$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: iZwm4jKhDo0cBzvBIgWmtZHulG0C1+zwNoYgQeUhm4E= Subject key identifier: F5:A2:3F:62:C1:AC:F7:C1:74:90:C7:4F:79:86:43:2F:7D:4B:C1:4C Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 0878 Signing time: Wed 26 Aug 2026 20:42:54 +0000 Manifest this update: Wed 26 Aug 2026 20:42:53 +0000 Manifest next update: Wed 02 Sep 2026 20:42:53 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: 7wCv/+JLH6SOrVVKUFmzwdbkcshFpkg2XIqLQaZEUHc=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 20:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Aug 26 20:42:53 2026 GMT Not After : Sep 2 20:42:53 2026 GMT Subject: CN=6a8f4fcd-7959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fb:d1:ee:43:7a:4d:58:ea:c3:54:00:38:cb: 09:ec:08:3e:56:8b:7b:f8:12:82:17:63:69:ca:12: 44:e1:f9:f1:58:15:47:12:df:a6:02:0c:e2:5d:16: 80:1f:07:52:1b:9c:a1:6e:49:8a:50:1b:95:66:f0: 38:33:4f:70:fe:de:c8:06:dd:b9:2c:2f:0d:bf:b2: 46:bf:16:18:2d:be:b1:ab:54:d5:16:72:a3:d6:a9: 22:3c:64:88:b4:66:b9:d2:14:78:95:c0:29:54:80: 38:6c:dc:54:1b:65:ae:ba:e6:ad:1f:69:91:fc:5f: fe:65:16:49:03:33:c0:3b:c6:a7:0f:6c:b6:e9:de: cf:ff:12:1e:8f:fd:ec:0e:de:ad:d3:5f:8e:5b:7a: 65:b7:ba:23:c4:84:d6:2f:2c:f5:03:bc:ef:79:95: 30:ee:e0:55:59:de:7e:b8:22:0e:01:23:42:f4:8c: 58:a3:19:95:45:9b:3d:8f:d1:13:3f:51:0c:ad:b6: f6:88:2f:0e:57:a8:25:4b:87:27:25:bd:9d:ce:29: 7c:53:5f:e8:b2:f2:31:b7:82:b3:f8:17:a3:e4:a1: 39:25:78:13:fd:b7:b7:34:41:6e:50:ca:13:c0:95: bb:69:e6:48:b1:d7:10:10:1c:60:05:88:dd:ee:ed: 5c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A2:3F:62:C1:AC:F7:C1:74:90:C7:4F:79:86:43:2F:7D:4B:C1:4C X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:16:78:e5:15:27:32:99:9e:9e:2b:1a:fd:be:be:45:28:e5: 7e:38:a5:48:81:ce:b5:81:49:35:04:77:e2:64:be:89:fc:63: ff:9a:11:9a:b1:be:52:51:4b:67:21:6c:34:85:30:24:f3:31: 9e:c6:f2:18:0d:93:65:04:24:d6:ac:70:89:b2:2a:ed:b3:8b: b8:4c:22:b2:94:a0:4d:1f:bd:fe:62:bf:43:31:17:09:b0:02: 0a:36:0d:3b:8a:87:db:ed:e8:f2:cc:20:bc:09:8e:18:eb:a4: f3:b5:8f:df:38:2a:2c:12:6f:05:c9:70:98:64:7d:09:7f:19: 5c:d2:0b:b8:6b:21:1a:b9:b9:01:dd:3a:e9:b5:a1:a5:af:50: 76:ba:a2:6d:04:5b:fe:75:db:0a:07:8d:82:94:0e:4b:0e:3b: 35:3e:26:7d:93:b8:fc:0b:af:ec:25:f6:d6:ee:e6:90:e4:b4: a6:98:8d:cc:29:3e:34:23:c4:ea:8f:00:82:d1:e3:42:4d:02: 34:3d:18:e1:f5:ed:af:0b:f7:74:7b:e9:35:54:d7:39:16:d1: 90:49:1e:81:0a:3c:32:a0:ca:1e:ba:f4:42:ee:a3:25:12:d6: a4:f6:a8:1b:7e:f7:14:44:41:84:40:ab:7d:75:72:11:ef:f5: a7:f8:7b:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwODI2MjA0MjUzWhcNMjYwOTAyMjA0MjUzWjAYMRYwFAYD VQQDEw02YThmNGZjZC03OTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/vR7kN6TVjqw1QAOMsJ7Ag+Vot7+BKCF2NpyhJE4fnxWBVHEt+mAgziXRaA HwdSG5yhbkmKUBuVZvA4M09w/t7IBt25LC8Nv7JGvxYYLb6xq1TVFnKj1qkiPGSI tGa50hR4lcApVIA4bNxUG2WuuuatH2mR/F/+ZRZJAzPAO8anD2y26d7P/xIej/3s Dt6t01+OW3plt7ojxITWLyz1A7zveZUw7uBVWd5+uCIOASNC9IxYoxmVRZs9j9ET P1EMrbb2iC8OV6glS4cnJb2dzil8U1/osvIxt4Kz+Bej5KE5JXgT/be3NEFuUMoT wJW7aeZIsdcQEBxgBYjd7u1cxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWiP2LB rPfBdJDHT3mGQy99S8FMMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhhZ45RUnMpmenisa/b6+RSjlfjilSIHOtYFJNQR34mS+ifxj/5oRmrG+UlFL ZyFsNIUwJPMxnsbyGA2TZQQk1qxwibIq7bOLuEwispSgTR+9/mK/QzEXCbACCjYN O4qH2+3o8swgvAmOGOuk87WP3zgqLBJvBclwmGR9CX8ZXNILuGshGrm5Ad066bWh pa9QdrqibQRb/nXbCgeNgpQOSw47NT4mfZO4/Auv7CX21u7mkOS0ppiNzCk+NCPE 6o8AgtHjQk0CND0Y4fXtrwv3dHvpNVTXORbRkEkegQo8MqDKHrr0Qu6jJRLWpPao G373FERBhECrfXVyEe/1p/h7OQ== -----END CERTIFICATE-----Generated at Thu Aug 27 03:09:51 2026 by rpki-client