$ rpki-client -vvvf rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft File: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft (raw, json) Hash identifier: embtCB+k7RaqV5pLsazdU+ggqbjeLjctN0SxTWxqeBI= Subject key identifier: 7D:51:3B:8F:CD:A4:E1:89:FF:3C:96:08:7C:ED:D8:3A:9B:06:B1:72 Authority key identifier: A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 Certificate issuer: /CN=A917C4E7/serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Certificate serial: 047B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft Manifest number: 0433 Signing time: Tue 03 Nov 2026 00:41:59 +0000 Manifest this update: Tue 03 Nov 2026 00:41:58 +0000 Manifest next update: Tue 10 Nov 2026 00:41:58 +0000 Files and hashes: 1: pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl (hash: 8kNXpw2DsAH2E9GQdtooSSyvZPYJWukdcDhuQ2Jdzjg=) 2: 95C64BC0A20C11F1978F0A1A4811F970.roa (hash: wL66YNVnRgEwAMiQSYr0PpdCCahvdrdoToc9iJC1nx8=) 3: AB6989BCEADF11ECADC46036C4F9AE02.roa (hash: piqd3okCbVlFKjEolLFOOOARynspzmzOHcnRRet9yBg=) 4: 1E08C118BCA011F18FAF0E186511F970.roa (hash: cXzfWAgVNt/oetYU5jLI6QujcWE7Ht0Vkr37uq+4fB8=) 5: DCD4CBC6D5FC11F1BB599C6E0266CEF9.roa (hash: 80FMYu4uMNxrWDdWrIbEc3oZ2iDpoKSZnSMm7WEC+nc=) 6: 51904090D11A11F189D44B64FF65CEF9.roa (hash: vDYM+jXj4oMJJJUhKdfSbjavg5gJTNzFnGTCGO9R+bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 00:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1147 (0x47b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C4E7, serialNumber=A5C4A0AB0E5EE13B14845439B1AE4FB34468C7B9 Validity Not Before: Nov 3 00:41:58 2026 GMT Not After : Nov 10 00:41:58 2026 GMT Subject: CN=6ae92dd7-c3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:6c:d5:57:be:b9:e2:f2:c2:45:6b:38:a5: 40:66:f4:45:83:37:cc:b8:3e:e9:ad:97:8e:78:f2: 60:46:1b:34:9a:09:44:89:95:30:c7:94:2d:50:74: 15:fd:2f:99:d4:30:8e:6c:c9:be:ee:1f:bd:a3:ea: dc:13:b8:00:1a:8f:41:6f:28:8e:1f:78:62:5d:fe: fd:29:3c:ec:ab:a0:a6:68:4b:e2:ba:b8:33:c7:32: f8:1d:3a:1c:8e:39:40:0c:a1:74:b2:6d:cb:2c:e2: 85:15:01:3f:78:3a:f8:17:37:ec:d8:a8:fb:d9:af: 93:4f:e6:ce:1f:d8:6a:2f:7b:4c:39:5b:11:06:e8: bd:ab:13:b4:f6:e6:57:ff:2b:dd:4b:cd:cc:6d:2f: ea:82:f2:ff:c6:d4:ed:90:d2:27:ac:75:ef:1f:8c: d4:7a:e6:e5:78:4b:16:f7:e6:38:a8:eb:98:14:a3: 1e:d9:1b:cf:93:05:dd:39:f1:9e:88:2b:2d:ec:b7: 6d:4e:95:a6:e4:4d:c9:31:ec:a6:be:d2:46:a5:5d: 89:41:76:d1:c5:e0:d6:fd:4c:00:74:78:70:9b:17: a1:4b:ab:a1:ca:a8:94:24:fe:28:48:37:fd:26:67: f4:b1:6b:6f:18:42:3a:be:7d:35:a2:32:8f:f3:c2: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:51:3B:8F:CD:A4:E1:89:FF:3C:96:08:7C:ED:D8:3A:9B:06:B1:72 X509v3 Authority Key Identifier: keyid:A5:C4:A0:AB:0E:5E:E1:3B:14:84:54:39:B1:AE:4F:B3:44:68:C7:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E7/981C0558EAD811ECBC7EE015C4F9AE02/pcSgqw5e4TsUhFQ5sa5Ps0Rox7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:46:bd:a0:0e:ba:aa:f3:8e:fb:f1:1e:7b:a9:c3:b2:0f:6f: 92:b5:18:86:37:ba:3c:7a:6b:9a:93:ba:80:59:c5:32:91:5a: 28:b5:88:b0:63:31:bb:4d:29:ed:eb:e9:b5:6b:3a:5e:fe:f1: 23:bf:54:c8:53:4c:63:53:98:b1:dd:e1:be:11:5f:30:57:13: c3:68:83:86:5b:8e:01:fc:1c:65:21:9f:3b:da:76:bf:74:da: a3:f6:ff:78:2e:8b:cf:db:ba:2b:e0:46:d2:69:66:72:a2:6c: b9:64:bf:06:e4:fb:26:88:96:fe:8d:6f:9c:7d:e0:10:20:62: f7:c8:dc:79:4d:83:98:d4:43:f5:fc:d0:03:dd:66:90:5f:43: 11:b0:f0:4e:eb:10:98:0a:07:9a:a1:61:a0:3c:17:d8:b6:02: 42:c0:df:95:96:61:77:cc:7e:01:40:14:03:7d:6c:f2:49:be: 91:d1:4f:32:c0:8b:6e:f1:c6:e1:84:35:22:17:61:1d:bb:84: 3b:0d:11:72:79:36:37:22:b6:87:77:af:29:c5:6b:2c:58:3a: 59:93:dd:76:3d:48:db:4f:4b:9f:7a:22:72:6c:8c:d5:ee:0e: 96:26:6b:cd:89:47:85:43:21:7e:84:44:13:c7:54:aa:54:4a: a5:d8:23:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M0RTcxMTAvBgNVBAUTKEE1QzRBMEFCMEU1RUUxM0IxNDg0NTQzOUIxQUU0RkIz NDQ2OEM3QjkwHhcNMjYxMTAzMDA0MTU4WhcNMjYxMTEwMDA0MTU4WjAYMRYwFAYD VQQDEw02YWU5MmRkNy1jM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2Ns1Ve+ueLywkVrOKVAZvRFgzfMuD7prZeOePJgRhs0mglEiZUwx5QtUHQV /S+Z1DCObMm+7h+9o+rcE7gAGo9BbyiOH3hiXf79KTzsq6CmaEviurgzxzL4HToc jjlADKF0sm3LLOKFFQE/eDr4Fzfs2Kj72a+TT+bOH9hqL3tMOVsRBui9qxO09uZX /yvdS83MbS/qgvL/xtTtkNInrHXvH4zUeubleEsW9+Y4qOuYFKMe2RvPkwXdOfGe iCst7LdtTpWm5E3JMeymvtJGpV2JQXbRxeDW/UwAdHhwmxehS6uhyqiUJP4oSDf9 Jmf0sWtvGEI6vn01ojKP88IabwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1RO4/N pOGJ/zyWCHzt2DqbBrFyMB8GA1UdIwQYMBaAFKXEoKsOXuE7FIRUObGuT7NEaMe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFNy85ODFDMDU1OEVB RDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRUc1VoRlE1c2E1UHMwUm94 N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BjU2dxdzVlNFRzVWhGUTVzYTVQczBSb3g3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzRFNy85ODFDMDU1OEVBRDgxMUVDQkM3RUUwMTVDNEY5QUUwMi9wY1NncXc1ZTRU c1VoRlE1c2E1UHMwUm94N2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApka9oA66qvOO+/Eee6nDsg9vkrUYhje6PHprmpO6gFnFMpFaKLWIsGMxu00p 7evptWs6Xv7xI79UyFNMY1OYsd3hvhFfMFcTw2iDhluOAfwcZSGfO9p2v3Tao/b/ eC6Lz9u6K+BG0mlmcqJsuWS/BuT7JoiW/o1vnH3gECBi98jceU2DmNRD9fzQA91m kF9DEbDwTusQmAoHmqFhoDwX2LYCQsDflZZhd8x+AUAUA31s8km+kdFPMsCLbvHG 4YQ1IhdhHbuEOw0Rcnk2NyK2h3evKcVrLFg6WZPddj1I209Ln3oicmyM1e4OliZr zYlHhUMhfoREE8dUqlRKpdgjyQ== -----END CERTIFICATE-----Generated at Wed Nov 4 20:12:33 2026 by rpki-client