$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: H+d84x209c6Mon/jk2PdSBd5KueGe8mDeOYBf0+Rwfo= Subject key identifier: 0F:E5:36:3B:7B:EB:70:55:5B:26:61:A6:B9:77:AF:AF:76:51:AE:8E Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 5F Signing time: Mon 27 Jul 2026 10:28:31 +0000 Manifest this update: Mon 27 Jul 2026 10:28:30 +0000 Manifest next update: Mon 03 Aug 2026 10:28:30 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: mDAFLlhVDE4NSpRBKM+9WXxXQMyCcI1+cNWKsqLB7hA=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:28:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: Jul 27 10:28:30 2026 GMT Not After : Aug 3 10:28:30 2026 GMT Subject: CN=6a6732cf-1f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:fc:ff:a9:3f:0d:79:c6:e4:0b:4e:c8:98: 99:3c:9b:73:37:34:cd:10:7e:8a:28:17:ba:d2:b8: 54:a6:4d:d6:29:f2:6a:a4:dd:1e:f7:2c:e2:9e:8c: 29:8d:55:19:34:7a:f2:6b:e7:28:2a:c5:74:dc:4d: e8:cf:7b:17:ee:5c:9f:52:e3:f8:c3:1a:1e:38:6d: 71:af:90:96:e9:4d:7a:5d:7e:74:69:96:c0:51:cd: 42:16:82:51:47:fc:6f:9d:d0:85:b6:9c:59:5c:70: 63:67:d3:36:d5:d5:0d:75:68:64:fe:ac:c3:2f:75: eb:cb:f8:3e:b4:ba:89:f9:43:39:f9:b0:45:e0:3b: 01:11:77:82:22:eb:3c:45:df:51:7b:a9:71:c9:e0: d7:fe:96:01:9e:dd:7d:53:b8:23:30:f2:0d:2a:bf: 9c:e7:47:0e:be:85:f2:92:57:ef:1e:5e:84:ae:e7: 2f:86:2a:fa:53:7f:26:87:25:a3:d5:70:25:43:cb: 64:6d:f7:1c:3f:1b:91:3f:88:44:5a:1d:6d:bb:20: a5:a4:5c:a3:01:4c:cf:70:7a:84:b9:eb:42:bc:42: a7:c0:6a:d0:53:58:0d:50:87:be:07:55:45:41:29: 48:91:d3:4c:8c:91:2f:fc:bd:c1:c7:a8:86:91:b7: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E5:36:3B:7B:EB:70:55:5B:26:61:A6:B9:77:AF:AF:76:51:AE:8E X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:a8:f8:e1:29:35:02:2f:da:b8:b5:f6:e9:09:4d:b6:bc:50: 81:96:63:19:1d:90:e9:8a:2b:5b:45:2a:4f:5f:da:44:a6:8e: c0:4a:34:b3:38:12:38:65:c5:76:a1:8b:8f:2e:db:16:e5:4e: 32:6f:53:d9:2f:c7:42:25:fa:85:5e:19:1f:0f:81:1b:85:be: 88:cf:36:1a:a3:72:8a:d5:45:5e:f4:ef:1b:02:76:a6:c7:93: 8e:e3:69:ed:7f:e0:e0:25:f7:46:91:d8:15:db:85:a5:ba:c0: be:42:8a:92:ae:2e:7d:db:14:1a:62:5d:f0:7c:ba:a0:f0:07: 7b:57:19:1f:f9:16:ad:35:ba:1f:08:21:b0:45:80:14:73:06: f2:57:1c:34:c8:72:3b:76:1b:f2:fe:df:d7:24:71:90:23:0f: 63:53:fc:93:31:54:b6:38:c2:37:2f:84:3e:ac:4c:e9:0f:08: e0:96:a8:4b:a0:4f:41:3c:38:e8:49:dd:d2:36:69:9f:10:1a: 19:f0:02:c9:52:84:56:51:d4:47:37:39:5f:60:0e:da:3f:0f: 73:20:22:33:b5:67:f7:57:69:86:7c:f7:f8:5e:17:e3:3b:e2: a7:63:6d:bf:25:27:6b:c6:7f:13:b0:79:bf:cd:09:92:ef:76: 35:63:b3:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTNDMDExMC8GA1UEBRMoQTVENEUxODhBQjI1RDg2OTQxRTA2QkM1RjBEMkJFOThE MEE1MEEyRDAeFw0yNjA3MjcxMDI4MzBaFw0yNjA4MDMxMDI4MzBaMBgxFjAUBgNV BAMTDTZhNjczMmNmLTFmNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0Rvz/qT8NecbkC07ImJk8m3M3NM0QfoooF7rSuFSmTdYp8mqk3R73LOKejCmN VRk0evJr5ygqxXTcTejPexfuXJ9S4/jDGh44bXGvkJbpTXpdfnRplsBRzUIWglFH /G+d0IW2nFlccGNn0zbV1Q11aGT+rMMvdevL+D60uon5Qzn5sEXgOwERd4Ii6zxF 31F7qXHJ4Nf+lgGe3X1TuCMw8g0qv5znRw6+hfKSV+8eXoSu5y+GKvpTfyaHJaPV cCVDy2Rt9xw/G5E/iERaHW27IKWkXKMBTM9weoS560K8QqfAatBTWA1Qh74HVUVB KUiR00yMkS/8vcHHqIaRt9WnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUD+U2O3vr cFVbJmGmuXevr3ZRro4wHwYDVR0jBBgwFoAUpdThiKsl2GlB4GvF8NK+mNClCi0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFM0MwLzlBOEFEODUyMDFC MTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGRUaGlLc2wyR2xCNEd2RjhOSy1tTkNsQ2kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF M0MwLzlBOEFEODUyMDFCMTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkds QjRHdkY4TkstbU5DbENpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+qPjhKTUCL9q4tfbpCU22vFCBlmMZHZDpiitbRSpPX9pEpo7ASjSzOBI4ZcV2 oYuPLtsW5U4yb1PZL8dCJfqFXhkfD4Ebhb6IzzYao3KK1UVe9O8bAnamx5OO42nt f+DgJfdGkdgV24WlusC+QoqSri592xQaYl3wfLqg8Ad7Vxkf+RatNbofCCGwRYAU cwbyVxw0yHI7dhvy/t/XJHGQIw9jU/yTMVS2OMI3L4Q+rEzpDwjglqhLoE9BPDjo Sd3SNmmfEBoZ8ALJUoRWUdRHNzlfYA7aPw9zICIztWf3V2mGfPf4XhfjO+KnY22/ JSdrxn8TsHm/zQmS73Y1Y7PL -----END CERTIFICATE-----Generated at Wed Jul 29 09:22:25 2026 by rpki-client