$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: PkJ0LIxIyMf7H2nG62Z6Jl2/fr/0InMzq4DTe+mnjZ0= Subject key identifier: 3F:6D:CD:05:3D:DE:60:D9:50:6B:B1:E4:51:0B:09:61:62:B4:2C:08 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 0209 Signing time: Thu 23 Jul 2026 04:19:42 +0000 Manifest this update: Thu 23 Jul 2026 04:19:42 +0000 Manifest next update: Thu 30 Jul 2026 04:19:42 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: DL/7gzlMJ5IW1auxF5G9+pEHO6IcQuthuoZGAJ0T474=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Jul 23 04:19:42 2026 GMT Not After : Jul 30 04:19:42 2026 GMT Subject: CN=6a61965e-893d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f7:66:62:2d:ac:ba:3d:d9:40:e9:31:13:4c: 64:9c:e4:64:b0:cc:d1:e2:1a:eb:45:fd:89:0e:84: 88:ad:49:10:3e:3f:f1:45:24:aa:73:e8:38:94:a5: 8c:aa:57:15:68:0e:cf:61:a7:f5:95:fa:ad:7b:bc: 93:2d:4b:d9:2d:31:27:5b:ef:53:08:fe:18:87:d8: 60:63:85:6d:ef:97:a0:ec:4c:c2:70:d8:b4:57:23: 8a:77:c2:f3:40:6e:58:f3:58:90:ba:03:3e:71:d1: 9a:6c:eb:94:72:e7:19:5f:c6:42:ef:8a:dc:57:01: 0a:f1:54:16:75:4a:8d:e2:ef:c8:b3:7e:6b:0c:bc: 91:bb:3f:63:81:0b:aa:ae:d1:c1:13:c9:9c:04:34: e8:3a:a4:03:7f:ff:ec:af:cf:a7:f8:31:1b:3a:f9: 84:21:c6:7d:65:4b:e2:9c:24:39:1c:51:f7:89:ce: e4:5a:bc:bd:0c:18:83:76:2b:bd:65:10:06:96:b4: ea:1a:93:df:94:fb:d4:d0:c1:fb:6b:fa:d5:7a:e3: 5e:3f:8d:59:3b:b0:a5:d5:a2:30:d6:f3:55:3f:fd: 75:91:e5:42:7a:b1:30:2e:67:11:4f:28:19:14:58: b6:20:f3:79:c1:35:00:e2:62:47:b6:1c:d6:96:8e: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6D:CD:05:3D:DE:60:D9:50:6B:B1:E4:51:0B:09:61:62:B4:2C:08 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:e5:8b:f4:41:da:73:48:bb:9a:f8:10:f7:89:47:11:5c:00: 5b:7a:49:b3:9c:48:d9:68:e2:f5:2f:73:57:86:7b:95:53:d6: 9d:f2:91:9c:53:40:47:aa:4f:9a:66:0b:e7:d7:ed:7c:2e:d0: ee:15:90:be:d2:16:ca:bb:ea:e1:c4:47:84:a2:a2:82:6c:f2: 1c:e1:96:80:10:d4:ef:97:ec:46:c5:b4:01:c4:2a:c3:6f:61: 5c:39:b9:dc:8f:a4:ac:fe:70:8b:62:2b:be:7a:c1:1b:7d:2a: 0e:92:b7:a2:fb:2a:dd:f2:f1:b0:f9:f6:de:87:e5:72:77:99: 9e:c7:a2:64:8d:4c:38:04:6e:82:32:32:b4:b8:37:71:2b:da: 7a:bb:4d:f6:f0:8a:d5:0a:07:09:f1:fe:c4:7a:4a:0d:24:fa: 0d:02:fb:a9:5e:f0:84:64:12:86:c7:84:c5:b4:d6:4f:36:ba: b9:1c:e7:5b:0a:bc:2e:1f:bd:42:1c:6e:a7:a0:cf:f9:10:4b: 48:99:f2:d2:7c:a6:63:5a:f4:5d:4a:0d:be:db:b2:2a:55:1a: 65:b7:43:3c:a6:f0:0c:64:7a:2b:8d:ee:25:79:88:2e:fc:77: e4:5e:fd:a3:69:84:15:ba:6e:0a:c4:9d:ff:a4:02:2b:15:35: 09:6e:2b:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwNzIzMDQxOTQyWhcNMjYwNzMwMDQxOTQyWjAYMRYwFAYD VQQDEw02YTYxOTY1ZS04OTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5vdmYi2suj3ZQOkxE0xknORksMzR4hrrRf2JDoSIrUkQPj/xRSSqc+g4lKWM qlcVaA7PYaf1lfqte7yTLUvZLTEnW+9TCP4Yh9hgY4Vt75eg7EzCcNi0VyOKd8Lz QG5Y81iQugM+cdGabOuUcucZX8ZC74rcVwEK8VQWdUqN4u/Is35rDLyRuz9jgQuq rtHBE8mcBDToOqQDf//sr8+n+DEbOvmEIcZ9ZUvinCQ5HFH3ic7kWry9DBiDdiu9 ZRAGlrTqGpPflPvU0MH7a/rVeuNeP41ZO7Cl1aIw1vNVP/11keVCerEwLmcRTygZ FFi2IPN5wTUA4mJHthzWlo4pmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD9tzQU9 3mDZUGux5FELCWFitCwIMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIeWL9EHac0i7mvgQ94lHEVwAW3pJs5xI2Wji9S9zV4Z7lVPWnfKRnFNAR6pP mmYL59ftfC7Q7hWQvtIWyrvq4cRHhKKigmzyHOGWgBDU75fsRsW0AcQqw29hXDm5 3I+krP5wi2IrvnrBG30qDpK3ovsq3fLxsPn23oflcneZnseiZI1MOARugjIytLg3 cSvaertN9vCK1QoHCfH+xHpKDST6DQL7qV7whGQShseExbTWTza6uRznWwq8Lh+9 Qhxup6DP+RBLSJny0nymY1r0XUoNvtuyKlUaZbdDPKbwDGR6K43uJXmILvx35F79 o2mEFbpuCsSd/6QCKxU1CW4rTw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:22:29 2026 by rpki-client