$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: EJGwCOkUFIHdYIedZFpeFCvRoQTHGFNuZ8m9jkmk8MM= Subject key identifier: 85:CC:75:A0:EB:EB:83:28:4D:96:DF:42:C0:B5:F8:7A:D1:98:B3:E7 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0529 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 04E0 Signing time: Tue 21 Jul 2026 00:42:14 +0000 Manifest this update: Tue 21 Jul 2026 00:42:13 +0000 Manifest next update: Tue 28 Jul 2026 00:42:13 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: GqI2ud2aoGAPe2rIyMZVkQ1J6kG9vI0CuKfNQZcGn34=) 2: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=) 3: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=) 4: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=) 5: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=) 6: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=) 7: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=) 8: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=) 9: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=) 10: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=) 11: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=) 12: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=) 13: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1321 (0x529) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Jul 21 00:42:13 2026 GMT Not After : Jul 28 00:42:13 2026 GMT Subject: CN=6a5ec065-7bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:84:06:84:4f:46:64:94:0b:14:88:16:b5: 84:bb:ca:12:a2:c3:1f:5a:00:70:91:fd:05:46:78: 2e:fe:af:05:34:57:bb:57:80:b3:10:07:5d:bb:be: cd:66:8a:9e:27:d6:2a:3e:4a:3e:8f:72:9a:05:11: 2c:b6:d3:bb:c4:e4:1b:a9:92:af:b8:a7:ef:fe:a4: f7:b3:82:7e:82:4d:63:19:b5:e0:c0:b0:ed:d7:51: 1b:3d:91:e6:32:bd:e4:fc:28:e2:88:07:a1:09:36: 30:51:68:f6:8b:85:88:b5:25:ef:7b:8c:25:a4:76: 06:fb:fd:47:6c:84:46:09:ac:ae:3a:55:54:75:cb: 73:18:b9:34:3d:3c:40:b8:cd:91:bf:5f:cc:d0:83: 04:d2:cc:ff:54:eb:e9:c1:77:22:eb:a2:39:5e:e1: b6:da:51:59:4f:73:cd:cb:68:b7:4e:c6:e5:df:d8: 27:b8:a9:0a:6e:ef:10:84:d9:d8:bb:60:2d:1d:1f: 05:9f:f1:e2:b8:46:f3:87:23:f8:53:2d:d4:31:44: 78:8d:6c:91:33:e1:66:ae:80:e5:04:72:7f:5e:7f: b0:68:8a:10:56:64:07:34:cf:6a:55:76:6c:73:84: 15:39:9a:f7:c9:06:9f:31:81:2b:2a:8c:39:92:f8: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CC:75:A0:EB:EB:83:28:4D:96:DF:42:C0:B5:F8:7A:D1:98:B3:E7 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:96:51:17:72:53:c4:52:88:23:e1:85:a9:70:27:01:6e:a5: c6:c0:ae:5e:45:74:c8:a4:91:41:13:7e:d6:44:b0:b1:10:e1: d7:3e:3f:02:5c:e5:af:03:b4:72:fe:59:39:d9:be:66:30:2c: 07:43:c6:f6:cf:88:86:ac:55:2a:34:f4:15:1e:6a:ef:d3:4e: cd:0e:65:6e:95:63:35:99:79:ef:f4:c8:04:85:ab:78:66:6c: 78:52:90:27:5c:34:5d:b1:42:69:04:b3:2f:c3:f7:97:35:76: 60:c8:cf:ac:14:b2:f9:e1:b6:b8:b4:fa:63:5c:4e:17:7e:f2: cd:0c:f7:d2:ca:12:27:d3:93:f8:da:87:5e:52:20:db:55:a9: c0:32:36:f3:c1:b1:52:e1:0b:fa:d7:9f:fa:db:2e:14:d0:9b: 8a:b9:a7:e7:75:20:41:ce:a1:ec:27:a0:fa:2d:65:48:93:e5: e5:35:d4:bf:fc:04:cf:8f:c3:22:b6:1f:20:8c:72:fd:ed:24: 2d:c2:d6:36:d1:e9:43:fe:3a:c7:71:19:15:64:e6:65:0c:54: 91:a6:a1:3d:19:62:1c:94:34:7e:de:77:3c:17:8b:89:d2:f2: d9:f8:47:66:f0:9a:77:23:ce:2a:bc:20:8a:d9:e8:ac:ba:8d: 06:cf:ed:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjYwNzIxMDA0MjEzWhcNMjYwNzI4MDA0MjEzWjAYMRYwFAYD VQQDEw02YTVlYzA2NS03YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDuEBoRPRmSUCxSIFrWEu8oSosMfWgBwkf0FRngu/q8FNFe7V4CzEAddu77N ZoqeJ9YqPko+j3KaBREsttO7xOQbqZKvuKfv/qT3s4J+gk1jGbXgwLDt11EbPZHm Mr3k/CjiiAehCTYwUWj2i4WItSXve4wlpHYG+/1HbIRGCayuOlVUdctzGLk0PTxA uM2Rv1/M0IME0sz/VOvpwXci66I5XuG22lFZT3PNy2i3Tsbl39gnuKkKbu8QhNnY u2AtHR8Fn/HiuEbzhyP4Uy3UMUR4jWyRM+FmroDlBHJ/Xn+waIoQVmQHNM9qVXZs c4QVOZr3yQafMYErKow5kvgbMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXMdaDr 64MoTZbfQsC1+HrRmLPnMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIpZRF3JTxFKII+GFqXAnAW6lxsCuXkV0yKSRQRN+1kSwsRDh1z4/AlzlrwO0 cv5ZOdm+ZjAsB0PG9s+IhqxVKjT0FR5q79NOzQ5lbpVjNZl57/TIBIWreGZseFKQ J1w0XbFCaQSzL8P3lzV2YMjPrBSy+eG2uLT6Y1xOF37yzQz30soSJ9OT+NqHXlIg 21WpwDI288GxUuEL+tef+tsuFNCbirmn53UgQc6h7Ceg+i1lSJPl5TXUv/wEz4/D IrYfIIxy/e0kLcLWNtHpQ/46x3EZFWTmZQxUkaahPRliHJQ0ft53PBeLidLy2fhH ZvCadyPOKrwgitnorLqNBs/tNQ== -----END CERTIFICATE-----Generated at Tue Jul 21 17:06:13 2026 by rpki-client