$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: 2ZEhzxDM4T9gYlXGgiDYddpz80M1pcvk3QKrkcriDuE= Subject key identifier: 58:9B:A5:AE:4D:6C:66:B9:5D:11:18:40:88:FC:4E:0E:46:F7:7E:24 Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 0770 Signing time: Tue 24 Mar 2026 21:19:02 +0000 Manifest this update: Tue 24 Mar 2026 21:19:01 +0000 Manifest next update: Tue 31 Mar 2026 21:19:01 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: tco0iHVaingE+CQYm5lT5drQoZ/ltrZ/0t+CiIBQQaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: Mar 24 21:19:01 2026 GMT Not After : Mar 31 21:19:01 2026 GMT Subject: CN=69c2ffc6-4629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:10:07:a6:7a:43:1a:34:9d:56:ab:a2:6e: 76:2b:c1:cc:45:98:72:4c:8d:bd:91:87:f2:2a:5d: 21:ee:51:6a:9c:fb:0c:64:0f:54:f1:e8:a1:df:63: f5:13:22:04:71:ac:5e:34:65:22:98:1d:22:9d:4a: 5d:fc:ee:ec:a9:0e:77:a8:8e:c1:4d:b3:05:f5:25: c6:d9:9e:9d:f7:94:28:0b:d3:b6:8a:8b:51:9c:4a: 09:94:85:55:5f:1f:a2:11:c0:bc:64:46:be:23:6b: 3a:a2:50:2d:de:21:e8:ac:b9:25:c8:b5:f4:28:14: 61:36:48:f9:46:fe:ed:9a:17:f1:d1:ef:42:60:0c: 4b:bf:2e:13:f4:bd:32:48:0a:83:df:1b:1d:61:31: 58:aa:ef:8b:1d:ab:51:b8:42:e6:3b:0b:9a:4b:8c: aa:4f:6b:c7:a1:74:89:a1:e8:f9:eb:31:9f:3f:cd: 5f:6f:27:75:19:4c:33:eb:89:e9:36:ed:a2:80:93: a9:97:ad:ba:53:60:c4:f7:bd:82:eb:18:ce:f9:99: a4:68:8f:9c:62:f6:25:80:36:2f:af:51:81:82:a4: fd:02:09:44:ca:fa:da:51:ec:da:9b:85:2c:6e:15: 62:38:f3:eb:9e:c6:bc:28:70:64:fa:3a:03:02:2b: 85:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:A5:AE:4D:6C:66:B9:5D:11:18:40:88:FC:4E:0E:46:F7:7E:24 X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b5:f7:88:87:9a:fb:34:dd:e5:c1:b2:b9:eb:3b:6b:0b:52: d4:e5:0e:e4:93:4e:eb:68:c9:53:20:47:cb:8a:ed:23:f6:51: 9a:77:b9:45:61:30:57:7f:c7:ab:c7:e4:b9:c8:9b:30:e6:1d: 5c:e2:b6:ea:1f:ec:5f:be:34:33:dc:a7:55:28:20:1a:0a:64: 82:c6:72:86:67:db:28:9d:84:52:6d:07:90:ea:a1:d9:a2:65: 4f:dc:33:76:92:bf:f0:25:a0:b0:8b:fe:b5:9f:c7:92:e7:a2: 8f:0c:ba:fb:a8:63:8e:de:fc:7f:41:0f:ce:eb:a2:dc:52:df: eb:c9:09:70:e3:17:a9:ca:ae:7b:3d:29:48:2b:15:de:46:a0: 31:14:03:4b:a8:05:f3:10:65:fb:74:82:46:29:b2:d8:7a:03: 63:8a:2a:6a:fa:c7:9f:b0:99:2c:05:ff:2c:17:c2:b8:e5:48: a7:e7:4e:30:6c:8b:3e:37:2a:80:35:69:ce:98:6d:f3:09:25: ed:a5:a2:15:c9:0a:ad:2a:14:07:b4:5d:48:b8:6d:05:64:92: cb:fd:2d:1e:1e:81:75:10:eb:a1:aa:d8:dd:3a:4e:f8:b2:55: 2c:f6:b1:26:64:d4:2b:40:cc:24:cf:e9:58:c1:50:d4:1c:60: 45:ba:82:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjYwMzI0MjExOTAxWhcNMjYwMzMxMjExOTAxWjAYMRYwFAYD VQQDEw02OWMyZmZjNi00NjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9wQB6Z6Qxo0nVarom52K8HMRZhyTI29kYfyKl0h7lFqnPsMZA9U8eih32P1 EyIEcaxeNGUimB0inUpd/O7sqQ53qI7BTbMF9SXG2Z6d95QoC9O2iotRnEoJlIVV Xx+iEcC8ZEa+I2s6olAt3iHorLklyLX0KBRhNkj5Rv7tmhfx0e9CYAxLvy4T9L0y SAqD3xsdYTFYqu+LHatRuELmOwuaS4yqT2vHoXSJoej56zGfP81fbyd1GUwz64np Nu2igJOpl626U2DE972C6xjO+ZmkaI+cYvYlgDYvr1GBgqT9AglEyvraUezam4Us bhViOPPrnsa8KHBk+joDAiuFYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFibpa5N bGa5XREYQIj8Tg5G934kMB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAarX3iIea+zTd5cGyues7awtS1OUO5JNO62jJUyBHy4rtI/ZRmne5RWEwV3/H q8fkucibMOYdXOK26h/sX740M9ynVSggGgpkgsZyhmfbKJ2EUm0HkOqh2aJlT9wz dpK/8CWgsIv+tZ/Hkueijwy6+6hjjt78f0EPzuui3FLf68kJcOMXqcquez0pSCsV 3kagMRQDS6gF8xBl+3SCRimy2HoDY4oqavrHn7CZLAX/LBfCuOVIp+dOMGyLPjcq gDVpzpht8wkl7aWiFckKrSoUB7RdSLhtBWSSy/0tHh6BdRDroarY3TpO+LJVLPax JmTUK0DMJM/pWMFQ1BxgRbqC7A== -----END CERTIFICATE-----Generated at Thu Mar 26 12:34:32 2026 by rpki-client