$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: powZyW54kCYaQryQzg1+XVdYO6eYhAZdPxOzfSbDKF8= Subject key identifier: F2:A3:66:34:6D:76:DE:20:75:7E:45:87:88:0A:BE:A4:18:02:F2:86 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 020B Signing time: Mon 27 Jul 2026 04:36:07 +0000 Manifest this update: Mon 27 Jul 2026 04:36:07 +0000 Manifest next update: Mon 03 Aug 2026 04:36:07 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: eyGy3eb6XKDtKiCDXHM56VUjXXnYAaUGBslrWKKP2c4=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Jul 27 04:36:07 2026 GMT Not After : Aug 3 04:36:07 2026 GMT Subject: CN=6a66e037-3b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:67:56:b6:ae:93:22:a4:ea:f0:51:9b:74:34: ab:6e:3e:50:f2:57:7e:74:52:b1:9e:d4:86:ea:b6: da:51:10:52:e4:08:b5:a6:29:ea:96:6d:8c:be:6d: 1c:48:a8:9d:ff:0f:e1:a2:e5:55:14:66:da:b8:fb: 7e:6f:4a:ce:6c:37:e9:ff:60:21:d7:a3:c3:b0:2b: 78:b1:96:2a:21:98:32:55:81:78:b8:07:93:d5:ca: 0b:89:b0:67:24:18:a0:5b:3b:ec:aa:82:49:fb:81: cb:84:2f:b2:cd:d9:8f:a6:83:ea:de:0d:c3:a0:a4: b3:79:57:76:5b:64:b9:a5:4c:1a:18:55:52:8e:14: f8:c2:70:92:34:84:c0:ee:09:8f:50:c6:99:de:5f: 01:fe:b0:31:44:a2:3c:87:e5:56:fd:49:e2:e4:55: 47:cc:fe:03:11:88:67:7d:4a:0a:c7:73:7b:5e:27: 55:04:99:d2:56:aa:4a:47:1c:05:f3:4d:6a:a0:2b: eb:f7:35:bc:6b:7c:ff:eb:d8:a5:61:17:1c:0f:36: c3:5e:c7:8e:18:50:b9:43:bc:64:6f:42:cc:c4:88: c3:e9:26:01:c9:1a:4c:36:dc:f3:37:03:db:8c:e7: b2:b2:d9:7a:28:10:03:7d:2c:ed:2f:9a:1e:9a:01: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A3:66:34:6D:76:DE:20:75:7E:45:87:88:0A:BE:A4:18:02:F2:86 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:65:00:d2:41:a3:0a:33:77:0d:3f:0f:15:42:e4:e9:85:64: d3:09:79:80:85:ff:b6:a4:7d:ef:bd:b3:16:7c:dc:ab:48:4b: 0f:42:44:9d:14:fc:42:b3:60:e5:2d:95:8a:61:26:2d:4d:6e: fc:54:06:ff:cf:db:42:7b:5c:40:5b:b9:c7:78:4b:49:02:b8: 18:d5:33:72:6a:ad:8a:68:9a:ac:83:02:7a:bb:a1:40:c7:13: 39:85:9e:9e:98:54:9f:21:ca:7e:8b:44:49:9a:d9:ac:a2:3c: 2d:06:39:f9:12:54:63:d2:cb:e9:0a:f2:16:27:2d:2b:6c:ad: 85:4b:fe:0d:0c:d8:31:4c:ff:32:96:57:c6:66:74:b9:00:78: 1e:0e:97:2e:a3:1a:52:7b:c5:3b:6a:a6:67:09:a4:4f:38:94: 82:2c:67:ac:32:94:8e:5d:f4:2c:81:74:d3:03:73:be:4a:4e: 1d:54:df:1b:2b:3a:32:25:00:54:8d:fa:f9:fc:34:1d:48:b6: b5:99:6c:57:9f:12:78:18:3d:22:76:8f:18:8e:da:2d:b7:81: 74:fc:e3:a4:7a:0a:78:c8:08:18:e1:ca:ab:25:c2:53:9a:a0: 6c:6f:fe:ff:1e:ed:ac:f4:ee:77:e9:1c:12:d0:61:94:0a:3d: c7:3c:6d:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwNzI3MDQzNjA3WhcNMjYwODAzMDQzNjA3WjAYMRYwFAYD VQQDEw02YTY2ZTAzNy0zYjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWdWtq6TIqTq8FGbdDSrbj5Q8ld+dFKxntSG6rbaURBS5Ai1pinqlm2Mvm0c SKid/w/houVVFGbauPt+b0rObDfp/2Ah16PDsCt4sZYqIZgyVYF4uAeT1coLibBn JBigWzvsqoJJ+4HLhC+yzdmPpoPq3g3DoKSzeVd2W2S5pUwaGFVSjhT4wnCSNITA 7gmPUMaZ3l8B/rAxRKI8h+VW/Uni5FVHzP4DEYhnfUoKx3N7XidVBJnSVqpKRxwF 801qoCvr9zW8a3z/69ilYRccDzbDXseOGFC5Q7xkb0LMxIjD6SYByRpMNtzzNwPb jOeystl6KBADfSztL5oemgFRIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPKjZjRt dt4gdX5Fh4gKvqQYAvKGMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2UA0kGjCjN3DT8PFULk6YVk0wl5gIX/tqR9772zFnzcq0hLD0JEnRT8QrNg 5S2VimEmLU1u/FQG/8/bQntcQFu5x3hLSQK4GNUzcmqtimiarIMCeruhQMcTOYWe nphUnyHKfotESZrZrKI8LQY5+RJUY9LL6QryFictK2ythUv+DQzYMUz/MpZXxmZ0 uQB4Hg6XLqMaUnvFO2qmZwmkTziUgixnrDKUjl30LIF00wNzvkpOHVTfGys6MiUA VI36+fw0HUi2tZlsV58SeBg9InaPGI7aLbeBdPzjpHoKeMgIGOHKqyXCU5qgbG/+ /x7trPTud+kcEtBhlAo9xzxt3w== -----END CERTIFICATE-----Generated at Tue Jul 28 22:06:16 2026 by rpki-client