$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: dU6tihnMAsz6opGxUheLOZXCN4hL/ZosZiJ2SQj+pF4= Subject key identifier: DF:D9:06:C5:7E:1F:1B:10:13:D8:17:CA:DB:FF:CE:DB:9A:D0:05:F8 Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 0846 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 082D Signing time: Sat 04 Apr 2026 20:46:06 +0000 Manifest this update: Sat 04 Apr 2026 20:46:05 +0000 Manifest next update: Sat 11 Apr 2026 20:46:05 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: laUaNOfA/MQH6L9+WYoGJ7oxKGcL5WMU+B1NLj/uIA4=) 2: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: leO2JqGKVdqcNczUkd0IAjGki7oPjl2kK1j+hgCcFLQ=) 3: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: /CLRSnh9CYZydXvA+OqGb8vFSm9uhhWBDEam371xnzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2118 (0x846) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Apr 4 20:46:05 2026 GMT Not After : Apr 11 20:46:05 2026 GMT Subject: CN=69d1788d-5d3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:42:94:da:72:3d:5c:1b:f4:cf:e6:93:46: 6b:db:3c:62:a5:1b:76:59:20:ad:7c:b8:ae:29:49: 32:2e:c1:d5:b2:45:4e:8d:ee:a7:e5:15:33:c0:5f: 57:5b:d8:92:5b:a1:99:d2:04:a2:4a:7b:59:fd:20: 24:2b:93:7e:18:4d:22:99:4f:ae:5d:78:0b:2d:72: 03:75:42:b1:c6:60:4a:49:bd:8c:38:9f:df:13:95: fe:fc:34:27:ed:04:8f:75:8b:01:c7:34:29:ce:17: a9:fb:26:8b:f7:b2:37:be:c4:e5:e7:5a:70:57:d3: 18:5a:f8:aa:8c:0e:08:59:9f:78:43:ce:d3:04:a9: f4:61:f9:96:7d:35:17:14:de:77:35:93:a9:6d:43: 76:d8:f6:7f:d4:af:d0:6f:67:8c:ff:21:8a:9d:fd: 1d:97:35:be:59:83:d8:60:03:3e:5b:84:eb:b7:d2: c2:b3:45:aa:9f:f6:e8:46:c3:df:51:41:58:5d:0d: ae:8d:c0:f8:13:e4:82:db:3a:48:c6:23:71:fe:73: 6d:40:16:ac:ab:a2:f6:20:ef:a3:d6:e6:8e:50:ee: 39:9a:01:2a:6c:65:35:7c:6b:c3:fd:b8:33:85:69: cf:af:25:f6:51:72:d4:15:f5:d6:81:8f:d4:38:ca: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:06:C5:7E:1F:1B:10:13:D8:17:CA:DB:FF:CE:DB:9A:D0:05:F8 X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ce:6c:e0:ad:9a:21:f3:c3:ba:ce:d3:05:68:4f:84:95:71: 63:28:fa:91:0c:ce:a1:0b:98:dd:ae:a2:8c:27:ab:7c:3c:a1: fd:0c:d1:f6:61:6d:13:9c:25:15:48:58:2c:6f:38:f9:d5:02: 70:d6:68:22:39:37:8e:fe:ba:aa:86:ba:0a:2a:20:0d:6b:c0: af:35:26:8a:96:89:50:fd:c7:da:d2:ac:9c:e7:07:48:ff:0c: 9b:a7:af:8d:f5:06:06:dc:50:4f:05:52:00:28:fb:ec:9c:f3: c9:93:b0:5d:9d:6e:65:a1:a0:38:a8:c7:23:0a:04:d5:24:30: b5:79:3f:1a:b8:a8:63:ca:a8:af:a2:c7:ea:90:2d:25:d4:cc: 39:2e:60:a8:7e:c7:c9:d0:7c:ec:30:4f:57:b8:1b:bc:38:08: 2c:af:3e:3a:67:f0:cb:ce:78:0d:b9:47:4a:3b:27:07:c3:6a: fa:86:91:6c:ee:29:32:5f:32:13:5c:c6:da:cd:26:2a:c3:17: 89:10:5b:c0:98:e9:7e:41:ed:cc:63:d4:cc:30:b5:24:85:ad: 74:ee:81:34:a4:94:86:25:4a:2e:1c:18:c2:a2:8f:dc:dd:be: d7:10:c1:b4:1d:9a:7a:0d:0d:4c:c6:88:b8:e9:0f:93:2f:06: 49:2b:ed:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYwNDA0MjA0NjA1WhcNMjYwNDExMjA0NjA1WjAYMRYwFAYD VQQDEw02OWQxNzg4ZC01ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzP1ClNpyPVwb9M/mk0Zr2zxipRt2WSCtfLiuKUkyLsHVskVOje6n5RUzwF9X W9iSW6GZ0gSiSntZ/SAkK5N+GE0imU+uXXgLLXIDdUKxxmBKSb2MOJ/fE5X+/DQn 7QSPdYsBxzQpzhep+yaL97I3vsTl51pwV9MYWviqjA4IWZ94Q87TBKn0YfmWfTUX FN53NZOpbUN22PZ/1K/Qb2eM/yGKnf0dlzW+WYPYYAM+W4Trt9LCs0Wqn/boRsPf UUFYXQ2ujcD4E+SC2zpIxiNx/nNtQBasq6L2IO+j1uaOUO45mgEqbGU1fGvD/bgz hWnPryX2UXLUFfXWgY/UOMrNGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/ZBsV+ HxsQE9gXytv/ztua0AX4MB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFs5s4K2aIfPDus7TBWhPhJVxYyj6kQzOoQuY3a6ijCerfDyh/QzR9mFtE5wl FUhYLG84+dUCcNZoIjk3jv66qoa6CiogDWvArzUmipaJUP3H2tKsnOcHSP8Mm6ev jfUGBtxQTwVSACj77JzzyZOwXZ1uZaGgOKjHIwoE1SQwtXk/GrioY8qor6LH6pAt JdTMOS5gqH7HydB87DBPV7gbvDgILK8+Omfwy854DblHSjsnB8Nq+oaRbO4pMl8y E1zG2s0mKsMXiRBbwJjpfkHtzGPUzDC1JIWtdO6BNKSUhiVKLhwYwqKP3N2+1xDB tB2aeg0NTMaIuOkPky8GSSvtpg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:45 2026 by rpki-client