$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft File: xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft (raw, json) Hash identifier: rALooOLnDdYvu0XZ8BZ6vV9+1gLRJNr4MgYI7m9Y/yQ= Subject key identifier: CF:D7:02:D9:51:50:60:D6:90:FE:47:5D:2B:6B:96:BD:70:75:A8:54 Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 Certificate issuer: /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Certificate serial: 0552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft Manifest number: 0509 Signing time: Thu 08 Oct 2026 23:53:53 +0000 Manifest this update: Thu 08 Oct 2026 23:53:52 +0000 Manifest next update: Thu 15 Oct 2026 23:53:52 +0000 Files and hashes: 1: xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl (hash: bzPsv96pIl+HSDxbEqDtEgz0CxFQvbNVNDOmChtPu3U=) 2: 6F8A81CCF30C11ED94750772C4F9AE02.roa (hash: +lysYAiE7tAFh6WIuGOmgLYRebmV1ikcUzBVaS8mik0=) 3: D83192B0152B11EE85ED4B1DC4F9AE02.roa (hash: EMlA3Q/StxXuEEyaCIdkb3FX9P3Rrmoemgp7n81D5+4=) 4: 5CA964A68AC111EC91D19A11C4F9AE02.roa (hash: gvK8maqGxYp4lJeyX+W8kif65fkOj90NEZevEg0iRXM=) 5: F179A39E0F0011F1AA61A6530E3D8C67.roa (hash: z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=) 6: 86131D8AEA5D11ED80641166C4F9AE02.roa (hash: 4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=) 7: 874B6EBC0F6E11F190C9BD30293D8C67.roa (hash: HqtrqO9wtp4Bw9to/IZBSTc+H4UcScxKGJWTDnLTim8=) 8: D46B2C087F8711EC81E76A59C4F9AE02.roa (hash: hUayntDdKbP8YD8KFW+2g7hE9d13fe7KDzMZQmXs21I=) 9: F0259B5AC4BF11F0B2402975C4F9AE02.roa (hash: Sro4OLk/DSMCZn4K0Wy038cX6/xvomXtZ3z40SAC7Vo=) 10: C3261EF826DF11ED94E18118C4F9AE02.roa (hash: hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=) 11: 350FEB88D40611EDADEE3D1EC4F9AE02.roa (hash: D9z3NJUY8YNFb7cpJMaWfb8axb5uXCoUzET824J42QI=) 12: 8FD0B12E400311EEBF5A8B52C4F9AE02.roa (hash: Fu109TGeOUOlOrI2XIFdihyRA7Fr+8/prz/x7VcBoCE=) 13: C5B45CA014F411F180EDEBBD193D8C67.roa (hash: 1jcExNuLyHWYrWjBJRhFw6fSw8L5FWvGvk7sIxrsGAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 23:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539 Validity Not Before: Oct 8 23:53:52 2026 GMT Not After : Oct 15 23:53:52 2026 GMT Subject: CN=6ac82d11-f457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:dc:1d:a2:0b:b5:cf:aa:71:b6:8f:46:f6: a7:4c:8a:a4:32:df:82:73:11:c2:84:d7:4b:4f:b0: c5:f8:2b:8f:ab:d3:13:26:89:82:a2:28:59:05:b2: 89:69:4a:9d:8a:78:5e:9b:39:c2:0c:c8:e8:ea:8c: 49:7a:5f:22:95:70:20:fc:61:44:63:04:b4:b0:c6: 09:9b:15:65:2a:b7:bd:b5:19:51:70:64:1b:96:4a: bb:35:57:58:8f:11:5d:08:9d:f8:19:c0:39:8b:9e: 69:e9:c3:16:c8:4b:03:aa:0f:6f:85:d0:92:be:c1: 8e:59:57:55:b6:c6:b8:94:93:96:d3:d2:64:27:08: 2b:6c:8b:0a:80:7f:5c:92:f5:71:2f:0d:98:e3:20: c2:e5:2a:db:c9:68:6d:10:24:ba:d9:dc:6d:12:34: 97:c3:78:2f:ec:6b:56:57:3c:b6:a9:8a:91:c5:70: ba:96:8a:fe:18:d8:8d:0c:4b:ca:20:97:9f:41:c2: 57:5d:2d:9e:53:74:e5:60:7e:91:c5:b1:55:4a:3f: 5d:f5:28:d5:a4:d9:33:6e:db:33:1a:6d:2d:e3:ec: ba:26:c2:e7:60:74:fa:15:67:5b:a3:f8:08:9e:ef: 05:5d:02:51:63:af:70:59:fd:43:31:3a:e9:7f:e2: 7b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D7:02:D9:51:50:60:D6:90:FE:47:5D:2B:6B:96:BD:70:75:A8:54 X509v3 Authority Key Identifier: keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:31:2b:69:57:71:13:13:4a:4b:b7:6a:c2:f0:c1:1b:0e:20: 91:03:22:e3:21:d0:7c:dd:c0:e8:a6:7c:a3:fc:8b:cb:a4:0a: 35:78:c7:12:0e:cd:66:d7:7c:b9:c7:71:8e:b0:8e:db:97:d9: 12:e8:95:9e:8c:f5:1c:09:3f:4c:81:bd:65:e0:62:cd:72:37: 4f:36:94:39:99:bf:f9:1d:05:a3:2e:1b:88:ca:2e:06:23:cf: ec:ed:c0:e5:0a:79:18:5c:de:a8:7d:7a:92:aa:5b:83:3b:a7: a9:a0:e2:34:7e:f7:9e:68:15:19:f7:b1:f6:25:d0:4b:17:b2: 99:e2:83:f2:8a:13:4c:cf:b0:f0:3e:fd:b8:81:74:d8:a2:f0: a6:1d:c6:a3:3e:45:e6:2c:f8:76:58:9b:a1:bc:69:6d:7b:54: 5a:3d:1c:d0:00:cd:b8:3e:84:0b:0f:e1:0e:23:02:35:bc:6a: c9:a8:cc:d4:fb:fa:b2:56:9c:f1:a9:c2:04:c2:e9:92:06:af: 97:a5:f4:ac:64:5d:ed:a4:59:94:f3:5a:63:69:ae:80:d1:71: 77:de:c2:d9:43:b6:7d:44:bf:b0:50:e5:f2:5b:a2:ed:26:46: 48:4e:fd:57:ea:62:92:51:21:ac:3a:18:df:1a:dc:71:39:ab: 07:b2:df:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUxQTAxMTAvBgNVBAUTKEM2RUFCRUI5M0UxRDA2RTJDMzJFMUM0Q0JFMTQ3Q0ZC Mzk5OTI1MzkwHhcNMjYxMDA4MjM1MzUyWhcNMjYxMDE1MjM1MzUyWjAYMRYwFAYD VQQDEw02YWM4MmQxMS1mNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkufcHaILtc+qcbaPRvanTIqkMt+CcxHChNdLT7DF+CuPq9MTJomCoihZBbKJ aUqdinhemznCDMjo6oxJel8ilXAg/GFEYwS0sMYJmxVlKre9tRlRcGQblkq7NVdY jxFdCJ34GcA5i55p6cMWyEsDqg9vhdCSvsGOWVdVtsa4lJOW09JkJwgrbIsKgH9c kvVxLw2Y4yDC5SrbyWhtECS62dxtEjSXw3gv7GtWVzy2qYqRxXC6lor+GNiNDEvK IJefQcJXXS2eU3TlYH6RxbFVSj9d9SjVpNkzbtszGm0t4+y6JsLnYHT6FWdbo/gI nu8FXQJRY69wWf1DMTrpf+J7+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM/XAtlR UGDWkP5HXStrlr1wdahUMB8GA1UdIwQYMBaAFMbqvrk+HQbiwy4cTL4UfPs5mSU5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTFBMC83QzUzOTEwQzdG ODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1TERMaHhNdmhSOC16bVpK VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h1cS11VDRkQnVMRExoeE12aFI4LXptWkpUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTFBMC83QzUzOTEwQzdGODQxMUVDODA1MThFNTFDNEY5QUUwMi94dXEtdVQ0ZEJ1 TERMaHhNdmhSOC16bVpKVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAizEraVdxExNKS7dqwvDBGw4gkQMi4yHQfN3A6KZ8o/yLy6QKNXjHEg7NZtd8 ucdxjrCO25fZEuiVnoz1HAk/TIG9ZeBizXI3TzaUOZm/+R0Foy4biMouBiPP7O3A 5Qp5GFzeqH16kqpbgzunqaDiNH73nmgVGfex9iXQSxeymeKD8ooTTM+w8D79uIF0 2KLwph3Goz5F5iz4dlibobxpbXtUWj0c0ADNuD6ECw/hDiMCNbxqyajM1Pv6slac 8anCBMLpkgavl6X0rGRd7aRZlPNaY2mugNFxd97C2UO2fUS/sFDl8lui7SZGSE79 V+piklEhrDoY3xrccTmrB7LfEQ== -----END CERTIFICATE-----Generated at Sat Oct 10 13:23:07 2026 by rpki-client