$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft File: IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft (raw, json) Hash identifier: LPepUoc8K9P7carjdRpH7mM9v6p1itWFOkc+PxiDai4= Subject key identifier: D7:28:FB:56:72:6F:68:57:7D:A2:25:3A:54:3C:CB:36:6A:B1:CC:BD Authority key identifier: 20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E Certificate issuer: /CN=A918C2EB/serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft Manifest number: 56 Signing time: Mon 01 Jun 2026 09:03:09 +0000 Manifest this update: Mon 01 Jun 2026 09:03:08 +0000 Manifest next update: Mon 08 Jun 2026 09:03:08 +0000 Files and hashes: 1: IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl (hash: /tshDip8MYBaVpx435SIOSZiPeW+H4DIjSeYYN0rccQ=) 2: 9B67FC6CE61511F0BA7CC46D6A6F56BC.roa (hash: RXKHt1MxZAi094IIW7YlJh5giMLTwFT/Xi1lVrRSFcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 09:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=2003EE405229D88C948B76DC195D430BC020AF1E Validity Not Before: Jun 1 09:03:08 2026 GMT Not After : Jun 8 09:03:08 2026 GMT Subject: CN=6a1d4acd-4be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:1a:23:36:f5:c9:60:7a:a4:52:b7:9f:3a: 6f:61:86:29:94:8b:f3:2b:0e:b0:f5:c9:f6:59:b6: 08:94:b9:bd:73:d3:47:9f:42:bd:7b:58:62:5d:0f: 11:90:8f:c7:dc:3c:70:b5:3f:22:d5:17:15:73:4b: f5:51:13:b5:59:ef:4e:05:b8:27:00:e2:30:1e:ae: 90:b1:fb:d2:03:a0:52:e0:1e:ec:9c:2b:c9:1e:c0: ac:f6:10:b3:1f:b4:76:6a:22:73:75:ea:ae:f4:88: 95:ff:07:05:65:c0:4b:a2:9b:a3:ed:97:39:fd:c2: cc:66:91:28:95:24:80:05:62:60:16:d3:02:5d:39: 80:57:fc:19:fe:38:da:18:29:9c:69:9b:80:32:86: 39:ab:0f:34:3d:45:12:0f:0e:74:71:b5:73:53:b5: 0d:00:f6:8e:d9:e7:df:ed:47:52:bb:b7:1b:ee:38: e9:07:8f:60:93:57:bd:0f:62:f4:76:76:5c:d6:81: 8b:03:dd:4b:7a:cb:ad:af:c1:06:d9:2b:0c:33:82: c9:9e:e2:8b:f3:b3:d5:4b:a9:23:7a:23:81:12:54: c1:6d:7f:42:8a:44:2a:73:8c:cd:7f:2e:a7:9f:40: 60:81:28:af:33:73:a4:98:da:47:76:07:08:38:18: 72:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:28:FB:56:72:6F:68:57:7D:A2:25:3A:54:3C:CB:36:6A:B1:CC:BD X509v3 Authority Key Identifier: keyid:20:03:EE:40:52:29:D8:8C:94:8B:76:DC:19:5D:43:0B:C0:20:AF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IAPuQFIp2IyUi3bcGV1DC8Agrx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/89972512E53411F0912CFD566E6F56BC/IAPuQFIp2IyUi3bcGV1DC8Agrx4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:09:2d:06:6b:66:1e:76:45:e8:51:49:3d:c2:86:66:4a:21: bd:61:82:a2:03:4e:99:8a:4c:c4:fc:6b:48:70:94:39:0a:35: 74:37:99:ce:04:b4:15:3c:09:a6:67:a7:e6:5b:a0:51:f1:cc: a3:1f:99:f9:cd:47:e2:a0:18:0e:48:bc:9b:36:63:4e:0d:49: 6c:b0:66:ca:8b:d4:9b:6f:e3:e2:42:e1:44:84:34:35:b3:d5: 0f:42:2c:34:3f:1d:82:bd:f3:45:1e:42:25:fa:be:61:64:eb: d6:95:28:b2:d5:40:94:4e:9f:eb:94:74:76:9a:56:4d:a8:23: 55:bd:a6:ff:39:c2:a6:8c:fd:05:a1:ae:d0:1b:9e:3c:e4:26: af:c6:a2:3a:bc:d6:87:17:49:40:96:9e:aa:e1:7b:45:ec:e6: e0:ed:d3:c7:b8:a1:1a:7c:ec:31:4e:ba:e9:2f:23:3c:ad:5e: c3:e1:6b:39:a3:d8:03:65:42:cf:62:9a:68:89:6b:48:07:09: 51:9e:d6:e7:13:61:26:24:b2:cc:d1:f9:9e:52:fc:e8:53:ca: d2:28:5a:9d:81:34:50:b9:e4:2f:67:77:c5:76:c1:4c:42:6b: d8:df:1e:82:c0:8c:99:08:2d:01:3e:4b:f1:27:31:0c:e7:c9: be:0c:56:83 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzJFQjExMC8GA1UEBRMoMjAwM0VFNDA1MjI5RDg4Qzk0OEI3NkRDMTk1RDQzMEJD MDIwQUYxRTAeFw0yNjA2MDEwOTAzMDhaFw0yNjA2MDgwOTAzMDhaMBgxFjAUBgNV BAMTDTZhMWQ0YWNkLTRiZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbuBojNvXJYHqkUrefOm9hhimUi/MrDrD1yfZZtgiUub1z00efQr17WGJdDxGQ j8fcPHC1PyLVFxVzS/VRE7VZ704FuCcA4jAerpCx+9IDoFLgHuycK8kewKz2ELMf tHZqInN16q70iJX/BwVlwEuim6Ptlzn9wsxmkSiVJIAFYmAW0wJdOYBX/Bn+ONoY KZxpm4AyhjmrDzQ9RRIPDnRxtXNTtQ0A9o7Z59/tR1K7txvuOOkHj2CTV70PYvR2 dlzWgYsD3Ut6y62vwQbZKwwzgsme4ovzs9VLqSN6I4ESVMFtf0KKRCpzjM1/Lqef QGCBKK8zc6SY2kd2Bwg4GHIrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1yj7VnJv aFd9oiU6VDzLNmqxzL0wHwYDVR0jBBgwFoAUIAPuQFIp2IyUi3bcGV1DC8Agrx4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzg5OTcyNTEyRTUz NDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5VWkzYmNHVjFEQzhBZ3J4 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSUFQdVFGSXAySXlVaTNiY0dWMURDOEFncng0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MkVCLzg5OTcyNTEyRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL0lBUHVRRklwMkl5 VWkzYmNHVjFEQzhBZ3J4NC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAFCS0Ga2YedkXoUUk9woZmSiG9YYKiA06ZikzE/GtIcJQ5CjV0N5nOBLQVPAmm Z6fmW6BR8cyjH5n5zUfioBgOSLybNmNODUlssGbKi9Sbb+PiQuFEhDQ1s9UPQiw0 Px2CvfNFHkIl+r5hZOvWlSiy1UCUTp/rlHR2mlZNqCNVvab/OcKmjP0Foa7QG548 5CavxqI6vNaHF0lAlp6q4XtF7Obg7dPHuKEafOwxTrrpLyM8rV7D4Ws5o9gDZULP YppoiWtIBwlRntbnE2EmJLLM0fmeUvzoU8rSKFqdgTRQueQvZ3fFdsFMQmvY3x6C wIyZCC0BPkvxJzEM58m+DFaD -----END CERTIFICATE-----Generated at Tue Jun 2 21:33:54 2026 by rpki-client