$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: XVzdEWIy24QJNCrn56+zR1kPGzgt2cuzHPQkiHtkdjU= Subject key identifier: 58:08:46:15:EE:B9:29:AC:CC:2D:F5:EA:00:C6:42:C1:EA:6C:90:92 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 23D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2397 Signing time: Thu 16 Apr 2026 15:47:18 +0000 Manifest this update: Thu 16 Apr 2026 15:47:18 +0000 Manifest next update: Thu 23 Apr 2026 15:47:18 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: EmGTRWNJy2ZIPzAWcO4/5pJbnC518id3Ts6n3dyoXlA=) 2: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) 3: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9170 (0x23d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Apr 16 15:47:18 2026 GMT Not After : Apr 23 15:47:18 2026 GMT Subject: CN=69e10486-21dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:db:3d:f7:f1:68:15:6e:b5:9c:04:35:0f:87: d7:b8:df:f6:fc:3d:0f:30:6b:05:97:e7:a5:4a:9c: c6:61:d1:15:30:d2:31:96:cf:cd:6c:eb:79:06:c2: 0a:4b:54:c8:21:2d:d5:d7:46:92:a3:c6:98:86:7e: 7a:96:13:2c:28:23:90:dd:e7:32:b2:f6:ed:d7:cb: 64:db:e5:3b:2b:b1:03:7d:90:d2:c5:94:46:44:99: 4c:ad:cc:41:a6:c4:ec:3f:b4:17:a8:51:fc:9b:30: f4:65:bb:e9:90:2a:b3:71:7e:a1:43:52:cd:6e:6d: c4:59:a8:44:84:f3:49:17:70:8e:5a:76:eb:1a:1d: 00:ff:c4:d6:47:9c:06:09:fc:b1:91:08:9e:28:2d: 7a:ae:d6:d6:23:e7:5f:e0:1b:ab:57:cd:93:34:e5: 13:d0:cb:c9:7e:d2:a1:72:db:7d:0c:29:d5:fb:8c: 47:1e:8f:3e:e1:bc:6d:d6:7e:ae:0f:80:ae:8b:56: a6:1b:78:4b:b0:5f:d9:0e:f0:d0:b0:f6:91:18:50: 39:27:81:d3:31:a1:ff:2d:11:bb:23:fe:54:a3:d2: ab:c0:b4:0d:3d:e8:87:5a:80:28:c0:b1:6d:38:15: 3e:6e:5e:f8:e2:53:d0:62:da:f4:ec:86:30:3c:a4: d3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:08:46:15:EE:B9:29:AC:CC:2D:F5:EA:00:C6:42:C1:EA:6C:90:92 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:41:24:e0:2f:42:72:e7:4f:f3:35:fe:0c:b5:12:f2:5a:71: 28:09:40:d7:d1:ff:87:71:9d:f7:50:5b:b6:d1:6d:87:7a:a5: a1:b4:12:6f:ce:16:2a:8c:ad:4f:e1:4b:28:5e:98:0a:fb:4c: 67:11:bb:8f:b6:6e:6f:66:d6:7d:13:ae:3e:9e:2e:8d:02:3d: 63:f0:14:6f:c8:6c:c9:d2:05:15:e0:fe:d1:5c:04:d0:a6:83: ae:c0:1a:e6:a6:a4:ac:d9:ba:8d:4a:8c:79:b6:1c:a7:d5:ca: 39:a8:74:33:dd:11:89:fd:2a:66:e1:10:f9:c9:f0:3d:9c:e1: 96:c8:f3:fd:bc:90:1f:70:be:1a:c5:0a:f9:dc:7d:e3:8b:73: e6:29:9c:17:cf:22:38:d0:89:8f:73:c7:08:a0:14:59:1e:64: 35:27:19:40:3a:29:bb:c8:df:fa:bb:07:72:34:5a:34:14:23: 56:03:3b:56:91:0a:80:b7:5f:a9:d2:66:a5:6d:59:69:ff:8e: 4e:ab:c3:07:c9:97:eb:58:c3:20:79:6c:ae:87:64:d3:a4:16: b7:84:02:f4:f5:a9:e4:26:ba:d7:ec:c4:c7:c9:ac:b8:e8:b3: 16:51:d0:49:ee:8b:85:81:8c:ef:44:cc:fa:49:b3:99:1d:1a: 9e:94:58:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwNDE2MTU0NzE4WhcNMjYwNDIzMTU0NzE4WjAYMRYwFAYD VQQDEw02OWUxMDQ4Ni0yMWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+9s99/FoFW61nAQ1D4fXuN/2/D0PMGsFl+elSpzGYdEVMNIxls/NbOt5BsIK S1TIIS3V10aSo8aYhn56lhMsKCOQ3ecysvbt18tk2+U7K7EDfZDSxZRGRJlMrcxB psTsP7QXqFH8mzD0ZbvpkCqzcX6hQ1LNbm3EWahEhPNJF3COWnbrGh0A/8TWR5wG CfyxkQieKC16rtbWI+df4BurV82TNOUT0MvJftKhctt9DCnV+4xHHo8+4bxt1n6u D4Cui1amG3hLsF/ZDvDQsPaRGFA5J4HTMaH/LRG7I/5Uo9KrwLQNPeiHWoAowLFt OBU+bl744lPQYtr07IYwPKTTlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFgIRhXu uSmszC316gDGQsHqbJCSMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ0Ek4C9CcudP8zX+DLUS8lpxKAlA19H/h3Gd91BbttFth3qlobQSb84WKoyt T+FLKF6YCvtMZxG7j7Zub2bWfROuPp4ujQI9Y/AUb8hsydIFFeD+0VwE0KaDrsAa 5qakrNm6jUqMebYcp9XKOah0M90Rif0qZuEQ+cnwPZzhlsjz/byQH3C+GsUK+dx9 44tz5imcF88iONCJj3PHCKAUWR5kNScZQDopu8jf+rsHcjRaNBQjVgM7VpEKgLdf qdJmpW1Zaf+OTqvDB8mX61jDIHlsrodk06QWt4QC9PWp5Ca61+zEx8msuOizFlHQ Se6LhYGM70TM+kmzmR0anpRYwg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:49:46 2026 by rpki-client