$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: qQum0GgxtEzaIC9ewvMlZX4tMPtnkatroeaLRIHHDsE= Subject key identifier: E4:20:4F:84:AB:68:9D:E8:E5:4F:75:7E:8C:10:7F:6E:9C:7E:D1:29 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 0222 Signing time: Sat 05 Sep 2026 02:39:42 +0000 Manifest this update: Sat 05 Sep 2026 02:39:42 +0000 Manifest next update: Sat 12 Sep 2026 02:39:42 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: gLoulnAxhH1Pd9A8KIcgVMfv6WhjN+923YSAq4GXJJQ=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: u3RDHvzO8IyUThl8mfuW7Q0vDhMHboGSoExS7yNBOm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 02:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Sep 5 02:39:42 2026 GMT Not After : Sep 12 02:39:42 2026 GMT Subject: CN=6a9b80ee-1177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:4f:7e:8b:ef:8b:2e:db:dd:dc:c4:62:c3: 7e:bf:28:22:1b:f9:30:9f:7c:0e:db:b3:df:21:c1: 67:dd:cf:66:ae:bc:79:68:c4:bf:bb:d5:50:f3:22: 6d:7f:27:3d:98:d9:05:07:f3:95:3d:22:d8:56:d3: 29:a4:cd:13:20:a1:27:bd:2a:70:fd:3c:62:f2:3d: 55:a1:9b:c5:71:5e:08:c2:94:bc:fe:d8:a6:86:35: f7:34:43:da:c3:38:03:dc:43:7b:ce:c0:51:46:95: e8:3b:c4:05:f3:d5:a9:8c:92:1b:d1:eb:c1:2a:33: 4b:58:56:b7:0a:4d:37:dc:67:b9:6a:86:9a:16:56: 47:50:43:a0:c0:c8:6f:18:ce:8e:9b:51:20:1a:84: ce:63:bc:67:ab:98:97:97:33:b3:84:1d:54:ce:9b: ca:9f:ad:d0:ae:a8:73:0d:d0:ad:f1:d2:8f:6d:04: 1f:3c:45:df:20:fa:01:4f:32:7b:d9:b5:23:d0:ac: 40:c6:fc:dc:08:1c:f2:38:48:a8:a6:7a:33:5b:59: 30:96:2b:f6:8d:05:be:7f:68:a1:a8:1a:e2:19:b3: 64:87:3e:85:80:cf:c6:e3:9b:86:5e:3b:84:ed:9d: 25:7c:79:f4:61:53:b0:1f:ff:91:66:06:20:58:80: f3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:20:4F:84:AB:68:9D:E8:E5:4F:75:7E:8C:10:7F:6E:9C:7E:D1:29 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:08:18:10:c1:b1:1a:83:f1:76:d7:f8:89:fa:33:01:37:12: 97:eb:ff:90:f3:79:e3:c0:60:15:58:7e:a8:72:f5:23:9d:8b: c7:c3:09:45:1a:2a:0a:15:fd:53:80:c4:32:a0:62:95:e5:b0: 4d:4d:bf:d9:94:84:79:eb:30:da:c7:22:0f:bd:e5:86:13:97: 9b:90:a2:25:3e:4a:d8:15:a1:28:d4:11:15:c5:a2:01:6e:cd: 42:d5:ae:7a:2f:ed:5c:a6:b2:ef:a6:79:cd:ea:f3:cf:64:59: 40:01:d4:b9:eb:19:e8:e8:83:13:f3:40:68:7b:33:35:ae:28: 56:a7:8b:ff:19:b6:5f:c0:9d:3b:e1:7d:21:a1:62:86:fb:bd: 00:22:85:e3:ff:81:78:5e:35:47:03:f8:cf:fb:aa:33:54:80: e5:f6:a1:65:75:80:b9:59:19:45:cf:e2:8f:b3:f5:d8:e0:58: 0c:fc:d0:07:29:17:79:e2:a0:0b:18:86:4e:48:4c:2d:65:21: c0:a8:fa:76:2a:9d:a6:d2:39:71:58:7b:0d:54:e1:23:20:77: 9c:1f:0b:82:31:40:08:bb:79:ce:97:b7:d6:ab:ea:3f:f9:91: 31:86:26:7a:95:72:38:3f:a3:cf:ae:ce:20:16:05:d8:0a:a8: c9:f6:47:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwOTA1MDIzOTQyWhcNMjYwOTEyMDIzOTQyWjAYMRYwFAYD VQQDEw02YTliODBlZS0xMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnv1Pfovviy7b3dzEYsN+vygiG/kwn3wO27PfIcFn3c9mrrx5aMS/u9VQ8yJt fyc9mNkFB/OVPSLYVtMppM0TIKEnvSpw/Txi8j1VoZvFcV4IwpS8/timhjX3NEPa wzgD3EN7zsBRRpXoO8QF89WpjJIb0evBKjNLWFa3Ck033Ge5aoaaFlZHUEOgwMhv GM6Om1EgGoTOY7xnq5iXlzOzhB1UzpvKn63QrqhzDdCt8dKPbQQfPEXfIPoBTzJ7 2bUj0KxAxvzcCBzyOEiopnozW1kwliv2jQW+f2ihqBriGbNkhz6FgM/G45uGXjuE 7Z0lfHn0YVOwH/+RZgYgWIDzBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQgT4Sr aJ3o5U91fowQf26cftEpMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnwgYEMGxGoPxdtf4ifozATcSl+v/kPN548BgFVh+qHL1I52Lx8MJRRoqChX9 U4DEMqBileWwTU2/2ZSEeesw2sciD73lhhOXm5CiJT5K2BWhKNQRFcWiAW7NQtWu ei/tXKay76Z5zerzz2RZQAHUuesZ6OiDE/NAaHszNa4oVqeL/xm2X8CdO+F9IaFi hvu9ACKF4/+BeF41RwP4z/uqM1SA5fahZXWAuVkZRc/ij7P12OBYDPzQBykXeeKg CxiGTkhMLWUhwKj6diqdptI5cVh7DVThIyB3nB8LgjFACLt5zpe31qvqP/mRMYYm epVyOD+jz67OIBYF2AqoyfZHMw== -----END CERTIFICATE-----Generated at Sat Sep 5 10:04:26 2026 by rpki-client