$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: uVBmXb0jeWuj3Xb79MZH2j9kEvx7eLRRdtZ1HiTEX3U= Subject key identifier: 44:28:18:49:EA:19:5F:2A:43:09:C9:F3:9F:36:CC:70:0C:4E:11:0E Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 02BC Signing time: Wed 13 May 2026 01:34:31 +0000 Manifest this update: Wed 13 May 2026 01:34:30 +0000 Manifest next update: Wed 20 May 2026 01:34:30 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: U0OaTQztmy8Ry6UmixdL2SwpFDcovK064k2xPzBthTo=) 2: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: ldho/4dcBhvMSFZNQSotx0OQwqa0gAe9if7fkQE4P7M=) 3: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: zqFlnoiRJ96ipkTg+cLy44fvbC4N/hd7GgD9UC/f7t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 01:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: May 13 01:34:30 2026 GMT Not After : May 20 01:34:30 2026 GMT Subject: CN=6a03d527-aec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c1:43:17:c3:a5:e1:5c:5e:90:44:64:a5:eb: f4:cc:86:84:e5:a7:aa:b1:6a:af:b4:20:cb:0f:c0: 6a:4a:30:c8:08:db:7d:09:be:e9:eb:d3:0d:66:4a: b3:a0:0f:19:e8:8b:53:59:86:f0:f5:59:d5:40:29: 48:2f:c5:e4:9a:d1:3b:01:1c:57:8a:18:3d:e0:5b: 97:3c:11:f6:73:35:44:de:7e:2e:c5:f7:4e:ef:ff: 93:12:d5:39:20:c9:50:26:2b:e3:62:f3:69:21:6b: 98:98:f5:33:64:40:75:cc:d4:ce:48:aa:e2:53:ba: ac:5a:4e:32:be:3c:b3:f8:c5:ba:41:d5:16:a9:1a: 5f:d7:bb:1d:de:52:cf:2a:88:c1:0e:4b:67:44:f3: 7b:49:d7:7f:37:23:a0:fc:78:6f:6b:6b:e9:54:e8: 02:f9:5a:83:a2:b6:b9:b8:68:53:b1:13:78:0e:fa: c5:e5:44:1c:13:98:38:28:81:a1:9d:09:73:00:dc: db:e9:ce:3e:1a:55:82:89:85:c2:a2:82:47:ea:86: 79:af:8d:ec:97:c1:1d:6c:63:54:c8:06:12:5b:8e: 4e:ce:13:f6:ef:eb:93:2a:61:66:7f:06:1c:ef:77: ee:f7:ad:66:6c:68:66:f9:a0:92:fe:30:a4:55:07: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:28:18:49:EA:19:5F:2A:43:09:C9:F3:9F:36:CC:70:0C:4E:11:0E X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:bf:e0:38:4b:20:4d:8c:85:95:7b:f8:d2:50:8e:d4:e5:fd: 39:b2:58:ef:45:b7:88:98:80:36:34:67:60:d6:13:6e:a1:8c: a2:43:26:6c:5e:55:d8:d2:d1:05:87:a4:c3:1c:f9:c4:6e:ca: e0:68:39:0c:dd:a9:f6:b8:39:1f:e7:86:f6:28:b0:c3:98:fe: a3:b6:0b:0c:67:18:00:1d:e3:e0:04:52:e1:10:8e:8d:16:9b: 3b:08:9e:b6:c5:97:dd:34:d4:92:3f:cc:1a:c2:1c:dd:c8:79: 40:96:8a:81:9a:d7:a7:e9:dc:28:09:32:f9:14:e2:ff:ba:4e: d0:f3:61:55:94:42:a7:3c:a1:86:af:f0:27:60:bc:1c:d1:44: d7:ab:25:48:0d:b5:a1:bf:2e:05:06:27:a4:26:e1:57:a2:7d: 0c:e2:86:ec:dd:0a:2a:f5:ff:c0:df:9d:67:55:a6:a1:56:4d: 9b:c5:3f:2e:c2:b0:82:46:b3:48:7d:5d:44:57:ce:0c:bb:67: d3:41:b6:5a:8d:b9:84:b7:2c:58:f6:bd:46:d6:e5:65:db:e5: 43:a1:9d:76:b8:33:cc:9a:0e:47:e2:d8:52:22:90:f4:ab:df: 80:7a:03:24:5b:a1:73:3c:5b:ea:c3:96:64:e9:9a:56:17:bd: cb:f1:5a:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYwNTEzMDEzNDMwWhcNMjYwNTIwMDEzNDMwWjAYMRYwFAYD VQQDEw02YTAzZDUyNy1hZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcFDF8Ol4VxekERkpev0zIaE5aeqsWqvtCDLD8BqSjDICNt9Cb7p69MNZkqz oA8Z6ItTWYbw9VnVQClIL8XkmtE7ARxXihg94FuXPBH2czVE3n4uxfdO7/+TEtU5 IMlQJivjYvNpIWuYmPUzZEB1zNTOSKriU7qsWk4yvjyz+MW6QdUWqRpf17sd3lLP KojBDktnRPN7Sdd/NyOg/Hhva2vpVOgC+VqDora5uGhTsRN4DvrF5UQcE5g4KIGh nQlzANzb6c4+GlWCiYXCooJH6oZ5r43sl8EdbGNUyAYSW45OzhP27+uTKmFmfwYc 73fu961mbGhm+aCS/jCkVQch/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEQoGEnq GV8qQwnJ8582zHAMThEOMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY7/gOEsgTYyFlXv40lCO1OX9ObJY70W3iJiANjRnYNYTbqGMokMmbF5V2NLR BYekwxz5xG7K4Gg5DN2p9rg5H+eG9iiww5j+o7YLDGcYAB3j4ARS4RCOjRabOwie tsWX3TTUkj/MGsIc3ch5QJaKgZrXp+ncKAky+RTi/7pO0PNhVZRCpzyhhq/wJ2C8 HNFE16slSA21ob8uBQYnpCbhV6J9DOKG7N0KKvX/wN+dZ1WmoVZNm8U/LsKwgkaz SH1dRFfODLtn00G2Wo25hLcsWPa9RtblZdvlQ6GddrgzzJoOR+LYUiKQ9KvfgHoD JFuhczxb6sOWZOmaVhe9y/FaSQ== -----END CERTIFICATE-----Generated at Wed May 13 05:35:52 2026 by rpki-client