$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: e/89FIouZz9aQZh/ACdI5fo1G0oqMLyswevX4urs7c0= Subject key identifier: D6:38:70:57:92:5E:39:7C:8E:63:93:F8:63:D9:BE:82:C4:B5:B4:28 Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0313 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 0300 Signing time: Fri 25 Sep 2026 00:58:51 +0000 Manifest this update: Fri 25 Sep 2026 00:58:51 +0000 Manifest next update: Fri 02 Oct 2026 00:58:51 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: DqcDVv+0KOyJ55r2SWxq3zkOsFF1+G5/hKyBCmeyTQQ=) 2: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: zqFlnoiRJ96ipkTg+cLy44fvbC4N/hd7GgD9UC/f7t4=) 3: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: ldho/4dcBhvMSFZNQSotx0OQwqa0gAe9if7fkQE4P7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 787 (0x313) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Sep 25 00:58:51 2026 GMT Not After : Oct 2 00:58:51 2026 GMT Subject: CN=6ab5c74b-83af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:d6:6c:d3:79:77:95:5b:a9:30:3a:20:8a: d1:60:58:9a:62:03:bb:4c:9a:26:f2:09:a3:9c:e6: bb:80:22:e3:3c:4b:31:e5:d6:20:1f:6e:c5:2e:18: 3c:45:b5:13:1b:f8:97:35:bc:bb:db:88:76:73:21: 9d:88:64:7e:aa:af:7c:2b:4b:99:dc:e1:d9:ed:34: 8e:72:0b:21:43:7b:fa:61:f4:ca:56:d8:3e:fd:69: c6:7b:26:23:90:0e:79:6e:db:e2:41:20:25:f6:18: 4f:17:44:e0:14:b4:70:6e:35:79:f7:33:f4:2f:39: 6e:26:1c:e3:6f:33:36:22:8b:6c:33:51:01:88:e3: 32:1d:2b:fe:53:fd:53:1d:80:21:41:0a:8b:f1:c0: 56:fb:c6:59:78:42:ca:86:d6:f6:74:95:9a:4f:d0: e7:8c:6f:c7:95:75:14:9b:33:b4:ea:90:3d:9f:58: 33:fd:69:71:5b:39:33:16:fa:0c:7d:e7:9b:0d:ad: 06:89:73:60:5f:03:b6:90:10:61:4f:3b:3b:5a:16: cc:43:20:dd:16:3f:1b:be:fd:c8:1f:71:1b:29:ef: 50:fb:da:7b:22:87:68:d0:a8:9f:7f:19:c2:d5:2f: 97:b3:c4:e9:03:a0:7a:e6:55:3e:e1:b6:b9:c5:7c: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:38:70:57:92:5E:39:7C:8E:63:93:F8:63:D9:BE:82:C4:B5:B4:28 X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0a:e6:fb:69:97:4e:03:ae:66:af:75:87:14:cb:56:46:18: 0b:fd:b9:b4:4e:3d:57:57:6c:a3:09:5d:ba:c5:8c:bb:2c:3c: c5:f8:6b:2b:f0:1e:ce:35:6f:3c:c2:38:16:aa:b5:6b:16:53: 5e:83:89:9c:b7:17:ad:1d:ee:1c:78:02:41:d9:1b:4b:e3:d2: 16:cf:17:45:8d:17:68:3b:9c:ca:99:93:80:16:61:2f:38:58: e8:3c:89:95:bb:93:82:eb:70:4f:46:6f:a6:58:2a:9a:9a:36: 61:75:1a:48:a1:eb:d6:6c:0b:8d:6c:c5:da:4d:2f:24:34:ca: 4f:f1:41:02:03:99:a8:a0:29:0a:bd:20:7a:da:56:15:44:b0: 9d:14:e2:cc:72:d0:05:0a:7c:7d:4e:17:88:51:17:fd:7e:9c: c9:a0:8e:2a:fc:d2:d5:ca:68:41:a6:ed:09:35:5f:76:f9:db: 8a:71:9e:e7:d9:fc:9f:84:63:38:b9:ee:97:7f:45:28:21:2a: de:ff:95:29:58:86:66:4e:72:da:8d:e7:67:33:ba:28:f7:e5: e2:9a:e6:48:61:62:c3:9c:e8:10:fb:ae:dc:0c:02:c5:ec:3f: c9:15:79:e6:11:9c:21:af:57:23:b4:7b:8a:2b:cb:91:2e:4e: 38:c3:40:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYwOTI1MDA1ODUxWhcNMjYxMDAyMDA1ODUxWjAYMRYwFAYD VQQDEw02YWI1Yzc0Yi04M2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsafWbNN5d5VbqTA6IIrRYFiaYgO7TJom8gmjnOa7gCLjPEsx5dYgH27FLhg8 RbUTG/iXNby724h2cyGdiGR+qq98K0uZ3OHZ7TSOcgshQ3v6YfTKVtg+/WnGeyYj kA55btviQSAl9hhPF0TgFLRwbjV59zP0LzluJhzjbzM2IotsM1EBiOMyHSv+U/1T HYAhQQqL8cBW+8ZZeELKhtb2dJWaT9DnjG/HlXUUmzO06pA9n1gz/WlxWzkzFvoM feebDa0GiXNgXwO2kBBhTzs7WhbMQyDdFj8bvv3IH3EbKe9Q+9p7Iodo0KiffxnC 1S+Xs8TpA6B65lU+4ba5xXy00wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNY4cFeS Xjl8jmOT+GPZvoLEtbQoMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlwrm+2mXTgOuZq91hxTLVkYYC/25tE49V1dsowldusWMuyw8xfhrK/AezjVv PMI4Fqq1axZTXoOJnLcXrR3uHHgCQdkbS+PSFs8XRY0XaDucypmTgBZhLzhY6DyJ lbuTgutwT0Zvplgqmpo2YXUaSKHr1mwLjWzF2k0vJDTKT/FBAgOZqKApCr0getpW FUSwnRTizHLQBQp8fU4XiFEX/X6cyaCOKvzS1cpoQabtCTVfdvnbinGe59n8n4Rj OLnul39FKCEq3v+VKViGZk5y2o3nZzO6KPfl4prmSGFiw5zoEPuu3AwCxew/yRV5 5hGcIa9XI7R7iivLkS5OOMNA2g== -----END CERTIFICATE-----Generated at Fri Sep 25 17:46:37 2026 by rpki-client