$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: mP96KksnNxVwYLov1fyainUKxdZAZKhbMn+2MY9CFw0= Subject key identifier: 76:0A:AC:24:19:B3:5E:1B:29:8D:FF:4E:F9:C1:3E:78:F5:8B:FA:2A Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 23CE Signing time: Sun 02 Aug 2026 15:50:02 +0000 Manifest this update: Sun 02 Aug 2026 15:50:01 +0000 Manifest next update: Sun 09 Aug 2026 15:50:01 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: tJ/EDhhL25i4pEAMEifR+m9dL2Z3WaF/K8BeyIy9/TU=) 2: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) 3: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) 4: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 15:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9225 (0x2409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Aug 2 15:50:01 2026 GMT Not After : Aug 9 15:50:01 2026 GMT Subject: CN=6a6f672a-f444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:33:41:cb:d5:3c:5b:35:83:37:66:5f:e1: f3:11:a2:fc:2b:c8:f7:60:db:dd:8b:28:31:3d:15: b6:6a:30:0d:00:e2:b8:bf:8e:17:b2:06:be:01:e0: 7b:43:ac:cf:6c:76:07:e0:a7:db:16:8b:c4:a2:6d: aa:98:d9:4e:e0:3d:56:56:3e:50:45:b9:ff:48:6d: 14:f3:cf:af:9a:29:04:76:f2:a8:0f:d8:9b:7b:6c: b1:13:ed:e9:bd:87:1e:40:89:a9:93:fd:0e:07:7d: 36:42:80:c0:a0:aa:5e:7a:46:13:06:40:32:e8:77: 4e:83:fa:f4:be:6a:f8:98:c3:2f:e9:05:7b:8d:d0: f8:fd:dd:c3:10:07:e6:b7:f2:82:14:bd:66:12:f9: 45:9f:94:49:63:37:9d:40:d9:83:5a:39:f7:a7:71: ae:0c:f5:98:ff:77:fa:ca:bb:27:ba:c1:6e:74:bd: ed:c0:77:1f:b3:1d:68:7d:e2:77:bf:f0:5d:20:8e: 49:4c:fd:44:44:df:49:75:f1:41:a3:14:bf:bd:e2: 28:76:ff:b5:1a:62:38:69:be:be:c5:a2:d2:6b:d2: 7d:6e:76:80:ff:fb:44:1c:89:a8:d3:16:62:f9:30: db:80:8f:5d:73:8b:16:93:c8:e0:2a:6d:4b:ac:41: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:AC:24:19:B3:5E:1B:29:8D:FF:4E:F9:C1:3E:78:F5:8B:FA:2A X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:82:e4:17:31:fb:2b:62:1c:ea:77:ee:43:58:55:eb:8c:3d: 65:09:3f:87:08:1b:e2:9b:9b:18:e1:1c:53:3a:14:21:b6:37: 01:e2:a0:5f:2e:3c:e9:0a:ce:e1:d2:5f:83:8f:f1:6a:76:3e: f1:e4:0a:4b:b8:35:12:d5:c3:a1:f3:e1:40:92:f2:4a:5b:0e: b0:55:ca:fc:dc:7a:3b:0f:4a:32:35:c2:68:7c:d8:27:ca:d6: f3:d9:2e:9b:c7:c2:7d:a7:d2:6f:62:18:04:bd:ca:3e:6c:cf: 79:0b:f2:61:e4:9b:04:fc:8d:2d:36:7e:51:71:20:2a:5c:42: c9:87:9d:d0:de:59:7a:8b:65:cc:f3:80:51:d8:4a:47:aa:e4: d8:32:99:de:1a:7b:57:9d:b3:29:38:61:ec:43:15:dc:14:b0: 3b:7a:1c:e5:72:68:0e:44:86:17:78:65:7f:98:44:3b:8f:60: 10:ae:df:0c:19:e4:ff:24:9a:28:28:d1:b9:90:35:63:8e:71: 4d:6c:59:a2:a7:9d:7e:75:87:ca:84:b7:f0:8f:85:cb:92:4f: 0a:ca:4f:8d:ce:eb:48:97:4e:34:49:e9:51:ca:54:15:f1:db: 23:a4:84:77:1a:9c:19:1f:5d:0c:50:38:41:6b:a1:83:41:0d: 10:25:bd:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwODAyMTU1MDAxWhcNMjYwODA5MTU1MDAxWjAYMRYwFAYD VQQDEw02YTZmNjcyYS1mNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc4zQcvVPFs1gzdmX+HzEaL8K8j3YNvdiygxPRW2ajANAOK4v44Xsga+AeB7 Q6zPbHYH4KfbFovEom2qmNlO4D1WVj5QRbn/SG0U88+vmikEdvKoD9ibe2yxE+3p vYceQImpk/0OB302QoDAoKpeekYTBkAy6HdOg/r0vmr4mMMv6QV7jdD4/d3DEAfm t/KCFL1mEvlFn5RJYzedQNmDWjn3p3GuDPWY/3f6yrsnusFudL3twHcfsx1ofeJ3 v/BdII5JTP1ERN9JdfFBoxS/veIodv+1GmI4ab6+xaLSa9J9bnaA//tEHImo0xZi +TDbgI9dc4sWk8jgKm1LrEFthQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHYKrCQZ s14bKY3/TvnBPnj1i/oqMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJILkFzH7K2Ic6nfuQ1hV64w9ZQk/hwgb4pubGOEcUzoUIbY3AeKgXy486QrO 4dJfg4/xanY+8eQKS7g1EtXDofPhQJLySlsOsFXK/Nx6Ow9KMjXCaHzYJ8rW89ku m8fCfafSb2IYBL3KPmzPeQvyYeSbBPyNLTZ+UXEgKlxCyYed0N5ZeotlzPOAUdhK R6rk2DKZ3hp7V52zKThh7EMV3BSwO3oc5XJoDkSGF3hlf5hEO49gEK7fDBnk/ySa KCjRuZA1Y45xTWxZoqedfnWHyoS38I+Fy5JPCspPjc7rSJdONEnpUcpUFfHbI6SE dxqcGR9dDFA4QWuhg0ENECW9Bw== -----END CERTIFICATE-----Generated at Mon Aug 3 18:35:07 2026 by rpki-client