$ rpki-client -vvvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: GOM+ObAsn8lUjMiXZE9rqlImCLg3hV+vzziZA0V2ms0= Subject key identifier: 2C:E5:0D:E1:EB:1A:4B:DF:7A:FF:7B:D0:02:97:02:C5:4A:1F:E5:3F Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2438 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 23FD Signing time: Mon 02 Nov 2026 15:51:02 +0000 Manifest this update: Mon 02 Nov 2026 15:51:01 +0000 Manifest next update: Mon 09 Nov 2026 15:51:01 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: 2MMm79Gb5ic3BZS6EB4khAD+jZKmMl9l4aeIzHP7D+E=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) 3: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 15:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9272 (0x2438) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Nov 2 15:51:01 2026 GMT Not After : Nov 9 15:51:01 2026 GMT Subject: CN=6ae8b165-8a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:68:d3:12:9e:a5:8e:9b:60:cd:d1:09:2a: f6:20:21:7c:07:38:c8:c4:35:b4:10:e4:55:fc:d6: 4a:b3:bd:91:68:09:8e:45:9d:ac:a0:58:51:d3:61: 81:35:7e:2b:b2:63:04:b7:1c:c5:f7:f9:53:e4:60: c4:fa:6a:f9:e1:51:5a:d0:fb:13:b6:09:41:ce:2b: d6:26:d9:3d:54:21:b8:2a:57:d0:10:d9:02:69:9e: ec:bc:60:e8:8a:0d:b6:b6:e5:5f:6c:8d:84:8d:75: a9:ac:77:f9:6a:a6:c2:9e:8e:24:89:81:68:9c:22: b1:32:f8:27:39:1e:22:76:3a:b0:20:85:77:89:2c: bb:39:f4:21:fc:33:61:49:4b:59:52:5f:ea:f9:a0: a6:cf:45:75:57:96:6f:88:29:18:fe:b2:68:65:e2: 4a:e7:bc:4e:3f:cb:10:0a:0b:eb:b5:b0:28:bc:7d: 7b:aa:e0:18:a0:8f:c7:23:bc:42:fe:eb:79:25:4a: ce:8a:ff:76:9d:b1:87:82:04:4e:07:69:b1:ad:10: e9:d3:23:25:81:45:60:84:56:27:8b:58:b0:b0:a6: 23:7f:bb:35:68:1d:d9:8c:60:2c:dd:c0:c3:f9:74: 6f:8f:22:37:df:17:95:36:5c:4b:79:6d:9b:9e:4a: 67:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E5:0D:E1:EB:1A:4B:DF:7A:FF:7B:D0:02:97:02:C5:4A:1F:E5:3F X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5f:a7:ea:53:8c:1c:73:ec:48:13:92:a7:41:b5:06:3c:4f: 65:b4:fb:11:be:c1:d5:ed:28:12:00:a2:bf:8d:3c:3a:f1:fd: 62:e9:8f:43:c1:58:3a:50:28:40:45:e3:61:eb:99:a3:7c:45: 35:cd:9f:7d:e5:4c:5c:73:d5:94:53:e5:73:fa:01:cb:2d:6a: 51:df:cb:ff:c6:9f:9a:58:66:20:c5:15:6a:b0:62:98:bf:51: 10:b0:ba:0c:f2:92:1b:05:b6:ba:4f:fd:c7:e4:79:41:7b:1d: cf:29:4e:3d:98:21:c9:d5:64:3f:30:2f:1b:0c:93:04:f4:44: f9:86:12:bd:14:d1:96:00:c0:12:c0:88:40:63:41:45:84:a3: a8:09:26:cf:8d:38:78:e0:e6:57:c0:1a:75:29:1f:40:b8:99: 69:07:07:77:1d:71:65:51:11:f3:6e:5a:a1:c1:80:16:97:d0: a0:3c:79:ea:da:61:3c:b8:f2:4b:99:10:36:74:25:66:e2:34: 29:d0:ac:6e:95:61:f1:3e:42:bb:40:d0:f9:46:53:aa:50:e8: 93:05:4e:a8:12:1a:41:84:77:bc:04:06:07:cd:d1:62:df:ef: 05:a6:8a:a4:97:5a:41:a3:27:7d:c4:25:80:6d:7a:e8:33:b5: 34:35:e0:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYxMTAyMTU1MTAxWhcNMjYxMTA5MTU1MTAxWjAYMRYwFAYD VQQDEw02YWU4YjE2NS04YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0pVo0xKepY6bYM3RCSr2ICF8BzjIxDW0EORV/NZKs72RaAmORZ2soFhR02GB NX4rsmMEtxzF9/lT5GDE+mr54VFa0PsTtglBzivWJtk9VCG4KlfQENkCaZ7svGDo ig22tuVfbI2EjXWprHf5aqbCno4kiYFonCKxMvgnOR4idjqwIIV3iSy7OfQh/DNh SUtZUl/q+aCmz0V1V5ZviCkY/rJoZeJK57xOP8sQCgvrtbAovH17quAYoI/HI7xC /ut5JUrOiv92nbGHggROB2mxrRDp0yMlgUVghFYni1iwsKYjf7s1aB3ZjGAs3cDD +XRvjyI33xeVNlxLeW2bnkpnJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzlDeHr Gkvfev970AKXAsVKH+U/MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIF+n6lOMHHPsSBOSp0G1BjxPZbT7Eb7B1e0oEgCiv408OvH9YumPQ8FYOlAo QEXjYeuZo3xFNc2ffeVMXHPVlFPlc/oByy1qUd/L/8afmlhmIMUVarBimL9RELC6 DPKSGwW2uk/9x+R5QXsdzylOPZghydVkPzAvGwyTBPRE+YYSvRTRlgDAEsCIQGNB RYSjqAkmz404eODmV8AadSkfQLiZaQcHdx1xZVER825aocGAFpfQoDx56tphPLjy S5kQNnQlZuI0KdCsbpVh8T5Cu0DQ+UZTqlDokwVOqBIaQYR3vAQGB83RYt/vBaaK pJdaQaMnfcQlgG166DO1NDXgLg== -----END CERTIFICATE-----Generated at Wed Nov 4 14:29:03 2026 by rpki-client