$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: FRS0F68CmVu6XECNRbKfagL3/2XgJRYtkii5K+QHlEg= Subject key identifier: F8:2F:A5:77:05:9D:7A:84:5C:C9:40:E7:13:4B:B4:AF:96:EE:29:1E Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 23C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 238B Signing time: Tue 24 Mar 2026 15:45:49 +0000 Manifest this update: Tue 24 Mar 2026 15:45:48 +0000 Manifest next update: Tue 31 Mar 2026 15:45:48 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: xcWdgSABt+b6WWeImDIdN9aBvywLDDv/XEe8V1Qjiu4=) 2: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) 3: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 4: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9158 (0x23c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Mar 24 15:45:48 2026 GMT Not After : Mar 31 15:45:48 2026 GMT Subject: CN=69c2b1ad-d0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:20:a7:d0:9d:d9:a2:c4:31:36:81:36:47: 24:85:21:0c:b2:ad:9b:d3:af:a9:74:77:c3:da:36: 35:bd:54:78:a3:3a:9e:c9:5b:88:d4:6e:47:fe:8b: db:92:05:06:c3:60:fd:c7:d4:7b:ec:a7:a4:06:f8: 78:90:bb:68:ab:bf:98:d2:75:87:3b:6f:6c:ba:b2: f4:63:c4:04:ea:54:75:99:33:7d:49:14:e5:fb:d0: 44:c7:fd:86:67:63:76:98:5a:c0:6a:55:22:55:35: 50:cd:b8:0d:93:33:e0:e1:8c:b5:7a:a3:ee:43:93: b8:7e:42:0e:87:96:bb:61:e7:a4:04:ac:65:9e:4a: bf:77:e1:bb:56:98:23:15:25:ad:36:a7:de:be:a4: 95:45:2b:e4:2a:96:99:fe:84:18:ee:ab:72:47:6b: e1:a3:d2:9e:fc:15:16:9c:0e:32:1c:1d:0c:eb:90: 9d:1a:8d:7d:32:21:d7:f3:e9:8d:1a:f8:89:05:b7: df:f0:16:2f:4f:11:3d:92:e7:a3:05:6e:82:3c:73: 4f:9b:12:e0:76:5c:06:37:4a:dd:c4:2d:81:06:12: d0:69:6b:e3:ec:a8:88:44:55:2b:20:b4:96:f2:e5: 40:7e:a0:89:52:13:21:1b:ea:b0:ff:34:eb:b4:eb: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2F:A5:77:05:9D:7A:84:5C:C9:40:E7:13:4B:B4:AF:96:EE:29:1E X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:f0:0c:0b:2f:78:f6:2e:48:c8:40:0f:48:19:87:5a:10:96: 31:09:ac:b8:51:ba:76:b2:f6:0e:a0:88:35:b7:68:4e:db:72: be:0c:3f:00:21:35:56:cc:d3:f5:57:e1:9d:7e:e8:82:bc:70: 81:41:5c:85:43:5d:66:87:6c:fb:c2:89:f1:85:94:ea:63:b6: 64:c5:2e:d4:b6:1d:cf:44:dd:c6:42:6d:e5:07:4e:09:c2:58: 0d:99:ca:17:44:89:bf:e8:ba:f3:b1:b0:23:9b:69:5d:76:cf: 09:01:34:87:db:5a:5a:26:60:da:68:6e:05:3c:b6:aa:2d:c8: ca:28:26:7d:22:79:eb:11:06:91:ec:6d:f0:8d:60:40:fb:21: e5:ee:42:75:90:10:91:f5:7a:6c:45:94:ed:4b:a5:bb:84:92: d2:c4:31:38:da:91:68:04:2c:08:f2:6b:a3:e3:3d:a0:09:a5: 30:21:c4:c6:99:17:c5:70:f5:57:e6:32:13:97:94:72:9a:a1: a6:53:16:a4:dc:6f:85:43:94:29:4e:d4:59:0a:5a:f4:2d:d7: 4e:fa:f6:1a:8d:b9:a4:75:99:02:d3:73:55:da:a4:a5:d2:b7: c7:df:0c:b5:6f:8a:f4:ce:10:22:1d:6a:9d:c7:b9:d8:7f:5f: 85:0c:8f:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwMzI0MTU0NTQ4WhcNMjYwMzMxMTU0NTQ4WjAYMRYwFAYD VQQDEw02OWMyYjFhZC1kMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOkgp9Cd2aLEMTaBNkckhSEMsq2b06+pdHfD2jY1vVR4ozqeyVuI1G5H/ovb kgUGw2D9x9R77KekBvh4kLtoq7+Y0nWHO29surL0Y8QE6lR1mTN9SRTl+9BEx/2G Z2N2mFrAalUiVTVQzbgNkzPg4Yy1eqPuQ5O4fkIOh5a7YeekBKxlnkq/d+G7Vpgj FSWtNqfevqSVRSvkKpaZ/oQY7qtyR2vho9Ke/BUWnA4yHB0M65CdGo19MiHX8+mN GviJBbff8BYvTxE9kuejBW6CPHNPmxLgdlwGN0rdxC2BBhLQaWvj7KiIRFUrILSW 8uVAfqCJUhMhG+qw/zTrtOsu0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgvpXcF nXqEXMlA5xNLtK+W7ikeMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAufAMCy949i5IyEAPSBmHWhCWMQmsuFG6drL2DqCINbdoTttyvgw/ACE1VszT 9VfhnX7ogrxwgUFchUNdZods+8KJ8YWU6mO2ZMUu1LYdz0TdxkJt5QdOCcJYDZnK F0SJv+i687GwI5tpXXbPCQE0h9taWiZg2mhuBTy2qi3IyigmfSJ56xEGkext8I1g QPsh5e5CdZAQkfV6bEWU7Uulu4SS0sQxONqRaAQsCPJro+M9oAmlMCHExpkXxXD1 V+YyE5eUcpqhplMWpNxvhUOUKU7UWQpa9C3XTvr2Go25pHWZAtNzVdqkpdK3x98M tW+K9M4QIh1qnce52H9fhQyPhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:56:49 2026 by rpki-client