$ rpki-client -vvvf rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft File: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft (raw, json) Hash identifier: jKdU2c+EzIG0289rOfnBkryktGgKDil8CuB0wBbu0qc= Subject key identifier: FA:95:3E:05:A1:71:FA:EE:96:37:D9:F5:15:E3:9A:A4:A5:70:82:AE Authority key identifier: 21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 Certificate issuer: /CN=A915CF84/serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft Manifest number: 5B Signing time: Tue 13 Oct 2026 08:51:44 +0000 Manifest this update: Tue 13 Oct 2026 08:51:43 +0000 Manifest next update: Tue 20 Oct 2026 08:51:43 +0000 Files and hashes: 1: IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl (hash: uvMNVaHDU8uJNu5A6i3DVxe2NnrdsoRHmfTypAKqqcw=) 2: D13F8D3A3C9811F1A7092461A3833773.roa (hash: Y1MSrA58sZfZcObah4zCDcRiu+6k10Md9q8BKTCP3rk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 08:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CF84, serialNumber=2181BFBDA4536E98C854B83C12FA6CACF3C8F6C4 Validity Not Before: Oct 13 08:51:43 2026 GMT Not After : Oct 20 08:51:43 2026 GMT Subject: CN=6acdf120-7608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:11:30:93:a3:b0:b7:9a:52:31:18:a9:f2: 07:3b:d2:cf:29:a7:07:fc:33:84:62:8e:86:26:c0: 80:1a:e6:46:34:ce:4f:ec:ea:80:01:12:aa:4f:57: 52:71:df:f0:0e:14:49:1d:36:f4:41:1d:1c:5f:7f: e3:98:37:df:eb:01:22:b3:a5:ec:b5:b3:12:95:d1: ed:4e:5a:b9:e6:fc:a1:3c:fe:17:d4:37:ec:d9:de: ce:92:be:a8:e5:f3:87:82:48:41:e4:a0:4d:6a:6d: b8:4a:f4:9f:59:b6:c1:b0:cd:a5:42:1b:90:b5:b3: 43:1c:57:93:96:f3:16:af:4a:f6:82:46:cf:f6:66: 80:02:f5:7c:73:4e:7a:83:cc:a7:91:61:56:a6:81: 3b:c5:bb:ae:7d:4d:ac:85:7f:07:49:02:45:8c:76: e0:e8:06:0b:dd:9b:5b:86:97:41:2c:68:c3:e5:88: e9:cf:c8:33:e4:9b:a3:d8:98:3a:ac:bb:86:74:ce: cf:53:8f:d1:bc:08:0a:c2:f1:da:48:92:0b:04:50: d2:86:e9:63:56:c8:06:48:d5:36:c6:39:42:e3:ce: be:93:5a:41:ef:1a:08:48:fc:a1:36:7c:47:16:2a: 15:99:58:49:d4:2a:5b:0c:7a:7e:5a:d3:1d:3a:71: 94:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:95:3E:05:A1:71:FA:EE:96:37:D9:F5:15:E3:9A:A4:A5:70:82:AE X509v3 Authority Key Identifier: keyid:21:81:BF:BD:A4:53:6E:98:C8:54:B8:3C:12:FA:6C:AC:F3:C8:F6:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF84/863CCCB43C3211F18C21D46EBF833773/IYG_vaRTbpjIVLg8EvpsrPPI9sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:f9:d1:c1:7d:b7:1a:2f:4b:b7:28:43:07:61:48:64:78:52: 6a:f1:42:e8:c6:47:04:b9:55:8c:8d:88:71:fe:5c:40:f9:a0: f7:45:14:fd:c8:9b:30:0d:3a:58:e5:21:07:72:38:9f:1a:da: a4:55:0e:25:5e:c7:b6:66:82:4a:c8:bf:f5:16:3d:38:97:43: fe:e9:cd:9c:43:dc:53:dc:a5:28:87:c2:b0:5f:6b:1d:32:47: 13:e9:55:53:cf:23:7e:c9:de:9f:e5:78:e6:2f:52:4f:0e:9d: 5d:d5:58:18:98:1a:14:38:19:d5:d2:cc:03:f2:9c:f9:f8:c8: cd:55:9f:03:dd:4c:ef:63:c2:ea:a3:f3:74:1d:99:18:3c:0b: 02:ac:89:26:75:28:65:1d:d6:25:3e:82:a6:32:1b:e1:ca:03: 58:b2:ff:9a:4d:d9:99:00:38:8c:06:59:31:1e:73:41:f3:49: 4e:b8:1c:0b:4e:b3:e8:2a:ec:e9:83:71:51:2e:e7:91:2e:02: 7c:1e:40:4b:91:fe:bb:c6:05:07:c7:58:f7:56:64:9a:c2:99: 4c:20:73:a9:b5:41:0d:c9:12:f1:bc:6b:f2:dd:73:17:9c:8c: 5b:af:39:a6:1f:b1:8e:37:21:45:0b:09:23:05:51:da:f8:05: 98:f1:4b:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0Y4NDExMC8GA1UEBRMoMjE4MUJGQkRBNDUzNkU5OEM4NTRCODNDMTJGQTZDQUNG M0M4RjZDNDAeFw0yNjEwMTMwODUxNDNaFw0yNjEwMjAwODUxNDNaMBgxFjAUBgNV BAMTDTZhY2RmMTIwLTc2MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/ehEwk6Owt5pSMRip8gc70s8ppwf8M4RijoYmwIAa5kY0zk/s6oABEqpPV1Jx 3/AOFEkdNvRBHRxff+OYN9/rASKzpey1sxKV0e1OWrnm/KE8/hfUN+zZ3s6Svqjl 84eCSEHkoE1qbbhK9J9ZtsGwzaVCG5C1s0McV5OW8xavSvaCRs/2ZoAC9XxzTnqD zKeRYVamgTvFu659TayFfwdJAkWMduDoBgvdm1uGl0EsaMPliOnPyDPkm6PYmDqs u4Z0zs9Tj9G8CArC8dpIkgsEUNKG6WNWyAZI1TbGOULjzr6TWkHvGghI/KE2fEcW KhWZWEnUKlsMen5a0x06cZTJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+pU+BaFx +u6WN9n1FeOapKVwgq4wHwYDVR0jBBgwFoAUIYG/vaRTbpjIVLg8EvpsrPPI9sQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjg0Lzg2M0NDQ0I0M0Mz MjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBqSVZMZzhFdnBzclBQSTlz US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSVlHX3ZhUlRicGpJVkxnOEV2cHNyUFBJOXNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD Rjg0Lzg2M0NDQ0I0M0MzMjExRjE4QzIxRDQ2RUJGODMzNzczL0lZR192YVJUYnBq SVZMZzhFdnBzclBQSTlzUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCn+dHBfbcaL0u3KEMHYUhkeFJq8ULoxkcEuVWMjYhx/lxA+aD3RRT9yJswDTpY 5SEHcjifGtqkVQ4lXse2ZoJKyL/1Fj04l0P+6c2cQ9xT3KUoh8KwX2sdMkcT6VVT zyN+yd6f5XjmL1JPDp1d1VgYmBoUOBnV0swD8pz5+MjNVZ8D3UzvY8Lqo/N0HZkY PAsCrIkmdShlHdYlPoKmMhvhygNYsv+aTdmZADiMBlkxHnNB80lOuBwLTrPoKuzp g3FRLueRLgJ8HkBLkf67xgUHx1j3VmSawplMIHOptUENyRLxvGvy3XMXnIxbrzmm H7GONyFFCwkjBVHa+AWY8UsW -----END CERTIFICATE-----Generated at Tue Oct 13 16:22:28 2026 by rpki-client