$ rpki-client -vvf rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft File: iaGX0JdonG6zOGepzIrM1_s2Tok.mft (raw, json) Hash identifier: CDzw2NTAoLcYltcvhjJxJGhvv1XEet0d//gsptuspH8= Subject key identifier: F6:AD:6B:0F:26:48:3E:D9:5F:51:64:27:D7:2C:EE:08:B1:6F:2D:83 Authority key identifier: 89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 Certificate issuer: /CN=A917991B/serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Certificate serial: 050C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft Manifest number: 0500 Signing time: Fri 12 Jun 2026 23:46:13 +0000 Manifest this update: Fri 12 Jun 2026 23:46:12 +0000 Manifest next update: Fri 19 Jun 2026 23:46:12 +0000 Files and hashes: 1: iaGX0JdonG6zOGepzIrM1_s2Tok.crl (hash: 0C/FqU2hL79ZkHo9SnZo6jBhqGBgjPL/6YDWtNylzqM=) 2: E82DE3C290AB11ECAB81252FC4F9AE02.roa (hash: 8RK3wMUcaIlDFax8CoO7B3J+G4IwltOjR9G0Tg+XrZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 23:46:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1292 (0x50c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917991B, serialNumber=89A197D097689C6EB33867A9CC8ACCD7FB364E89 Validity Not Before: Jun 12 23:46:12 2026 GMT Not After : Jun 19 23:46:12 2026 GMT Subject: CN=6a2c9a44-1227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f0:52:e4:11:14:3d:20:92:8e:a1:77:81:32: ff:29:a2:03:7c:00:89:d9:db:db:ef:9d:95:04:50: 24:e7:53:50:d0:66:81:f8:fe:b7:ee:8b:fd:94:94: e5:89:d2:18:29:98:ed:76:bd:c8:79:66:dd:e2:58: e0:16:89:8d:10:e4:ae:1f:0f:02:64:22:7a:b0:36: c9:d8:0a:d6:05:36:96:d1:b2:ca:9d:b7:af:d6:cd: c2:ee:41:b1:f4:4b:0d:8c:d2:82:fe:f6:18:97:12: 89:9b:2a:d5:d8:77:f6:8d:6f:ea:e3:02:9d:58:8f: 32:7f:8a:4e:01:d3:b4:91:eb:bc:8f:a7:12:4b:ed: 88:bd:98:94:22:a5:eb:26:f9:1f:05:18:1f:0e:9e: 9d:84:b6:b7:c3:e1:c8:4e:01:2d:49:69:22:d9:bd: f5:2c:fd:ba:8a:d8:b4:fa:8b:77:12:a7:62:7a:08: 5b:00:d5:eb:25:d6:19:5b:30:3a:19:a1:7a:a6:56: b8:36:cf:ed:8f:2d:6c:7e:22:bb:84:9d:ee:10:d8: 83:2f:26:f5:09:75:dd:4a:a7:ea:78:05:ac:b9:11: 25:eb:2e:dc:da:64:55:44:a6:3a:69:75:58:52:69: 4e:6d:4b:86:cb:f7:0f:b3:d4:5e:82:83:40:43:5c: 7a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AD:6B:0F:26:48:3E:D9:5F:51:64:27:D7:2C:EE:08:B1:6F:2D:83 X509v3 Authority Key Identifier: keyid:89:A1:97:D0:97:68:9C:6E:B3:38:67:A9:CC:8A:CC:D7:FB:36:4E:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iaGX0JdonG6zOGepzIrM1_s2Tok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917991B/7D0C37D0604311EC8D37510EC4F9AE02/iaGX0JdonG6zOGepzIrM1_s2Tok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:59:dc:8c:2d:53:c0:b1:1e:3b:66:d7:1c:68:3e:6d:2b:09: 22:81:6d:3e:4d:3f:fd:f0:d3:43:6e:31:10:41:33:15:d2:4c: 5b:29:cb:a2:20:dc:f8:63:93:77:23:39:a2:66:b2:dd:f1:a8: 8c:80:58:16:a6:a9:03:d2:92:f4:cc:42:42:5d:15:c9:f7:d1: 56:2b:f4:2c:5c:03:f9:35:57:0d:76:0c:d9:67:2b:7c:a7:c0: c9:3f:d8:fb:21:d3:04:2e:95:a4:31:7b:2d:76:d6:43:17:3e: fe:ca:79:97:15:5b:34:de:b5:bb:f6:a5:81:d7:f4:e9:f7:72: a8:05:73:e0:46:a0:a7:88:8c:c5:b0:c6:39:f9:66:5d:22:2b: bd:e0:bb:48:89:39:30:81:6f:13:d0:52:c3:21:c5:39:1d:f1: 1e:8e:db:5d:25:cb:02:93:06:61:2b:99:b3:1b:6e:2a:81:59: 45:a4:e5:97:7b:d0:e5:f7:d9:ad:4e:e4:9d:7d:4b:a4:1f:0c: 37:16:69:0b:88:b4:68:98:34:8a:4f:5a:a9:8a:dc:04:9e:7a: 87:fb:6e:d7:99:46:cf:19:87:ca:dc:21:21:5d:93:9c:f5:ff: 22:56:e7:2b:3f:4d:66:4c:21:e8:f5:18:e7:22:2f:08:62:aa: 82:c6:cb:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk5MUIxMTAvBgNVBAUTKDg5QTE5N0QwOTc2ODlDNkVCMzM4NjdBOUNDOEFDQ0Q3 RkIzNjRFODkwHhcNMjYwNjEyMjM0NjEyWhcNMjYwNjE5MjM0NjEyWjAYMRYwFAYD VQQDEw02YTJjOWE0NC0xMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/BS5BEUPSCSjqF3gTL/KaIDfACJ2dvb752VBFAk51NQ0GaB+P637ov9lJTl idIYKZjtdr3IeWbd4ljgFomNEOSuHw8CZCJ6sDbJ2ArWBTaW0bLKnbev1s3C7kGx 9EsNjNKC/vYYlxKJmyrV2Hf2jW/q4wKdWI8yf4pOAdO0keu8j6cSS+2IvZiUIqXr JvkfBRgfDp6dhLa3w+HITgEtSWki2b31LP26iti0+ot3EqdieghbANXrJdYZWzA6 GaF6pla4Ns/tjy1sfiK7hJ3uENiDLyb1CXXdSqfqeAWsuREl6y7c2mRVRKY6aXVY UmlObUuGy/cPs9RegoNAQ1x6twIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPataw8m SD7ZX1FkJ9cs7gixby2DMB8GA1UdIwQYMBaAFImhl9CXaJxuszhnqcyKzNf7Nk6J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTkxQi83RDBDMzdEMDYw NDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25HNnpPR2VweklyTTFfczJU b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lhR1gwSmRvbkc2ek9HZXB6SXJNMV9zMlRvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTkxQi83RDBDMzdEMDYwNDMxMUVDOEQzNzUxMEVDNEY5QUUwMi9pYUdYMEpkb25H NnpPR2VweklyTTFfczJUb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXlncjC1TwLEeO2bXHGg+bSsJIoFtPk0//fDTQ24xEEEzFdJMWynLoiDc+GOT dyM5omay3fGojIBYFqapA9KS9MxCQl0VyffRViv0LFwD+TVXDXYM2WcrfKfAyT/Y +yHTBC6VpDF7LXbWQxc+/sp5lxVbNN61u/algdf06fdyqAVz4Eagp4iMxbDGOflm XSIrveC7SIk5MIFvE9BSwyHFOR3xHo7bXSXLApMGYSuZsxtuKoFZRaTll3vQ5ffZ rU7knX1LpB8MNxZpC4i0aJg0ik9aqYrcBJ56h/tu15lGzxmHytwhIV2TnPX/Ilbn Kz9NZkwh6PUY5yIvCGKqgsbLfg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:52:44 2026 by rpki-client