$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: +mNH3QDpVrmvrT+6gtSPEqf0LkexbLdRgW8rOjKqDv4= Subject key identifier: 81:27:01:46:F0:4F:52:1A:EB:CC:87:F6:E0:24:1A:2B:EF:C8:6D:C3 Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 0486 Signing time: Sat 14 Nov 2026 23:49:11 +0000 Manifest this update: Sat 14 Nov 2026 23:49:11 +0000 Manifest next update: Sat 21 Nov 2026 23:49:11 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: tXe4xOs/AdTTWHdjjiIf06dZSyCnug5x+xbmj79ZXfE=) 2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: i18vAYWYZqWUAwFZVSlGk7OxKqt1gz8XjzU2hmpsWh8=) 3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: NkI+pmzBqCxF9snRnYsLLFaunC0T93+l8haq4O7khjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Nov 2026 23:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Nov 14 23:49:11 2026 GMT Not After : Nov 21 23:49:11 2026 GMT Subject: CN=6af8f377-a95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:8c:c4:85:d5:6a:f4:e0:c9:b0:0a:1d:b0: 38:eb:1f:72:bd:47:d6:9f:01:be:9c:ec:03:71:ba: 16:e8:23:25:ee:62:1a:0d:8b:1f:ed:4e:61:cf:c9: df:63:c2:e8:2e:fa:b7:9c:27:e0:8e:6c:83:27:18: 7c:92:5e:82:43:05:38:7c:5e:89:9e:fe:b5:64:80: 21:f5:03:50:e9:22:16:cb:68:c9:07:82:63:f2:e2: aa:9c:16:06:92:48:5e:d9:b3:74:32:cf:ed:08:ee: 01:b5:27:a7:2e:42:bd:44:b4:1c:3f:31:3b:08:ac: 17:30:67:5b:04:58:4b:f8:bc:8f:93:19:77:a4:ef: cd:9e:fc:9b:6e:39:27:85:81:e1:9d:17:7a:21:7a: 78:14:80:2a:2a:39:14:ae:2a:a1:ed:b8:91:15:96: f9:08:a3:8a:bb:e0:b8:03:2b:6b:72:93:fb:e6:eb: 25:4a:fb:bc:ad:3f:9b:5b:67:91:22:07:25:a3:3b: 13:f0:2a:3a:e4:6e:99:e0:49:75:a9:4c:b8:80:39: b5:90:1e:30:d9:a9:a1:dd:a3:e9:a4:4a:d8:5e:a8: 81:fa:8e:3a:72:2b:9d:d7:ed:b0:c2:2a:ef:1a:67: 5a:d3:8c:ee:22:66:96:3a:1a:f7:1d:52:61:dc:00: c5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:01:46:F0:4F:52:1A:EB:CC:87:F6:E0:24:1A:2B:EF:C8:6D:C3 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f0:31:74:38:db:e4:e3:0d:11:af:93:60:d8:03:0f:41:7d: 97:3a:62:23:38:ab:a5:8b:cd:e9:d2:6a:ae:36:12:dd:f0:a4: de:0e:e1:07:a0:d4:96:1a:4f:dd:54:63:60:0e:87:69:60:15: be:76:a2:85:12:6f:78:2c:7a:2c:21:88:75:2d:5d:00:12:4d: d3:3a:fc:e4:29:0c:83:64:7b:c4:ea:a1:b1:1e:5b:f1:eb:8c: 43:ee:c2:eb:93:b5:b7:66:f8:62:6a:a4:86:ae:52:19:00:d9: 83:5f:66:f2:1b:dd:b1:49:f5:21:b0:34:9a:ab:03:e0:ca:29: 20:57:5a:fa:76:b5:8b:3e:95:64:ca:79:e8:b7:1e:37:57:a0: d9:30:5d:f7:ea:8e:52:4a:d6:da:9b:02:cc:01:36:5c:42:ce: c7:b0:05:6e:85:aa:c1:27:15:82:c3:08:95:e5:08:56:cd:76: 34:7f:98:ba:da:5f:04:47:22:05:39:46:e6:3b:e9:ff:77:5b: bd:18:af:b5:0b:f9:3f:8f:ba:62:a3:1c:a7:9b:61:9a:08:0a: 5e:22:a2:c2:11:00:ad:19:2e:ea:68:b7:0b:27:93:e9:9b:c6: 35:92:11:5a:7f:d8:16:ff:9b:49:f3:c2:22:5f:82:5e:ec:35: d2:0e:99:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjYxMTE0MjM0OTExWhcNMjYxMTIxMjM0OTExWjAYMRYwFAYD VQQDEw02YWY4ZjM3Ny1hOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVmMxIXVavTgybAKHbA46x9yvUfWnwG+nOwDcboW6CMl7mIaDYsf7U5hz8nf Y8LoLvq3nCfgjmyDJxh8kl6CQwU4fF6Jnv61ZIAh9QNQ6SIWy2jJB4Jj8uKqnBYG kkhe2bN0Ms/tCO4BtSenLkK9RLQcPzE7CKwXMGdbBFhL+LyPkxl3pO/Nnvybbjkn hYHhnRd6IXp4FIAqKjkUriqh7biRFZb5CKOKu+C4AytrcpP75uslSvu8rT+bW2eR IgclozsT8Co65G6Z4El1qUy4gDm1kB4w2amh3aPppErYXqiB+o46ciud1+2wwirv Gmda04zuImaWOhr3HVJh3ADFowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIEnAUbw T1Ia68yH9uAkGivvyG3DMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfAxdDjb5OMNEa+TYNgDD0F9lzpiIzirpYvN6dJqrjYS3fCk3g7hB6DUlhpP 3VRjYA6HaWAVvnaihRJveCx6LCGIdS1dABJN0zr85CkMg2R7xOqhsR5b8euMQ+7C 65O1t2b4Ymqkhq5SGQDZg19m8hvdsUn1IbA0mqsD4MopIFda+na1iz6VZMp56Lce N1eg2TBd9+qOUkrW2psCzAE2XELOx7AFboWqwScVgsMIleUIVs12NH+YutpfBEci BTlG5jvp/3dbvRivtQv5P4+6YqMcp5thmggKXiKiwhEArRku6mi3CyeT6ZvGNZIR Wn/YFv+bSfPCIl+CXuw10g6ZTA== -----END CERTIFICATE-----Generated at Sun Nov 15 10:16:10 2026 by rpki-client