$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: Qx7aNHUeCxfcFYZNPRtGLpR6HZh6+/1L20F2nJjySb8= Subject key identifier: 33:FA:FB:ED:EB:E1:7E:6D:72:88:4B:A0:8F:A2:B3:D4:CF:36:73:0A Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 02A3 Signing time: Wed 25 Mar 2026 01:09:33 +0000 Manifest this update: Wed 25 Mar 2026 01:09:32 +0000 Manifest next update: Wed 01 Apr 2026 01:09:32 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: /s7VutjHmpXqXNbLMc9PnNcFILCD0BnDLugf1QNlwZw=) 2: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: zqFlnoiRJ96ipkTg+cLy44fvbC4N/hd7GgD9UC/f7t4=) 3: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: ldho/4dcBhvMSFZNQSotx0OQwqa0gAe9if7fkQE4P7M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Mar 25 01:09:32 2026 GMT Not After : Apr 1 01:09:32 2026 GMT Subject: CN=69c335cd-e498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:64:f9:23:22:1c:64:d8:6a:cc:2d:df:f1: e6:80:a0:b5:c2:15:db:81:f8:9b:6c:f5:30:b7:9f: 91:c3:7b:52:d5:24:12:d1:9d:1e:b2:3b:1b:c5:37: cd:25:b3:a4:28:44:de:13:7f:88:56:29:d1:48:d2: 2a:75:6a:0c:3d:d9:ed:e8:2a:af:42:bc:bc:56:32: ca:55:01:60:aa:e1:10:19:73:e6:87:3b:15:49:38: b8:fc:05:63:06:8c:9a:0b:8a:85:43:3f:c8:60:1f: 5c:d8:35:c3:6b:bf:47:72:65:3a:e2:68:60:69:bb: c6:9d:6e:f8:56:62:50:6b:2d:d9:b3:a5:83:66:ec: fb:e2:80:df:59:d7:cc:63:58:a2:03:ea:6c:a3:01: d3:e6:87:6b:c1:38:8b:da:f5:d0:e5:89:9f:e9:94: b9:1a:91:0d:9c:b2:2b:60:4a:86:6a:bf:c6:13:f0: ad:98:32:00:bb:4b:1b:88:b0:89:1d:62:9a:ed:46: 35:47:a4:53:dc:ed:6d:e2:57:a1:d0:91:b2:6a:2c: aa:a1:67:aa:68:4b:7f:5e:c1:fc:28:6e:81:d1:fd: 4c:ec:c6:82:9e:95:9b:13:62:74:90:34:8f:2b:58: a2:fe:2d:30:39:e4:c5:a5:8b:72:58:f6:b9:75:63: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FA:FB:ED:EB:E1:7E:6D:72:88:4B:A0:8F:A2:B3:D4:CF:36:73:0A X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4c:fa:0a:56:01:4b:b4:cc:d8:0d:53:d9:07:7f:31:27:ea: 06:0b:fd:40:4d:b2:0a:10:84:dd:b5:79:86:1e:63:a1:03:ec: 6e:5f:54:7c:40:32:21:4a:90:ec:5a:bb:2f:91:1d:e0:c5:87: d9:d1:8e:87:8b:4a:4d:de:69:f3:b6:25:2e:e2:6c:c4:04:f7: 69:87:f2:53:2b:88:3a:c7:1a:6f:52:a9:55:bd:6a:7a:9f:75: cc:8f:23:91:98:fa:a5:da:d9:c6:58:f6:f4:fd:13:0c:64:ef: ce:8d:90:68:b7:7c:ca:cc:57:1e:c6:13:84:e5:d7:b9:8c:ac: 8e:21:f3:72:5c:7c:4d:62:35:3d:26:4d:dc:00:1d:4e:d9:9e: 88:36:22:da:f5:1b:3a:93:3e:bb:7e:ad:81:4b:a2:14:2a:16: 0b:f9:da:b6:f5:ee:0f:e9:7d:1b:86:f8:95:d0:8f:9f:16:d0: 27:00:f5:91:a6:b4:f0:a6:60:ee:6c:b0:e6:ba:a1:07:a7:2c: 10:6e:98:7a:5d:e0:eb:fa:e3:45:84:65:3c:56:01:f3:78:ea: e2:12:f7:f7:cd:78:81:7c:e3:b4:f6:f4:cf:50:a6:83:ae:37: e3:da:e7:f2:d9:cb:88:9c:9d:37:e9:dd:c4:9d:54:b5:d8:c0: 7e:ba:f0:c8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYwMzI1MDEwOTMyWhcNMjYwNDAxMDEwOTMyWjAYMRYwFAYD VQQDEw02OWMzMzVjZC1lNDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnahk+SMiHGTYaswt3/HmgKC1whXbgfibbPUwt5+Rw3tS1SQS0Z0esjsbxTfN JbOkKETeE3+IVinRSNIqdWoMPdnt6CqvQry8VjLKVQFgquEQGXPmhzsVSTi4/AVj BoyaC4qFQz/IYB9c2DXDa79HcmU64mhgabvGnW74VmJQay3Zs6WDZuz74oDfWdfM Y1iiA+psowHT5odrwTiL2vXQ5Ymf6ZS5GpENnLIrYEqGar/GE/CtmDIAu0sbiLCJ HWKa7UY1R6RT3O1t4leh0JGyaiyqoWeqaEt/XsH8KG6B0f1M7MaCnpWbE2J0kDSP K1ii/i0wOeTFpYtyWPa5dWM8lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDP6++3r 4X5tcohLoI+is9TPNnMKMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEz6ClYBS7TM2A1T2Qd/MSfqBgv9QE2yChCE3bV5hh5joQPsbl9UfEAyIUqQ 7Fq7L5Ed4MWH2dGOh4tKTd5p87YlLuJsxAT3aYfyUyuIOscab1KpVb1qep91zI8j kZj6pdrZxlj29P0TDGTvzo2QaLd8ysxXHsYThOXXuYysjiHzclx8TWI1PSZN3AAd TtmeiDYi2vUbOpM+u36tgUuiFCoWC/natvXuD+l9G4b4ldCPnxbQJwD1kaa08KZg 7myw5rqhB6csEG6Yel3g6/rjRYRlPFYB83jq4hL39814gXzjtPb0z1Cmg64349rn 8tnLiJydN+ndxJ1UtdjAfrrwyA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:12:08 2026 by rpki-client