$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: Bdd8qjU2MAPiqjj5GcTxn+hK9Kg0Olib8W9Jt8ZyMqQ= Subject key identifier: 21:A7:54:E5:AE:81:E9:76:85:C3:23:0B:F7:48:9F:2A:9A:F2:D6:3D Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 07CD Signing time: Tue 22 Sep 2026 21:06:10 +0000 Manifest this update: Tue 22 Sep 2026 21:06:10 +0000 Manifest next update: Tue 29 Sep 2026 21:06:10 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: ec1Ypgls3NnsK5IInsi2G+hSnqP3Gj8leoZWsT4busw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 21:06:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: Sep 22 21:06:10 2026 GMT Not After : Sep 29 21:06:10 2026 GMT Subject: CN=6ab2edc2-5233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:79:8b:2d:28:94:27:12:e5:bc:3f:a3:01: 54:72:d7:5b:55:fb:2b:bb:65:ed:3a:cd:73:15:57: bc:ad:90:74:c6:72:4e:11:48:f2:43:24:6c:47:68: 18:84:01:c5:5a:d0:64:c9:09:1a:14:71:d6:95:4c: dd:e9:1d:1c:9f:1a:6a:c0:82:aa:45:82:45:cf:80: 05:33:3e:aa:2b:82:e2:19:2f:21:ed:2d:c8:d6:c8: 2e:6e:27:59:50:27:20:f7:5f:85:31:d3:11:e2:87: 44:ac:8f:71:53:73:f9:5e:40:4f:d1:5d:95:a1:ff: 11:3d:65:5d:20:45:f3:e8:07:79:74:f0:3c:8d:aa: e1:0d:1d:86:ac:5b:0b:b0:1c:70:fb:57:00:32:b7: 85:a4:41:20:c7:da:19:23:cf:e2:68:0c:d6:f8:13: fa:f9:b7:74:90:87:6f:78:ed:be:b0:57:a0:f4:87: 34:55:d6:e6:d8:73:ba:47:13:b9:0d:c3:01:0b:71: ed:35:7f:b6:df:76:59:b3:5a:05:2e:a4:02:33:3e: ae:a6:51:83:89:28:7e:68:bd:3b:18:8e:07:5e:05: a0:81:43:69:f7:1a:9d:80:1c:9b:a1:f0:fb:3e:5e: 3e:ed:ac:b8:b2:60:55:ac:75:df:11:f3:36:5e:35: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:54:E5:AE:81:E9:76:85:C3:23:0B:F7:48:9F:2A:9A:F2:D6:3D X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:85:21:59:16:4b:61:aa:24:39:53:ef:a6:bd:7a:44:16:3c: 04:e3:d7:ca:bf:3c:f6:70:38:0f:6f:6f:03:a6:38:76:96:72: 0c:d0:b4:64:4f:c3:28:ac:86:33:98:3a:27:de:42:33:00:06: d3:a5:9e:f9:1c:b6:0f:70:30:7e:55:32:9f:2a:ec:d8:14:59: ab:95:92:81:5a:44:f7:23:23:a1:ae:58:f5:8f:18:b3:d5:31: ce:04:c6:b3:ad:08:d4:51:ad:40:5b:e9:a7:5f:26:d8:b0:f4: 38:b3:95:d1:18:ee:c5:fb:8a:b6:9a:80:30:7f:bf:e6:11:02: 87:5a:5c:7c:73:f6:28:c6:37:7c:c6:ea:c6:f4:ac:96:b9:26: 29:e2:5d:d7:42:c7:4c:e3:a5:f9:5f:c3:71:17:04:a7:47:db: 09:cc:3b:24:75:ca:2d:dd:26:41:d6:ab:de:02:66:7f:00:0e: b7:8b:ce:0c:0a:c8:fb:5b:f3:37:68:5b:ac:6a:27:29:3e:c0: 42:0b:a3:81:76:fb:8a:78:eb:19:37:4d:4b:bc:95:4b:bb:18: 75:28:70:bb:99:d5:37:da:13:36:7f:bd:b5:f8:26:6d:e9:74: 22:55:f1:1b:da:84:0d:20:06:68:f3:4a:c2:41:41:2b:a1:87: 83:c5:d3:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjYwOTIyMjEwNjEwWhcNMjYwOTI5MjEwNjEwWjAYMRYwFAYD VQQDEw02YWIyZWRjMi01MjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qR5iy0olCcS5bw/owFUctdbVfsru2XtOs1zFVe8rZB0xnJOEUjyQyRsR2gY hAHFWtBkyQkaFHHWlUzd6R0cnxpqwIKqRYJFz4AFMz6qK4LiGS8h7S3I1sgubidZ UCcg91+FMdMR4odErI9xU3P5XkBP0V2Vof8RPWVdIEXz6Ad5dPA8jarhDR2GrFsL sBxw+1cAMreFpEEgx9oZI8/iaAzW+BP6+bd0kIdveO2+sFeg9Ic0Vdbm2HO6RxO5 DcMBC3HtNX+233ZZs1oFLqQCMz6uplGDiSh+aL07GI4HXgWggUNp9xqdgBybofD7 Pl4+7ay4smBVrHXfEfM2XjUDZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCGnVOWu gel2hcMjC/dInyqa8tY9MB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJYUhWRZLYaokOVPvpr16RBY8BOPXyr889nA4D29vA6Y4dpZyDNC0ZE/DKKyG M5g6J95CMwAG06We+Ry2D3AwflUynyrs2BRZq5WSgVpE9yMjoa5Y9Y8Ys9UxzgTG s60I1FGtQFvpp18m2LD0OLOV0RjuxfuKtpqAMH+/5hECh1pcfHP2KMY3fMbqxvSs lrkmKeJd10LHTOOl+V/DcRcEp0fbCcw7JHXKLd0mQdar3gJmfwAOt4vODArI+1vz N2hbrGonKT7AQgujgXb7injrGTdNS7yVS7sYdShwu5nVN9oTNn+9tfgmbel0IlXx G9qEDSAGaPNKwkFBK6GHg8XTSw== -----END CERTIFICATE-----Generated at Wed Sep 23 09:08:43 2026 by rpki-client