$ rpki-client -vvvf rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft File: XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft (raw, json) Hash identifier: 1LwxUBUXqyrodcwDEiufOiiF9+KiR4SuhFSSYG00nks= Subject key identifier: 39:7A:72:01:F4:CC:51:C2:99:12:99:AC:94:76:6A:4B:29:53:26:4F Authority key identifier: 5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 Certificate issuer: /CN=A9153F9E/serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft Manifest number: 07D2 Signing time: Fri 02 Oct 2026 21:37:29 +0000 Manifest this update: Fri 02 Oct 2026 21:37:28 +0000 Manifest next update: Fri 09 Oct 2026 21:37:28 +0000 Files and hashes: 1: XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl (hash: Sl0oJvNQjpnx2gRnFruoDw3dPuAHOBRhbqVvbQ59gWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 21:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F9E, serialNumber=5C2C5827C4E899BC2A503406C5CB09B18E133FC6 Validity Not Before: Oct 2 21:37:28 2026 GMT Not After : Oct 9 21:37:28 2026 GMT Subject: CN=6ac02418-e958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:03:3a:b0:02:bf:9b:d8:bc:84:a5:e8:6f: 5b:3f:9d:8f:d8:22:72:d4:d1:18:11:9c:9d:ad:33: 01:d9:95:ba:c0:ce:0a:da:af:68:b8:0d:df:f2:7f: f5:da:7b:b0:66:df:0d:60:ba:91:58:16:3a:76:25: 22:7a:cb:8f:7a:1d:34:dd:82:c9:93:ac:80:b8:51: da:5c:dc:fb:ce:0a:49:7c:ba:fd:86:42:f0:51:05: fa:59:9b:b8:4b:d3:43:78:bd:8e:93:fb:ab:da:6e: 69:be:8c:9d:67:07:12:8b:ef:b4:5e:54:ec:1b:8d: 2f:d3:2d:33:99:7d:8d:1a:21:fe:aa:4f:f3:8f:6e: 33:0b:02:51:2c:82:1b:0b:0b:0b:f9:f8:d9:95:41: 41:f1:3d:78:d1:ea:9d:39:41:5c:f9:36:cd:79:ee: 83:03:48:ba:57:80:80:c0:47:0f:c1:0e:cc:29:2a: 53:b0:83:d9:b7:0d:42:fc:7d:c2:d7:4e:d0:3e:ad: 9a:7a:1f:ac:82:46:90:68:69:68:2f:63:12:53:0b: d7:c2:3b:f6:b2:1a:24:0f:db:85:c3:bf:87:e4:0f: 16:95:28:73:15:36:3a:9d:6c:2c:d1:27:af:cb:7f: 83:c0:14:41:38:80:3d:a5:70:82:ec:94:0a:03:f3: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:72:01:F4:CC:51:C2:99:12:99:AC:94:76:6A:4B:29:53:26:4F X509v3 Authority Key Identifier: keyid:5C:2C:58:27:C4:E8:99:BC:2A:50:34:06:C5:CB:09:B1:8E:13:3F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCxYJ8TombwqUDQGxcsJsY4TP8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F9E/00D8C88C53AF11EB99300916C4F9AE02/XCxYJ8TombwqUDQGxcsJsY4TP8Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:36:c3:d0:46:af:34:6e:3e:d6:ac:0d:89:96:da:e8:e1:9d: 8c:64:d1:13:f4:66:f6:00:83:38:6b:5e:fa:6e:bc:bc:c7:f9: 0d:50:5a:35:ab:7a:9d:81:f9:60:5b:ed:9a:e9:af:72:d8:53: 1e:3b:62:23:8a:6c:1a:88:b4:6a:9f:40:74:d4:d9:06:b0:ff: 57:34:f8:bb:eb:a2:d6:b2:74:00:69:04:cd:3b:98:a9:ef:1c: 90:63:bf:71:3a:93:d4:cc:f8:f2:73:72:48:db:92:9e:ea:5b: af:2e:04:df:7d:7b:d1:2b:0a:02:a9:25:2a:42:41:c8:fa:70: 8e:96:b4:f5:fe:d4:ef:56:3b:35:0b:33:62:0a:83:71:c7:02: 9a:2f:76:eb:93:47:e3:b4:be:db:00:40:db:48:d0:ca:6d:6c: a2:95:af:ad:3a:b3:25:9a:9f:10:fd:94:4d:d3:1b:96:1c:11: 61:de:53:41:95:38:dd:b6:ce:b9:4d:f0:12:05:31:44:8a:c9: 40:f8:e9:4f:8a:b9:eb:ea:b7:02:a7:7a:49:7f:4f:ae:3f:db: 54:80:8e:3b:96:cd:07:57:c5:78:3a:4a:d1:e7:88:36:1e:a9: 4a:33:44:d6:90:4d:20:83:b4:73:b9:27:dd:3b:95:dd:29:55: 34:99:a2:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNGOUUxMTAvBgNVBAUTKDVDMkM1ODI3QzRFODk5QkMyQTUwMzQwNkM1Q0IwOUIx OEUxMzNGQzYwHhcNMjYxMDAyMjEzNzI4WhcNMjYxMDA5MjEzNzI4WjAYMRYwFAYD VQQDEw02YWMwMjQxOC1lOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpkDOrACv5vYvISl6G9bP52P2CJy1NEYEZydrTMB2ZW6wM4K2q9ouA3f8n/1 2nuwZt8NYLqRWBY6diUiesuPeh003YLJk6yAuFHaXNz7zgpJfLr9hkLwUQX6WZu4 S9NDeL2Ok/ur2m5pvoydZwcSi++0XlTsG40v0y0zmX2NGiH+qk/zj24zCwJRLIIb CwsL+fjZlUFB8T140eqdOUFc+TbNee6DA0i6V4CAwEcPwQ7MKSpTsIPZtw1C/H3C 107QPq2aeh+sgkaQaGloL2MSUwvXwjv2shokD9uFw7+H5A8WlShzFTY6nWws0Sev y3+DwBRBOIA9pXCC7JQKA/NubQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDl6cgH0 zFHCmRKZrJR2akspUyZPMB8GA1UdIwQYMBaAFFwsWCfE6Jm8KlA0BsXLCbGOEz/G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0Y5RS8wMEQ4Qzg4QzUz QUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21id3FVRFFHeGNzSnNZNFRQ OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDeFlKOFRvbWJ3cVVEUUd4Y3NKc1k0VFA4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0Y5RS8wMEQ4Qzg4QzUzQUYxMUVCOTkzMDA5MTZDNEY5QUUwMi9YQ3hZSjhUb21i d3FVRFFHeGNzSnNZNFRQOFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABTbD0EavNG4+1qwNiZba6OGdjGTRE/Rm9gCDOGte+m68vMf5DVBaNat6nYH5 YFvtmumvcthTHjtiI4psGoi0ap9AdNTZBrD/VzT4u+ui1rJ0AGkEzTuYqe8ckGO/ cTqT1Mz48nNySNuSnupbry4E33170SsKAqklKkJByPpwjpa09f7U71Y7NQszYgqD cccCmi9265NH47S+2wBA20jQym1sopWvrTqzJZqfEP2UTdMblhwRYd5TQZU43bbO uU3wEgUxRIrJQPjpT4q56+q3Aqd6SX9Prj/bVICOO5bNB1fFeDpK0eeINh6pSjNE 1pBNIIO0c7kn3TuV3SlVNJmihQ== -----END CERTIFICATE-----Generated at Sun Oct 4 11:16:45 2026 by rpki-client