$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: d3rTtieLTRYU7W+ZVt46ejIPlfRCX3rXTJRRJYG2qB4= Subject key identifier: 38:43:88:36:C5:D5:42:D5:7B:B1:31:F4:CE:43:75:A8:61:F0:0A:7F Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 0493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 0481 Signing time: Thu 05 Nov 2026 00:21:11 +0000 Manifest this update: Thu 05 Nov 2026 00:21:10 +0000 Manifest next update: Thu 12 Nov 2026 00:21:10 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: ZTN0j4wjYRHTYFcanhI2Z6IsA093vrh8pFTswCuX7vc=) 2: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=) 3: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Nov 2026 00:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1171 (0x493) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Nov 5 00:21:10 2026 GMT Not After : Nov 12 00:21:10 2026 GMT Subject: CN=6aebcbf7-6a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:28:c3:47:ad:bd:99:21:23:ff:ea:d5:d6:a9: 0a:e0:6e:22:dd:be:22:85:79:3f:ee:f7:8b:16:e6: 54:f2:6a:c4:11:e6:a1:4d:83:0f:e5:a9:9c:6e:0d: 28:17:8f:38:94:a7:f1:b7:21:2c:0c:74:5f:af:95: aa:d1:3c:b4:e6:bc:74:e4:f5:33:11:4f:02:03:a7: 99:2a:55:f7:e9:61:7e:6f:5a:af:eb:1b:e8:06:85: 5e:4d:5d:e2:b7:eb:b5:57:31:aa:d5:cc:4a:5d:36: e6:8b:93:0a:92:9f:44:cf:50:ad:34:b2:4b:bd:23: 2b:93:34:11:50:d4:ed:a7:b7:47:77:d7:be:ab:ce: 21:f0:03:63:f4:14:fd:f7:6a:b8:7e:76:7b:01:74: 5e:ac:6f:bb:ba:27:86:df:c9:1c:10:65:a0:8c:ce: 65:5c:bf:51:78:66:71:a1:b4:da:49:d9:e3:aa:46: b4:9a:14:d4:85:af:70:65:b3:69:2c:d5:68:3e:5e: fb:dc:4b:f4:8c:7b:dc:c5:57:90:c2:df:ce:45:0f: 90:7c:b1:f8:e6:84:db:a8:de:94:c0:77:e4:26:14: c2:36:80:e5:c4:9c:0e:36:f4:55:71:9a:b2:d9:f4: 2f:8c:8e:45:cc:9a:9d:c5:17:00:50:3e:82:cd:ed: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:43:88:36:C5:D5:42:D5:7B:B1:31:F4:CE:43:75:A8:61:F0:0A:7F X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:af:6e:63:e0:c6:30:6c:9d:9c:09:a5:3e:d4:34:ab:df:78: cc:3b:f3:ac:ee:1b:9e:2a:62:2e:93:04:20:aa:4d:9c:62:d8: 46:e9:62:26:a0:9a:90:f3:22:de:db:b8:62:7e:50:fa:5d:33: 40:82:09:aa:97:e0:bf:0c:ee:d5:6c:d1:b7:14:d7:2e:3f:5b: 50:3a:f3:ea:98:8e:1f:9f:08:42:0b:67:ac:b3:94:4b:be:72: 4f:50:05:de:03:bf:a8:af:7c:51:68:1a:96:fc:37:6a:fb:3d: d1:cc:79:65:b8:42:e2:c2:9a:dd:10:e2:3c:da:6b:ed:84:26: 0f:a6:81:a7:17:fe:52:ec:52:89:d2:1e:ea:dc:fe:da:df:e7: ed:c3:05:60:05:77:1c:fc:65:36:53:bd:62:d3:34:0b:c0:d7: 3d:c7:21:24:35:03:43:9a:1c:ff:d5:33:37:78:a4:3d:05:48: b1:d0:7c:f5:77:8d:42:68:3c:69:fd:cc:7d:3e:a2:f4:f4:6e: da:f5:d4:03:72:56:97:da:0b:70:b4:1a:1c:a1:5f:c6:3a:37: 5b:7e:b5:a4:01:c5:b9:f6:9f:97:e0:8f:6f:02:23:fb:a3:4a: df:d5:b0:c7:ae:e1:1d:6e:62:e0:9a:0a:ac:a3:02:30:bf:7c: ba:74:5f:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjYxMTA1MDAyMTEwWhcNMjYxMTEyMDAyMTEwWjAYMRYwFAYD VQQDEw02YWViY2JmNy02YTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkyjDR629mSEj/+rV1qkK4G4i3b4ihXk/7veLFuZU8mrEEeahTYMP5amcbg0o F484lKfxtyEsDHRfr5Wq0Ty05rx05PUzEU8CA6eZKlX36WF+b1qv6xvoBoVeTV3i t+u1VzGq1cxKXTbmi5MKkp9Ez1CtNLJLvSMrkzQRUNTtp7dHd9e+q84h8ANj9BT9 92q4fnZ7AXRerG+7uieG38kcEGWgjM5lXL9ReGZxobTaSdnjqka0mhTUha9wZbNp LNVoPl773Ev0jHvcxVeQwt/ORQ+QfLH45oTbqN6UwHfkJhTCNoDlxJwONvRVcZqy 2fQvjI5FzJqdxRcAUD6Cze0NKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhDiDbF 1ULVe7Ex9M5Ddahh8Ap/MB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFK9uY+DGMGydnAmlPtQ0q994zDvzrO4bnipiLpMEIKpNnGLYRuliJqCakPMi 3tu4Yn5Q+l0zQIIJqpfgvwzu1WzRtxTXLj9bUDrz6piOH58IQgtnrLOUS75yT1AF 3gO/qK98UWgalvw3avs90cx5ZbhC4sKa3RDiPNpr7YQmD6aBpxf+UuxSidIe6tz+ 2t/n7cMFYAV3HPxlNlO9YtM0C8DXPcchJDUDQ5oc/9UzN3ikPQVIsdB89XeNQmg8 af3MfT6i9PRu2vXUA3JWl9oLcLQaHKFfxjo3W361pAHFufafl+CPbwIj+6NK39Ww x67hHW5i4JoKrKMCML98unRf8g== -----END CERTIFICATE-----Generated at Thu Nov 5 18:19:38 2026 by rpki-client