$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: ZFAFI1MoBf1H9cXLd2u1NlKYtQcF+OvxNj9BRvV0EoA= Subject key identifier: E8:4A:4D:1E:59:3E:04:FB:58:F5:6E:9B:C1:27:A6:F8:6C:8C:33:28 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2403 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 23C8 Signing time: Wed 22 Jul 2026 15:53:16 +0000 Manifest this update: Wed 22 Jul 2026 15:53:16 +0000 Manifest next update: Wed 29 Jul 2026 15:53:16 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: jkz/vdSxGopQqTzOD7i3AWhATHM6X00pnq8PQPywP5o=) 2: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) 4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:53:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9219 (0x2403) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Jul 22 15:53:16 2026 GMT Not After : Jul 29 15:53:16 2026 GMT Subject: CN=6a60e76c-2052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:00:00:00:a9:03:67:04:19:18:e1:7c:44:7f: 66:82:96:4a:35:98:39:22:0c:fe:01:f5:01:58:3e: 13:67:54:a6:94:60:87:bf:c0:1e:22:42:7f:4f:09: 73:d9:c6:be:f7:00:3a:be:d2:35:1d:bd:15:9e:1b: 15:44:78:74:38:1a:3d:b3:8d:e9:06:8f:9f:d1:2c: 32:f0:48:01:8b:ec:5a:e6:fe:4d:88:b4:af:fe:6a: b4:8f:bd:a3:0f:9e:a0:1b:8c:6b:2d:ac:70:3e:f7: 75:24:6d:d7:76:31:3f:36:4b:44:48:c4:33:f5:6a: 8d:35:f7:05:0a:79:13:78:25:37:24:f8:50:13:db: 52:24:00:5b:32:ed:5c:75:9f:3a:f2:18:8a:23:3f: d4:c1:48:4f:3c:f2:b8:3c:44:b9:5a:78:fa:7a:35: c0:31:90:1b:11:13:94:c3:96:67:99:14:1a:bc:d1: cd:30:ed:a4:76:99:17:20:d9:25:e1:49:75:7d:27: eb:45:3e:02:65:32:b4:7d:1a:54:0e:fa:60:47:49: c0:c8:50:47:7e:fd:8e:4b:a1:5a:31:65:ce:e4:d4: e4:d1:53:bc:1c:fb:fc:91:44:2a:e8:44:45:08:fb: 88:bb:80:31:a6:51:c4:7e:4d:06:12:d5:9e:6f:16: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4A:4D:1E:59:3E:04:FB:58:F5:6E:9B:C1:27:A6:F8:6C:8C:33:28 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:61:0a:d7:56:fc:ee:cc:75:74:f3:42:f9:38:6d:32:e0:cf: d5:c4:6c:b2:ff:8f:5d:c3:3a:5b:e3:6a:cb:c4:8d:d5:6a:04: 48:92:2e:b7:0b:4e:8f:2c:16:55:3b:40:5e:51:1a:1a:8e:d4: f5:dd:b7:49:03:8d:05:51:1f:7c:07:56:39:01:27:2c:1f:57: 06:f5:27:ef:0d:4a:27:4c:8f:8b:10:55:06:7e:64:74:89:20: 88:d0:71:5a:35:8d:6a:5c:87:bd:a9:ad:8c:02:92:dc:93:14: 0d:d3:3f:ab:ae:43:e8:7b:70:e8:c9:a7:16:ed:17:5d:ab:99: c1:a1:2c:ad:15:dd:fa:38:7e:34:3a:d7:36:2c:bc:c2:c3:f4: 64:c1:1c:83:50:61:29:0e:07:5b:0b:25:77:74:ae:10:58:47: 92:eb:c4:de:a2:43:70:b0:81:19:09:1b:5b:6e:cf:88:92:f7: 32:26:73:3f:b3:1e:19:f3:c0:a2:c9:78:39:7a:f8:8a:16:49: 19:82:96:73:ff:b9:4c:4d:b0:a2:90:56:97:ce:9b:79:67:f7: 52:4b:e0:04:c1:95:96:d7:7b:87:29:61:9e:fa:d7:50:92:00: ee:08:7a:b7:27:ab:f9:93:a1:d6:ac:f5:e2:5c:fd:10:e2:c7: 6d:ef:8a:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwNzIyMTU1MzE2WhcNMjYwNzI5MTU1MzE2WjAYMRYwFAYD VQQDEw02YTYwZTc2Yy0yMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQAAAKkDZwQZGOF8RH9mgpZKNZg5Igz+AfUBWD4TZ1SmlGCHv8AeIkJ/Twlz 2ca+9wA6vtI1Hb0VnhsVRHh0OBo9s43pBo+f0Swy8EgBi+xa5v5NiLSv/mq0j72j D56gG4xrLaxwPvd1JG3XdjE/NktESMQz9WqNNfcFCnkTeCU3JPhQE9tSJABbMu1c dZ868hiKIz/UwUhPPPK4PES5Wnj6ejXAMZAbEROUw5ZnmRQavNHNMO2kdpkXINkl 4Ul1fSfrRT4CZTK0fRpUDvpgR0nAyFBHfv2OS6FaMWXO5NTk0VO8HPv8kUQq6ERF CPuIu4AxplHEfk0GEtWebxYVBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhKTR5Z PgT7WPVum8EnpvhsjDMoMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARWEK11b87sx1dPNC+ThtMuDP1cRssv+PXcM6W+Nqy8SN1WoESJIutwtOjywW VTtAXlEaGo7U9d23SQONBVEffAdWOQEnLB9XBvUn7w1KJ0yPixBVBn5kdIkgiNBx WjWNalyHvamtjAKS3JMUDdM/q65D6Htw6MmnFu0XXauZwaEsrRXd+jh+NDrXNiy8 wsP0ZMEcg1BhKQ4HWwsld3SuEFhHkuvE3qJDcLCBGQkbW27PiJL3MiZzP7MeGfPA osl4OXr4ihZJGYKWc/+5TE2wopBWl86beWf3UkvgBMGVltd7hylhnvrXUJIA7gh6 tyer+ZOh1qz14lz9EOLHbe+KBA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:41:54 2026 by rpki-client