$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: GQpwXmQE1EP2i1oCRnN8YgEp1SzRjaeOdW6sses+/tw= Subject key identifier: 61:3B:E9:42:CB:C6:1E:A1:7A:0C:42:0B:46:43:DF:8D:28:58:22:03 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 04B2 Signing time: Mon 20 Apr 2026 23:55:30 +0000 Manifest this update: Mon 20 Apr 2026 23:55:29 +0000 Manifest next update: Mon 27 Apr 2026 23:55:29 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: fUJ4Q6qTyiwtZPFHvBxvgTQkbCVzO9fA7df8CUo3N7w=) 2: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=) 3: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=) 4: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=) 5: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=) 6: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=) 7: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=) 8: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=) 9: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=) 10: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=) 11: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=) 12: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=) 13: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 23:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Apr 20 23:55:29 2026 GMT Not After : Apr 27 23:55:29 2026 GMT Subject: CN=69e6bcf1-43ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:7a:f6:5b:1d:6b:65:f6:ee:85:06:fa:cb: 3e:a4:b2:41:e0:4d:0d:ef:27:a3:1e:c3:62:e6:83: 78:c8:90:fe:b3:39:69:06:4b:80:2c:8d:cb:d2:58: 9a:28:46:d4:dc:75:cf:14:d1:c7:12:91:51:c3:92: f5:9f:46:82:7e:25:53:64:4d:e3:6e:f0:6e:6b:2d: f8:13:5e:27:30:32:13:06:8f:8e:e7:8a:22:ef:54: 95:58:76:88:7a:aa:a4:c9:6b:e0:f1:6a:3d:1c:c6: a3:ea:a5:ac:87:c6:08:d5:60:6f:b9:97:10:49:bf: 84:af:d7:0e:06:bb:d0:52:5f:6b:de:9f:04:17:1f: a3:07:a0:b4:b6:d2:55:c0:dd:de:3d:47:1c:7f:3e: 61:c2:db:e9:e9:cf:f3:ac:2c:02:55:69:4e:fd:3a: 5b:5e:a5:1d:88:b6:75:24:98:94:d8:b7:b8:03:2e: 2c:65:1e:d2:a0:b3:a5:ad:0f:fe:53:40:3b:22:9a: 77:63:be:16:41:99:f2:2d:eb:9c:e4:0c:10:fb:b8: cc:29:47:a8:b2:cf:35:86:b1:12:e8:9b:58:9b:1e: 3a:00:ca:94:7d:e1:c0:e8:a5:56:4a:06:1b:df:bf: 5e:04:48:a3:b7:7d:40:6b:c7:c3:08:f1:d8:f3:7b: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3B:E9:42:CB:C6:1E:A1:7A:0C:42:0B:46:43:DF:8D:28:58:22:03 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6a:40:5a:2e:ea:66:ac:15:e8:ab:fb:8a:7a:97:5c:38:ca: f9:b7:ec:b1:2f:46:f8:5a:57:e0:f4:91:12:71:af:93:db:e3: 42:9f:57:fa:66:30:07:3c:9e:70:db:43:f4:ed:e5:61:51:fb: fb:ed:3f:ae:4a:13:ca:5c:74:5b:a4:d3:27:d0:b3:47:56:55: 4e:61:3f:cb:94:9c:4b:f1:59:9d:2a:25:58:ef:0c:53:dd:66: bc:c1:69:8e:73:c8:86:6b:6b:ec:03:19:91:f0:80:31:d0:de: da:ae:4d:a8:24:4c:8a:e6:65:40:d2:60:cc:91:67:1a:e7:41: 8b:12:11:0f:08:c2:cc:83:89:67:6f:bf:44:2c:54:a5:a7:ac: 58:5e:bb:d4:58:71:41:8d:15:e0:eb:c2:0b:c2:64:22:39:42: 84:a1:b1:32:c4:27:05:6c:eb:c5:09:fd:99:5c:f3:db:18:c0: ae:7c:6a:e1:32:23:6b:3f:91:cc:62:40:a2:e5:11:9e:20:b5: af:b6:1f:16:2b:5c:a9:28:6b:a7:15:31:a0:43:07:c4:6d:79: 65:1c:0b:13:2c:41:79:0d:d1:46:a5:38:be:88:d5:8f:c7:9c: 0d:f4:97:32:a0:bb:50:96:fb:8d:b3:08:b2:63:aa:1f:e4:8b: c9:f8:60:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjYwNDIwMjM1NTI5WhcNMjYwNDI3MjM1NTI5WjAYMRYwFAYD VQQDEw02OWU2YmNmMS00M2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2t69lsda2X27oUG+ss+pLJB4E0N7yejHsNi5oN4yJD+szlpBkuALI3L0lia KEbU3HXPFNHHEpFRw5L1n0aCfiVTZE3jbvBuay34E14nMDITBo+O54oi71SVWHaI eqqkyWvg8Wo9HMaj6qWsh8YI1WBvuZcQSb+Er9cOBrvQUl9r3p8EFx+jB6C0ttJV wN3ePUccfz5hwtvp6c/zrCwCVWlO/TpbXqUdiLZ1JJiU2Le4Ay4sZR7SoLOlrQ/+ U0A7Ipp3Y74WQZnyLeuc5AwQ+7jMKUeoss81hrES6JtYmx46AMqUfeHA6KVWSgYb 379eBEijt31Aa8fDCPHY83vz0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGE76ULL xh6hegxCC0ZD340oWCIDMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbWpAWi7qZqwV6Kv7inqXXDjK+bfssS9G+FpX4PSREnGvk9vjQp9X+mYwBzye cNtD9O3lYVH7++0/rkoTylx0W6TTJ9CzR1ZVTmE/y5ScS/FZnSolWO8MU91mvMFp jnPIhmtr7AMZkfCAMdDe2q5NqCRMiuZlQNJgzJFnGudBixIRDwjCzIOJZ2+/RCxU paesWF671FhxQY0V4OvCC8JkIjlChKGxMsQnBWzrxQn9mVzz2xjArnxq4TIjaz+R zGJAouURniC1r7YfFitcqShrpxUxoEMHxG15ZRwLEyxBeQ3RRqU4vojVj8ecDfSX MqC7UJb7jbMIsmOqH+SLyfhgUw== -----END CERTIFICATE-----Generated at Tue Apr 21 21:05:56 2026 by rpki-client