$ rpki-client -vvvf rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft File: IokuPYxEn1qaxkz8tjS1n2xTE2s.mft (raw, json) Hash identifier: 7/RmRqsduD+900gDZO3ZK+OkBgkp28+KzYEkVPQAym4= Subject key identifier: 1A:FB:9D:A2:C7:02:45:4E:0D:BC:5E:7E:3A:79:86:42:3D:DC:D3:EC Authority key identifier: 22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B Certificate issuer: /CN=A917BB59/serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Certificate serial: 08AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft Manifest number: 088F Signing time: Sat 10 Oct 2026 20:49:00 +0000 Manifest this update: Sat 10 Oct 2026 20:48:59 +0000 Manifest next update: Sat 17 Oct 2026 20:48:59 +0000 Files and hashes: 1: IokuPYxEn1qaxkz8tjS1n2xTE2s.crl (hash: d4R+8DVPwy4sQHTBTqTEtMRohYYj0KSP2BlqmyzLw2I=) 2: 8FEA9564C2AE11EB94777A0CC4F9AE02.roa (hash: 9HLPq0CQbV7BB1rdV8LiO+yFSw/cEBXh7bi0v397em8=) 3: 7BF36C680DCB11EBA17D032EC4F9AE02.roa (hash: 0vX93cCOuqbwpgu8S0Bk/GjET88268IQ9XQloq1HMHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 20:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2218 (0x8aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BB59, serialNumber=22892E3D8C449F5A9AC64CFCB634B59F6C53136B Validity Not Before: Oct 10 20:48:59 2026 GMT Not After : Oct 17 20:48:59 2026 GMT Subject: CN=6acaa4bc-05c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:84:e8:57:12:96:d9:6f:bb:59:46:e4:9e: a0:0f:8c:f0:2b:39:1a:f2:28:a6:d3:6d:37:eb:05: 2e:2f:7e:46:17:2b:b5:11:49:cf:59:62:a9:9d:cc: a6:18:3f:f1:0f:a5:d2:ad:4a:9b:14:6e:0c:7e:5e: 82:b9:92:c6:3c:81:4d:e5:ac:c0:3e:3a:bf:91:34: 5e:3a:16:c1:8d:bd:85:ec:ca:87:6e:1a:4a:6d:0e: e7:d9:ce:fd:e2:f8:47:13:37:40:41:58:e3:79:48: ab:7d:be:b6:b8:93:e6:23:1b:dd:4d:69:89:0b:f0: d9:df:0c:44:e4:fc:9a:63:d2:15:fa:1e:02:2f:85: 3e:eb:1c:d8:91:b8:13:0d:a4:3f:0c:6a:6c:94:13: 72:a6:c1:9e:e4:e6:ca:c9:d2:8f:4b:b4:90:c2:f8: bf:ad:08:61:fb:57:77:19:49:ae:9d:5a:f2:81:b4: 84:db:2f:a9:3b:83:41:e0:25:14:a5:86:49:a5:f9: 41:9f:8e:86:0b:b2:1d:48:af:78:4f:ac:d7:25:bc: 1e:d0:63:ca:09:17:20:81:bb:1b:58:7d:00:66:93: ef:73:71:67:f0:50:73:37:94:e3:cc:38:23:11:74: 57:7f:6c:5b:9c:56:5b:21:0a:25:ac:39:0c:32:5e: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FB:9D:A2:C7:02:45:4E:0D:BC:5E:7E:3A:79:86:42:3D:DC:D3:EC X509v3 Authority Key Identifier: keyid:22:89:2E:3D:8C:44:9F:5A:9A:C6:4C:FC:B6:34:B5:9F:6C:53:13:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IokuPYxEn1qaxkz8tjS1n2xTE2s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB59/B68B90D60DCA11EBA7C2E22DC4F9AE02/IokuPYxEn1qaxkz8tjS1n2xTE2s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:29:da:b5:1f:98:6d:95:d9:74:ca:44:49:33:43:60:63:39: 5d:b3:f7:c7:63:a9:18:be:48:e2:fe:08:3e:dd:d6:ee:c8:b0: de:fc:ce:74:fe:5d:01:05:af:b5:05:a8:be:35:4d:c8:ee:d0: a0:d3:68:b5:64:a1:88:d9:fa:18:dc:b2:37:3b:63:21:b4:7d: 91:a5:75:f3:46:94:b2:b8:9b:93:bb:ab:f7:1e:fd:65:37:9c: f5:16:28:e4:b1:f8:0c:ae:5e:7a:56:63:85:c9:39:31:d4:09: 03:a3:6d:91:91:0d:22:33:c3:fb:b1:10:03:99:f5:8d:c9:65: 67:b1:03:a9:6e:a5:1c:53:39:d6:08:e6:49:56:e0:64:bc:6d: 69:d1:83:12:18:f3:94:b0:61:8d:2a:5a:5b:96:1d:06:ac:0e: e1:16:69:1c:c0:45:d9:0b:05:be:eb:f2:13:ff:d6:35:64:56: 3a:bb:1c:a9:be:01:ee:73:2f:28:f1:bd:9e:c3:f2:2e:a1:cb: 6d:b7:3d:46:8c:88:f3:55:a6:36:d6:b0:ee:81:d1:80:f2:e4: 4a:00:5e:b4:4f:c1:4f:b5:4d:a5:cd:e7:b8:c5:dd:3f:59:d4: d5:97:57:f2:d3:79:ca:f8:d9:17:d0:7c:f0:83:af:96:4b:76: b7:85:58:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCNTkxMTAvBgNVBAUTKDIyODkyRTNEOEM0NDlGNUE5QUM2NENGQ0I2MzRCNTlG NkM1MzEzNkIwHhcNMjYxMDEwMjA0ODU5WhcNMjYxMDE3MjA0ODU5WjAYMRYwFAYD VQQDEw02YWNhYTRiYy0wNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHaE6FcSltlvu1lG5J6gD4zwKzka8iim02036wUuL35GFyu1EUnPWWKpncym GD/xD6XSrUqbFG4Mfl6CuZLGPIFN5azAPjq/kTReOhbBjb2F7MqHbhpKbQ7n2c79 4vhHEzdAQVjjeUirfb62uJPmIxvdTWmJC/DZ3wxE5PyaY9IV+h4CL4U+6xzYkbgT DaQ/DGpslBNypsGe5ObKydKPS7SQwvi/rQhh+1d3GUmunVrygbSE2y+pO4NB4CUU pYZJpflBn46GC7IdSK94T6zXJbwe0GPKCRcggbsbWH0AZpPvc3Fn8FBzN5TjzDgj EXRXf2xbnFZbIQolrDkMMl6H2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBr7naLH AkVODbxefjp5hkI93NPsMB8GA1UdIwQYMBaAFCKJLj2MRJ9amsZM/LY0tZ9sUxNr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkI1OS9CNjhCOTBENjBE Q0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4xcWF4a3o4dGpTMW4yeFRF MnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lva3VQWXhFbjFxYXhrejh0alMxbjJ4VEUycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkI1OS9CNjhCOTBENjBEQ0ExMUVCQTdDMkUyMkRDNEY5QUUwMi9Jb2t1UFl4RW4x cWF4a3o4dGpTMW4yeFRFMnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABinatR+YbZXZdMpESTNDYGM5XbP3x2OpGL5I4v4IPt3W7siw3vzOdP5dAQWv tQWovjVNyO7QoNNotWShiNn6GNyyNztjIbR9kaV180aUsribk7ur9x79ZTec9RYo 5LH4DK5eelZjhck5MdQJA6NtkZENIjPD+7EQA5n1jcllZ7EDqW6lHFM51gjmSVbg ZLxtadGDEhjzlLBhjSpaW5YdBqwO4RZpHMBF2QsFvuvyE//WNWRWOrscqb4B7nMv KPG9nsPyLqHLbbc9RoyI81WmNtaw7oHRgPLkSgBetE/BT7VNpc3nuMXdP1nU1ZdX 8tN5yvjZF9B88IOvlkt2t4VYpA== -----END CERTIFICATE-----Generated at Sun Oct 11 10:20:57 2026 by rpki-client