$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: cwlpmo3DsMJ8iQV4hGH/JAyvYQLtypr4g4yoC14+M98= Subject key identifier: 56:8B:D5:94:24:85:27:58:ED:1C:E9:68:3B:4E:81:42:60:95:35:68 Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 02DF Signing time: Thu 23 Jul 2026 02:15:52 +0000 Manifest this update: Thu 23 Jul 2026 02:15:52 +0000 Manifest next update: Thu 30 Jul 2026 02:15:52 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: 8bUnohHHEXf3IGOo4sJTlMnD+tlpRKCQ+IctFub/wHY=) 2: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: ldho/4dcBhvMSFZNQSotx0OQwqa0gAe9if7fkQE4P7M=) 3: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: zqFlnoiRJ96ipkTg+cLy44fvbC4N/hd7GgD9UC/f7t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Jul 23 02:15:52 2026 GMT Not After : Jul 30 02:15:52 2026 GMT Subject: CN=6a617958-e242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b8:d7:fb:07:d1:bf:30:d0:5c:eb:58:a1:20: cf:9f:67:f8:ce:1e:83:f6:dc:f4:ca:15:af:3d:e3: d3:9d:43:d2:e8:03:f1:bd:00:73:bf:7b:07:e3:0f: dd:9c:03:1c:10:d3:8d:b1:de:b7:f6:bd:d2:be:e1: 21:a7:47:d8:5e:2a:64:b1:cc:b8:2a:25:e6:a4:5e: a3:02:20:97:d4:bf:34:ee:27:d2:d9:57:30:a3:57: 57:81:c1:e2:25:37:6a:33:24:c9:b1:de:0c:9b:5f: 99:21:40:dc:11:73:bb:e7:9e:e3:f5:c3:86:85:7c: 46:0a:78:82:60:cf:01:c4:fb:44:de:47:ab:38:d6: bc:cb:ed:83:79:1b:aa:d9:b7:3b:fc:f0:0d:ad:b0: be:0c:a5:9f:20:9a:60:ff:68:04:fa:9e:3d:2a:b3: 0c:60:84:b5:25:38:df:2d:7f:3d:b3:97:ed:8f:1d: b9:30:4f:85:7b:aa:2d:ef:60:2f:59:fd:01:f5:c5: 48:f2:9f:fd:ea:0b:c7:71:58:95:b9:54:e8:5a:21: 12:f3:48:48:2e:a6:f0:12:10:bf:af:8e:cf:ab:32: b8:6c:34:0f:c6:55:ae:8b:ca:b2:65:f5:f5:aa:f1: 35:68:99:c0:73:00:58:4d:75:bd:51:e6:5a:eb:63: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8B:D5:94:24:85:27:58:ED:1C:E9:68:3B:4E:81:42:60:95:35:68 X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ec:9d:80:f0:b0:6f:4d:48:15:0d:ab:ef:c1:82:8f:c4:90: 78:38:1a:d5:6a:b6:a6:a7:66:19:fb:77:4c:82:95:a5:0f:58: 16:24:5e:df:50:ed:57:1d:6a:35:61:45:b7:e3:0d:39:6c:d2: 3d:40:af:b2:12:08:d5:7d:ee:82:77:25:31:de:16:e2:e1:f8: f0:e2:7d:9a:00:28:b5:43:cc:5c:54:75:49:b3:b3:c2:6a:28: bb:36:4f:6a:cb:06:6d:08:d2:c4:6b:7b:59:c8:7c:79:4a:60: 10:8c:03:d1:91:e3:4d:f1:ec:dc:f1:fd:15:7d:6e:0f:da:ff: 27:d8:bf:d7:6c:cc:c7:e2:24:73:5c:82:67:92:a1:48:81:f1: ff:de:98:98:3e:f5:be:48:e4:0b:13:bf:b3:ac:4e:83:5c:4d: 01:6f:37:31:45:34:6d:02:dc:6a:48:fe:e4:b8:50:ba:53:9d: 34:ac:2f:af:60:70:ba:8d:47:94:4c:6a:4b:52:b3:45:11:31: ed:64:c7:f1:ed:37:cb:f1:49:61:08:44:8d:d3:58:dd:6e:68: de:c6:9e:8b:5e:77:5e:a2:3f:bf:e0:06:5c:42:f0:67:a9:90: 15:85:a1:2b:bf:85:ab:ce:1c:a5:5e:cf:50:15:c3:8c:14:0a: 1a:a4:ea:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYwNzIzMDIxNTUyWhcNMjYwNzMwMDIxNTUyWjAYMRYwFAYD VQQDEw02YTYxNzk1OC1lMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA97jX+wfRvzDQXOtYoSDPn2f4zh6D9tz0yhWvPePTnUPS6APxvQBzv3sH4w/d nAMcENONsd639r3SvuEhp0fYXipkscy4KiXmpF6jAiCX1L807ifS2Vcwo1dXgcHi JTdqMyTJsd4Mm1+ZIUDcEXO7557j9cOGhXxGCniCYM8BxPtE3kerONa8y+2DeRuq 2bc7/PANrbC+DKWfIJpg/2gE+p49KrMMYIS1JTjfLX89s5ftjx25ME+Fe6ot72Av Wf0B9cVI8p/96gvHcViVuVToWiES80hILqbwEhC/r47PqzK4bDQPxlWui8qyZfX1 qvE1aJnAcwBYTXW9UeZa62NeCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFaL1ZQk hSdY7RzpaDtOgUJglTVoMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACOydgPCwb01IFQ2r78GCj8SQeDga1Wq2pqdmGft3TIKVpQ9YFiRe31DtVx1q NWFFt+MNOWzSPUCvshII1X3ugnclMd4W4uH48OJ9mgAotUPMXFR1SbOzwmoouzZP assGbQjSxGt7Wch8eUpgEIwD0ZHjTfHs3PH9FX1uD9r/J9i/12zMx+Ikc1yCZ5Kh SIHx/96YmD71vkjkCxO/s6xOg1xNAW83MUU0bQLcakj+5LhQulOdNKwvr2Bwuo1H lExqS1KzRREx7WTH8e03y/FJYQhEjdNY3W5o3saei153XqI/v+AGXELwZ6mQFYWh K7+Fq84cpV7PUBXDjBQKGqTqQw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:02:04 2026 by rpki-client