$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: m+pdoQxlsoc+mYa98abkL02M+NDwHeqkneaW6mIusK0= Subject key identifier: 93:C0:97:10:C7:6B:B4:86:8D:01:E2:BE:96:17:56:35:50:EB:CA:6F Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 016C Signing time: Wed 17 Sep 2025 04:27:00 +0000 Manifest this update: Wed 17 Sep 2025 04:27:00 +0000 Manifest next update: Wed 24 Sep 2025 04:27:00 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: YdIA+cGJi9ZCHdmawnvx621ayigJXq0f/vSTP/3GvuQ=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: tBK54wCyQ2wcX6ZNsRYGZb85q/LNuJrcbm5n2EF4GsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Sep 17 04:27:00 2025 GMT Not After : Sep 24 04:27:00 2025 GMT Subject: CN=68ca3894-6585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:a9:8e:87:b1:89:5c:bb:0b:bb:49:2f:a3: da:c2:04:26:9c:fe:a3:11:a6:10:c4:37:71:ef:95: f7:7a:4c:05:ec:bb:2a:86:68:df:f2:b9:76:9d:4a: e5:34:01:90:e9:f5:c0:ba:6f:b6:d5:98:db:bf:89: 1c:e6:14:43:21:78:4c:39:34:f0:ca:80:3e:39:9a: 9e:6b:fc:7e:e7:21:3c:25:2e:04:11:9c:42:b2:8d: fb:dc:7c:47:8c:79:ac:bf:36:57:d2:89:03:15:8e: f7:e5:0a:a1:7b:9c:5b:7e:a4:65:ef:a2:75:e9:0a: 8d:61:9f:5c:df:a7:0c:c4:ce:88:dc:d4:fc:1e:39: 21:70:90:6b:71:2e:fc:3b:a9:41:d7:dc:9d:10:51: 0e:f4:35:c1:fe:1d:a2:e1:da:2c:2a:dc:4b:ab:ae: 9a:2c:d7:48:d5:b1:67:77:10:67:45:69:74:7b:de: f3:0f:dc:6f:29:6c:6d:f5:6a:3d:9b:5c:61:83:ca: 50:73:c4:90:f8:29:1e:5e:a3:57:9c:65:2a:1b:1c: 78:32:17:78:9b:e0:d3:02:0b:ca:7d:c7:bc:65:2b: 1e:a9:6c:06:3c:8e:d7:2d:9d:62:07:12:27:a8:59: 99:42:94:71:0f:98:d6:fb:52:9a:22:cb:32:50:1e: c0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C0:97:10:C7:6B:B4:86:8D:01:E2:BE:96:17:56:35:50:EB:CA:6F X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:30:37:27:02:c1:94:8b:3d:70:d6:45:83:9c:72:1d:9e:7b: 1a:27:17:54:ab:d7:9d:ea:ce:99:99:ce:5b:72:3c:2a:cc:29: b6:01:74:c8:83:33:df:76:ea:ac:8f:93:00:fb:92:d4:78:a4: 83:ac:ff:a3:a7:92:8f:6a:64:1a:3f:92:a7:d0:77:fb:16:be: 63:49:a9:84:97:ea:b4:31:9a:0f:a4:8f:95:3a:7d:d8:33:c6: 9e:65:4c:cb:d1:4f:c0:20:14:a1:fc:c9:86:16:ff:60:f3:3b: 99:5b:b2:39:85:8f:7f:d6:7d:86:4b:b6:c5:df:cc:36:67:9d: 16:20:42:2c:ff:25:c0:91:37:70:1f:80:29:e3:02:36:7d:08: 3a:a8:48:59:8a:80:5b:b5:ce:23:87:5d:c6:8c:ef:05:2a:5b: fc:45:af:b3:a3:21:68:fc:02:6b:ca:71:0f:df:d9:8f:46:8c: 14:af:ac:29:97:57:cd:82:09:36:31:f8:7f:16:d3:9e:65:89: c7:13:5c:fd:75:13:9b:be:8d:3a:7a:93:f0:19:8c:83:0b:a2: 0e:e1:b1:7a:77:5b:f2:4b:3f:f2:9d:6a:d6:f1:4a:a1:fc:cf: 5c:d2:16:dd:aa:0d:ce:a9:5f:52:c2:0e:a7:ea:70:14:cd:34: 17:a5:02:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjUwOTE3MDQyNzAwWhcNMjUwOTI0MDQyNzAwWjAYMRYwFAYD VQQDEw02OGNhMzg5NC02NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskapjoexiVy7C7tJL6PawgQmnP6jEaYQxDdx75X3ekwF7Lsqhmjf8rl2nUrl NAGQ6fXAum+21Zjbv4kc5hRDIXhMOTTwyoA+OZqea/x+5yE8JS4EEZxCso373HxH jHmsvzZX0okDFY735Qqhe5xbfqRl76J16QqNYZ9c36cMxM6I3NT8HjkhcJBrcS78 O6lB19ydEFEO9DXB/h2i4dosKtxLq66aLNdI1bFndxBnRWl0e97zD9xvKWxt9Wo9 m1xhg8pQc8SQ+CkeXqNXnGUqGxx4Mhd4m+DTAgvKfce8ZSseqWwGPI7XLZ1iBxIn qFmZQpRxD5jW+1KaIssyUB7A7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPAlxDH a7SGjQHivpYXVjVQ68pvMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaMDcnAsGUiz1w1kWDnHIdnnsaJxdUq9ed6s6Zmc5bcjwqzCm2AXTI gzPfduqsj5MA+5LUeKSDrP+jp5KPamQaP5Kn0Hf7Fr5jSamEl+q0MZoPpI+VOn3Y M8aeZUzL0U/AIBSh/MmGFv9g8zuZW7I5hY9/1n2GS7bF38w2Z50WIEIs/yXAkTdw H4Ap4wI2fQg6qEhZioBbtc4jh13GjO8FKlv8Ra+zoyFo/AJrynEP39mPRowUr6wp l1fNggk2Mfh/FtOeZYnHE1z9dRObvo06epPwGYyDC6IO4bF6d1vySz/ynWrW8Uqh /M9c0hbdqg3OqV9Swg6n6nAUzTQXpQKV -----END CERTIFICATE-----Generated at Thu Sep 18 23:10:55 2025 by rpki-client