
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier: ddIwf0XjixLLB7pH5PNLpt1XFw87WLa+MAJQm+7xnuc=
Subject key identifier: 55:1A:97:A3:E2:6C:95:BE:B6:00:3A:C9:9D:79:9D:A6:7E:66:7E:2E
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial: 0231
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number: 022B
Signing time: Wed 23 Sep 2026 02:36:34 +0000
Manifest this update: Wed 23 Sep 2026 02:36:34 +0000
Manifest next update: Wed 30 Sep 2026 02:36:34 +0000
Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: JR43SOp+7YSc8t55DbhZ3gTx/LVmq1bu/ODUYLySsVI=)
2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: u3RDHvzO8IyUThl8mfuW7Q0vDhMHboGSoExS7yNBOm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 02:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Validity
Not Before: Sep 23 02:36:34 2026 GMT
Not After : Sep 30 02:36:34 2026 GMT
Subject: CN=6ab33b32-6095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d0:0a:af:51:7d:91:da:74:1e:94:89:bf:ed:
51:78:c0:33:f0:57:cf:44:e9:2c:d3:a1:74:93:db:
cb:4a:47:d8:64:b0:3c:b4:ef:68:90:f8:71:6b:c0:
ce:f4:c4:e8:8f:4c:9f:23:e1:2e:e3:25:ad:25:f1:
0c:0b:2d:90:1a:bb:78:48:e0:c0:b5:46:3c:a1:bd:
aa:72:eb:16:c1:6b:55:56:0e:8f:35:60:b3:5a:46:
48:f6:24:f4:01:96:2b:66:8b:9f:a2:2b:fe:e3:45:
bc:da:56:4e:c7:56:95:18:ab:fe:6d:b8:76:63:e3:
f6:2d:9f:cd:4a:5c:ed:bd:15:b0:da:ae:2b:64:ee:
74:df:8f:a7:40:96:77:20:a4:36:b3:6b:02:65:7d:
e3:83:d0:c6:22:81:07:06:d3:d1:93:17:c4:32:83:
a5:26:34:2e:07:56:b0:3c:da:06:24:fb:42:06:30:
70:17:5e:f6:72:2e:eb:72:8e:51:aa:0c:c6:21:2f:
36:3a:76:76:c5:d3:5f:71:3c:c3:34:94:76:82:96:
7c:c9:f6:29:2f:1d:da:32:80:eb:de:e0:9f:50:69:
1c:c5:d4:64:bb:37:51:2d:45:c0:c9:92:54:8e:cf:
ac:7d:ca:72:d1:55:51:9a:55:40:49:2e:75:61:63:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:97:A3:E2:6C:95:BE:B6:00:3A:C9:9D:79:9D:A6:7E:66:7E:2E
X509v3 Authority Key Identifier:
keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:c2:e1:59:9e:81:f3:f8:d2:4f:50:3d:d0:82:b4:85:6d:0c:
d5:d3:ba:66:a2:ac:2d:2e:c3:0e:02:58:39:ab:09:72:a6:b2:
30:54:ff:be:3b:7a:ff:91:25:26:b4:77:52:40:24:a2:69:6b:
ac:e3:76:0e:f4:4e:5c:9c:90:bc:32:6e:35:81:78:3e:ce:c3:
f9:94:8f:02:33:12:8b:68:e3:80:11:4a:12:75:f0:eb:d4:28:
40:e2:54:d3:3a:2b:ee:09:e0:b7:4f:91:4c:d5:f2:22:1c:05:
ea:18:09:91:e1:b1:dd:11:5c:87:aa:f7:aa:a1:e8:66:a4:56:
42:3d:45:00:fc:98:b5:0f:30:c7:0a:60:6a:fa:f3:01:1d:21:
ec:ea:16:a5:9e:0d:16:4f:84:48:f6:76:a8:28:cf:48:f4:1c:
29:30:67:d0:5e:8e:d0:12:c2:9a:ef:b2:33:b4:72:e2:fa:e9:
7c:a3:97:3f:ac:9a:4d:ea:35:dd:12:82:85:17:1d:34:d2:c4:
4f:ab:e4:49:1a:18:5e:96:0d:e5:43:ea:af:6a:3d:8e:b7:5f:
39:e3:d3:ed:18:04:69:7c:de:e1:27:52:33:79:1a:7b:d4:9d:
6d:32:16:1e:a2:35:4f:60:9d:dd:8f:ef:5e:4a:61:18:52:25:
e6:11:31:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:10:17 2026 by rpki-client