$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: 22GGJKRMU35rMSYWJX/cpt7d2dBLtHjS+R/SDU1cfDE= Subject key identifier: 70:17:88:3F:CB:49:E2:61:1B:44:28:EB:2E:88:2A:28:DD:68:F1:6F Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 01BE Signing time: Sun 01 Mar 2026 04:36:24 +0000 Manifest this update: Sun 01 Mar 2026 04:36:23 +0000 Manifest next update: Sun 08 Mar 2026 04:36:23 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: x6aATKvDrrwdKdXxtwuZuEJ+i5WG0Ve2+e7qY72xfdo=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: /Y8xFoBMkV8uPy89Axb0Y8yaa9CAWLFHVU01k7AfOCU=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: olVXu+2blIiQ/nPaKs9oAvL7LtQPo2noHIFDjFZB8b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 04:36:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Mar 1 04:36:23 2026 GMT Not After : Mar 8 04:36:23 2026 GMT Subject: CN=69a3c248-9164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:1c:a9:71:50:13:10:f3:4d:6f:7c:d9:95: 88:77:70:b5:0f:e2:f8:10:ed:45:35:14:83:8e:24: 2b:e4:07:35:f8:03:76:64:68:f6:83:b2:78:d4:6f: ad:62:79:2e:c0:ec:a2:ef:8b:84:8a:7f:ec:b1:41: 05:ea:cd:e8:d7:28:b1:05:c0:5d:4d:ec:4f:00:18: 54:9e:8e:12:ef:4e:87:70:fb:16:87:76:d9:2c:8b: 07:96:c6:15:6e:cd:61:05:68:b6:ae:f7:17:04:ef: e9:77:c1:80:16:fa:ad:f5:e8:98:78:89:11:ce:c6: ae:e7:99:8b:1c:28:ab:20:d8:15:f9:d1:76:e0:00: 2a:8f:3e:36:b6:94:9e:59:ee:d9:95:37:96:bd:7e: cf:c7:e7:ba:63:3b:e5:ab:c6:fa:42:03:c5:0e:28: 51:cf:52:ca:27:0d:9a:e5:8e:ea:ee:0c:04:b8:93: 77:96:9c:6d:fa:b4:fb:fa:58:77:9b:d6:ce:0a:8f: 4a:38:f6:45:c1:46:d7:fb:26:db:23:02:39:89:d4: 60:9c:c2:0e:39:1f:f7:9c:49:75:22:a4:d3:41:ce: 14:17:af:96:f9:76:71:4d:a6:36:d0:02:e5:dd:96: 50:e1:ab:12:bf:af:ff:5b:59:5c:ac:64:c8:1b:4e: 19:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:17:88:3F:CB:49:E2:61:1B:44:28:EB:2E:88:2A:28:DD:68:F1:6F X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d0:ab:71:7d:05:b8:16:59:67:a7:1e:1b:ff:18:de:8c:55: c9:9c:9d:34:d4:29:c0:80:3a:ad:13:e4:8b:20:de:75:43:e1: c1:64:fc:f7:ae:27:de:51:b2:a7:da:54:aa:22:4d:fe:e7:ac: 59:06:8c:3f:d1:c5:e0:77:b6:1b:0e:3b:24:44:8d:7e:3e:07: f3:f2:4b:54:38:20:77:2d:0d:a1:67:2d:4a:70:63:8b:eb:7f: d0:ce:e7:5b:4d:23:30:c1:cb:95:a1:a3:5c:09:dc:46:8c:54: 26:9d:de:5d:3d:6b:72:40:84:fe:6a:33:ab:d0:fb:74:f5:e4: 28:47:01:70:34:50:4c:82:b3:9c:80:44:13:7b:cb:0c:d4:8d: d7:6c:96:61:83:dd:79:f5:d9:f3:07:f8:3a:4b:ec:8a:04:26: dd:37:ed:7a:2d:35:21:9c:a5:4f:95:58:50:c8:26:9c:6c:eb: 9a:01:f4:b7:f8:e7:79:f5:ce:60:fc:bc:55:55:8a:62:24:2c: 81:0d:85:32:41:2f:a5:55:9d:05:fd:00:f8:cd:1a:82:6d:ed: 8c:3b:9e:30:0a:96:4b:ad:ae:4b:0e:18:b6:e2:97:19:ee:2e: 91:51:56:1f:67:fa:ae:35:fc:b8:f0:0a:79:f0:f3:ce:3a:3c: 0f:ae:3b:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjYwMzAxMDQzNjIzWhcNMjYwMzA4MDQzNjIzWjAYMRYwFAYD VQQDDA02OWEzYzI0OC05MTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKYcqXFQExDzTW982ZWId3C1D+L4EO1FNRSDjiQr5Ac1+AN2ZGj2g7J41G+t YnkuwOyi74uEin/ssUEF6s3o1yixBcBdTexPABhUno4S706HcPsWh3bZLIsHlsYV bs1hBWi2rvcXBO/pd8GAFvqt9eiYeIkRzsau55mLHCirINgV+dF24AAqjz42tpSe We7ZlTeWvX7Px+e6Yzvlq8b6QgPFDihRz1LKJw2a5Y7q7gwEuJN3lpxt+rT7+lh3 m9bOCo9KOPZFwUbX+ybbIwI5idRgnMIOOR/3nEl1IqTTQc4UF6+W+XZxTaY20ALl 3ZZQ4asSv6//W1lcrGTIG04Z2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAXiD/L SeJhG0Qo6y6IKijdaPFvMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAldCrcX0FuBZZZ6ceG/8Y3oxVyZydNNQpwIA6rRPkiyDedUPhwWT8964n3lGy p9pUqiJN/uesWQaMP9HF4He2Gw47JESNfj4H8/JLVDggdy0NoWctSnBji+t/0M7n W00jMMHLlaGjXAncRoxUJp3eXT1rckCE/mozq9D7dPXkKEcBcDRQTIKznIBEE3vL DNSN12yWYYPdefXZ8wf4OkvsigQm3Tftei01IZylT5VYUMgmnGzrmgH0t/jnefXO YPy8VVWKYiQsgQ2FMkEvpVWdBf0A+M0agm3tjDueMAqWS62uSw4YtuKXGe4ukVFW H2f6rjX8uPAKefDzzjo8D647wg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:40:02 2026 by rpki-client