$ rpki-client -vvf rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft File: IX2ikIx1R129zapw42ubQNSRLt0.mft (raw, json) Hash identifier: +YQDTbnrusuXkKMpSYNKlBpgGIn3q0y++tdwEUTeIsY= Subject key identifier: 22:99:FA:B9:C6:5E:39:F5:3A:13:31:DA:44:F9:4D:A0:35:60:DD:AE Authority key identifier: 21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD Certificate issuer: /CN=A91BABFD/serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft Manifest number: 01D2 Signing time: Sun 05 Apr 2026 03:08:44 +0000 Manifest this update: Sun 05 Apr 2026 03:08:44 +0000 Manifest next update: Sun 12 Apr 2026 03:08:44 +0000 Files and hashes: 1: IX2ikIx1R129zapw42ubQNSRLt0.crl (hash: t7vAePmiQBBYOIXSqgYIxTlcsrI+EYf/A1xvwaQdoBw=) 2: 164B8B986D8B11EEAE28C283C4F9AE02.roa (hash: 8AGxFivuKAnKFN4TwTWYk8MHWZYUWT4PtexoYNpYMj4=) 3: E0E9B1966D8A11EEB33A1E83C4F9AE02.roa (hash: V3KGZPnIaGHG9fDhQyXWDDAGsT4VUgLiBOpTb4Gj+iY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BABFD, serialNumber=217DA2908C75475DBDCDAA70E36B9B40D4912EDD Validity Not Before: Apr 5 03:08:44 2026 GMT Not After : Apr 12 03:08:44 2026 GMT Subject: CN=69d1d23c-0d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0a:81:0d:c1:3c:d4:90:35:bf:9d:e2:16:51: dd:57:9a:05:8f:1e:f1:be:94:79:1a:ed:04:07:f1: 05:30:82:e6:97:47:91:c0:45:41:74:4f:95:e8:f2: 32:9e:3f:bd:3b:3c:88:f3:ad:41:65:53:9f:0f:5d: 77:fa:a7:75:15:d0:9e:43:2e:c3:ba:4f:9d:84:81: 47:ce:69:eb:f3:cf:9d:b4:b9:41:dc:ea:15:96:24: 06:48:d5:74:47:3a:be:0e:49:31:94:28:75:24:6b: 34:dc:d5:9d:f8:82:28:d4:d8:fe:28:67:55:e7:35: 16:fb:f1:56:c8:78:f3:b8:ce:2d:32:c8:43:c3:c1: 6d:c0:0d:ee:e5:73:f8:d3:c2:cc:62:02:d1:70:7a: c3:53:a4:57:b2:96:aa:9b:80:20:36:6f:48:4c:8d: cb:22:89:7e:07:d9:1e:17:84:a1:51:a9:8b:a4:40: e7:3a:3f:f4:39:9d:6c:c7:3d:be:80:71:6d:e0:04: 9a:56:20:8b:e9:1d:eb:8b:5b:44:20:34:04:f9:23: d3:00:20:e8:4c:53:52:2b:ef:fb:07:71:32:b6:bd: 44:08:67:8a:81:0f:8c:4e:5d:49:16:98:03:46:a5: ab:ac:50:68:9a:75:e7:2a:f2:cc:98:f4:c9:53:f2: 43:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:99:FA:B9:C6:5E:39:F5:3A:13:31:DA:44:F9:4D:A0:35:60:DD:AE X509v3 Authority Key Identifier: keyid:21:7D:A2:90:8C:75:47:5D:BD:CD:AA:70:E3:6B:9B:40:D4:91:2E:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IX2ikIx1R129zapw42ubQNSRLt0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BABFD/895A49506D8911EE82A1F680C4F9AE02/IX2ikIx1R129zapw42ubQNSRLt0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:ec:72:5f:b0:cf:a8:67:a7:b6:b4:88:a4:1f:24:ae:52:2a: c3:da:a4:5c:07:da:40:1c:a1:54:02:e8:89:dc:9f:5c:68:6d: b8:4c:44:7f:7a:5e:14:b0:d8:49:92:ac:07:32:29:00:d1:70: 7d:e4:ae:eb:83:80:3b:55:cd:e6:9d:01:af:f7:46:b4:b7:11: 39:e3:c3:b0:ab:bf:9c:cf:6d:a6:90:56:84:83:1f:81:17:a8: 2b:1b:0f:26:dd:21:8d:b4:4d:b2:92:db:de:2c:c9:db:a6:65: 75:a1:c9:b8:33:97:e6:dc:fc:c3:22:55:5a:67:05:0d:e9:09: e5:d9:bd:1f:fb:fc:1d:1e:de:ce:52:f8:e1:8a:c3:14:56:1b: ae:f4:98:86:d6:85:6a:5e:05:69:f8:fd:20:a8:55:8f:45:93: 03:6b:7d:27:7b:f2:df:32:3d:41:b6:80:bf:12:67:10:d9:cc: bc:1f:02:18:5e:25:4a:07:3e:3f:69:17:40:e7:6d:5a:ac:ae: d3:81:d8:35:5f:a9:1a:8a:33:d3:41:81:1c:01:73:d0:49:03: 90:0f:ce:b8:56:ef:d7:d5:4a:1e:67:1b:ca:97:87:c6:aa:09: af:13:af:16:74:df:7a:a7:43:9c:06:c3:11:d2:0b:e9:e8:4f: 9b:50:62:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFCRkQxMTAvBgNVBAUTKDIxN0RBMjkwOEM3NTQ3NURCRENEQUE3MEUzNkI5QjQw RDQ5MTJFREQwHhcNMjYwNDA1MDMwODQ0WhcNMjYwNDEyMDMwODQ0WjAYMRYwFAYD VQQDEw02OWQxZDIzYy0wZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwqBDcE81JA1v53iFlHdV5oFjx7xvpR5Gu0EB/EFMILml0eRwEVBdE+V6PIy nj+9OzyI861BZVOfD113+qd1FdCeQy7Duk+dhIFHzmnr88+dtLlB3OoVliQGSNV0 Rzq+DkkxlCh1JGs03NWd+IIo1Nj+KGdV5zUW+/FWyHjzuM4tMshDw8FtwA3u5XP4 08LMYgLRcHrDU6RXspaqm4AgNm9ITI3LIol+B9keF4ShUamLpEDnOj/0OZ1sxz2+ gHFt4ASaViCL6R3ri1tEIDQE+SPTACDoTFNSK+/7B3Eytr1ECGeKgQ+MTl1JFpgD RqWrrFBomnXnKvLMmPTJU/JDUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKZ+rnG Xjn1OhMx2kT5TaA1YN2uMB8GA1UdIwQYMBaAFCF9opCMdUddvc2qcONrm0DUkS7d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUJGRC84OTVBNDk1MDZE ODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIxMjl6YXB3NDJ1YlFOU1JM dDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lYMmlrSXgxUjEyOXphcHc0MnViUU5TUkx0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUJGRC84OTVBNDk1MDZEODkxMUVFODJBMUY2ODBDNEY5QUUwMi9JWDJpa0l4MVIx Mjl6YXB3NDJ1YlFOU1JMdDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcexyX7DPqGentrSIpB8krlIqw9qkXAfaQByhVALoidyfXGhtuExEf3peFLDY SZKsBzIpANFwfeSu64OAO1XN5p0Br/dGtLcROePDsKu/nM9tppBWhIMfgReoKxsP Jt0hjbRNspLb3izJ26ZldaHJuDOX5tz8wyJVWmcFDekJ5dm9H/v8HR7ezlL44YrD FFYbrvSYhtaFal4Fafj9IKhVj0WTA2t9J3vy3zI9QbaAvxJnENnMvB8CGF4lSgc+ P2kXQOdtWqyu04HYNV+pGooz00GBHAFz0EkDkA/OuFbv19VKHmcbypeHxqoJrxOv FnTfeqdDnAbDEdIL6ehPm1BiLA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:06 2026 by rpki-client