$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: wX1DjxmhoQy70mz8/A7Hwb5K4G8YySHsL3jfzwwAGHE= Subject key identifier: 85:B4:A3:36:B6:67:40:56:D9:F4:4D:41:83:21:73:18:01:59:FB:20 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 23CB Signing time: Tue 28 Jul 2026 15:54:16 +0000 Manifest this update: Tue 28 Jul 2026 15:54:15 +0000 Manifest next update: Tue 04 Aug 2026 15:54:15 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: DmLiCcHqrValP/mWZelRWxz0nZcx50LctUYNeDZyahA=) 2: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) 4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9222 (0x2406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Jul 28 15:54:15 2026 GMT Not After : Aug 4 15:54:15 2026 GMT Subject: CN=6a68d0a8-8a69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c1:91:5f:f0:b1:4c:fd:6c:d3:8d:b8:d2:eb: 09:f3:52:fd:66:f6:5d:6e:14:0d:43:32:bc:12:e2: 0a:1f:59:9f:f3:a1:f0:0d:4f:ad:3d:db:0e:b5:9c: 34:e0:f0:6e:aa:b6:f7:90:b1:ba:6e:c2:dd:a8:64: a5:1d:a5:09:05:2d:d1:4f:f4:ac:c7:6a:ea:7f:85: ca:d3:a3:8e:a5:ac:0e:c7:be:7c:83:c2:4f:9c:74: 54:e4:38:90:48:31:88:70:e2:a6:c4:62:a9:ec:96: a7:04:56:ea:81:30:db:23:1d:45:aa:23:0f:24:4e: e6:84:d6:bc:94:53:34:d4:8c:fc:84:3a:e9:f3:f7: 77:5a:48:90:d5:ab:8c:cf:20:bc:bf:9b:90:ff:6e: aa:61:11:24:17:e9:a2:5a:8c:c4:41:ec:1c:46:2d: d8:ee:41:82:e7:6c:e0:ed:67:e0:12:ce:87:c1:15: dd:0d:c4:43:03:40:10:ca:91:b5:5a:f2:57:56:83: bf:6c:69:2a:ed:4e:3c:d6:7e:ad:f4:84:13:0f:92: a8:b0:cc:67:fe:99:a1:77:aa:72:28:88:55:7b:44: 6a:16:fb:42:24:82:a7:26:16:2c:a2:fb:b7:58:6d: 52:1c:4f:35:a7:c1:1c:93:bd:9d:02:79:62:43:1e: d7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B4:A3:36:B6:67:40:56:D9:F4:4D:41:83:21:73:18:01:59:FB:20 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:0e:5c:37:51:31:ef:e0:e1:7d:6f:9b:3b:d3:ad:55:df:94: a3:f3:d5:4c:5e:13:fc:0c:7f:60:45:ac:d5:34:26:97:47:37: 72:75:d6:6f:b2:32:24:90:ad:8f:16:43:7a:39:d3:c6:68:3b: b4:85:19:69:9b:2a:3c:e2:d4:5c:42:7b:39:fb:8a:29:31:4f: ce:66:50:32:76:ff:d3:c3:2a:9c:ba:28:df:28:db:70:7b:28: b0:06:d9:51:a5:93:a7:66:b2:fc:34:db:fa:5b:53:cf:d9:4b: 9c:3a:6e:91:fa:8e:aa:90:4b:e5:24:55:d8:dd:7f:bf:33:b7: 29:2b:17:e2:98:ae:49:d8:f5:11:49:26:9e:94:1b:b6:54:d8: 3b:e5:74:1b:e7:fe:2a:a0:7e:94:77:16:72:25:5e:ba:08:6b: c4:d4:2d:d5:b9:f7:53:9b:73:e3:1c:00:3e:20:49:86:ab:28: 24:b2:d9:27:fb:6c:81:bb:62:ef:26:05:a0:f0:9e:b9:59:e7: 3e:19:0f:4b:85:18:31:62:7a:c5:4f:ac:87:98:55:31:83:af: 07:c5:ae:ef:24:a0:36:0a:7a:76:ba:b4:3b:d8:a6:bb:28:31: 79:07:8b:af:86:73:f8:cf:53:57:8f:6b:52:76:81:e8:97:ba: 10:d4:c8:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwNzI4MTU1NDE1WhcNMjYwODA0MTU1NDE1WjAYMRYwFAYD VQQDEw02YTY4ZDBhOC04YTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cGRX/CxTP1s04240usJ81L9ZvZdbhQNQzK8EuIKH1mf86HwDU+tPdsOtZw0 4PBuqrb3kLG6bsLdqGSlHaUJBS3RT/Ssx2rqf4XK06OOpawOx758g8JPnHRU5DiQ SDGIcOKmxGKp7JanBFbqgTDbIx1FqiMPJE7mhNa8lFM01Iz8hDrp8/d3WkiQ1auM zyC8v5uQ/26qYREkF+miWozEQewcRi3Y7kGC52zg7WfgEs6HwRXdDcRDA0AQypG1 WvJXVoO/bGkq7U481n6t9IQTD5KosMxn/pmhd6pyKIhVe0RqFvtCJIKnJhYsovu3 WG1SHE81p8Eck72dAnliQx7XOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIW0oza2 Z0BW2fRNQYMhcxgBWfsgMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgA5cN1Ex7+DhfW+bO9OtVd+Uo/PVTF4T/Ax/YEWs1TQml0c3cnXWb7IyJJCt jxZDejnTxmg7tIUZaZsqPOLUXEJ7OfuKKTFPzmZQMnb/08MqnLoo3yjbcHsosAbZ UaWTp2ay/DTb+ltTz9lLnDpukfqOqpBL5SRV2N1/vzO3KSsX4piuSdj1EUkmnpQb tlTYO+V0G+f+KqB+lHcWciVeughrxNQt1bn3U5tz4xwAPiBJhqsoJLLZJ/tsgbti 7yYFoPCeuVnnPhkPS4UYMWJ6xU+sh5hVMYOvB8Wu7ySgNgp6drq0O9imuygxeQeL r4Zz+M9TV49rUnaB6Je6ENTIig== -----END CERTIFICATE-----Generated at Wed Jul 29 04:39:50 2026 by rpki-client