$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: yucNI8b4znRHqnfoKrvMeNcW7gqkwLKpyt7h2VRw7+U= Subject key identifier: D0:08:AD:CF:E4:35:43:F7:57:2F:1B:C2:87:19:F9:17:83:53:E5:DE Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 085E Signing time: Mon 06 Jul 2026 21:22:10 +0000 Manifest this update: Mon 06 Jul 2026 21:22:09 +0000 Manifest next update: Mon 13 Jul 2026 21:22:09 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: 2ONqBcDN6xLqF0oO7EspzfYEAsvZuZOAQT9UCiSMOI4=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Jul 2026 21:22:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2169 (0x879) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Jul 6 21:22:09 2026 GMT Not After : Jul 13 21:22:09 2026 GMT Subject: CN=6a4c1c82-703a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:ad:53:86:e2:f8:ba:95:78:d6:53:fd:e7: 72:6d:13:2a:a7:fc:dd:5d:e3:10:3b:5e:2a:bf:d4: f1:b0:3c:45:ed:47:e2:52:94:b0:10:27:f5:b9:a4: bf:a0:0a:e3:8f:1a:32:68:bd:03:1d:a5:00:e2:a6: 33:10:60:53:5a:a5:82:a2:a4:9e:26:04:c6:45:37: b4:2c:4f:aa:f5:65:63:c0:56:b0:18:21:ca:98:81: 41:16:b3:27:96:fc:f9:15:83:ac:48:b9:81:e7:dc: b9:83:d5:19:d3:34:ee:8e:d1:c5:f7:a1:d2:80:61: 70:9f:06:db:02:24:55:01:c3:d9:e4:ae:a0:c9:9c: 17:da:cb:0b:0d:10:32:4a:96:e5:9b:1d:05:40:3b: 68:78:5c:e7:70:cf:c2:2a:44:75:0a:3c:27:91:9c: af:dd:48:28:34:11:9d:eb:ec:61:c0:6d:ed:20:b9: b6:06:0e:db:cb:af:7d:ab:0a:d1:2f:3e:15:53:07: 33:b0:18:c8:ef:e2:9d:db:ff:f3:34:5b:10:50:0d: c9:36:bf:23:f9:e9:eb:4e:ff:86:0e:83:ad:c4:c0: 7b:4e:d1:b5:4a:3f:e8:c1:85:9f:a3:9e:e1:c7:0a: 29:b6:b3:e1:c9:d1:6b:4e:c3:36:db:53:a1:56:ab: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:08:AD:CF:E4:35:43:F7:57:2F:1B:C2:87:19:F9:17:83:53:E5:DE X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c1:9f:ac:93:19:87:6d:88:e3:a1:a1:7f:44:6f:3c:b4:ce: 1e:ee:04:c8:e8:44:d9:ce:9a:95:2b:58:5d:68:3a:c4:3a:6a: 26:22:60:a3:c2:6a:0e:d4:42:94:b1:c9:af:52:83:d1:4a:65: 2e:16:47:f3:a3:cb:b3:ed:f0:6f:44:6f:be:e3:8e:05:6a:b1: bb:ef:89:f7:93:5d:26:69:2b:bd:f5:4d:e5:8d:d2:4b:7f:59: 99:d7:e5:36:f7:bd:70:7e:a4:7b:5d:18:7a:a7:be:30:57:49: 95:df:fe:e7:9c:db:08:ca:bf:4e:2d:d5:d8:47:2e:bf:52:ed: ab:ba:09:f5:95:a0:b4:7a:3f:8e:f4:3b:ae:a3:81:36:af:33: 2a:28:ad:73:a5:b5:fa:e6:d7:9a:2c:9b:88:5c:34:bb:b3:9c: bb:41:b1:3f:57:5a:de:db:42:5b:ad:70:9c:bd:e1:7f:11:71: e8:68:e0:0a:ea:a5:ea:f3:b0:b0:c5:bb:94:9e:dc:a7:f1:32: 96:79:ec:bb:60:63:94:4f:3e:8f:ec:02:ae:53:df:d0:12:8b: 64:ca:5f:1f:f7:62:74:7e:bf:06:ec:58:02:4f:0f:c1:01:9e: 75:de:13:b2:8f:ed:ff:58:74:cf:0f:ef:37:fb:58:6e:4e:cf: 5b:2b:6d:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwNzA2MjEyMjA5WhcNMjYwNzEzMjEyMjA5WjAYMRYwFAYD VQQDEw02YTRjMWM4Mi03MDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucetU4bi+LqVeNZT/edybRMqp/zdXeMQO14qv9TxsDxF7UfiUpSwECf1uaS/ oArjjxoyaL0DHaUA4qYzEGBTWqWCoqSeJgTGRTe0LE+q9WVjwFawGCHKmIFBFrMn lvz5FYOsSLmB59y5g9UZ0zTujtHF96HSgGFwnwbbAiRVAcPZ5K6gyZwX2ssLDRAy Spblmx0FQDtoeFzncM/CKkR1CjwnkZyv3UgoNBGd6+xhwG3tILm2Bg7by699qwrR Lz4VUwczsBjI7+Kd2//zNFsQUA3JNr8j+enrTv+GDoOtxMB7TtG1Sj/owYWfo57h xwoptrPhydFrTsM221OhVqtblwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNAIrc/k NUP3Vy8bwocZ+ReDU+XeMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjcGfrJMZh22I46Ghf0RvPLTOHu4EyOhE2c6alStYXWg6xDpqJiJgo8JqDtRC lLHJr1KD0UplLhZH86PLs+3wb0RvvuOOBWqxu++J95NdJmkrvfVN5Y3SS39Zmdfl Nve9cH6ke10Yeqe+MFdJld/+55zbCMq/Ti3V2Ecuv1Ltq7oJ9ZWgtHo/jvQ7rqOB Nq8zKiitc6W1+ubXmiybiFw0u7Ocu0GxP1da3ttCW61wnL3hfxFx6GjgCuql6vOw sMW7lJ7cp/Eylnnsu2BjlE8+j+wCrlPf0BKLZMpfH/didH6/BuxYAk8PwQGedd4T so/t/1h0zw/vN/tYbk7PWyttuw== -----END CERTIFICATE-----Generated at Wed Jul 8 08:09:55 2026 by rpki-client