$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: Ze4oVAftVRjXtduJJevH0CijcZLnsP9jhsUVSbdo4S4= Subject key identifier: 24:FF:24:4A:17:AF:C1:07:AA:AC:FD:47:64:19:E4:40:B1:B4:42:FA Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 0228 Signing time: Wed 23 Sep 2026 02:37:50 +0000 Manifest this update: Wed 23 Sep 2026 02:37:50 +0000 Manifest next update: Wed 30 Sep 2026 02:37:50 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: gSkIafbYaIf8mDJGyzW/aqxxty3hXGrb51xaT/jFUFo=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 02:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Sep 23 02:37:50 2026 GMT Not After : Sep 30 02:37:50 2026 GMT Subject: CN=6ab33b7e-57b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:c8:5c:86:72:a6:22:b5:30:43:a6:dd:1c: 56:bd:4b:b3:01:05:5f:93:5b:42:d1:32:45:b4:57: 20:68:06:d6:8b:b1:e4:9b:5e:96:58:98:8b:98:db: 68:ec:43:af:2a:21:cf:9e:d6:52:93:84:a4:3a:0b: 4b:80:cd:02:57:32:30:dd:69:76:c1:0a:6f:91:b0: bf:7e:99:54:39:4a:a8:cd:73:20:94:c5:83:49:e5: 3e:fe:e4:80:d3:49:7e:9d:86:99:59:63:93:28:c6: 5e:bc:09:96:81:8c:e2:51:21:35:b3:a6:39:6c:3f: 1e:55:be:f7:fb:89:b4:7a:73:0e:87:b0:1c:9c:86: 29:4b:80:b8:cc:40:32:bc:f2:a8:c9:d6:29:c1:42: bb:8f:21:d0:ed:84:14:b6:04:30:db:a7:d4:b0:e9: 91:6d:48:09:59:f8:cb:a5:36:28:a4:92:a7:20:0b: 68:ee:df:91:25:37:5d:9a:fb:aa:9f:b4:7e:3a:2b: 47:83:ff:4b:d7:84:02:ef:4b:1f:f4:2a:06:3f:ce: e6:85:cb:79:bf:6d:27:f6:7b:bd:68:23:5e:8f:5e: df:ef:88:11:c1:cb:1f:14:e6:b3:dd:07:8c:be:04: e8:90:ef:de:82:df:fe:c9:0c:11:ea:47:e2:c0:77: 31:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:FF:24:4A:17:AF:C1:07:AA:AC:FD:47:64:19:E4:40:B1:B4:42:FA X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:88:1b:16:1b:23:49:e6:59:c8:c8:4f:ae:bb:9f:99:af:76: 52:7f:f5:9e:9e:57:3f:1b:4a:09:ef:1e:a0:fa:23:10:bb:cf: 69:37:a2:b9:d9:83:5e:53:c1:b2:04:8b:cf:70:9a:55:c2:0a: 3c:86:f1:3d:8a:e0:d7:d3:f7:1d:89:d5:80:4b:90:4a:a8:d0: 0d:e1:1e:65:77:c2:2f:ee:c8:72:fa:69:9c:0c:5b:3b:b7:c0: 41:17:f4:10:3e:89:70:90:14:02:2c:bb:ef:95:42:29:60:bd: ce:0d:bc:bb:3d:74:b7:2a:f1:c3:bf:c3:55:b6:ed:91:68:2d: 1f:df:99:1d:60:e5:a3:23:b6:8e:c5:57:88:39:d4:5d:c3:ec: 51:a6:c8:ef:c6:5c:1a:63:3f:8d:95:f3:9c:d9:eb:fd:f7:2d: 96:c8:30:c5:29:6e:b4:e2:1a:92:d4:f3:dd:a0:ad:9f:f1:cf: d0:55:d8:0a:fd:04:9e:f3:43:c1:e3:0f:b8:7d:8d:4b:ed:46: d8:f2:d3:1b:14:e0:d9:f3:92:00:93:46:11:cc:0f:3d:d0:49: 05:25:5d:4c:95:9e:73:92:7d:54:28:e0:28:42:f2:c8:90:5c: 53:d9:cc:d0:48:ae:00:cc:15:c5:9c:78:a0:bb:dd:01:61:20: 55:a2:48:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjYwOTIzMDIzNzUwWhcNMjYwOTMwMDIzNzUwWjAYMRYwFAYD VQQDEw02YWIzM2I3ZS01N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1OLIXIZypiK1MEOm3RxWvUuzAQVfk1tC0TJFtFcgaAbWi7Hkm16WWJiLmNto 7EOvKiHPntZSk4SkOgtLgM0CVzIw3Wl2wQpvkbC/fplUOUqozXMglMWDSeU+/uSA 00l+nYaZWWOTKMZevAmWgYziUSE1s6Y5bD8eVb73+4m0enMOh7AcnIYpS4C4zEAy vPKoydYpwUK7jyHQ7YQUtgQw26fUsOmRbUgJWfjLpTYopJKnIAto7t+RJTddmvuq n7R+OitHg/9L14QC70sf9CoGP87mhct5v20n9nu9aCNej17f74gRwcsfFOaz3QeM vgTokO/egt/+yQwR6kfiwHcxiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCT/JEoX r8EHqqz9R2QZ5ECxtEL6MB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIogbFhsjSeZZyMhPrrufma92Un/1np5XPxtKCe8eoPojELvPaTeiudmDXlPB sgSLz3CaVcIKPIbxPYrg19P3HYnVgEuQSqjQDeEeZXfCL+7IcvppnAxbO7fAQRf0 ED6JcJAUAiy775VCKWC9zg28uz10tyrxw7/DVbbtkWgtH9+ZHWDloyO2jsVXiDnU XcPsUabI78ZcGmM/jZXznNnr/fctlsgwxSlutOIaktTz3aCtn/HP0FXYCv0EnvND weMPuH2NS+1G2PLTGxTg2fOSAJNGEcwPPdBJBSVdTJWec5J9VCjgKELyyJBcU9nM 0EiuAMwVxZx4oLvdAWEgVaJIqw== -----END CERTIFICATE-----Generated at Fri Sep 25 00:21:51 2026 by rpki-client