$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: RxgSpA+ucJdydhqx4EuHLbum5JR+TrL1r6QTjHCTtc8= Subject key identifier: 09:0F:C0:60:7D:95:BA:9A:3A:9D:ED:7D:AE:19:FE:85:B3:CF:23:53 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 0241 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 023B Signing time: Sun 25 Oct 2026 02:55:57 +0000 Manifest this update: Sun 25 Oct 2026 02:55:56 +0000 Manifest next update: Sun 01 Nov 2026 02:55:56 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: SnBINNuplxuX4CsNLFTMsD7ZU7Ca/KYz/upYm2nEakU=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: u3RDHvzO8IyUThl8mfuW7Q0vDhMHboGSoExS7yNBOm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 577 (0x241) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Oct 25 02:55:56 2026 GMT Not After : Nov 1 02:55:56 2026 GMT Subject: CN=6add6fbc-46c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:1d:5e:61:94:91:47:f2:37:8a:70:7d:ae: a1:d8:7d:e9:0b:6c:b5:e6:8b:3f:93:53:76:88:7a: 24:92:33:a6:06:fb:88:8e:01:d1:24:5b:e5:b8:c3: 23:82:aa:78:07:de:ec:1b:0d:02:7f:f4:7c:5f:f6: e9:1c:16:f8:c8:b7:58:cd:10:58:6e:ae:20:4b:64: bf:1d:3c:23:60:05:86:38:37:bd:14:e6:ee:b5:b0: cd:34:5a:bf:eb:e9:c0:e5:f4:cc:2b:0a:f8:99:7d: e4:b4:8c:36:22:bb:eb:00:6e:dd:13:ce:5b:5d:ac: 5d:55:6d:bb:93:88:c9:1d:ee:85:94:47:63:0e:a6: 85:81:cf:2c:c0:f8:d9:c3:e0:22:75:08:76:df:c9: f5:47:a2:86:08:91:1d:f3:69:ab:90:47:87:fa:58: 9c:73:23:44:55:83:17:2d:81:6c:7d:fc:38:3f:a1: 9c:73:40:43:6f:af:2e:f2:f4:3d:f0:20:26:6b:3f: e4:4b:12:89:05:e0:32:87:20:61:c4:0b:74:c5:55: 51:28:2a:eb:2f:a4:f8:ee:7b:34:9b:a5:f3:71:1d: 97:46:cf:14:3a:33:00:51:cc:c8:69:28:c1:94:62: 24:7f:96:13:d8:10:5b:01:c2:3e:ff:fb:ab:8b:fc: 04:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0F:C0:60:7D:95:BA:9A:3A:9D:ED:7D:AE:19:FE:85:B3:CF:23:53 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:bc:70:31:1b:8f:b4:f7:d6:4b:4b:27:a3:3c:04:fa:e0:22: 66:1b:f5:c4:20:db:cf:8b:17:bc:ec:15:74:bb:d5:92:69:ab: df:8e:8e:44:c7:2e:d2:72:aa:a6:57:51:f2:de:76:0e:fc:7d: 58:c9:7f:6f:2b:7c:7b:4b:98:ea:b6:31:5a:5a:55:b6:10:3c: bf:2d:45:86:32:54:da:03:fb:d8:04:52:f7:07:ea:24:14:fe: 3e:a5:94:69:ba:70:25:6c:6f:7d:73:5a:42:96:32:d1:7a:df: 8a:a6:dc:c8:e1:55:0d:df:8d:f2:a1:d6:51:dc:1f:70:74:ac: 9f:2d:b2:c1:98:d1:75:8a:9f:2b:93:a6:c9:ac:5e:03:21:51: 74:c8:d7:3c:01:dc:c6:f4:ef:13:af:8c:e6:ae:f5:c0:3f:56: e9:d6:82:a1:7a:24:66:d0:fe:8d:8f:db:ca:15:80:d0:16:cb: 61:c4:e5:52:47:1d:e7:5b:d2:a7:3d:f1:86:6b:e8:1b:78:d3: 4a:b5:65:64:a0:15:a8:75:fa:a7:1b:06:4b:9f:1a:51:95:88: 35:b1:a0:57:6e:a8:e7:48:ad:b3:94:fb:b1:95:48:9e:85:c6: cb:46:5c:ba:f6:a0:c9:d7:e3:7b:6c:0a:04:dc:07:6d:5a:45: 4f:5d:6d:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYxMDI1MDI1NTU2WhcNMjYxMTAxMDI1NTU2WjAYMRYwFAYD VQQDEw02YWRkNmZiYy00NmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hUdXmGUkUfyN4pwfa6h2H3pC2y15os/k1N2iHokkjOmBvuIjgHRJFvluMMj gqp4B97sGw0Cf/R8X/bpHBb4yLdYzRBYbq4gS2S/HTwjYAWGODe9FObutbDNNFq/ 6+nA5fTMKwr4mX3ktIw2IrvrAG7dE85bXaxdVW27k4jJHe6FlEdjDqaFgc8swPjZ w+AidQh238n1R6KGCJEd82mrkEeH+liccyNEVYMXLYFsffw4P6Gcc0BDb68u8vQ9 8CAmaz/kSxKJBeAyhyBhxAt0xVVRKCrrL6T47ns0m6XzcR2XRs8UOjMAUczIaSjB lGIkf5YT2BBbAcI+//uri/wEKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkPwGB9 lbqaOp3tfa4Z/oWzzyNTMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAorxwMRuPtPfWS0snozwE+uAiZhv1xCDbz4sXvOwVdLvVkmmr346ORMcu0nKq pldR8t52Dvx9WMl/byt8e0uY6rYxWlpVthA8vy1FhjJU2gP72ARS9wfqJBT+PqWU abpwJWxvfXNaQpYy0XrfiqbcyOFVDd+N8qHWUdwfcHSsny2ywZjRdYqfK5Omyaxe AyFRdMjXPAHcxvTvE6+M5q71wD9W6daCoXokZtD+jY/byhWA0BbLYcTlUkcd51vS pz3xhmvoG3jTSrVlZKAVqHX6pxsGS58aUZWINbGgV26o50its5T7sZVInoXGy0Zc uvagydfje2wKBNwHbVpFT11trg== -----END CERTIFICATE-----Generated at Mon Oct 26 02:18:27 2026 by rpki-client