
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier: Lsbb8ROMmpinZHXVEN1kitV+ZEac1wB2Nx/mGyT/HJM=
Subject key identifier: 09:26:60:8D:69:4F:CF:40:57:35:86:1D:FB:D3:AD:AD:59:8C:B5:E2
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number: 01BF
Signing time: Sun 01 Mar 2026 04:34:58 +0000
Manifest this update: Sun 01 Mar 2026 04:34:58 +0000
Manifest next update: Sun 08 Mar 2026 04:34:58 +0000
Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: I6RE8XWuPZgVg8ElujDd6/UR1gc6PjqrFWGW6Tfq7Rg=)
2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: tBK54wCyQ2wcX6ZNsRYGZb85q/LNuJrcbm5n2EF4GsM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 04:34:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Validity
Not Before: Mar 1 04:34:58 2026 GMT
Not After : Mar 8 04:34:58 2026 GMT
Subject: CN=69a3c1f2-40b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:ab:f0:69:6c:e0:d0:21:c7:f1:b6:d4:ba:
a2:6e:14:43:16:db:83:1a:40:b1:b6:a7:bd:80:3a:
ac:62:bb:92:1e:54:59:c5:0b:2d:73:07:65:a6:a0:
58:61:8b:c2:83:db:c7:b9:f3:5d:59:58:15:86:24:
e4:78:1b:1f:2e:5e:ea:c9:fd:f2:e7:ea:a0:05:c8:
fd:3b:99:87:72:28:98:6e:97:ce:c9:4d:95:95:64:
c5:77:03:5c:0a:37:b6:97:b5:dd:47:ea:10:f0:75:
15:85:4a:2e:72:a3:6d:75:2e:51:39:a6:ca:1f:af:
85:63:fb:70:67:a0:a6:dc:02:44:3a:74:a9:de:5e:
bc:22:0f:b3:fc:55:16:d1:ae:d9:1b:a0:37:18:bd:
ad:47:70:0b:1e:12:be:62:fc:fa:d2:d3:f4:57:13:
bf:a3:e0:77:ff:79:b5:ac:ce:73:7b:c0:f6:f5:19:
04:89:e6:33:66:3d:86:f2:30:6e:4d:b3:cd:26:03:
38:8a:bf:0e:0a:08:83:5f:37:8e:f6:e7:2a:39:8b:
bd:c7:39:e9:a5:59:85:c2:d3:c4:96:94:41:53:65:
b5:80:1b:26:70:ec:01:02:cc:66:01:69:e2:92:43:
70:98:3a:c0:04:e3:a9:a6:6e:a0:b7:1b:ad:ed:0f:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:26:60:8D:69:4F:CF:40:57:35:86:1D:FB:D3:AD:AD:59:8C:B5:E2
X509v3 Authority Key Identifier:
keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:96:e2:19:ac:de:ea:ab:be:bc:f5:a8:50:5d:62:ed:a6:24:
ef:94:58:5a:fb:e8:1b:cb:85:fc:6e:e4:c2:47:61:b1:c9:35:
d1:61:34:19:88:33:00:c5:7e:2c:5a:e3:30:48:fe:4f:05:a1:
12:f4:ca:6f:75:15:6c:1c:28:50:b2:17:ff:2e:d3:a9:26:78:
20:c8:59:df:22:b7:9d:25:dd:8d:63:48:5e:70:6f:01:04:56:
1a:04:ae:b2:25:63:fa:de:0b:08:76:2a:fe:7c:57:b5:89:d1:
49:dc:75:33:ff:b8:73:eb:b0:f3:26:cf:4d:44:48:df:ec:3b:
20:20:2b:c9:7d:ba:27:08:50:e8:f1:84:9e:b8:6b:55:d2:7f:
63:7b:15:b6:3d:0a:6b:d5:52:21:ad:bf:7c:04:e3:19:44:07:
aa:e3:13:2b:d9:f7:1b:00:86:1c:01:a3:a3:1f:9e:66:ca:d8:
21:5f:bd:ba:80:25:dc:70:b0:01:5c:c4:39:47:5b:93:9a:43:
78:a5:14:1d:b4:96:2b:46:76:63:54:70:e2:b3:7f:85:ef:67:
f1:6a:50:17:e8:18:ce:d3:fc:69:3d:db:21:42:00:be:f9:79:
67:0e:1b:ac:00:0f:f9:13:ec:fa:ce:68:a1:73:c6:2a:c1:54:
8c:3c:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:53 2026 by rpki-client