$ rpki-client -vvf rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft File: IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft (raw, json) Hash identifier: hZkpLr5I7/1vMht4OFb5mxL4OW5wYVu0KBa9dzJZMOQ= Subject key identifier: 31:DE:E1:11:BD:AD:63:8B:CA:F7:F8:AB:8F:A6:09:8C:B5:21:FF:44 Authority key identifier: 22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 Certificate issuer: /CN=A91A42A4/serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft Manifest number: 0238 Signing time: Tue 23 Jun 2026 02:40:19 +0000 Manifest this update: Tue 23 Jun 2026 02:40:18 +0000 Manifest next update: Tue 30 Jun 2026 02:40:18 +0000 Files and hashes: 1: IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl (hash: fUKNVWFTBwHxPuk9sqX/woACE1UhcJn/DC3faayn2vA=) 2: 73E56336069E11EE9D687712C4F9AE02.roa (hash: vru24/oQ0e7YAXwvhdGxx83zVPravQOQbMh4gNlzMKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Jun 2026 02:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A42A4, serialNumber=2225E3FA2C6FE2EFB67665E53CE9FE0CDF9C9BA7 Validity Not Before: Jun 23 02:40:18 2026 GMT Not After : Jun 30 02:40:18 2026 GMT Subject: CN=6a39f213-cd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:47:c8:05:42:a2:a8:03:f2:b3:da:28:91: 5d:a0:2c:f7:20:9b:79:dc:61:15:26:79:44:00:f8: 8f:6b:f9:12:95:40:7f:a1:8b:25:35:f3:c7:5b:5e: 9a:a1:37:5f:f1:0f:f3:31:30:e5:2e:d2:99:a5:cf: e0:b6:5e:8c:76:73:b0:ce:1c:ae:7b:8a:5c:90:9a: 54:8a:3a:3e:cd:f3:2f:e7:b2:d1:1e:fe:0a:28:56: 71:e8:69:61:32:21:1d:cd:30:3d:94:42:0c:7b:a1: 3a:ad:68:26:31:f2:cc:f5:17:7c:b2:1b:6a:5e:3e: 1c:59:5c:7e:4c:9d:88:e0:a6:27:be:2e:69:69:b1: e8:87:a5:a2:09:b2:8c:36:15:9a:28:19:c9:81:25: 01:66:52:0d:b4:bf:62:8a:a0:17:75:5a:56:df:f1: 26:48:d2:15:8a:60:45:90:a2:e1:c8:22:5f:5c:58: 90:a3:cf:88:44:69:d2:fc:0d:53:37:3c:5a:c8:d8: 1f:ed:6f:02:70:48:bc:59:30:b7:79:fd:0d:da:66: 30:16:7e:3e:41:d2:87:b3:b6:d3:16:4e:cf:ff:85: 8d:67:22:f5:f9:d6:68:04:17:31:b2:2d:76:51:3b: 76:6e:30:6d:72:f4:ad:5b:b2:83:0a:59:a2:01:e3: 7f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DE:E1:11:BD:AD:63:8B:CA:F7:F8:AB:8F:A6:09:8C:B5:21:FF:44 X509v3 Authority Key Identifier: keyid:22:25:E3:FA:2C:6F:E2:EF:B6:76:65:E5:3C:E9:FE:0C:DF:9C:9B:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IiXj-ixv4u-2dmXlPOn-DN-cm6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A42A4/6684163A063811EEAE238B74C4F9AE02/IiXj-ixv4u-2dmXlPOn-DN-cm6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:d2:c9:e5:e1:59:92:f4:15:77:1f:56:1a:42:44:28:16:ec: 68:98:6b:41:77:03:17:f5:1f:e9:3c:13:21:6e:c6:73:e7:72: 51:f8:9c:dc:32:3b:9d:27:d5:fe:f5:04:aa:6b:47:2a:25:d3: df:64:a2:b9:12:25:0f:62:ac:26:93:3c:d5:31:fd:bd:b5:0a: 6e:a2:ac:52:32:7c:13:65:2e:ba:fa:ef:38:3b:e7:5d:54:30: 3a:a6:5e:c1:b4:35:17:75:a2:2e:53:ad:e8:13:8d:c8:f8:18: 16:90:40:61:5d:4f:c5:60:7e:5b:52:49:fe:6b:31:24:20:22: 01:f9:4a:77:92:1c:c1:76:83:fe:84:a9:dd:78:89:42:fc:f7: 67:87:f5:c4:15:0d:35:ee:bb:53:b5:da:e2:2e:cd:ca:60:84: 8d:3e:66:0f:0c:09:a0:ea:dd:e7:4a:11:c7:d1:c9:9e:32:97: 2e:b5:77:61:b4:3c:e4:0c:78:0b:b4:55:05:c5:81:21:d3:34: 20:f0:94:e6:ba:43:3f:0f:df:a0:bb:75:f6:40:60:c1:91:6b: 04:7f:e6:49:9b:fe:63:18:1c:a6:80:37:ab:78:87:49:c8:1f: ed:52:24:ea:ab:b4:1f:53:f4:ee:ce:56:34:8d:1b:21:20:b4: 51:ba:7c:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyQTQxMTAvBgNVBAUTKDIyMjVFM0ZBMkM2RkUyRUZCNjc2NjVFNTNDRTlGRTBD REY5QzlCQTcwHhcNMjYwNjIzMDI0MDE4WhcNMjYwNjMwMDI0MDE4WjAYMRYwFAYD VQQDEw02YTM5ZjIxMy1jZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsD5HyAVCoqgD8rPaKJFdoCz3IJt53GEVJnlEAPiPa/kSlUB/oYslNfPHW16a oTdf8Q/zMTDlLtKZpc/gtl6MdnOwzhyue4pckJpUijo+zfMv57LRHv4KKFZx6Glh MiEdzTA9lEIMe6E6rWgmMfLM9Rd8shtqXj4cWVx+TJ2I4KYnvi5pabHoh6WiCbKM NhWaKBnJgSUBZlINtL9iiqAXdVpW3/EmSNIVimBFkKLhyCJfXFiQo8+IRGnS/A1T NzxayNgf7W8CcEi8WTC3ef0N2mYwFn4+QdKHs7bTFk7P/4WNZyL1+dZoBBcxsi12 UTt2bjBtcvStW7KDClmiAeN/qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHe4RG9 rWOLyvf4q4+mCYy1If9EMB8GA1UdIwQYMBaAFCIl4/osb+LvtnZl5Tzp/gzfnJun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDJBNC82Njg0MTYzQTA2 MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1LTJkbVhsUE9uLUROLWNt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lpWGotaXh2NHUtMmRtWGxQT24tRE4tY202Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDJBNC82Njg0MTYzQTA2MzgxMUVFQUUyMzhCNzRDNEY5QUUwMi9JaVhqLWl4djR1 LTJkbVhsUE9uLUROLWNtNmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFNLJ5eFZkvQVdx9WGkJEKBbsaJhrQXcDF/Uf6TwTIW7Gc+dyUfic3DI7nSfV /vUEqmtHKiXT32SiuRIlD2KsJpM81TH9vbUKbqKsUjJ8E2UuuvrvODvnXVQwOqZe wbQ1F3WiLlOt6BONyPgYFpBAYV1PxWB+W1JJ/msxJCAiAflKd5IcwXaD/oSp3XiJ Qvz3Z4f1xBUNNe67U7Xa4i7NymCEjT5mDwwJoOrd50oRx9HJnjKXLrV3YbQ85Ax4 C7RVBcWBIdM0IPCU5rpDPw/foLt19kBgwZFrBH/mSZv+YxgcpoA3q3iHScgf7VIk 6qu0H1P07s5WNI0bISC0Ubp8nw== -----END CERTIFICATE-----Generated at Wed Jun 24 11:28:49 2026 by rpki-client