
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json)
Hash identifier: iANeTtoXfmINnMEU+9X4R60Y52DLCIk6D1HdWEE+0Dc=
Subject key identifier: 59:B4:EB:71:C3:34:05:EA:E3:52:50:11:D5:5E:8B:B7:7C:80:06:EF
Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Certificate serial: 0232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
Manifest number: 022C
Signing time: Fri 25 Sep 2026 02:46:47 +0000
Manifest this update: Fri 25 Sep 2026 02:46:46 +0000
Manifest next update: Fri 02 Oct 2026 02:46:46 +0000
Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: j2Cx3nvmkP1GbXJGMaJZq8FvEKgbMNNknxpYJCmr4qE=)
2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: u3RDHvzO8IyUThl8mfuW7Q0vDhMHboGSoExS7yNBOm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:46:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 562 (0x232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62
Validity
Not Before: Sep 25 02:46:46 2026 GMT
Not After : Oct 2 02:46:46 2026 GMT
Subject: CN=6ab5e097-c9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:9a:86:2d:6c:0c:c4:2f:27:55:e1:68:41:
02:43:44:8a:31:b9:9c:e6:31:7d:17:cc:d4:e4:7a:
9b:15:f8:af:02:d8:e0:f3:10:ae:69:50:39:df:c0:
e2:07:70:13:58:cf:7f:77:47:7a:70:33:9c:ee:11:
7d:6e:41:54:a1:58:97:0b:97:f6:12:45:9e:a4:4b:
fe:a8:2d:fb:64:36:d0:25:88:e1:0c:c5:79:63:a2:
cc:61:82:22:ce:2b:20:2b:23:84:f0:9e:cc:5a:12:
20:a1:da:7e:7a:13:e0:d7:7c:01:87:9b:c5:41:46:
ff:9f:67:0b:a2:cb:be:66:c5:51:b5:64:0f:c0:b0:
6d:9d:17:d1:b2:fa:c4:cf:3d:da:48:98:82:72:5b:
2e:07:e9:15:3e:6c:33:4c:7d:e3:16:b6:dd:32:86:
c2:c0:6b:6d:bb:98:29:c3:38:21:9b:29:a5:be:c7:
df:2d:0b:0c:a1:01:ab:bf:58:f3:48:c0:b4:fa:4a:
21:1e:a7:10:1e:84:5b:ba:31:b6:ce:7e:6f:23:05:
8b:b8:6d:84:62:d3:42:9d:e0:ec:de:86:da:84:65:
56:9d:6b:b2:4b:1a:82:d7:e7:c2:57:07:33:5f:28:
cf:e8:96:2c:5b:b5:88:09:98:71:ba:d9:c1:53:1d:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B4:EB:71:C3:34:05:EA:E3:52:50:11:D5:5E:8B:B7:7C:80:06:EF
X509v3 Authority Key Identifier:
keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:e3:a2:49:ed:a0:d6:c4:99:94:4b:d3:db:0a:14:f2:8e:78:
35:86:19:55:0e:4d:f4:a0:9a:b1:4a:5b:45:5f:03:ee:da:7f:
40:7f:b4:60:4c:69:94:d7:65:40:85:03:46:b0:4e:5c:15:56:
3d:dc:db:bb:c1:96:f0:9b:52:d9:4a:e5:07:6e:8f:23:fd:41:
66:1c:ac:c9:59:ed:a9:8d:d7:13:e5:42:1c:05:7e:cd:e7:11:
6e:44:e0:2e:13:77:3d:c3:28:2d:25:3c:c9:eb:e3:5b:1e:73:
0f:93:5a:76:c1:f2:3f:5d:25:87:95:f1:8a:aa:97:de:52:fe:
09:82:f7:7d:06:bc:ea:e6:c3:29:ab:38:a0:50:ee:c7:a2:3a:
01:aa:8e:7f:7c:39:9a:bf:4d:cd:7c:c2:b7:92:41:a1:40:53:
59:9c:4e:de:bb:86:5b:e1:10:a5:d3:d8:70:63:40:48:08:f9:
87:be:f0:83:75:ab:8c:a0:9c:d1:b2:2d:d8:85:7a:4e:09:5b:
31:e0:ea:76:14:f1:58:fe:5e:e2:56:dd:cb:a5:82:b1:78:82:
f9:10:e4:3e:98:0f:24:b0:db:a8:77:74:06:1c:ce:b2:af:09:
da:40:e0:5c:f1:a3:ce:d3:8e:47:d2:b4:16:81:e8:39:cc:d9:
15:7a:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:43:33 2026 by rpki-client