$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: ShUDj2wR4xBJ2GCp+2aiUVKSzIkOTC9EtKiUvHdche0= Subject key identifier: 16:6A:F8:B7:F7:85:54:4E:B7:91:4E:4B:D4:92:89:92:D4:DD:E1:A0 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 01E5 Signing time: Mon 11 May 2026 03:26:18 +0000 Manifest this update: Mon 11 May 2026 03:26:17 +0000 Manifest next update: Mon 18 May 2026 03:26:17 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: oARZ+rBMvVqN8P1XgzNUq+QZbl8rW+IegfpnLmDk4bc=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: onpoRt8uDQ6NXh7hnF+ey60uQVFmX1U+hH28MDsle/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: May 11 03:26:17 2026 GMT Not After : May 18 03:26:17 2026 GMT Subject: CN=6a014c5a-1ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0d:7c:49:74:2a:56:dc:0e:7c:06:1f:92:7f: b1:1b:92:a6:f8:98:1b:3b:8a:7b:76:f3:e1:5a:c0: 32:5d:89:2e:d4:ee:44:a6:17:ff:7d:fc:09:be:d6: 40:36:01:6d:38:a5:51:5a:4b:53:e2:88:62:9b:75: 11:9f:d8:f9:27:f4:c5:1e:bb:cf:90:aa:0b:7c:6c: ff:c2:7c:ae:f2:32:4a:80:fb:27:ff:1a:bb:7f:4c: 70:da:7d:f7:63:9b:7b:98:fc:83:16:a7:85:e0:50: 24:e5:66:35:12:38:ea:6b:f6:30:a9:d8:47:92:92: 27:e9:78:a7:2b:83:de:6f:9e:b4:04:06:53:a1:33: fb:77:a0:0f:1b:fa:d4:c7:24:88:d2:42:97:16:14: e4:86:2b:f8:0a:f0:e2:4c:35:ce:8d:d4:e3:08:de: d6:11:6b:9d:31:ea:14:36:e5:81:f5:9d:e8:a8:8c: 0d:cb:1b:65:24:9e:6d:9f:d7:d9:42:bd:40:45:50: 01:ac:a1:e4:fc:d2:b2:a8:a6:bc:67:38:66:08:a5: 9d:f0:71:c2:49:29:16:22:f1:1f:3c:92:20:c0:b4: eb:73:e3:76:09:e4:66:2d:5a:5c:09:8f:93:74:0b: 85:20:5a:af:56:bc:44:45:bd:ab:4c:67:ac:41:22: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6A:F8:B7:F7:85:54:4E:B7:91:4E:4B:D4:92:89:92:D4:DD:E1:A0 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3b:1f:88:bf:2a:a3:fb:1a:32:73:9e:44:a2:9f:96:64:64: b1:e9:8c:b1:dd:6c:7f:23:33:1e:31:e6:ea:1b:65:56:50:d8: 4e:7b:f8:c0:4d:21:a6:ab:6a:b4:6f:4d:bc:d8:74:f5:eb:8b: d4:65:ab:ea:48:61:62:6b:50:33:0f:47:d1:20:c1:24:af:27: 1a:b8:71:91:57:1b:b9:e6:84:31:51:13:d7:59:bb:1e:e7:da: 32:7b:0f:93:b1:51:df:1d:9b:8c:1e:27:e2:f2:9b:58:5b:2a: f2:cc:b2:26:e8:7a:b0:93:7d:e2:3f:2e:bf:57:18:58:8e:a8: fd:13:4c:6b:eb:3c:a7:b8:18:0a:c3:c4:28:2a:a1:5f:2c:83: 28:f5:0c:23:b6:15:66:03:cb:0c:e6:81:39:7d:f1:17:7f:ec: ac:80:ed:51:8a:47:5c:ba:42:fd:48:0a:4f:18:a0:06:09:b7: 7e:b2:19:29:7e:f1:c3:bb:57:d9:c5:ad:db:be:b4:ac:66:7a: cd:c2:43:e0:98:f4:94:4c:64:3c:45:2e:ef:77:1d:ee:cd:b7: 00:ca:7e:23:f7:4e:5a:52:d1:48:e6:99:cf:1b:4c:0b:56:e6: 2c:03:8c:10:3a:99:5e:f8:ca:a3:84:1e:99:f3:81:1f:9d:e3: 7e:e0:db:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjYwNTExMDMyNjE3WhcNMjYwNTE4MDMyNjE3WjAYMRYwFAYD VQQDEw02YTAxNGM1YS0xZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Q18SXQqVtwOfAYfkn+xG5Km+JgbO4p7dvPhWsAyXYku1O5Ephf/ffwJvtZA NgFtOKVRWktT4ohim3URn9j5J/TFHrvPkKoLfGz/wnyu8jJKgPsn/xq7f0xw2n33 Y5t7mPyDFqeF4FAk5WY1Ejjqa/YwqdhHkpIn6XinK4Peb560BAZToTP7d6APG/rU xySI0kKXFhTkhiv4CvDiTDXOjdTjCN7WEWudMeoUNuWB9Z3oqIwNyxtlJJ5tn9fZ Qr1ARVABrKHk/NKyqKa8ZzhmCKWd8HHCSSkWIvEfPJIgwLTrc+N2CeRmLVpcCY+T dAuFIFqvVrxERb2rTGesQSIj/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZq+Lf3 hVROt5FOS9SSiZLU3eGgMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADTsfiL8qo/saMnOeRKKflmRksemMsd1sfyMzHjHm6htlVlDYTnv4wE0hpqtq tG9NvNh09euL1GWr6khhYmtQMw9H0SDBJK8nGrhxkVcbueaEMVET11m7HufaMnsP k7FR3x2bjB4n4vKbWFsq8syyJuh6sJN94j8uv1cYWI6o/RNMa+s8p7gYCsPEKCqh XyyDKPUMI7YVZgPLDOaBOX3xF3/srIDtUYpHXLpC/UgKTxigBgm3frIZKX7xw7tX 2cWt2760rGZ6zcJD4Jj0lExkPEUu73cd7s23AMp+I/dOWlLRSOaZzxtMC1bmLAOM EDqZXvjKo4QemfOBH53jfuDbzA== -----END CERTIFICATE-----Generated at Wed May 13 03:18:51 2026 by rpki-client