$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: BlCvBOuOhPGfIq1Sw39+Kc5prPV4wyPstVGWZhSjxLg= Subject key identifier: A2:C2:C0:34:07:97:D8:25:56:5E:6C:2C:F8:44:EC:AE:BC:B0:2F:49 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 135C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 135A Signing time: Thu 16 Apr 2026 16:55:08 +0000 Manifest this update: Thu 16 Apr 2026 16:55:07 +0000 Manifest next update: Thu 23 Apr 2026 16:55:07 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: pe5fxcVtQgsNMIV5lxs1Z8ooZxCaBAy0irjt8SlLQ00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4956 (0x135c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Apr 16 16:55:07 2026 GMT Not After : Apr 23 16:55:07 2026 GMT Subject: CN=69e1146c-cf51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:a2:fe:6d:90:16:6d:05:9f:8f:ca:24:87: 16:86:29:ed:50:82:56:a3:0a:a9:ef:86:65:b9:eb: cd:be:ac:a7:ea:b2:90:c8:2e:c4:30:62:36:8e:10: ac:c0:db:7e:9a:c9:7a:08:75:e8:5f:c0:40:0c:5b: c4:d5:dd:62:93:0e:3b:a8:6f:ba:2f:8b:bb:ce:46: 9c:dc:34:66:46:d1:58:df:9e:cc:c7:f1:da:49:23: 3a:3b:28:65:0b:69:02:57:80:a9:53:b7:ff:29:e4: fc:59:03:ec:26:e0:b3:a2:d5:17:79:d1:79:09:62: 14:6d:c2:e3:f0:9e:42:39:91:ff:96:ba:b5:b6:ed: 96:8e:d1:7d:bf:d0:f6:4a:df:9f:40:e9:3f:8a:73: f9:ec:3c:cc:1c:67:e9:8b:63:a1:74:83:c9:4f:ed: be:6e:e9:42:42:3c:e4:36:46:a4:3c:db:78:a2:d3: ae:42:b2:9c:c6:37:5f:2d:31:17:2f:d0:e4:0d:89: 1d:2e:d7:8a:82:5b:8e:6d:0d:7b:90:97:cf:1f:74: cf:c3:6f:d0:34:b4:3a:28:57:1d:6a:02:3e:90:55: d1:8f:7a:be:88:ac:93:68:23:f7:5b:bf:62:9b:ad: 01:2b:4c:0b:f2:df:9b:67:ae:80:d8:fa:30:d2:7e: 91:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C2:C0:34:07:97:D8:25:56:5E:6C:2C:F8:44:EC:AE:BC:B0:2F:49 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:5e:b3:73:d8:c2:04:22:e9:b7:d6:f6:84:47:46:64:db:7c: f4:f2:91:2d:46:35:a1:a9:62:ea:9e:58:15:d6:11:39:bd:01: 35:e8:69:fb:d3:67:13:bf:4c:6d:95:2e:dd:f6:0c:15:e3:c8: e6:4c:ad:7b:aa:2c:95:c3:5a:0b:e1:97:d7:ec:72:5b:5c:84: d7:72:55:92:6a:ed:2a:16:24:fd:21:b4:82:b6:50:9a:5c:67: d8:fc:8d:88:0b:62:2e:16:fe:32:cf:a1:12:89:a3:f5:77:42: c1:a9:8e:ba:a4:b2:bb:fb:3e:e6:e2:3c:ec:eb:14:4b:b8:99: 8a:99:d4:37:cc:21:dc:60:77:78:2f:24:c9:f6:70:64:ee:e4: 0a:39:c5:51:16:18:23:97:90:cc:11:32:47:e5:a1:9e:de:83: 1c:1c:9a:45:e3:6d:87:31:d8:96:d9:2d:29:4d:63:fa:d8:96: d8:58:0b:df:28:89:e8:d8:2c:60:a0:b4:4b:a8:02:dc:5e:1d: 0c:67:25:ee:9e:f8:fc:72:7f:5a:95:46:ec:ed:41:76:fc:2e: ca:5c:27:e3:86:ab:fc:8b:9d:4b:ee:f8:b3:38:4a:0c:4b:95: 38:b0:5e:cd:35:67:c1:98:05:e8:09:98:01:f7:cd:c2:58:d4: 2c:a0:07:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjYwNDE2MTY1NTA3WhcNMjYwNDIzMTY1NTA3WjAYMRYwFAYD VQQDEw02OWUxMTQ2Yy1jZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWWi/m2QFm0Fn4/KJIcWhintUIJWowqp74ZluevNvqyn6rKQyC7EMGI2jhCs wNt+msl6CHXoX8BADFvE1d1ikw47qG+6L4u7zkac3DRmRtFY357Mx/HaSSM6Oyhl C2kCV4CpU7f/KeT8WQPsJuCzotUXedF5CWIUbcLj8J5COZH/lrq1tu2WjtF9v9D2 St+fQOk/inP57DzMHGfpi2OhdIPJT+2+bulCQjzkNkakPNt4otOuQrKcxjdfLTEX L9DkDYkdLteKgluObQ17kJfPH3TPw2/QNLQ6KFcdagI+kFXRj3q+iKyTaCP3W79i m60BK0wL8t+bZ66A2Pow0n6ReQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKLCwDQH l9glVl5sLPhE7K68sC9JMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANF6zc9jCBCLpt9b2hEdGZNt89PKRLUY1oali6p5YFdYROb0BNehp+9NnE79M bZUu3fYMFePI5kyte6oslcNaC+GX1+xyW1yE13JVkmrtKhYk/SG0grZQmlxn2PyN iAtiLhb+Ms+hEomj9XdCwamOuqSyu/s+5uI87OsUS7iZipnUN8wh3GB3eC8kyfZw ZO7kCjnFURYYI5eQzBEyR+Whnt6DHByaReNthzHYltktKU1j+tiW2FgL3yiJ6Ngs YKC0S6gC3F4dDGcl7p74/HJ/WpVG7O1Bdvwuylwn44ar/IudS+74szhKDEuVOLBe zTVnwZgF6AmYAffNwljULKAHVw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:41:29 2026 by rpki-client