$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: Zvn4hXHjQyFHYgG9GP/rn0A54rHczdl/jFI60evieGo= Subject key identifier: E1:EF:F3:4F:2D:DC:B8:FF:F0:61:E0:4A:C9:77:1A:FD:9C:FF:4F:C0 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 01CC Signing time: Wed 25 Mar 2026 03:01:04 +0000 Manifest this update: Wed 25 Mar 2026 03:01:03 +0000 Manifest next update: Wed 01 Apr 2026 03:01:03 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: 7nQ1I6j7ra5z9neLhUv8aOe9tY9EFM6AM4Wexm89MkE=) 2: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=) 3: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Mar 25 03:01:03 2026 GMT Not After : Apr 1 03:01:03 2026 GMT Subject: CN=69c34ff0-bb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:b6:3a:e8:d5:21:2b:a9:ee:63:d9:53:52: 2b:2e:23:38:93:13:f7:2b:6a:81:11:ce:99:e7:f6: 3d:00:30:b1:8d:cd:87:aa:2c:69:eb:a3:d8:0c:2d: b9:3c:d2:7c:0f:dd:df:a9:ef:ea:8a:5d:0e:27:b3: 5d:3b:2f:00:83:3c:cf:e2:d6:7e:b6:df:90:a6:b7: 24:99:14:c7:9d:a5:c7:87:24:01:16:06:cb:24:b5: ab:47:4f:af:87:d1:33:5f:15:14:6c:6f:1c:97:83: 21:f8:c4:c0:99:78:f0:d3:55:99:83:65:b0:d3:97: 68:c3:f8:28:ea:ab:ab:8d:5e:dd:ae:47:2c:82:f8: 47:e2:2f:e4:fb:73:58:1f:f0:54:4b:ae:19:3c:17: 35:84:21:ab:dc:35:5d:8c:c5:a4:bc:a8:f3:a6:05: 41:85:c7:81:e9:b9:49:33:42:d6:3c:1f:e5:68:a6: 1b:33:91:7b:2c:a3:97:26:41:c3:b0:7f:e1:3f:b0: 14:18:6e:80:58:8b:b5:b7:f4:59:a0:92:c8:51:0d: c2:e4:9e:f6:09:e0:00:fb:22:1f:d4:2e:a5:2b:af: 48:46:3d:ec:3c:2e:95:bb:16:3f:70:53:e6:4d:11: b2:1c:1b:f1:0d:4a:66:50:7a:80:b4:ea:b0:8e:02: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EF:F3:4F:2D:DC:B8:FF:F0:61:E0:4A:C9:77:1A:FD:9C:FF:4F:C0 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3b:df:34:c3:2b:3c:83:8f:b6:57:cb:1f:19:8d:0f:8f:a9: 34:73:68:66:5b:3a:40:b6:7c:5c:60:49:2d:8e:41:ab:02:a8: cd:50:53:ad:77:bd:fe:d7:a8:49:99:55:43:87:70:61:8f:fe: f1:ab:fa:5f:bb:a6:a3:d2:40:f6:04:43:d8:96:8c:ed:ee:ed: 27:07:75:d4:2b:09:06:a2:e7:d2:98:c5:5a:42:d5:87:50:00: 46:73:4e:e3:fb:e2:4b:c0:d5:8d:3b:94:e2:dd:ca:33:b8:63: 92:8a:0e:95:c8:cf:db:3a:43:92:62:8e:c6:7b:a7:15:ce:fa: ea:97:94:16:20:37:8e:3f:12:7b:d6:fb:2e:35:55:4d:ee:1f: fc:ca:a2:93:23:5d:d5:11:87:c3:5f:2f:2a:9e:28:ad:ed:ba: c8:7c:ff:c6:9d:1a:55:b1:81:70:72:09:1c:c2:97:a1:b3:40: c0:8b:10:a7:00:80:74:0e:08:af:77:30:fb:ec:ee:01:8c:12: 87:d5:86:92:9b:f3:54:c4:6c:5f:a7:24:f2:b9:fe:ea:f3:00: 7d:69:c3:b4:b2:76:63:78:41:10:ba:0f:c7:4c:23:2e:03:c1: ce:da:7c:62:18:04:1d:64:86:a2:71:28:7a:96:27:29:60:8d: c6:97:b1:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjYwMzI1MDMwMTAzWhcNMjYwNDAxMDMwMTAzWjAYMRYwFAYD VQQDEw02OWMzNGZmMC1iYjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVu2OujVISup7mPZU1IrLiM4kxP3K2qBEc6Z5/Y9ADCxjc2Hqixp66PYDC25 PNJ8D93fqe/qil0OJ7NdOy8AgzzP4tZ+tt+QprckmRTHnaXHhyQBFgbLJLWrR0+v h9EzXxUUbG8cl4Mh+MTAmXjw01WZg2Ww05dow/go6qurjV7drkcsgvhH4i/k+3NY H/BUS64ZPBc1hCGr3DVdjMWkvKjzpgVBhceB6blJM0LWPB/laKYbM5F7LKOXJkHD sH/hP7AUGG6AWIu1t/RZoJLIUQ3C5J72CeAA+yIf1C6lK69IRj3sPC6VuxY/cFPm TRGyHBvxDUpmUHqAtOqwjgLDKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHv808t 3Lj/8GHgSsl3Gv2c/0/AMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgTvfNMMrPIOPtlfLHxmND4+pNHNoZls6QLZ8XGBJLY5BqwKozVBTrXe9/teo SZlVQ4dwYY/+8av6X7umo9JA9gRD2JaM7e7tJwd11CsJBqLn0pjFWkLVh1AARnNO 4/viS8DVjTuU4t3KM7hjkooOlcjP2zpDkmKOxnunFc766peUFiA3jj8Se9b7LjVV Te4f/MqikyNd1RGHw18vKp4ore26yHz/xp0aVbGBcHIJHMKXobNAwIsQpwCAdA4I r3cw++zuAYwSh9WGkpvzVMRsX6ck8rn+6vMAfWnDtLJ2Y3hBELoPx0wjLgPBztp8 YhgEHWSGonEoepYnKWCNxpexZg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:31 2026 by rpki-client