$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: BHBg+3WbqrOEqKqX7LqGHSwH9PpzoZj/BGTmb+cN0S0= Subject key identifier: 9D:F8:7C:58:1C:FA:E7:7E:56:68:1D:75:71:7F:3D:D1:20:8E:0B:C6 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 1345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 1343 Signing time: Mon 02 Mar 2026 17:00:17 +0000 Manifest this update: Mon 02 Mar 2026 17:00:17 +0000 Manifest next update: Mon 09 Mar 2026 17:00:17 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: mX6f8Jgy9okSE87uBgtGsew23kRklJiKQX1wUBHenVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 16:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4933 (0x1345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Mar 2 17:00:17 2026 GMT Not After : Mar 9 17:00:17 2026 GMT Subject: CN=69a5c221-6e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:4d:fe:78:bc:f9:e8:bc:c6:53:d2:e0:84: d5:35:4b:ae:b8:6e:c6:ca:12:12:dd:5d:98:ae:93: 13:fa:8c:da:78:90:70:1e:f4:31:c5:7a:c6:cf:46: d4:6a:6a:8d:ad:71:68:ef:2f:b5:4f:36:11:06:78: 84:ca:57:32:ea:ed:65:2e:36:95:dc:5f:0c:f9:29: f3:f5:1f:0f:9b:b9:80:1b:58:98:67:10:29:3c:2f: 2c:e2:2c:ae:1e:64:3c:a0:3d:8c:d7:e5:e1:6c:55: df:d3:59:5e:6c:a3:a2:f0:08:44:01:64:80:02:70: 9a:3f:a5:dd:0a:c4:3b:a2:42:a2:4c:7e:8a:ed:3a: dc:08:b4:a0:e6:d8:55:9f:7a:42:b1:85:e9:01:3c: c8:94:3d:e6:27:6a:08:bc:28:37:cc:9f:5f:60:f0: dc:8f:37:f5:1a:39:87:4d:10:93:a5:32:94:df:67: 4a:60:e6:43:cd:0e:9d:11:c4:c4:dc:69:0f:af:0f: 0b:a1:fd:65:f5:f1:a9:dd:5e:d2:0a:86:0f:84:3c: ea:c3:46:23:72:53:63:7d:7d:48:c7:3a:0b:44:29: d8:4b:f3:64:b1:dd:bb:b3:65:9f:cd:4a:0e:11:4c: 12:cd:f7:a0:f7:15:5e:b3:d2:45:84:1c:18:12:46: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F8:7C:58:1C:FA:E7:7E:56:68:1D:75:71:7F:3D:D1:20:8E:0B:C6 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:0a:a7:63:3e:f2:05:bd:ab:43:93:4b:cf:75:56:cd:58:c9: 58:80:d6:1c:3a:90:93:c4:1f:aa:be:2e:53:b9:6f:70:60:ba: 3a:7c:c9:d8:f8:12:4a:d8:7f:8d:53:a0:f5:d6:21:af:ec:f3: 96:cf:f0:e1:5c:60:f9:fd:69:15:03:21:da:a0:7c:dd:f4:f7: ad:4f:9c:dc:6f:38:c3:40:3e:f4:b3:07:d0:a7:92:1a:21:55: 3c:0d:1a:10:39:7b:b5:2e:96:9b:a2:81:a9:fb:85:da:05:a4: 81:3e:d1:9a:8e:30:dc:81:f8:07:33:9d:7a:74:24:b2:94:19: e3:90:a6:2a:42:81:dc:13:2b:d7:5c:ad:a4:74:bc:7e:8b:00: c8:c3:b6:4d:b2:7d:68:d7:ac:88:3d:ef:4d:31:d7:43:85:7d: ed:88:9b:d1:82:ce:1f:8f:ca:78:af:27:99:1b:5e:88:e1:9d: 45:d2:54:2a:27:7f:0a:ce:ac:d0:6f:80:eb:86:08:ab:da:c3: 2c:e8:92:9f:68:e6:d9:84:2a:fc:cc:c4:76:fa:e6:f8:9b:97: 08:ea:3f:ce:38:db:62:d5:de:28:33:12:41:40:dd:8b:b9:3d: 74:46:4c:4a:f2:c7:ee:78:d0:89:b4:f1:7c:f7:ba:e2:15:74: 40:32:46:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjYwMzAyMTcwMDE3WhcNMjYwMzA5MTcwMDE3WjAYMRYwFAYD VQQDEw02OWE1YzIyMS02ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhFN/ni8+ei8xlPS4ITVNUuuuG7GyhIS3V2YrpMT+ozaeJBwHvQxxXrGz0bU amqNrXFo7y+1TzYRBniEylcy6u1lLjaV3F8M+Snz9R8Pm7mAG1iYZxApPC8s4iyu HmQ8oD2M1+XhbFXf01lebKOi8AhEAWSAAnCaP6XdCsQ7okKiTH6K7TrcCLSg5thV n3pCsYXpATzIlD3mJ2oIvCg3zJ9fYPDcjzf1GjmHTRCTpTKU32dKYOZDzQ6dEcTE 3GkPrw8Lof1l9fGp3V7SCoYPhDzqw0YjclNjfX1IxzoLRCnYS/Nksd27s2WfzUoO EUwSzfeg9xVes9JFhBwYEkZcjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ34fFgc +ud+VmgddXF/PdEgjgvGMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQqnYz7yBb2rQ5NLz3VWzVjJWIDWHDqQk8Qfqr4uU7lvcGC6OnzJ2PgSSth/ jVOg9dYhr+zzls/w4Vxg+f1pFQMh2qB83fT3rU+c3G84w0A+9LMH0KeSGiFVPA0a EDl7tS6Wm6KBqfuF2gWkgT7Rmo4w3IH4BzOdenQkspQZ45CmKkKB3BMr11ytpHS8 fosAyMO2TbJ9aNesiD3vTTHXQ4V97Yib0YLOH4/KeK8nmRteiOGdRdJUKid/Cs6s 0G+A64YIq9rDLOiSn2jm2YQq/MzEdvrm+JuXCOo/zjjbYtXeKDMSQUDdi7k9dEZM SvLH7njQibTxfPe64hV0QDJGhg== -----END CERTIFICATE-----Generated at Mon Mar 2 22:21:46 2026 by rpki-client