$ rpki-client -vvvf rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft File: PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft (raw, json) Hash identifier: VrhUC7El2v4o3WquWywxwanfYEi7/B9VKHjFCHQ/R5Y= Subject key identifier: 0E:6D:36:30:48:4A:18:00:D8:7C:6F:6C:0B:73:D8:1A:40:B3:A1:39 Authority key identifier: 3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 Certificate issuer: /CN=A9175F18/serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Certificate serial: 08F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft Manifest number: 08C5 Signing time: Sun 01 Nov 2026 10:52:55 +0000 Manifest this update: Sun 01 Nov 2026 10:52:54 +0000 Manifest next update: Sun 08 Nov 2026 10:52:54 +0000 Files and hashes: 1: PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl (hash: cMkogtd7ShpBNJYX0vuUmGf9icCMoQFxAVd468FLuhQ=) 2: 10EEFBF4F66D11F0BC9231976F6F56BC.roa (hash: 4MuAY4it4gTEQIf5LMe2RPCt6I2j4k+IMBFAYSXEFv8=) 3: 0DA7D6ACBEF111ED9634C070C4F9AE02.roa (hash: GMNbFj5OMAYQTJHJmZ3/lLnrwOgYll7c/asD4WCaS0E=) 4: DD05A8AA608011F1AE501B546C47A888.roa (hash: QEf9IJ4cghdHLPOGDXZmXUV5GnmjUHrJsB8j5d7MCV8=) 5: 61F0DC84D5E211F1BFFBCC60FB65CEF9.roa (hash: +UdQZlauewm3sX0NOP1s9loYTY5l+Pd8vD09b3TH4OY=) 6: 2E91B188D2E011F1A52EACC50E66CEF9.roa (hash: bIVY+CmK+W92H5xsCVL2ak0EQPW0wdx/Cq5ytljVpiU=) 7: BADD8D386C4411EFA8952B76C4F9AE02.roa (hash: 8Lvkcgv7yOabmTNQw5dZOVZ5p1pChuBn8m5Q4ywZP70=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Nov 2026 10:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2291 (0x8f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F18, serialNumber=3C8B2BDBCB155E2D2FECD45D062FB3699F034320 Validity Not Before: Nov 1 10:52:54 2026 GMT Not After : Nov 8 10:52:54 2026 GMT Subject: CN=6ae71a07-c878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:3a:eb:66:f5:91:31:6b:ab:20:63:46:ec: c9:9f:38:e8:7f:86:85:37:82:81:f4:4d:cd:7f:4b: ca:7a:aa:3b:a8:2a:76:e7:ca:a5:58:01:89:ac:de: 39:e9:18:81:95:e1:b5:b9:f7:76:b2:3a:56:9c:54: 6a:3f:c2:9a:da:8c:06:1b:15:86:ea:3f:00:4d:ac: cf:5f:a2:e6:4a:fb:f6:c5:07:ac:08:d3:23:cb:3e: 4a:65:2e:66:5a:2a:42:6a:21:56:d0:a4:f2:ad:5c: 1f:4f:29:2b:8f:2c:fa:7d:cd:17:d2:79:4e:dc:95: ab:ba:a4:d0:60:87:4d:f5:1b:b0:7e:54:a3:dd:37: 5e:d4:58:96:e7:89:9d:e9:31:26:cf:75:0a:44:c5: 46:5f:17:b9:d8:81:82:70:b5:72:67:2c:34:88:65: ac:c6:e8:5a:f7:c0:43:6e:fc:d1:25:2c:a1:f2:10: ff:56:3a:aa:40:89:3c:b5:b0:9e:41:d3:06:cf:d3: 71:c0:80:c7:a3:4e:b1:85:b8:4e:ab:54:27:15:15: e6:fb:3c:59:94:aa:4a:37:66:83:30:81:fc:c9:9c: 17:a5:9b:74:f6:2a:ea:cb:24:49:50:73:41:15:d6: 44:5e:e1:03:d4:b5:2a:24:2b:5b:f7:14:34:39:5f: 21:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:36:30:48:4A:18:00:D8:7C:6F:6C:0B:73:D8:1A:40:B3:A1:39 X509v3 Authority Key Identifier: keyid:3C:8B:2B:DB:CB:15:5E:2D:2F:EC:D4:5D:06:2F:B3:69:9F:03:43:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PIsr28sVXi0v7NRdBi-zaZ8DQyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F18/A384291C0AA011EB87333882C4F9AE02/PIsr28sVXi0v7NRdBi-zaZ8DQyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f3:8e:00:14:0e:e8:84:e1:94:57:eb:20:11:7a:c7:56:5e: ec:50:15:53:5b:8a:e7:54:e8:f1:72:d5:3b:de:ca:f8:49:89: 29:0e:da:91:da:b9:e3:ae:cc:e4:b8:a3:e8:d9:40:68:20:fd: e6:48:da:56:67:1b:ef:ec:18:d0:41:3d:d6:ad:51:33:02:cf: b7:1b:fb:e4:8a:0a:de:b6:bf:11:fc:30:e1:f2:36:1e:9d:a0: d7:a1:69:a0:db:4f:ce:89:3b:78:0e:c9:6b:d5:6c:49:1d:17: e4:1a:e4:df:8d:99:42:5d:9e:24:88:c2:46:78:e0:ae:cf:29: 7f:f1:e9:03:29:da:aa:ca:29:17:5c:b1:ec:90:7f:8e:b1:0f: b3:0a:6d:d3:a3:39:25:80:4d:7a:19:b0:7a:b2:67:05:09:03: b5:21:a5:78:79:76:ac:4e:c7:78:89:55:05:72:b4:5d:9c:ca: 80:53:ce:f9:5e:07:36:54:b7:6c:4a:d0:f2:26:35:d9:29:75: ae:37:ab:55:b8:4a:92:c2:fe:9e:3b:6f:27:b5:2f:c8:16:79: 3c:af:2c:a6:dc:a8:1a:86:7e:4b:b1:49:73:30:47:90:b0:c5: 76:cf:04:c7:40:e3:5d:25:bd:29:c1:74:32:8a:ca:a3:81:88: 7a:09:5e:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGMTgxMTAvBgNVBAUTKDNDOEIyQkRCQ0IxNTVFMkQyRkVDRDQ1RDA2MkZCMzY5 OUYwMzQzMjAwHhcNMjYxMTAxMTA1MjU0WhcNMjYxMTA4MTA1MjU0WjAYMRYwFAYD VQQDEw02YWU3MWEwNy1jODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqE4662b1kTFrqyBjRuzJnzjof4aFN4KB9E3Nf0vKeqo7qCp258qlWAGJrN45 6RiBleG1ufd2sjpWnFRqP8Ka2owGGxWG6j8ATazPX6LmSvv2xQesCNMjyz5KZS5m WipCaiFW0KTyrVwfTykrjyz6fc0X0nlO3JWruqTQYIdN9RuwflSj3Tde1FiW54md 6TEmz3UKRMVGXxe52IGCcLVyZyw0iGWsxuha98BDbvzRJSyh8hD/VjqqQIk8tbCe QdMGz9NxwIDHo06xhbhOq1QnFRXm+zxZlKpKN2aDMIH8yZwXpZt09irqyyRJUHNB FdZEXuED1LUqJCtb9xQ0OV8h9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5tNjBI ShgA2HxvbAtz2BpAs6E5MB8GA1UdIwQYMBaAFDyLK9vLFV4tL+zUXQYvs2mfA0Mg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUYxOC9BMzg0MjkxQzBB QTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhpMHY3TlJkQmktemFaOERR eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BJc3IyOHNWWGkwdjdOUmRCaS16YVo4RFF5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUYxOC9BMzg0MjkxQzBBQTAxMUVCODczMzM4ODJDNEY5QUUwMi9QSXNyMjhzVlhp MHY3TlJkQmktemFaOERReUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaPOOABQO6IThlFfrIBF6x1Ze7FAVU1uK51To8XLVO97K+EmJKQ7akdq5467M 5Lij6NlAaCD95kjaVmcb7+wY0EE91q1RMwLPtxv75IoK3ra/Efww4fI2Hp2g16Fp oNtPzok7eA7Ja9VsSR0X5Brk342ZQl2eJIjCRnjgrs8pf/HpAynaqsopF1yx7JB/ jrEPswpt06M5JYBNehmwerJnBQkDtSGleHl2rE7HeIlVBXK0XZzKgFPO+V4HNlS3 bErQ8iY12Sl1rjerVbhKksL+njtvJ7UvyBZ5PK8sptyoGoZ+S7FJczBHkLDFds8E x0DjXSW9KcF0MorKo4GIegleJQ== -----END CERTIFICATE-----Generated at Mon Nov 2 12:42:42 2026 by rpki-client