$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: vSibpe7nALt1YGX8JLfVoyWNBZwvJCfB5aNUMgchYeU= Subject key identifier: 3E:F4:06:D4:E6:16:B1:4F:FD:63:3E:67:55:29:0B:97:D1:38:E8:A3 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 01D3 Signing time: Sun 05 Apr 2026 03:07:20 +0000 Manifest this update: Sun 05 Apr 2026 03:07:20 +0000 Manifest next update: Sun 12 Apr 2026 03:07:20 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: oZQJplyniysx3Qt3nHRFpwMYlTiL9t5jbG0OfOg2594=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Apr 5 03:07:20 2026 GMT Not After : Apr 12 03:07:20 2026 GMT Subject: CN=69d1d1e8-d347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f3:79:46:7a:de:ed:85:a7:18:69:02:50:47: 50:87:99:7a:b9:be:c4:a0:e8:33:9a:29:77:29:cd: 07:a4:58:90:82:28:ce:81:9f:14:d5:3c:56:f0:f0: 54:6a:08:c0:d8:ba:92:39:e9:aa:62:db:d6:7c:29: 67:79:cf:05:30:f7:b2:6a:5d:0b:45:d9:35:56:de: 51:2f:40:68:99:a6:b6:84:d5:4f:cc:2d:a5:cf:7a: f2:1d:56:1f:b1:2c:21:50:e6:25:34:d5:ce:51:42: 8e:25:13:b1:66:70:ec:83:1e:79:53:56:8d:8f:56: d7:8d:64:88:3d:a2:68:3d:de:48:af:b0:1c:3e:63: 61:6b:f3:f8:9d:4c:07:42:14:40:c1:63:94:3c:4c: 9d:e5:5d:9e:fe:3b:de:fd:6f:c0:1f:d4:48:1c:5e: 7c:5f:60:56:61:a4:24:9c:a5:af:b7:a8:a0:44:4a: 6c:19:95:49:a2:5c:61:c3:6f:a8:c5:ef:5b:db:78: f6:b4:b8:43:0c:d2:98:c2:15:c9:a7:dc:24:b8:ad: a2:a2:7c:47:fb:45:9f:47:55:36:58:ac:35:ec:8c: e7:ed:ef:75:c6:5c:4f:c1:fa:2c:62:8c:5c:9d:40: e5:cd:9a:69:17:03:63:7d:8d:d6:f4:b8:62:f2:ca: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F4:06:D4:E6:16:B1:4F:FD:63:3E:67:55:29:0B:97:D1:38:E8:A3 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:f5:e3:2a:62:4b:5a:c7:be:0f:d6:e1:a6:dd:94:34:fe:ac: 6e:f8:a8:7e:3d:94:69:78:af:f0:9f:49:ad:62:41:e3:19:29: bc:a2:0d:10:21:bb:d7:0a:21:6a:53:2f:b5:9e:fa:c1:0c:9a: 98:bd:0b:1b:05:5e:c2:e2:12:8c:23:b8:b0:48:dc:52:01:4b: ae:f1:80:27:5a:62:bc:01:1a:43:7d:70:0c:a5:89:ea:06:e5: e8:08:bd:15:19:4d:91:10:50:48:09:3a:0b:3b:9b:79:b5:60: 29:ad:c2:8f:3c:a3:a2:5c:c7:cc:d1:e4:44:e3:9c:13:89:26: fa:77:b6:be:a2:6e:ab:b2:bf:99:90:73:8d:b9:7e:1d:36:c9: ef:14:03:88:47:6d:fc:8f:82:64:a3:4a:e3:84:a4:cf:3a:26: 76:96:de:82:0c:ce:93:6c:ba:52:37:dc:d9:0a:e8:b1:50:ec: 9b:c7:f1:20:4c:50:10:54:40:51:b7:c9:10:0b:37:91:a4:41: 05:9e:cb:23:cc:54:30:ca:27:7d:b7:1b:90:99:9e:8c:a9:65: 5a:d2:5c:3e:14:58:c7:45:c7:c7:d9:f0:38:b4:13:36:5a:78: d6:41:6f:a5:b9:c0:a1:c4:30:da:8e:b8:37:50:3e:ab:9c:a3: 53:ab:bc:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwNDA1MDMwNzIwWhcNMjYwNDEyMDMwNzIwWjAYMRYwFAYD VQQDEw02OWQxZDFlOC1kMzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fN5Rnre7YWnGGkCUEdQh5l6ub7EoOgzmil3Kc0HpFiQgijOgZ8U1TxW8PBU agjA2LqSOemqYtvWfClnec8FMPeyal0LRdk1Vt5RL0Bomaa2hNVPzC2lz3ryHVYf sSwhUOYlNNXOUUKOJROxZnDsgx55U1aNj1bXjWSIPaJoPd5Ir7AcPmNha/P4nUwH QhRAwWOUPEyd5V2e/jve/W/AH9RIHF58X2BWYaQknKWvt6igREpsGZVJolxhw2+o xe9b23j2tLhDDNKYwhXJp9wkuK2ionxH+0WfR1U2WKw17Izn7e91xlxPwfosYoxc nUDlzZppFwNjfY3W9Lhi8sqJgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD70BtTm FrFP/WM+Z1UpC5fROOijMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVPXjKmJLWse+D9bhpt2UNP6sbviofj2UaXiv8J9JrWJB4xkpvKINECG71woh alMvtZ76wQyamL0LGwVewuISjCO4sEjcUgFLrvGAJ1pivAEaQ31wDKWJ6gbl6Ai9 FRlNkRBQSAk6CzubebVgKa3CjzyjolzHzNHkROOcE4km+ne2vqJuq7K/mZBzjbl+ HTbJ7xQDiEdt/I+CZKNK44SkzzomdpbeggzOk2y6Ujfc2QrosVDsm8fxIExQEFRA UbfJEAs3kaRBBZ7LI8xUMMonfbcbkJmejKllWtJcPhRYx0XHx9nwOLQTNlp41kFv pbnAocQw2o64N1A+q5yjU6u8JA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:17 2026 by rpki-client