0d:e2:6c:13:ea:a2:e1: 7a:b8:09:44:d5:ea:4c:b3:05:5b:1f:8d:cf:e7:47:87:9f:f7: 4c:32:20:6c:97:60:8b:b8:e3:cf:4d:e0:0a:a5:0d:29:86:a0: 01:9b:66:18:ae:1c:16:cf:16:45:02:83:5c:33:2b:07:07:b0: a5:31:44:b2:4c:82:0e:68:15:1b:57:85:e6:b8:b4:be:26:90: 85:14:b5:11:d1:a3:3e:08:bf:6a:2b:60:28:77:79:60:a4:00: e1:cd:a1:6f:bf:ab:d2:20:16:4a:c4:2c:a9:f3:95:a6:28:49: 06:e6:75:a5:e4:53:ce:91:8c:5f:4d:73:5c:17:91:4e:9e:d8: e7:7b:3f:56:65:bb:b8:1c:d3:ca:e7:53:c1:fc:ac:2c:27:5e: c6:b5:ea:ef:1a:12:02:4f:1c:9c:b9:07:ac:11:ec:da:ba:8a: 84:a8:70:b7:e9:77:c2:e2:3e:31:6a:e8:bf:39:52:ee:16:2a: f4:85:87:8b:a3:04:b4:4d:8c:44:02:d4:6b:f6:8b:83:8d:11: 3c:73:bb:a7:08:9b:29:a2:b5:c8:bb:3b:b4:c7:d0:80:78:3a: 40:96:f5:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwNTIwMjA1NjQ3WhcNMjYwNTI3MjA1NjQ3WjAYMRYwFAYD VQQDEw02YTBlMjAxMC1mYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3YxWUxqq6q8iy7XGbBy+/eHAjv0BvuX96Z6H24gzhLXDDc6Vh+2ueVx3KtBZ 0bFelqPjLdLQqzzwitkY5oUrT60ckF5wdBhUVfGyY7vuiW2eQzywDqHSoK3Bf+R6 oWG1TgKUnBvsugrusAGn0boCLpSR997CbGcpjvc1lJc9lFoNBDYLYH3saf64Pcc9 MKd9z6GkrxMJkiXcR7tZR/qL43CH3glgP7SETJ9daO3QJyJq+ZaobdX7LSYBlumO P1SH+PGzQ9xA8X8u8kjoLpr+wXSa2QoqS0Uf2Xjt2BI5quKKnLiTos4HSTYetdd/ 5rHYYzO5bwYrgbceC+J0UUqulwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOjzhgWp xRK7KZAuEdUJqm9zCqo6MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASSzWFARmXO9/JyWHT/C8SiwivGB1mH69jyr9LhMN4mwT6qLhergJRNXqTLMF Wx+Nz+dHh5/3TDIgbJdgi7jjz03gCqUNKYagAZtmGK4cFs8WRQKDXDMrBwewpTFE skyCDmgVG1eF5ri0viaQhRS1EdGjPgi/aitgKHd5YKQA4c2hb7+r0iAWSsQsqfOV pihJBuZ1peRTzpGMX01zXBeRTp7Y53s/VmW7uBzTyudTwfysLCdexrXq7xoSAk8c nLkHrBHs2rqKhKhwt+l3wuI+MWrovzlS7hYq9IWHi6MEtE2MRALUa/aLg40RPHO7 pwibKaK1yLs7tMfQgHg6QJb1BQ== -----END CERTIFICATE-----Generated at Thu May 21 17:05:45 2026 by rpki-client