$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: qWEnhNmt6hNRpPIpE5VVUsEM5jzeCjTUR3plqT0i5Fg= Subject key identifier: E4:98:65:AA:3A:73:AF:10:E9:7C:41:72:EF:C2:22:49:D5:4A:3A:BB Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 23D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2398 Signing time: Sat 18 Apr 2026 15:45:53 +0000 Manifest this update: Sat 18 Apr 2026 15:45:53 +0000 Manifest next update: Sat 25 Apr 2026 15:45:53 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: fbV3U6VzF/4LLLCOIinC4zI3G/JQHotTumzPlNgiwcE=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9171 (0x23d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Apr 18 15:45:53 2026 GMT Not After : Apr 25 15:45:53 2026 GMT Subject: CN=69e3a731-aba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:92:ea:7a:8a:11:97:02:80:ba:7f:ae:6f: 44:22:e8:16:58:0e:9b:0a:e3:38:9d:81:e6:93:a9: 18:f0:14:a8:ba:64:44:65:a4:2b:57:08:01:65:ea: 92:61:9d:57:2c:66:9e:d1:b0:85:0e:49:30:61:01: 97:12:4e:46:d6:a3:9f:00:92:18:76:aa:ed:e6:6f: ba:f1:03:0c:c4:4d:8a:df:de:7e:cf:74:70:60:ed: 29:a4:c0:70:64:77:3a:53:8b:49:45:4b:8f:05:bd: c5:21:87:ee:39:e9:35:1e:e2:12:ad:fb:0c:01:3c: df:63:20:ec:c3:58:0e:a8:19:ba:34:0a:f8:47:5f: ac:a8:ed:90:b0:ac:a9:28:7d:39:56:f0:2d:7a:0e: eb:04:2c:61:ee:18:52:32:06:f1:ba:b9:0f:4d:46: ea:b0:5e:43:14:43:72:8c:de:6e:ba:6b:8e:2a:59: 4a:76:5a:58:17:35:13:f7:f8:9d:ec:09:83:b1:ac: c9:5c:a7:fc:aa:88:7d:a5:a6:98:0e:99:54:26:1a: 5f:b8:fe:de:14:2c:94:3a:78:da:49:69:03:51:b8: 81:78:d9:1d:4d:d6:59:0a:28:67:a8:92:c2:ea:dc: cf:bd:64:96:ac:69:de:9c:1a:f0:ed:5a:09:b7:26: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:98:65:AA:3A:73:AF:10:E9:7C:41:72:EF:C2:22:49:D5:4A:3A:BB X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:89:e2:84:f0:32:2a:30:8c:21:03:60:62:55:77:09:82:f3: 4d:d9:9d:4f:54:43:fd:2b:36:c7:02:91:8f:e9:c8:2b:cf:b3: f6:a9:c1:e4:2c:e2:b4:0e:aa:fc:97:d5:3b:72:13:43:54:98: 21:d7:a7:e5:a9:af:4e:69:2b:1e:ff:81:3f:0c:ed:d3:e1:93: a9:e8:21:dc:9f:b2:13:41:23:25:ba:72:2f:8a:45:fa:35:0a: 92:a3:ec:88:2e:bb:20:c4:32:1d:30:e6:42:da:62:2a:57:30: 1c:d1:d5:24:15:d9:e5:76:3e:8f:33:99:ec:a6:8c:dc:d2:69: d2:b1:f8:96:69:d1:af:17:1b:90:77:92:64:e9:e3:35:91:c1: 04:fa:67:5e:84:40:eb:04:9b:d4:f3:50:04:b3:3d:ff:26:d5: 1a:a9:27:9f:91:ba:7b:67:b1:21:64:f1:53:8d:3f:b5:3d:8f: 65:1c:7c:d5:13:5d:4e:b3:ac:75:52:43:ec:0f:3b:25:a1:df: 98:fe:60:e1:eb:87:0b:0a:73:74:fc:02:0d:b5:d8:f2:dc:e1: 21:53:f9:f9:d4:da:e3:9c:c5:31:98:87:e0:ce:d3:4d:d1:e2: 4e:53:71:8d:94:87:b6:4b:28:10:9e:91:e3:fa:93:03:02:d3: 74:49:0b:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwNDE4MTU0NTUzWhcNMjYwNDI1MTU0NTUzWjAYMRYwFAYD VQQDEw02OWUzYTczMS1hYmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySiS6nqKEZcCgLp/rm9EIugWWA6bCuM4nYHmk6kY8BSoumREZaQrVwgBZeqS YZ1XLGae0bCFDkkwYQGXEk5G1qOfAJIYdqrt5m+68QMMxE2K395+z3RwYO0ppMBw ZHc6U4tJRUuPBb3FIYfuOek1HuISrfsMATzfYyDsw1gOqBm6NAr4R1+sqO2QsKyp KH05VvAteg7rBCxh7hhSMgbxurkPTUbqsF5DFENyjN5uumuOKllKdlpYFzUT9/id 7AmDsazJXKf8qoh9paaYDplUJhpfuP7eFCyUOnjaSWkDUbiBeNkdTdZZCihnqJLC 6tzPvWSWrGnenBrw7VoJtyZ8eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOSYZao6 c68Q6XxBcu/CIknVSjq7MB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGonihPAyKjCMIQNgYlV3CYLzTdmdT1RD/Ss2xwKRj+nIK8+z9qnB5CzitA6q /JfVO3ITQ1SYIden5amvTmkrHv+BPwzt0+GTqegh3J+yE0EjJbpyL4pF+jUKkqPs iC67IMQyHTDmQtpiKlcwHNHVJBXZ5XY+jzOZ7KaM3NJp0rH4lmnRrxcbkHeSZOnj NZHBBPpnXoRA6wSb1PNQBLM9/ybVGqknn5G6e2exIWTxU40/tT2PZRx81RNdTrOs dVJD7A87JaHfmP5g4euHCwpzdPwCDbXY8tzhIVP5+dTa45zFMZiH4M7TTdHiTlNx jZSHtksoEJ6R4/qTAwLTdEkLxQ== -----END CERTIFICATE-----Generated at Mon Apr 20 03:28:23 2026 by rpki-client