$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: srKDNVsfzsRHUprz4/lWC4hu0dhEEK73C0l+RBC5Fqg= Subject key identifier: E2:BD:3D:D9:57:63:AB:D7:AF:30:A5:6B:D3:FD:89:16:68:E5:08:CC Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 01EE Signing time: Fri 29 May 2026 03:06:24 +0000 Manifest this update: Fri 29 May 2026 03:06:23 +0000 Manifest next update: Fri 05 Jun 2026 03:06:23 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: TV3G1bVI8kZYFrvYN/8hNOQUr0Kl+Zu8/l0K1XM1uz4=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 03:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: May 29 03:06:23 2026 GMT Not After : Jun 5 03:06:23 2026 GMT Subject: CN=6a1902b0-e64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:c4:70:64:76:83:36:65:90:1e:f4:bd:6d: 7f:d3:49:eb:26:ea:06:76:50:24:b6:eb:e6:7a:ee: bb:c9:d3:e6:9e:9d:60:b8:8f:85:7a:8f:a7:41:7f: 28:2e:9a:1a:c8:33:b3:b7:f5:d1:cd:f4:75:42:fa: b6:dc:12:2c:6f:50:79:31:9c:91:a6:a9:f6:50:b3: ba:a3:ed:19:80:4e:cc:03:12:a7:c0:4d:1b:1e:b4: 31:82:76:46:a8:f5:f6:7f:37:bd:e8:62:4f:b6:7d: e8:3f:33:ac:06:04:14:40:0b:4b:18:cd:3a:09:e1: 20:3e:7d:b0:00:db:b5:70:d4:33:69:0c:3d:ff:1e: 2f:e3:c7:ac:a9:75:7d:92:0e:f4:ce:57:cf:c3:20: 10:27:86:55:e6:c9:33:f4:52:b9:da:3b:38:0b:37: 72:c1:a3:59:36:4e:62:5c:ab:a9:d4:35:98:36:3a: 22:84:7c:3d:53:01:cf:dc:1c:c0:20:55:7e:d7:67: 64:5c:7d:6e:3f:7c:78:68:3e:3b:24:a1:c2:a7:06: 08:e3:81:5d:4c:bf:e4:06:78:93:05:92:47:8f:60: c3:1b:1f:b9:84:56:9e:3c:eb:70:9c:43:32:9e:18: fa:2d:eb:2c:e6:36:20:b7:5f:d5:6c:2b:01:1e:bd: b5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BD:3D:D9:57:63:AB:D7:AF:30:A5:6B:D3:FD:89:16:68:E5:08:CC X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:b0:d8:ec:81:49:27:04:0d:8a:8c:06:eb:06:d5:55:77:7b: 8a:dc:db:55:8e:9d:d6:78:a5:ac:3a:c8:62:f5:3d:74:40:5c: 72:92:d4:47:58:ad:2c:f4:e5:e8:4e:a0:62:c9:60:7f:c5:39: c6:f9:21:ad:0a:c8:70:f9:20:44:9d:54:18:2c:4e:d8:eb:db: 40:a4:68:81:61:05:6e:e5:94:ca:4f:cf:6e:46:88:49:1d:86: 8d:a1:ac:67:2a:69:84:08:62:9a:a4:9e:ad:6d:98:f2:d8:3b: db:d2:18:6c:5e:ae:91:71:b1:42:b3:77:f7:48:2c:99:74:18: 49:c4:c3:72:25:12:2e:5d:f5:3f:08:13:3e:dd:53:11:45:90: da:40:c8:4c:a6:67:4d:14:26:71:f4:28:47:eb:f1:c4:a5:0b: b0:31:95:2a:22:a5:36:8f:76:48:57:cc:84:39:bf:7c:4d:a3: 12:8f:23:71:1f:82:d7:a7:e2:49:39:79:d1:7c:74:e2:77:89: 83:9d:44:3c:21:21:90:c6:20:e1:26:92:cb:44:a0:4f:dc:5e: 97:cd:ea:dc:01:45:95:4f:7b:8c:85:cf:19:30:43:90:76:b0: 83:42:de:2d:7f:f4:fc:6e:03:9d:c0:bf:5f:28:03:ee:93:d5: 0a:e6:ee:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwNTI5MDMwNjIzWhcNMjYwNjA1MDMwNjIzWjAYMRYwFAYD VQQDEw02YTE5MDJiMC1lNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9PEcGR2gzZlkB70vW1/00nrJuoGdlAktuvmeu67ydPmnp1guI+Feo+nQX8o LpoayDOzt/XRzfR1Qvq23BIsb1B5MZyRpqn2ULO6o+0ZgE7MAxKnwE0bHrQxgnZG qPX2fze96GJPtn3oPzOsBgQUQAtLGM06CeEgPn2wANu1cNQzaQw9/x4v48esqXV9 kg70zlfPwyAQJ4ZV5skz9FK52js4CzdywaNZNk5iXKup1DWYNjoihHw9UwHP3BzA IFV+12dkXH1uP3x4aD47JKHCpwYI44FdTL/kBniTBZJHj2DDGx+5hFaePOtwnEMy nhj6Less5jYgt1/VbCsBHr21FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOK9PdlX Y6vXrzCla9P9iRZo5QjMMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFLDY7IFJJwQNiowG6wbVVXd7itzbVY6d1nilrDrIYvU9dEBccpLUR1itLPTl 6E6gYslgf8U5xvkhrQrIcPkgRJ1UGCxO2OvbQKRogWEFbuWUyk/PbkaISR2GjaGs ZypphAhimqSerW2Y8tg729IYbF6ukXGxQrN390gsmXQYScTDciUSLl31PwgTPt1T EUWQ2kDITKZnTRQmcfQoR+vxxKULsDGVKiKlNo92SFfMhDm/fE2jEo8jcR+C16fi STl50Xx04neJg51EPCEhkMYg4SaSy0SgT9xel83q3AFFlU97jIXPGTBDkHawg0Le LX/0/G4DncC/XygD7pPVCubu4g== -----END CERTIFICATE-----Generated at Fri May 29 17:04:45 2026 by rpki-client