$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: rp6SsLb6uPSWzuuZwJoYmJZ1pcIjY0QhUhkQE7prf+4= Subject key identifier: 45:E4:2E:21:32:30:D5:E6:24:2E:FB:F9:43:A9:0C:01:CC:E1:97:6E Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0312 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 02FF Signing time: Wed 23 Sep 2026 00:46:45 +0000 Manifest this update: Wed 23 Sep 2026 00:46:45 +0000 Manifest next update: Wed 30 Sep 2026 00:46:45 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: VhN3tDrhs+i5wltzRD8fK8Gf20RrDIO0sWCvJBjtdoo=) 2: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: zqFlnoiRJ96ipkTg+cLy44fvbC4N/hd7GgD9UC/f7t4=) 3: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: ldho/4dcBhvMSFZNQSotx0OQwqa0gAe9if7fkQE4P7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 00:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 786 (0x312) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Sep 23 00:46:45 2026 GMT Not After : Sep 30 00:46:45 2026 GMT Subject: CN=6ab32175-eb3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:e6:d6:18:e6:e1:16:07:be:b5:87:c1:4e: 0d:e7:cf:d4:c1:d2:9c:ec:dc:b8:c4:43:5f:99:4b: a0:30:8e:31:4d:66:1a:2d:34:38:28:c0:d8:a6:7a: 8b:13:24:a1:8d:5a:f0:b5:17:e2:e5:53:88:47:03: aa:44:8b:51:a7:61:38:69:c2:f1:10:83:64:f8:b7: 4d:56:8d:03:2b:c0:1b:0e:ad:8d:5d:c2:1c:80:e5: 7f:fb:af:f5:30:e6:f5:d8:d4:9b:b1:5e:03:af:6e: ea:0e:de:40:17:b4:ac:4c:d3:fd:cb:e2:47:42:90: fd:b4:45:0d:f5:0f:51:6f:4b:00:a2:68:14:7a:1f: 22:1a:85:58:1f:36:67:c9:95:40:b3:df:c3:d4:ea: dd:c8:aa:68:04:cc:46:fc:83:fe:46:b1:97:88:7e: b3:8c:be:cf:1c:2f:c3:1b:5c:0f:df:d7:2a:ee:60: ee:b8:99:dc:7f:f6:15:bb:28:64:94:0d:a2:55:3a: e7:0d:d6:e0:45:d0:2a:48:44:32:cd:a9:08:bb:10: 6e:98:aa:3a:10:06:f1:14:98:5f:76:b7:e2:cf:24: 14:a7:52:3a:06:d2:3c:f9:64:b2:14:f3:3b:d3:af: be:74:8c:84:b2:8b:3d:66:b9:1e:1a:3d:bd:ac:65: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E4:2E:21:32:30:D5:E6:24:2E:FB:F9:43:A9:0C:01:CC:E1:97:6E X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2f:d6:87:67:cb:7a:8a:11:2b:2f:00:44:6f:21:d5:e9:b3: 4a:19:86:a2:c8:ce:c8:eb:97:da:fb:6c:d2:1b:34:fb:37:39: 67:7f:3b:d1:23:3f:6e:1c:91:c6:8f:74:bc:de:57:67:c0:f0: 3b:1e:4f:c2:b6:d3:cc:7b:b8:bf:9b:43:3f:23:dd:68:e7:8d: 5e:33:03:ae:4e:7c:96:0e:0b:80:06:25:ec:89:c1:05:fe:99: 38:2d:e6:61:fa:8a:b5:fe:bb:06:49:91:73:82:a4:7f:2b:b4: 15:e4:b8:21:ec:fd:b5:55:52:68:2f:d0:74:df:b2:5a:c0:be: bf:d1:81:26:88:95:5d:47:6f:94:49:3a:ce:c6:b2:8e:b4:fc: b8:58:1a:8c:72:52:28:2e:e7:29:3e:cb:21:94:48:64:44:6d: 60:45:17:ca:54:79:de:8d:5f:c0:e6:04:25:34:02:d9:7a:ef: f0:d1:ba:6b:30:72:b2:c0:6c:5d:c9:59:ac:a2:a5:64:e5:27: 47:ed:23:00:37:98:42:2b:6e:00:7e:31:cd:eb:3e:80:63:b0: 90:72:75:bd:81:a8:fe:db:98:53:61:57:66:7f:e4:6f:ce:ed: 4a:67:33:72:d9:f6:52:81:c2:6c:df:24:1b:ba:f3:6c:92:d7: d6:33:8b:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYwOTIzMDA0NjQ1WhcNMjYwOTMwMDA0NjQ1WjAYMRYwFAYD VQQDEw02YWIzMjE3NS1lYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZjm1hjm4RYHvrWHwU4N58/UwdKc7Ny4xENfmUugMI4xTWYaLTQ4KMDYpnqL EyShjVrwtRfi5VOIRwOqRItRp2E4acLxEINk+LdNVo0DK8AbDq2NXcIcgOV/+6/1 MOb12NSbsV4Dr27qDt5AF7SsTNP9y+JHQpD9tEUN9Q9Rb0sAomgUeh8iGoVYHzZn yZVAs9/D1OrdyKpoBMxG/IP+RrGXiH6zjL7PHC/DG1wP39cq7mDuuJncf/YVuyhk lA2iVTrnDdbgRdAqSEQyzakIuxBumKo6EAbxFJhfdrfizyQUp1I6BtI8+WSyFPM7 06++dIyEsos9ZrkeGj29rGUZmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEXkLiEy MNXmJC77+UOpDAHM4ZduMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMi/Wh2fLeooRKy8ARG8h1emzShmGosjOyOuX2vts0hs0+zc5Z3870SM/bhyR xo90vN5XZ8DwOx5PwrbTzHu4v5tDPyPdaOeNXjMDrk58lg4LgAYl7InBBf6ZOC3m YfqKtf67BkmRc4Kkfyu0FeS4Iez9tVVSaC/QdN+yWsC+v9GBJoiVXUdvlEk6zsay jrT8uFgajHJSKC7nKT7LIZRIZERtYEUXylR53o1fwOYEJTQC2Xrv8NG6azByssBs XclZrKKlZOUnR+0jADeYQituAH4xzes+gGOwkHJ1vYGo/tuYU2FXZn/kb87tSmcz ctn2UoHCbN8kG7rzbJLX1jOLSw== -----END CERTIFICATE-----Generated at Wed Sep 23 23:20:55 2026 by rpki-client