$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: PQbvZ/okf/LvgFTO1rH/miRmoa0JuyA26D2ULDI5oD8= Subject key identifier: 57:E5:BF:CA:EF:86:05:7C:5D:76:71:09:0E:E1:38:F9:88:05:67:C5 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 01D8 Signing time: Fri 17 Apr 2026 03:18:09 +0000 Manifest this update: Fri 17 Apr 2026 03:18:09 +0000 Manifest next update: Fri 24 Apr 2026 03:18:09 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: tIMMgckbSUzHEM3T2C5ZEI2M4sqq7hAmrTfNDCF/lBo=) 2: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=) 3: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Apr 17 03:18:09 2026 GMT Not After : Apr 24 03:18:09 2026 GMT Subject: CN=69e1a671-7f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:9e:e1:92:bd:53:60:0f:b5:91:e1:2e:be:67: 0f:9e:1f:5a:08:34:b0:9b:56:ab:56:05:d2:ff:95: e5:64:b9:d3:55:16:63:87:74:77:06:ed:0f:1a:61: 82:56:cf:77:14:ba:b8:29:1c:c7:08:f0:7b:53:9a: e3:b7:9d:9c:ce:e3:fa:9f:88:d4:4a:14:0e:c1:26: 41:39:6b:4b:b3:1e:8d:97:2a:5f:bb:c3:63:8d:bf: 3b:b3:b8:52:db:2c:31:f2:af:d6:94:73:66:60:99: 8e:9c:0c:5b:63:ce:16:d0:ce:9e:06:5b:f7:9c:03: fd:c9:d7:7a:10:d0:f2:a9:a0:d4:bb:23:79:39:b3: c9:d2:86:ec:af:45:12:f9:63:83:1c:a2:e5:2e:73: 44:1e:00:1b:4d:61:c2:84:1a:fe:ed:92:8b:02:ba: be:ba:d4:9a:12:69:d6:17:dd:a2:4d:b8:f7:36:bd: 41:79:e7:95:de:b9:62:00:14:6a:f5:a9:04:0a:d9: fb:95:16:ee:51:a0:45:57:44:f8:9c:59:5a:8d:9d: a7:b2:ee:a2:c7:4a:9b:b9:e7:1e:c2:99:06:8f:01: 8c:c4:2f:c0:61:15:df:d2:5d:81:bb:80:67:f5:12: 66:e9:c9:b8:46:1e:72:2a:cb:c2:e0:05:44:65:1a: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E5:BF:CA:EF:86:05:7C:5D:76:71:09:0E:E1:38:F9:88:05:67:C5 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:32:44:ef:b8:38:c5:1d:73:a2:57:80:c9:90:f9:a4:7e:a6: f2:64:b7:52:e2:52:2a:3b:d8:bd:6e:58:63:62:fc:e7:87:64: 09:1b:09:e1:3b:fd:a0:97:8d:15:0e:7b:bf:ca:f8:68:de:ee: aa:82:75:64:45:c3:f0:cc:b1:23:4f:f4:ed:7d:d2:1e:1b:7c: 7c:e0:5e:99:a3:0d:3d:c2:2a:f4:7e:8e:aa:3b:ad:99:90:88: 10:94:9b:16:db:22:4d:90:d5:35:bd:fc:40:06:bd:2e:f5:96: 5b:bc:0e:1e:7a:1f:0f:d6:5b:12:02:91:55:78:47:2f:2f:47: d3:48:de:fd:ae:d0:d3:42:a3:50:b3:ea:6f:3f:37:bf:c9:ff: 86:a2:0c:bf:4a:c8:2f:bb:56:80:72:bb:52:11:f0:b1:ae:8e: 82:e2:5e:04:db:c2:75:46:b7:e0:74:95:9d:e6:2d:19:45:92: 52:88:d4:81:6d:66:e2:ce:c4:de:f1:5c:06:e6:ae:f8:7b:0a: de:10:f9:8a:74:e7:81:22:84:ed:32:04:a2:d3:f2:35:44:bf: b5:59:df:b2:9c:ca:a3:05:e0:44:56:7e:e8:f3:c8:0d:bd:b1: 6b:d1:ac:b1:4f:09:ac:f2:b5:42:f7:94:e6:23:e4:00:c8:9e: 8a:e4:8c:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjYwNDE3MDMxODA5WhcNMjYwNDI0MDMxODA5WjAYMRYwFAYD VQQDEw02OWUxYTY3MS03ZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkJ7hkr1TYA+1keEuvmcPnh9aCDSwm1arVgXS/5XlZLnTVRZjh3R3Bu0PGmGC Vs93FLq4KRzHCPB7U5rjt52czuP6n4jUShQOwSZBOWtLsx6Nlypfu8Njjb87s7hS 2ywx8q/WlHNmYJmOnAxbY84W0M6eBlv3nAP9ydd6ENDyqaDUuyN5ObPJ0obsr0US +WODHKLlLnNEHgAbTWHChBr+7ZKLArq+utSaEmnWF92iTbj3Nr1BeeeV3rliABRq 9akECtn7lRbuUaBFV0T4nFlajZ2nsu6ix0qbuecewpkGjwGMxC/AYRXf0l2Bu4Bn 9RJm6cm4Rh5yKsvC4AVEZRqH7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFflv8rv hgV8XXZxCQ7hOPmIBWfFMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqjJE77g4xR1zoleAyZD5pH6m8mS3UuJSKjvYvW5YY2L854dkCRsJ4Tv9oJeN FQ57v8r4aN7uqoJ1ZEXD8MyxI0/07X3SHht8fOBemaMNPcIq9H6OqjutmZCIEJSb FtsiTZDVNb38QAa9LvWWW7wOHnofD9ZbEgKRVXhHLy9H00je/a7Q00KjULPqbz83 v8n/hqIMv0rIL7tWgHK7UhHwsa6OguJeBNvCdUa34HSVneYtGUWSUojUgW1m4s7E 3vFcBuau+HsK3hD5inTngSKE7TIEotPyNUS/tVnfspzKowXgRFZ+6PPIDb2xa9Gs sU8JrPK1QveU5iPkAMieiuSM1g== -----END CERTIFICATE-----Generated at Fri Apr 17 13:15:22 2026 by rpki-client