$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: WxGp1JhNHpx2GZOd9BYysRcWVZ23MZWlDPOHUfkcDs8= Subject key identifier: 88:C1:73:2E:DC:85:90:60:F8:89:77:98:14:7C:DD:82:46:3E:CB:71 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 01DA Signing time: Sun 19 Apr 2026 03:15:05 +0000 Manifest this update: Sun 19 Apr 2026 03:15:05 +0000 Manifest next update: Sun 26 Apr 2026 03:15:05 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: y+q2qWbrbObTQfnfJHDdeBXTHfQHb/UeGy++9S2VOCc=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Apr 19 03:15:05 2026 GMT Not After : Apr 26 03:15:05 2026 GMT Subject: CN=69e448b9-740c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:c0:40:e2:8c:5f:c0:8e:a7:87:3b:6b:ab: 58:6f:bd:a5:1e:45:91:70:b7:b1:6a:56:9e:0c:4c: 19:c4:a7:57:72:72:59:10:51:46:c7:c1:02:a3:fb: ed:dd:a7:1a:be:a0:ec:3d:7e:58:2d:a2:57:2e:7b: cb:76:8d:a9:27:62:06:d3:b3:c4:93:7f:f5:e8:21: f3:12:a0:ef:58:72:b9:58:10:47:59:86:1b:24:29: 38:de:ae:d4:58:3b:1d:03:0b:c5:67:d1:40:72:bd: f4:f0:d8:95:b6:47:75:f4:1c:74:3d:5a:d2:78:59: 3b:ad:cf:73:72:f7:d0:52:e2:66:44:81:ff:a5:65: bb:79:05:8d:3f:15:3d:45:df:d9:fb:14:41:11:6f: 18:b6:24:79:66:95:bc:8a:a0:ee:3e:d6:4e:dc:ea: 42:c5:ef:2b:de:b1:34:52:29:03:ce:61:b7:78:cc: 36:57:26:61:e4:8a:dd:d1:e5:8e:a3:78:da:bd:a0: d8:bc:e6:eb:0b:65:d9:2d:95:95:b0:ab:d4:92:d7: 93:ae:cd:f5:f6:ab:99:df:f9:fb:8c:b4:38:91:11: 6f:0d:65:76:1e:ca:65:3f:00:03:e3:55:c1:e9:d4: 1b:0f:b7:94:2f:96:b7:eb:b1:0b:61:d4:fb:13:62: a5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C1:73:2E:DC:85:90:60:F8:89:77:98:14:7C:DD:82:46:3E:CB:71 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7a:cb:3e:af:8e:dd:4f:b0:23:ac:b2:7c:69:d4:bc:b3:fb: 9e:6d:ed:78:f7:c5:59:67:ab:54:ed:39:ac:9f:c9:d6:cc:37: fe:49:4a:6d:19:3c:b5:80:99:48:64:e4:80:ab:e9:22:97:11: 05:49:3b:93:6c:ce:5f:8e:dd:fd:54:fe:52:7d:a1:16:5d:c9: 3b:92:38:1b:f7:75:27:36:4c:98:82:59:ac:c9:e4:8f:c2:10: 72:4c:36:f3:c9:43:06:78:68:3a:3e:d2:c1:cb:f3:18:49:a2: 12:f1:3a:f4:b7:74:e9:5d:2c:92:ce:dc:4c:de:18:ce:d0:0c: 07:e4:cb:00:a8:7e:b9:4f:c4:77:50:d5:73:8b:90:39:af:80: b7:1b:dd:e6:1d:c2:1d:52:64:90:74:1b:4f:a3:51:0a:8d:01: c3:a7:50:40:0f:d0:55:fd:67:f8:6e:f3:cf:60:84:41:55:58: 95:76:80:54:6d:41:97:bf:71:93:e3:04:eb:0b:ae:1e:13:06: 2d:41:93:45:26:c9:8c:b3:48:da:84:d0:b9:b4:45:b7:46:3c: 74:ee:74:ce:96:d7:dc:aa:8b:bd:6c:60:e7:bd:4e:8a:e7:7f: 69:08:4c:e5:50:c3:82:2d:b0:cf:e9:bc:5a:45:bf:e3:5c:90: 87:c3:ec:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwNDE5MDMxNTA1WhcNMjYwNDI2MDMxNTA1WjAYMRYwFAYD VQQDEw02OWU0NDhiOS03NDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA087AQOKMX8COp4c7a6tYb72lHkWRcLexalaeDEwZxKdXcnJZEFFGx8ECo/vt 3acavqDsPX5YLaJXLnvLdo2pJ2IG07PEk3/16CHzEqDvWHK5WBBHWYYbJCk43q7U WDsdAwvFZ9FAcr308NiVtkd19Bx0PVrSeFk7rc9zcvfQUuJmRIH/pWW7eQWNPxU9 Rd/Z+xRBEW8YtiR5ZpW8iqDuPtZO3OpCxe8r3rE0UikDzmG3eMw2VyZh5Ird0eWO o3javaDYvObrC2XZLZWVsKvUkteTrs319quZ3/n7jLQ4kRFvDWV2HsplPwAD41XB 6dQbD7eUL5a367ELYdT7E2KlEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjBcy7c hZBg+Il3mBR83YJGPstxMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdXrLPq+O3U+wI6yyfGnUvLP7nm3tePfFWWerVO05rJ/J1sw3/klKbRk8tYCZ SGTkgKvpIpcRBUk7k2zOX47d/VT+Un2hFl3JO5I4G/d1JzZMmIJZrMnkj8IQckw2 88lDBnhoOj7SwcvzGEmiEvE69Ld06V0sks7cTN4YztAMB+TLAKh+uU/Ed1DVc4uQ Oa+Atxvd5h3CHVJkkHQbT6NRCo0Bw6dQQA/QVf1n+G7zz2CEQVVYlXaAVG1Bl79x k+ME6wuuHhMGLUGTRSbJjLNI2oTQubRFt0Y8dO50zpbX3KqLvWxg571Oiud/aQhM 5VDDgi2wz+m8WkW/41yQh8Pszg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:46:01 2026 by rpki-client