
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier: 91NFVkrHJLTvtUEOTy3ByGJY+pWoGn7wkxNCGjMhpIM=
Subject key identifier: 13:E9:E1:EA:A7:80:76:38:66:90:16:06:55:30:D0:FF:32:D8:CE:90
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial: 01FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number: 01F5
Signing time: Sat 13 Jun 2026 03:16:02 +0000
Manifest this update: Sat 13 Jun 2026 03:16:01 +0000
Manifest next update: Sat 20 Jun 2026 03:16:01 +0000
Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: L883q2W68PX1ZzjbSjz4jWBAQYp28XK4yif3hS0ZmSg=)
2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 506 (0x1fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Validity
Not Before: Jun 13 03:16:01 2026 GMT
Not After : Jun 20 03:16:01 2026 GMT
Subject: CN=6a2ccb72-ae43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:bb:0a:f9:81:8e:85:6e:97:7f:a4:c6:0f:
5a:5f:1e:d3:4f:31:62:76:73:e9:0e:11:f5:78:24:
c0:4e:15:7e:66:4a:38:f8:35:e7:c2:1b:4c:24:43:
26:bf:ce:b9:09:d3:a3:f2:d1:e9:bf:6f:e1:fa:97:
5d:fa:c2:ca:c9:be:cf:73:c4:e2:78:b5:d6:fb:10:
92:9d:06:3d:6c:5b:6c:b1:25:ad:8e:cc:ae:c0:4f:
fc:1d:67:d6:ad:59:39:00:39:32:25:2e:0a:4a:36:
8b:96:be:0b:46:ec:5f:ce:b9:86:c5:85:89:3e:65:
25:d6:e6:1d:00:64:5f:96:f8:ea:2f:19:7f:f2:6b:
65:87:95:aa:23:eb:6d:ca:24:38:d5:c6:55:65:c2:
41:6b:cd:12:4f:05:d8:50:8a:a7:81:65:7e:d8:c3:
cc:b1:10:3a:7d:ee:78:68:d8:32:a1:4f:44:3e:b9:
c5:94:41:af:c0:fc:65:3a:66:f5:05:84:17:16:b6:
85:c1:30:d0:b5:46:25:21:cd:31:dd:62:b5:9d:46:
3f:38:0d:18:4c:ce:39:3d:ba:2b:f8:a7:b7:20:e4:
06:40:9a:c3:8f:65:02:33:93:c2:df:c1:df:08:00:
05:2f:1a:29:40:59:a2:a5:61:74:29:af:10:ba:d5:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E9:E1:EA:A7:80:76:38:66:90:16:06:55:30:D0:FF:32:D8:CE:90
X509v3 Authority Key Identifier:
keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ea:60:62:ad:e7:7b:9f:d9:f3:ba:dc:78:75:f0:c5:fc:80:
15:9b:88:b5:50:92:be:1c:80:af:eb:10:51:b1:61:87:b0:a2:
d8:4e:7e:95:0f:bd:ec:07:b8:3a:5b:13:a6:46:4d:65:c0:ff:
43:65:96:b7:84:bb:f1:f9:16:bd:79:67:65:3d:55:64:c7:7c:
fb:f6:d4:74:27:5f:2a:60:4b:ea:db:e3:61:49:48:9c:2b:ee:
60:8f:45:ed:91:e3:46:96:77:3b:5a:25:2c:f7:df:8e:3e:0c:
df:3c:37:36:c3:2f:40:5e:1f:31:f0:be:c2:15:e5:fd:fd:aa:
4d:2a:5c:36:ee:4b:71:30:cc:db:dc:6e:05:8f:18:2b:b1:d8:
b1:dd:e3:41:4f:e1:ad:3c:35:ee:50:1f:4f:2a:a2:bf:1f:1d:
4e:34:96:77:ea:78:41:c2:4c:e2:18:0c:76:36:83:74:43:1c:
71:80:d6:3c:71:32:e9:fa:f8:10:58:9c:b8:e4:5b:e5:84:95:
e2:04:c5:3a:bd:e3:57:9a:03:8c:b6:97:21:e5:6b:e9:fb:0f:
26:ce:18:e2:cc:6c:f5:a8:2a:f1:92:47:c5:8c:5b:48:e1:ee:
59:c9:74:9f:d6:c6:74:fc:90:8b:1b:b7:be:e7:50:99:24:ca:
db:23:89:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:35 2026 by rpki-client