$ rpki-client -vvvf rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft File: iXa1-0jy5BEdeNWjzVovyhlhOXo.mft (raw, json) Hash identifier: W2zurZg8YQnrtFkeIyffRgPjByLFLOJGxvePgyfyxp0= Subject key identifier: 01:4C:49:98:89:7E:B9:5A:0B:69:AA:45:D3:DD:B1:E1:15:73:B2:8D Authority key identifier: 89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A Certificate issuer: /CN=A9128C7F/serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Certificate serial: 0318 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft Manifest number: 0305 Signing time: Mon 05 Oct 2026 01:09:54 +0000 Manifest this update: Mon 05 Oct 2026 01:09:54 +0000 Manifest next update: Mon 12 Oct 2026 01:09:54 +0000 Files and hashes: 1: iXa1-0jy5BEdeNWjzVovyhlhOXo.crl (hash: ogIDzYXvByRFcLefFRkD6XgZAWfJLig/SifBEOOBXSI=) 2: A0A9D798C0AB11F0B1CBD10FC4F9AE02.roa (hash: ldho/4dcBhvMSFZNQSotx0OQwqa0gAe9if7fkQE4P7M=) 3: FBE538ECC55511F0B6ACB62BC4F9AE02.roa (hash: zqFlnoiRJ96ipkTg+cLy44fvbC4N/hd7GgD9UC/f7t4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 01:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 792 (0x318) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C7F, serialNumber=8976B5FB48F2E4111D78D5A3CD5A2FCA1961397A Validity Not Before: Oct 5 01:09:54 2026 GMT Not After : Oct 12 01:09:54 2026 GMT Subject: CN=6ac2f8e2-4b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2f:04:ff:a3:f2:21:31:01:28:30:9f:9c:a5: fc:8a:cc:6f:35:85:06:b3:e7:73:cc:5d:e2:83:56: af:9a:2f:4b:b7:b2:38:9f:7d:52:c0:94:89:e1:fa: 5e:e8:1b:c6:dc:d7:f6:fb:0a:28:6a:a9:15:67:ef: 2a:1f:3b:88:7b:8c:68:76:51:b4:03:76:2b:f7:fa: 0c:70:a5:bd:61:ef:76:21:ee:6a:ad:44:59:75:50: 88:a3:8b:1f:58:a7:df:50:bf:32:25:2c:76:69:7a: a3:15:fc:3a:81:02:f7:54:e1:65:29:91:f4:55:f0: 00:94:5d:65:5f:d1:cb:c2:3e:19:5a:d7:bf:d0:29: aa:aa:1f:98:cc:e4:ac:11:3f:f7:0a:c8:cf:b9:c6: ea:83:2f:a4:db:9d:a1:e4:09:75:20:de:26:2a:e4: 64:50:95:1b:6f:eb:6e:b2:30:6c:30:47:84:4f:d0: 3c:f2:7d:6e:63:0a:1e:86:74:cb:3d:c4:03:c7:8c: 33:2a:84:a9:ec:3e:52:74:d8:41:41:77:e8:e0:a4: aa:60:da:be:c4:61:c8:ef:ba:44:33:43:c2:f7:08: 7a:bf:26:cd:af:11:df:e4:62:39:99:00:cc:cc:b0: b8:e1:23:d3:f6:39:8e:7c:9c:a4:82:ec:b5:df:c6: 47:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:49:98:89:7E:B9:5A:0B:69:AA:45:D3:DD:B1:E1:15:73:B2:8D X509v3 Authority Key Identifier: keyid:89:76:B5:FB:48:F2:E4:11:1D:78:D5:A3:CD:5A:2F:CA:19:61:39:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXa1-0jy5BEdeNWjzVovyhlhOXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C7F/3B7BDABE3FC711EDAC9B221DC4F9AE02/iXa1-0jy5BEdeNWjzVovyhlhOXo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c9:6f:5c:7d:a6:bb:60:8e:7a:d2:54:a9:77:cb:9e:0e:b0: 7c:01:79:42:f7:3a:df:58:c1:f6:a6:af:83:30:14:07:56:65: e3:39:46:d7:f6:fd:a0:0d:ee:1a:f3:ee:3c:27:c0:61:61:e5: ea:a5:31:7d:b0:ee:de:49:46:5a:63:8a:2c:56:17:bd:42:79: df:af:61:05:15:56:6b:ed:fa:5f:ba:ae:4c:5b:03:88:88:d0: a1:0e:d7:af:43:6a:86:f5:52:00:12:d9:d4:ab:bf:0e:6f:88: f5:48:df:a4:4c:f5:6d:a3:b2:9b:93:c1:cd:06:cf:e9:67:88: 14:d5:e4:65:45:18:72:06:5f:9c:e4:61:1a:de:12:d0:9d:dc: 2e:a2:96:ec:b4:53:a7:b7:9b:88:1b:39:83:ec:c5:5a:df:4c: b3:3e:dc:e6:b7:5a:f7:8a:98:78:7f:88:68:b5:8a:4e:0a:58: fa:c0:2b:da:35:37:49:e6:82:40:3b:71:83:e2:ec:c7:42:2f: f7:6d:21:85:ef:31:13:e2:92:6b:1d:40:13:39:72:6a:f1:fd: 69:f9:96:7a:0b:72:b7:52:96:b9:27:a5:1b:dc:77:4b:47:4e: 3f:c0:f5:06:db:97:3b:0a:b8:da:36:c6:4a:7b:d6:6f:f6:cc: 58:d8:4a:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDN0YxMTAvBgNVBAUTKDg5NzZCNUZCNDhGMkU0MTExRDc4RDVBM0NENUEyRkNB MTk2MTM5N0EwHhcNMjYxMDA1MDEwOTU0WhcNMjYxMDEyMDEwOTU0WjAYMRYwFAYD VQQDEw02YWMyZjhlMi00Yjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC8E/6PyITEBKDCfnKX8isxvNYUGs+dzzF3ig1avmi9Lt7I4n31SwJSJ4fpe 6BvG3Nf2+wooaqkVZ+8qHzuIe4xodlG0A3Yr9/oMcKW9Ye92Ie5qrURZdVCIo4sf WKffUL8yJSx2aXqjFfw6gQL3VOFlKZH0VfAAlF1lX9HLwj4ZWte/0Cmqqh+YzOSs ET/3CsjPucbqgy+k252h5Al1IN4mKuRkUJUbb+tusjBsMEeET9A88n1uYwoehnTL PcQDx4wzKoSp7D5SdNhBQXfo4KSqYNq+xGHI77pEM0PC9wh6vybNrxHf5GI5mQDM zLC44SPT9jmOfJykguy138ZHxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFMSZiJ frlaC2mqRdPdseEVc7KNMB8GA1UdIwQYMBaAFIl2tftI8uQRHXjVo81aL8oZYTl6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM3Ri8zQjdCREFCRTNG QzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVCRWRlTldqelZvdnlobGhP WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lYYTEtMGp5NUJFZGVOV2p6Vm92eWhsaE9Yby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM3Ri8zQjdCREFCRTNGQzcxMUVEQUM5QjIyMURDNEY5QUUwMi9pWGExLTBqeTVC RWRlTldqelZvdnlobGhPWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZclvXH2mu2COetJUqXfLng6wfAF5Qvc631jB9qavgzAUB1Zl4zlG1/b9oA3u GvPuPCfAYWHl6qUxfbDu3klGWmOKLFYXvUJ5369hBRVWa+36X7quTFsDiIjQoQ7X r0NqhvVSABLZ1Ku/Dm+I9UjfpEz1baOym5PBzQbP6WeIFNXkZUUYcgZfnORhGt4S 0J3cLqKW7LRTp7ebiBs5g+zFWt9Msz7c5rda94qYeH+IaLWKTgpY+sAr2jU3SeaC QDtxg+Lsx0Iv920hhe8xE+KSax1AEzlyavH9afmWegtyt1KWuSelG9x3S0dOP8D1 BtuXOwq42jbGSnvWb/bMWNhKUQ== -----END CERTIFICATE-----Generated at Mon Oct 5 14:35:09 2026 by rpki-client