$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: iOSrxoW3A/cXv5CBeQtSMOjdevaxyFowLeSqFano+c8= Subject key identifier: 52:93:C0:83:EE:49:57:7F:DD:B3:D0:C0:E4:8C:CC:CB:9B:B8:6A:A4 Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 01F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 01E4 Signing time: Mon 11 May 2026 03:27:44 +0000 Manifest this update: Mon 11 May 2026 03:27:43 +0000 Manifest next update: Mon 18 May 2026 03:27:43 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: Dztn4vGeyYHY+mlXJW7OLJFUIcx3ihxVLIXpmBPQxnU=) 2: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=) 3: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 496 (0x1f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: May 11 03:27:43 2026 GMT Not After : May 18 03:27:43 2026 GMT Subject: CN=6a014caf-6cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7d:a8:53:f2:fc:5a:e2:3c:4c:6a:3a:29:1e: 7d:69:dd:47:f8:bd:9f:9c:dd:42:39:21:fa:93:e4: d4:57:30:84:3a:b7:6a:04:d1:2f:6b:f3:ae:0a:24: 0d:70:1a:b3:70:e6:08:42:39:b2:24:49:1e:f7:19: 69:db:f6:d5:26:a7:fb:87:30:0e:ff:50:fa:56:2d: 67:e1:98:e7:fe:5f:bc:13:7e:c8:3a:e6:56:4b:bb: 1e:e8:94:c7:79:6f:75:43:91:2f:04:3f:9c:dd:32: 76:2e:24:37:8e:ad:5f:81:a2:56:4b:9a:61:e9:7d: a0:06:d2:93:df:47:d2:dd:03:f2:bd:a7:40:e4:fc: 54:cc:ee:57:28:95:5f:e7:bd:4c:71:1d:03:bf:6f: c0:f3:b3:2c:79:05:4e:41:ec:d5:c2:72:98:d8:54: 21:0e:a9:76:1b:d9:36:72:36:66:c1:8e:c1:64:5f: 90:7d:ca:eb:f8:69:8e:39:ab:b4:b5:6d:19:93:0f: ae:0c:f7:67:1f:cc:e7:ba:1b:64:9c:0a:04:4e:08: fc:64:8d:a3:95:ed:4c:82:8d:11:fd:85:76:6d:d3: 96:ad:0b:fa:36:c1:60:27:8d:97:bc:03:19:4b:51: 78:68:8b:17:68:e1:61:e9:b7:bd:be:7c:23:64:ef: 3d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:93:C0:83:EE:49:57:7F:DD:B3:D0:C0:E4:8C:CC:CB:9B:B8:6A:A4 X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:d0:16:75:a0:ef:8c:fe:a2:4c:fc:57:0d:62:84:34:8c:07: 90:85:f7:0c:83:69:44:1c:62:8a:a8:31:d4:56:3f:19:40:d1: 2e:b1:ff:85:ca:29:ef:05:45:9a:e8:55:0e:46:af:02:2f:4d: 6d:47:d5:78:7d:a2:37:1a:22:1f:f6:9b:57:f5:15:81:fa:4d: e2:2c:09:7b:6f:84:8f:20:f7:4e:10:a0:53:7a:df:94:48:19: 6d:c1:e7:2b:0d:89:50:58:57:7f:04:c8:62:29:c5:59:05:bf: bb:56:34:d1:5d:e5:f0:46:a0:11:18:a0:c3:fa:2d:c8:19:50: 3e:d9:bd:06:62:d5:25:fe:c8:0a:02:ea:ec:e4:d8:4d:17:bc: 72:f2:58:de:12:0f:cb:3d:79:48:36:5d:a8:38:8b:11:bf:c6: 1c:de:cd:8d:14:ac:fb:dd:d1:33:b0:bb:0a:61:61:e0:d7:28: 49:05:42:55:ee:8d:1a:8e:02:4a:e2:84:98:68:b5:a6:52:2e: f3:56:af:97:e2:ed:ab:3d:5d:e2:10:fa:82:63:b9:42:b9:82: 68:6d:14:10:10:95:68:82:0d:75:2b:9c:b1:cf:e5:09:65:de: de:a6:0d:1e:06:37:cf:b2:63:fd:0d:af:57:ad:51:26:3d:25: 50:fa:5c:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjYwNTExMDMyNzQzWhcNMjYwNTE4MDMyNzQzWjAYMRYwFAYD VQQDEw02YTAxNGNhZi02Y2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl32oU/L8WuI8TGo6KR59ad1H+L2fnN1COSH6k+TUVzCEOrdqBNEva/OuCiQN cBqzcOYIQjmyJEke9xlp2/bVJqf7hzAO/1D6Vi1n4Zjn/l+8E37IOuZWS7se6JTH eW91Q5EvBD+c3TJ2LiQ3jq1fgaJWS5ph6X2gBtKT30fS3QPyvadA5PxUzO5XKJVf 571McR0Dv2/A87MseQVOQezVwnKY2FQhDql2G9k2cjZmwY7BZF+Qfcrr+GmOOau0 tW0Zkw+uDPdnH8znuhtknAoETgj8ZI2jle1Mgo0R/YV2bdOWrQv6NsFgJ42XvAMZ S1F4aIsXaOFh6be9vnwjZO89kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKTwIPu SVd/3bPQwOSMzMubuGqkMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2dAWdaDvjP6iTPxXDWKENIwHkIX3DINpRBxiiqgx1FY/GUDRLrH/hcop7wVF muhVDkavAi9NbUfVeH2iNxoiH/abV/UVgfpN4iwJe2+EjyD3ThCgU3rflEgZbcHn Kw2JUFhXfwTIYinFWQW/u1Y00V3l8EagERigw/otyBlQPtm9BmLVJf7ICgLq7OTY TRe8cvJY3hIPyz15SDZdqDiLEb/GHN7NjRSs+93RM7C7CmFh4NcoSQVCVe6NGo4C SuKEmGi1plIu81avl+Ltqz1d4hD6gmO5QrmCaG0UEBCVaIINdSucsc/lCWXe3qYN HgY3z7Jj/Q2vV61RJj0lUPpcgg== -----END CERTIFICATE-----Generated at Wed May 13 05:01:59 2026 by rpki-client