$ rpki-client -vvvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: t7LzuCW0rOmaAwtV+aXwUMyy2KiCFacBR2XsfVRsTbQ= Subject key identifier: D5:E9:8D:F2:88:44:96:E7:CC:7D:65:5C:9E:CF:96:F7:C0:8D:56:CD Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 2425 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 23EA Signing time: Sat 26 Sep 2026 15:50:04 +0000 Manifest this update: Sat 26 Sep 2026 15:50:03 +0000 Manifest next update: Sat 03 Oct 2026 15:50:03 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: C9PncASLOgP6kQjk2zfZQ//mWQkaVoUoavwjGeNSx+0=) 2: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: BHVBfCzOYUd+2ny+1K9CPCKgSk9FwJiZKsxlnYFIyaM=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: QGrsulj5TX6lLWs4DqM7sEOGBI1g9a0PTLXDjC/mfaQ=) 4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: ppE37N1eIj9pLnhcJiPKHqtNmCukTfvzraZs0CDXrbc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 15:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9253 (0x2425) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Sep 26 15:50:03 2026 GMT Not After : Oct 3 15:50:03 2026 GMT Subject: CN=6ab7e9ac-2e2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:fb:14:e9:c0:1e:28:08:ab:24:39:47:40: 4e:ac:a3:45:24:04:ab:d4:34:63:9a:5c:cd:d9:2b: bc:a6:37:cb:81:b1:e8:54:f6:8c:35:37:93:a5:99: 40:9f:92:78:c9:54:30:bd:60:8d:1d:d2:38:9d:26: 7e:ad:d0:f1:f6:fc:b4:50:c0:cc:ce:b2:13:80:09: f7:7e:bd:ee:5f:13:d8:87:2d:34:3c:99:f1:a9:98: 80:61:7d:9a:92:1c:56:72:d4:03:ce:40:e5:63:1b: ba:1e:a2:b8:52:07:46:7a:de:b0:e3:f4:e7:a6:ca: 10:6f:96:63:a7:e1:c1:19:e3:6c:f8:c4:79:fd:c5: a7:ae:98:53:15:98:80:da:95:dd:fd:bb:8e:6b:16: 6d:b3:99:52:29:f3:e3:26:3d:4b:da:15:d8:aa:65: a1:e7:04:2a:85:ab:d2:20:79:c2:f6:23:93:b8:3d: 0c:9e:e5:13:a7:ba:6a:bb:41:34:19:45:fa:ae:45: 52:9a:5a:70:fc:96:6e:5c:37:80:2f:60:d3:79:64: a4:fb:1f:45:12:aa:ac:8c:79:fc:66:29:bb:29:96: 44:9d:7b:ae:d5:36:b6:cf:36:0d:dc:3c:ba:fc:be: 6e:07:15:c3:8e:78:fb:97:28:1f:36:06:df:ef:6c: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:8D:F2:88:44:96:E7:CC:7D:65:5C:9E:CF:96:F7:C0:8D:56:CD X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e6:4d:66:8e:2c:80:89:8b:67:6c:72:0e:f1:0a:0c:80:56: 48:7e:82:f7:81:95:68:04:c9:51:2c:ad:c9:6a:2a:82:5b:52: ab:ce:fb:b8:3a:9c:d2:19:c6:10:83:ee:ef:df:98:1c:e5:37: e7:15:bc:8c:e0:1b:0e:6f:61:5c:fe:50:c5:36:14:80:ce:da: 45:23:36:12:c5:57:ce:a7:00:77:1a:b9:db:5a:6f:c3:78:41: 8e:94:51:9d:e3:be:ee:09:de:7c:f6:b7:9a:4f:98:fd:26:3e: 02:89:21:c7:b3:2b:27:1c:dd:1c:fe:67:2f:9f:cf:c4:5a:95: 25:57:7a:ef:c3:ab:a1:7c:6f:51:f1:1d:39:c3:42:d5:9e:9d: f2:29:67:1e:a6:9d:c3:cb:72:8f:c6:a8:da:e6:7a:34:94:44: 7d:1b:21:ca:b8:5c:22:04:ee:09:fe:6e:93:ff:f2:69:14:19: 3f:57:9f:92:6d:d2:6d:ff:ce:92:9c:ab:44:bb:d6:4e:7d:13: f4:2d:cf:c5:1d:fc:b8:59:45:32:74:ee:98:b2:54:9b:61:61: 93:04:02:de:d3:b3:80:74:f3:ca:99:5d:91:b2:9d:5e:e8:69: 3c:53:61:ea:df:0e:eb:e5:39:5e:43:30:12:e6:aa:5f:4d:65: b5:df:e8:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjYwOTI2MTU1MDAzWhcNMjYxMDAzMTU1MDAzWjAYMRYwFAYD VQQDEw02YWI3ZTlhYy0yZTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8P7FOnAHigIqyQ5R0BOrKNFJASr1DRjmlzN2Su8pjfLgbHoVPaMNTeTpZlA n5J4yVQwvWCNHdI4nSZ+rdDx9vy0UMDMzrITgAn3fr3uXxPYhy00PJnxqZiAYX2a khxWctQDzkDlYxu6HqK4UgdGet6w4/TnpsoQb5Zjp+HBGeNs+MR5/cWnrphTFZiA 2pXd/buOaxZts5lSKfPjJj1L2hXYqmWh5wQqhavSIHnC9iOTuD0MnuUTp7pqu0E0 GUX6rkVSmlpw/JZuXDeAL2DTeWSk+x9FEqqsjHn8Zim7KZZEnXuu1Ta2zzYN3Dy6 /L5uBxXDjnj7lygfNgbf72zO9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNXpjfKI RJbnzH1lXJ7PlvfAjVbNMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG+ZNZo4sgImLZ2xyDvEKDIBWSH6C94GVaATJUSytyWoqgltSq877uDqc0hnG EIPu79+YHOU35xW8jOAbDm9hXP5QxTYUgM7aRSM2EsVXzqcAdxq521pvw3hBjpRR neO+7gnefPa3mk+Y/SY+Aokhx7MrJxzdHP5nL5/PxFqVJVd678OroXxvUfEdOcNC 1Z6d8ilnHqadw8tyj8ao2uZ6NJREfRshyrhcIgTuCf5uk//yaRQZP1efkm3Sbf/O kpyrRLvWTn0T9C3PxR38uFlFMnTumLJUm2FhkwQC3tOzgHTzypldkbKdXuhpPFNh 6t8O6+U5XkMwEuaqX01ltd/o6A== -----END CERTIFICATE-----Generated at Sun Sep 27 10:41:21 2026 by rpki-client