$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft File: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft (raw, json) Hash identifier: rUxwSrfNZTH6wyVbHlTEFKgvMPrmLPO+RYJkg/1QDXs= Subject key identifier: E9:65:2B:2D:91:65:7A:4E:EB:F0:D7:64:C1:44:47:CD:9A:35:4D:3A Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 Certificate issuer: /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft Manifest number: 20 Signing time: Wed 17 Jun 2026 09:02:59 +0000 Manifest this update: Wed 17 Jun 2026 09:02:58 +0000 Manifest next update: Wed 24 Jun 2026 09:02:58 +0000 Files and hashes: 1: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl (hash: hQdqDtO5mOH7s0j+asC9RszFK8W3CsIXvaPE6qZGjN0=) 2: D13F8D3A3C9811F1A7092461A3833773.roa (hash: Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Jun 2026 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Validity Not Before: Jun 17 09:02:58 2026 GMT Not After : Jun 24 09:02:58 2026 GMT Subject: CN=6a3262c2-74e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:72:13:3a:19:30:ed:68:38:fe:6e:8a:ba:39: 5d:00:6b:d5:ef:2e:db:70:b5:f1:f8:7c:8c:20:21: d9:b6:4e:f8:40:5b:af:ab:ec:09:ee:e3:4f:9b:f6: 39:29:a6:a3:7c:ae:fc:d7:5b:d2:1a:5c:28:ce:96: dc:70:4a:e9:89:5f:3a:8e:9a:ec:55:94:c2:31:c3: 96:dd:19:39:67:d8:76:1b:4f:0f:e1:17:56:1a:f8: 17:b3:00:9b:46:15:1c:80:66:b7:75:16:11:17:10: f3:6c:06:00:43:6c:67:4e:6b:a6:64:df:05:c3:18: c4:71:c0:79:b1:a7:25:1d:18:aa:31:59:ba:53:0a: 79:cd:73:07:fe:c3:42:26:f4:38:ed:66:91:df:c0: ff:15:c5:14:ec:d0:bf:82:5f:92:b4:83:55:f3:56: b7:76:2b:6f:f9:97:3c:05:90:dc:fb:fb:fc:59:95: fd:a0:30:be:29:b4:b8:6d:54:f3:ee:33:24:64:61: 22:69:67:d8:49:3b:2e:5a:0d:84:ba:a2:f0:98:80: 29:ff:49:5c:33:0f:6a:e5:47:e4:72:bd:18:34:1e: 20:3b:be:11:0c:01:4e:36:8d:6b:47:6d:d6:0d:51: a1:ac:cc:41:e1:70:bc:8a:6c:8f:0e:86:dd:ab:7f: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:65:2B:2D:91:65:7A:4E:EB:F0:D7:64:C1:44:47:CD:9A:35:4D:3A X509v3 Authority Key Identifier: keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:4e:d1:78:d1:e8:de:f8:25:39:99:f6:01:5b:f8:d5:78: 05:e5:3c:02:85:34:db:5b:3d:48:6b:c4:d5:bd:ce:df:f5:86: 81:c4:85:5b:ad:4b:5f:81:85:50:e4:44:22:9e:f9:81:df:ec: 7c:a3:89:61:5b:9a:3f:ff:16:5e:05:5e:99:42:53:5e:34:16: 91:61:79:55:39:47:63:71:b6:33:df:e7:fc:08:c3:d3:8c:60: 17:b2:3d:3e:2f:e0:c5:a8:68:eb:f9:ff:77:2c:2c:b8:17:2d: 07:9f:06:24:53:e5:8d:52:3b:8b:c7:8e:ae:a9:85:01:55:68: 2e:3e:1d:06:5c:48:4f:75:39:0a:69:8c:dc:db:da:1d:5c:89: e5:de:1a:9c:76:59:67:a3:b8:fc:3f:47:1e:39:62:ea:9f:93: 6e:ba:a4:a6:6f:69:53:2d:37:57:f0:4a:5c:22:c8:ed:cf:6d: 28:f2:16:57:0d:db:94:cf:9c:5d:ff:a5:30:33:0f:b0:45:85: 49:23:ec:29:dd:f5:58:e7:40:81:e6:02:8b:c1:dd:12:90:f5: ef:42:58:61:64:a6:e1:c5:9d:9c:eb:5d:8f:c6:3c:94:ea:e9: 11:73:85:b6:d3:05:cd:c1:f1:80:21:81:1b:e8:d9:da:44:08: 69:03:ef:bb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0Y4NDExMC8GA1UEBRMoMjE4MUJGQkRBNDUzNkU5OEM4NTRCODNDMTJGQTZDQUNG M0M4RjZDNDAeFw0yNjA2MTcwOTAyNThaFw0yNjA2MjQwOTAyNThaMBgxFjAUBgNV BAMTDTZhMzI2MmMyLTc0ZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZchM6GTDtaDj+boq6OV0Aa9XvLttwtfH4fIwgIdm2TvhAW6+r7Anu40+b9jkp pqN8rvzXW9IaXCjOltxwSumJXzqOmuxVlMIxw5bdGTln2HYbTw/hF1Ya+BezAJtG FRyAZrd1FhEXEPNsBgBDbGdOa6Zk3wXDGMRxwHmxpyUdGKoxWbpTCnnNcwf+w0Im 9DjtZpHfwP8VxRTs0L+CX5K0g1XzVrd2K2/5lzwFkNz7+/xZlf2gML4ptLhtVPPu MyRkYSJpZ9hJOy5aDYS6ovCYgCn/SVwzD2rlR+RyvRg0HiA7vhEMAU42jWtHbdYN UaGszEHhcLyKbI8Oht2rfywrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU6WUrLZFl ek7r8NdkwURHzZo1TTowHwYDVR0jBBgwFoAUIYG/vaRTbpjIVLg8EvpsrPPI9sQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjg0Lzg2M0NDQ0I0M0Mz MjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBqSVZMZzhFdnBzclBQSTlz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVlHX3ZhUlRicGpJVkxnOEV2cHNyUFBJOXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD Rjg0Lzg2M0NDQ0I0M0MzMjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBq SVZMZzhFdnBzclBQSTlzUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCxrE7ReNHo3vglOZn2AVv41XgF5TwChTTbWz1Ia8TVvc7f9YaBxIVbrUtfgYVQ 5EQinvmB3+x8o4lhW5o//xZeBV6ZQlNeNBaRYXlVOUdjcbYz3+f8CMPTjGAXsj0+ L+DFqGjr+f93LCy4Fy0HnwYkU+WNUjuLx46uqYUBVWguPh0GXEhPdTkKaYzc29od XInl3hqcdllno7j8P0ceOWLqn5NuuqSmb2lTLTdX8EpcIsjtz20o8hZXDduUz5xd /6UwMw+wRYVJI+wp3fVY50CB5gKLwd0SkPXvQlhhZKbhxZ2c612PxjyU6ukRc4W2 0wXNwfGAIYEb6NnaRAhpA++7 -----END CERTIFICATE-----Generated at Wed Jun 17 14:49:45 2026 by rpki-client