$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: 8DJQa9IX7NUtfWF434tq75lXzbViPjXBC9JidCpP2CE= Subject key identifier: FA:C0:88:01:2E:E6:68:10:40:5F:25:3D:5D:82:24:DD:4C:22:80:68 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 23EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 23B1 Signing time: Sat 06 Jun 2026 15:46:58 +0000 Manifest this update: Sat 06 Jun 2026 15:46:58 +0000 Manifest next update: Sat 13 Jun 2026 15:46:58 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: QiCL2zusX9fbWfPclknpTYmRO5RsHIgq/5Bs0byHTro=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) 3: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 15:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9196 (0x23ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Jun 6 15:46:58 2026 GMT Not After : Jun 13 15:46:58 2026 GMT Subject: CN=6a2440f2-2840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:64:a2:ec:ea:d5:14:af:92:89:62:88:0a: bd:33:f7:6b:01:cc:cf:c2:2a:c1:f8:36:bb:5b:82: d0:a1:0d:0e:69:16:e5:36:54:0e:b8:9f:ea:2d:4f: b1:9e:89:b1:1e:7c:fd:0e:04:ec:8d:87:1a:41:ad: 44:57:f5:e2:f1:45:80:83:15:06:0b:19:a4:d0:52: d7:62:ba:ba:3e:53:7e:c1:a0:5d:34:78:f8:18:86: 0e:0c:f3:69:68:af:75:d0:1f:d6:69:1f:f2:43:41: ee:f7:09:49:d8:1d:b5:7f:fe:d6:bf:87:7a:7c:12: b8:79:fe:fd:3f:f3:68:a4:98:ad:d0:38:9f:21:75: 3a:b2:c2:d5:a0:2d:da:e6:7e:d1:c5:33:33:f5:f1: 24:fd:de:fb:8b:8a:70:25:42:a8:7b:e5:a1:91:7d: d9:92:83:3c:a7:20:72:c1:95:62:08:41:8b:18:ac: 20:fd:7b:c0:83:87:54:81:f0:c8:48:a4:e3:ec:c5: 51:a9:33:93:6b:2c:ea:ff:8c:d5:bc:58:3d:01:89: 66:7e:6f:89:87:6c:93:a5:23:77:d3:d8:5a:51:dd: 0f:7d:c0:91:c3:42:9d:a2:02:8c:41:23:07:1d:58: 61:e1:b0:a2:46:9a:aa:15:2a:1b:1c:2f:83:81:c4: 47:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C0:88:01:2E:E6:68:10:40:5F:25:3D:5D:82:24:DD:4C:22:80:68 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:66:75:9a:86:9c:fb:0e:4f:e9:93:4a:ec:0e:70:a5:2d:a6: cb:5c:09:e7:c6:e0:c6:98:dd:a4:28:56:8a:73:c7:b7:05:1b: 47:c3:a5:54:a8:04:56:b2:66:0d:5c:2c:6a:b5:4d:ae:41:02: 74:de:e2:b4:ef:76:5e:c8:32:79:ee:4e:a2:08:c2:12:54:94: a9:76:53:5f:43:cd:13:7d:c5:74:9a:16:90:0c:6c:5c:e3:ed: ac:01:da:0b:4e:ae:72:e2:51:4b:b6:5c:57:ba:f8:cf:c5:93: ea:f2:2a:2d:c7:19:7c:6d:c9:e3:3b:73:17:c4:a5:b7:79:70: bb:e6:1f:08:6e:f1:7c:59:23:09:e4:65:82:4b:f7:20:f7:9b: cc:22:64:87:36:ee:f7:6a:52:ce:26:1e:5e:fb:eb:64:49:e7: da:25:87:98:a1:e8:7c:43:26:19:25:c1:ab:9c:90:22:25:f8: 9a:e0:50:f2:c5:d0:6e:8a:cf:dd:eb:8c:5d:0f:b6:ce:43:bd: 2c:d0:44:49:ec:c7:0e:8b:ca:e1:77:b2:5d:77:d0:02:dd:63: 78:f4:91:06:ad:b8:eb:ed:de:22:b7:32:d0:f6:63:56:67:74: 6d:9b:77:85:92:5a:8d:58:7d:66:a7:ee:5c:cd:c9:ae:df:1a: f6:1c:8e:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwNjA2MTU0NjU4WhcNMjYwNjEzMTU0NjU4WjAYMRYwFAYD VQQDEw02YTI0NDBmMi0yODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5Fkouzq1RSvkoliiAq9M/drAczPwirB+Da7W4LQoQ0OaRblNlQOuJ/qLU+x nomxHnz9DgTsjYcaQa1EV/Xi8UWAgxUGCxmk0FLXYrq6PlN+waBdNHj4GIYODPNp aK910B/WaR/yQ0Hu9wlJ2B21f/7Wv4d6fBK4ef79P/NopJit0DifIXU6ssLVoC3a 5n7RxTMz9fEk/d77i4pwJUKoe+WhkX3ZkoM8pyBywZViCEGLGKwg/XvAg4dUgfDI SKTj7MVRqTOTayzq/4zVvFg9AYlmfm+Jh2yTpSN309haUd0PfcCRw0KdogKMQSMH HVhh4bCiRpqqFSobHC+DgcRHmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPrAiAEu 5mgQQF8lPV2CJN1MIoBoMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjWZ1moac+w5P6ZNK7A5wpS2my1wJ58bgxpjdpChWinPHtwUbR8OlVKgEVrJm DVwsarVNrkECdN7itO92Xsgyee5OogjCElSUqXZTX0PNE33FdJoWkAxsXOPtrAHa C06ucuJRS7ZcV7r4z8WT6vIqLccZfG3J4ztzF8Slt3lwu+YfCG7xfFkjCeRlgkv3 IPebzCJkhzbu92pSziYeXvvrZEnn2iWHmKHofEMmGSXBq5yQIiX4muBQ8sXQborP 3euMXQ+2zkO9LNBESezHDovK4XeyXXfQAt1jePSRBq246+3eIrcy0PZjVmd0bZt3 hZJajVh9ZqfuXM3Jrt8a9hyOPg== -----END CERTIFICATE-----Generated at Sun Jun 7 04:59:29 2026 by rpki-client