$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: 2A+Io5mvqtYuDZX0aeZgFBDHsYiDhPPMmc9WXvr5eIE= Subject key identifier: 72:12:2B:D4:62:3A:39:E4:24:15:9F:34:5C:BA:79:E3:10:F0:A4:4A Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 0789 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 0789 Signing time: Tue 12 May 2026 21:35:51 +0000 Manifest this update: Tue 12 May 2026 21:35:51 +0000 Manifest next update: Tue 19 May 2026 21:35:51 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: 1f+7+2aPwH9V7ukt94jou2ya3cb0aNdwGJflma7iImw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 19:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1929 (0x789) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: May 12 21:35:51 2026 GMT Not After : May 19 21:35:51 2026 GMT Subject: CN=6a039d37-09db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:bf:12:8b:f3:1d:ac:8b:41:58:9f:90:6b: 0d:5c:40:b5:ae:83:af:80:58:b1:35:4a:75:fb:a2: ce:96:e9:e5:85:a8:de:dd:be:b7:53:12:fd:4c:62: d2:b6:fd:da:75:dc:ba:4f:48:20:20:7b:de:f6:ea: 79:6e:a4:63:22:ab:43:ef:c3:ee:91:2b:31:41:1a: c4:f3:ba:5a:24:61:8c:45:6b:4b:b4:55:b7:0d:7b: 87:34:27:a8:68:3c:80:b2:83:3e:b7:b6:31:ca:15: 62:5b:3b:e5:90:b8:32:fc:39:76:b6:dc:75:44:6f: 0c:e6:65:08:fa:0f:2a:0c:c4:25:ca:57:42:13:ad: 4d:a7:aa:67:7d:5d:7f:5e:ea:7a:56:ed:6f:62:1a: e9:d6:8c:f7:32:58:56:9d:59:f9:d0:2f:75:67:1b: 31:97:1a:25:b5:95:76:74:80:74:fb:1a:54:f6:ab: 28:a0:87:a6:d3:20:f1:71:c4:22:30:51:b3:bf:0b: c3:ac:6f:1b:b2:aa:02:69:d1:c2:26:85:05:2e:ff: eb:20:5b:aa:d3:85:af:a4:13:90:a2:05:ff:9f:2b: ec:09:e3:80:a7:49:6b:85:d9:c6:25:3b:03:79:45: 41:0c:57:f0:bc:5d:7a:20:24:bb:5f:76:3e:18:bb: c6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:2B:D4:62:3A:39:E4:24:15:9F:34:5C:BA:79:E3:10:F0:A4:4A X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f1:1f:96:a4:13:a0:8c:04:59:e5:32:85:77:ed:6e:0a:56: 45:64:a6:9a:1e:50:03:84:4b:dc:25:ad:50:e4:b7:82:b2:b9: 76:85:1e:1f:cd:e5:08:8f:f6:30:8d:85:c1:45:8c:cf:cf:f1: dc:80:d6:5d:be:dc:33:ce:92:ac:81:04:c3:33:58:fa:14:b5: 1e:2a:eb:91:43:50:8f:66:15:6c:88:cb:17:05:de:04:bd:4d: ba:4f:ce:92:97:31:a5:fb:0b:8e:59:72:0e:1f:2f:03:67:d2: 8c:69:4f:a6:0b:ba:24:94:02:4e:49:86:30:2f:de:53:91:3f: bd:39:93:bb:c4:3e:25:96:af:d6:89:22:1d:ff:22:e7:7d:df: 2b:e3:cb:8d:89:7d:fc:cb:20:89:63:e4:5a:94:38:ce:70:a8: 7d:76:6e:50:86:9a:a4:dc:af:94:07:c6:fd:44:73:3f:96:f0: 98:31:a3:61:74:63:31:fe:fc:5d:a7:2d:5a:ee:c6:08:4d:4c: e1:fe:b3:7f:00:40:0c:f7:70:ff:ab:4d:29:66:0f:67:5a:fe: df:e5:40:21:df:4a:f9:a7:74:fa:00:40:73:fd:02:8a:21:9f: 2d:80:2f:5b:68:3a:5b:17:10:09:41:b9:08:ff:ad:5e:f0:0f: 5f:05:fd:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjYwNTEyMjEzNTUxWhcNMjYwNTE5MjEzNTUxWjAYMRYwFAYD VQQDEw02YTAzOWQzNy0wOWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhOy/EovzHayLQVifkGsNXEC1roOvgFixNUp1+6LOlunlhaje3b63UxL9TGLS tv3addy6T0ggIHve9up5bqRjIqtD78PukSsxQRrE87paJGGMRWtLtFW3DXuHNCeo aDyAsoM+t7YxyhViWzvlkLgy/Dl2ttx1RG8M5mUI+g8qDMQlyldCE61Np6pnfV1/ Xup6Vu1vYhrp1oz3MlhWnVn50C91ZxsxlxoltZV2dIB0+xpU9qsooIem0yDxccQi MFGzvwvDrG8bsqoCadHCJoUFLv/rIFuq04WvpBOQogX/nyvsCeOAp0lrhdnGJTsD eUVBDFfwvF16ICS7X3Y+GLvGlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHISK9Ri OjnkJBWfNFy6eeMQ8KRKMB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfEflqQToIwEWeUyhXftbgpWRWSmmh5QA4RL3CWtUOS3grK5doUeH83lCI/2 MI2FwUWMz8/x3IDWXb7cM86SrIEEwzNY+hS1HirrkUNQj2YVbIjLFwXeBL1Nuk/O kpcxpfsLjllyDh8vA2fSjGlPpgu6JJQCTkmGMC/eU5E/vTmTu8Q+JZav1okiHf8i 533fK+PLjYl9/MsgiWPkWpQ4znCofXZuUIaapNyvlAfG/URzP5bwmDGjYXRjMf78 XactWu7GCE1M4f6zfwBADPdw/6tNKWYPZ1r+3+VAId9K+ad0+gBAc/0CiiGfLYAv W2g6WxcQCUG5CP+tXvAPXwX9uA== -----END CERTIFICATE-----Generated at Wed May 13 01:25:20 2026 by rpki-client