$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: Ge/rT6yG3dapFsjpfn8pLOzLsfLaDahrzD0SOGfvUKY= Subject key identifier: 1F:09:BC:23:AB:43:CA:AF:6C:4F:F3:30:53:9F:7D:3D:18:D8:9B:1A Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 85 Signing time: Fri 09 Oct 2026 08:27:00 +0000 Manifest this update: Fri 09 Oct 2026 08:26:59 +0000 Manifest next update: Fri 16 Oct 2026 08:26:59 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: fO2eYM5JM6foml5nhUjpZxrxwp9wpEIiE/ykzLcd8/k=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: Oct 9 08:26:59 2026 GMT Not After : Oct 16 08:26:59 2026 GMT Subject: CN=6ac8a554-4840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:a4:f6:3a:fd:00:a9:9c:53:ca:05:d4:d3: e5:48:0a:e1:7b:c6:4d:f2:1f:dd:f6:d9:0b:8f:5c: 35:ca:59:c0:f7:e6:6a:23:5b:5b:70:9f:8d:49:c7: 2a:72:91:fd:95:de:b2:64:7a:13:79:dc:fd:4f:0f: 9f:7e:65:32:be:a4:ac:f9:c9:9e:27:95:15:1b:53: 78:cb:c2:a4:0a:5f:82:3a:7d:59:65:77:4f:05:67: 0d:55:88:eb:62:f5:dd:a9:84:79:e2:da:6c:e0:7f: e9:87:cc:dd:af:e7:0b:3f:ab:ce:0d:60:02:2d:d4: ea:05:e0:a1:ea:ab:bb:89:eb:d6:08:d1:35:33:d4: 96:f3:a5:d6:0c:f2:8a:23:90:7b:f3:eb:25:6d:ad: c2:71:9c:54:95:07:1d:a8:6f:fc:b8:b0:78:01:4f: 4e:ee:39:c6:8d:d2:78:03:db:88:69:68:1e:aa:dd: 40:54:c5:0d:0d:ee:0c:14:72:29:58:6d:cb:eb:c6: 9b:af:7b:53:ab:de:14:89:37:63:c8:8c:b7:a9:47: d2:48:3d:2e:aa:99:6d:67:ff:71:18:2e:4f:df:64: 96:23:e0:2b:19:24:2f:8b:8d:d3:58:af:d6:12:20: 3f:52:7e:20:2a:24:59:74:70:72:72:6a:fa:ad:1b: 73:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:09:BC:23:AB:43:CA:AF:6C:4F:F3:30:53:9F:7D:3D:18:D8:9B:1A X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f0:88:68:01:14:00:17:b8:09:67:42:e1:4a:ce:bf:3a:b9: f2:d2:e7:8d:4c:84:43:f8:b9:09:89:fc:4c:9c:8c:32:a0:21: 86:e7:12:ca:f6:ff:a4:ed:41:eb:5a:16:20:77:c1:5a:0b:f5: 8f:c2:d6:60:ef:e6:40:8c:ac:71:65:40:17:95:b5:05:1f:22: a2:cf:b6:05:f3:07:66:2b:ef:4c:ce:f8:19:c4:8d:a4:81:41: 31:e2:f0:1a:ae:de:7c:65:83:4d:59:b7:a3:5d:d4:47:8e:96: 92:34:f9:99:0f:b4:cd:ab:ed:7f:6f:9f:48:ae:f7:dc:3b:39: 66:5d:ec:c1:b3:3f:c1:a2:e5:0a:ec:a5:b6:66:52:0f:a8:82: 80:e3:fd:a6:9b:f9:32:b6:73:97:c0:04:7e:fa:e8:54:a1:71: 4d:41:f1:28:9a:a2:be:63:ed:61:8f:95:60:03:d5:bd:50:1c: 6b:b7:ef:25:ad:32:c9:40:6c:93:79:13:19:d2:4b:3a:4b:11: ab:ad:25:00:93:55:e9:1e:da:ad:91:d5:26:37:c3:6c:eb:cb: d0:be:4b:5a:f6:35:c5:e8:38:26:ca:29:78:06:07:e5:47:ae: 12:d3:e9:f6:73:e2:9a:17:26:d5:01:b5:4d:fb:93:38:93:1d: 1e:71:6b:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzQzAxMTAvBgNVBAUTKEE1RDRFMTg4QUIyNUQ4Njk0MUUwNkJDNUYwRDJCRTk4 RDBBNTBBMkQwHhcNMjYxMDA5MDgyNjU5WhcNMjYxMDE2MDgyNjU5WjAYMRYwFAYD VQQDEw02YWM4YTU1NC00ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBqk9jr9AKmcU8oF1NPlSArhe8ZN8h/d9tkLj1w1ylnA9+ZqI1tbcJ+NSccq cpH9ld6yZHoTedz9Tw+ffmUyvqSs+cmeJ5UVG1N4y8KkCl+COn1ZZXdPBWcNVYjr YvXdqYR54tps4H/ph8zdr+cLP6vODWACLdTqBeCh6qu7ievWCNE1M9SW86XWDPKK I5B78+slba3CcZxUlQcdqG/8uLB4AU9O7jnGjdJ4A9uIaWgeqt1AVMUNDe4MFHIp WG3L68abr3tTq94UiTdjyIy3qUfSSD0uqpltZ/9xGC5P32SWI+ArGSQvi43TWK/W EiA/Un4gKiRZdHBycmr6rRtzZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8JvCOr Q8qvbE/zMFOffT0Y2JsaMB8GA1UdIwQYMBaAFKXU4YirJdhpQeBrxfDSvpjQpQot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTNDMC85QThBRDg1MjAx QjExMUYxOUMxRTQyQzE2QjZGNTZCQy9wZFRoaUtzbDJHbEI0R3ZGOE5LLW1OQ2xD aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTNDMC85QThBRDg1MjAxQjExMUYxOUMxRTQyQzE2QjZGNTZCQy9wZFRoaUtzbDJH bEI0R3ZGOE5LLW1OQ2xDaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi/CIaAEUABe4CWdC4UrOvzq58tLnjUyEQ/i5CYn8TJyMMqAhhucSyvb/pO1B 61oWIHfBWgv1j8LWYO/mQIyscWVAF5W1BR8ios+2BfMHZivvTM74GcSNpIFBMeLw Gq7efGWDTVm3o13UR46WkjT5mQ+0zavtf2+fSK733Ds5Zl3swbM/waLlCuyltmZS D6iCgOP9ppv5MrZzl8AEfvroVKFxTUHxKJqivmPtYY+VYAPVvVAca7fvJa0yyUBs k3kTGdJLOksRq60lAJNV6R7arZHVJjfDbOvL0L5LWvY1xeg4JsopeAYH5UeuEtPp 9nPimhcm1QG1TfuTOJMdHnFr5g== -----END CERTIFICATE-----Generated at Fri Oct 9 18:48:41 2026 by rpki-client