$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: aGkD7CazjamqUDuYGsbdTlmi2b+kL8RoVvIN9HPY17w= Subject key identifier: BC:79:5B:68:06:45:E0:51:FD:3F:97:E6:9E:DA:55:71:CA:63:7B:09 Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 5D Signing time: Thu 23 Jul 2026 10:10:58 +0000 Manifest this update: Thu 23 Jul 2026 10:10:57 +0000 Manifest next update: Thu 30 Jul 2026 10:10:57 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: 9Gl6GbKpzK7MfDl5Sv563LkFSNNvJMP5E/QhW0sOBWk=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: Jul 23 10:10:57 2026 GMT Not After : Jul 30 10:10:57 2026 GMT Subject: CN=6a61e8b2-c29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:e8:1c:12:7b:74:12:d7:06:60:e5:db:5f: 2b:f6:97:dc:0f:2f:6f:52:0b:c1:af:b6:19:65:e8: 7e:5d:a1:4c:1e:8e:23:9e:dd:34:b7:ea:14:66:de: 15:c4:70:b3:c5:c9:16:62:c5:a1:e1:65:2f:ea:af: 7d:14:b7:d9:a7:56:09:c6:86:bf:58:22:fb:77:37: f2:23:e3:69:11:14:9a:64:18:40:31:63:93:c7:7f: 04:81:b5:91:1b:9b:88:2e:b4:0b:23:b0:57:e1:c4: 40:ea:a4:cb:45:b8:06:7e:b5:4c:61:cb:b2:f0:a6: 16:ab:11:02:de:d5:0b:55:34:e8:77:f2:4d:56:d2: 53:5d:91:51:0d:01:71:e9:f2:e4:1b:9a:88:5f:1d: 93:89:2e:bb:bf:79:d2:82:c3:88:67:71:e8:d2:dd: d0:c1:10:ed:20:7d:c1:06:cc:1d:60:65:ae:29:6c: a7:68:63:03:22:17:52:4f:4e:ce:ca:a1:09:6c:57: ca:7d:c7:e8:b8:c5:59:44:9f:09:63:b7:05:f4:b8: 47:b8:4a:e2:f4:d5:0f:92:4a:f3:66:ee:9b:64:d2: d4:67:f7:f3:8c:0c:7c:6b:07:52:ec:40:62:9c:1a: 76:98:3e:05:e6:12:90:9b:75:7d:b0:f4:e4:00:85: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:79:5B:68:06:45:E0:51:FD:3F:97:E6:9E:DA:55:71:CA:63:7B:09 X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:68:f7:a6:35:45:ce:97:ce:93:e1:8d:7d:a3:04:5e:54:37: 4e:02:ba:d7:25:b5:e9:d9:9e:8f:ab:43:58:99:2c:00:79:86: d0:86:64:33:0d:7e:96:f5:85:3f:38:20:e9:6f:2f:eb:27:73: 23:74:c3:82:e4:54:be:57:e0:a2:59:76:73:f9:49:4b:c7:05: a7:2d:bd:93:2b:a7:95:d7:85:8f:86:f6:a8:26:ed:43:1e:a0: 68:e5:96:25:99:26:8f:2d:93:5d:45:46:62:33:b4:3b:9e:55: 79:81:c6:72:72:2d:e3:6d:c3:b0:97:88:af:73:16:ed:99:77: 4a:25:e7:e0:43:f1:dd:6b:85:72:e6:1f:b2:79:09:d6:2c:7b: ea:0a:7f:44:5c:42:16:92:77:9a:e1:f1:51:0c:0a:ad:db:bd: 31:06:b1:26:a7:cb:76:e9:2b:d3:09:9a:d2:69:cb:82:75:bb: e9:fc:df:c2:e8:1e:1c:78:1e:a5:c0:94:e0:ca:af:02:44:c9: 39:b9:49:ea:c1:6e:12:db:61:7d:f2:95:55:4a:d3:d3:a3:dc: 7f:31:bc:93:13:f7:80:f7:2a:1a:ba:e3:b5:af:0d:af:f9:7e: 54:91:65:17:0c:d9:ee:d4:43:85:3d:02:96:5c:e3:db:9b:bb: 6d:8a:44:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTNDMDExMC8GA1UEBRMoQTVENEUxODhBQjI1RDg2OTQxRTA2QkM1RjBEMkJFOThE MEE1MEEyRDAeFw0yNjA3MjMxMDEwNTdaFw0yNjA3MzAxMDEwNTdaMBgxFjAUBgNV BAMTDTZhNjFlOGIyLWMyOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBH+gcEnt0EtcGYOXbXyv2l9wPL29SC8Gvthll6H5doUwejiOe3TS36hRm3hXE cLPFyRZixaHhZS/qr30Ut9mnVgnGhr9YIvt3N/Ij42kRFJpkGEAxY5PHfwSBtZEb m4gutAsjsFfhxEDqpMtFuAZ+tUxhy7LwpharEQLe1QtVNOh38k1W0lNdkVENAXHp 8uQbmohfHZOJLru/edKCw4hncejS3dDBEO0gfcEGzB1gZa4pbKdoYwMiF1JPTs7K oQlsV8p9x+i4xVlEnwljtwX0uEe4SuL01Q+SSvNm7ptk0tRn9/OMDHxrB1LsQGKc GnaYPgXmEpCbdX2w9OQAhcinAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvHlbaAZF 4FH9P5fmntpVccpjewkwHwYDVR0jBBgwFoAUpdThiKsl2GlB4GvF8NK+mNClCi0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFM0MwLzlBOEFEODUyMDFC MTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGRUaGlLc2wyR2xCNEd2RjhOSy1tTkNsQ2kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF M0MwLzlBOEFEODUyMDFCMTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkds QjRHdkY4TkstbU5DbENpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCoaPemNUXOl86T4Y19owReVDdOArrXJbXp2Z6Pq0NYmSwAeYbQhmQzDX6W9YU/ OCDpby/rJ3MjdMOC5FS+V+CiWXZz+UlLxwWnLb2TK6eV14WPhvaoJu1DHqBo5ZYl mSaPLZNdRUZiM7Q7nlV5gcZyci3jbcOwl4ivcxbtmXdKJefgQ/Hda4Vy5h+yeQnW LHvqCn9EXEIWknea4fFRDAqt270xBrEmp8t26SvTCZrSacuCdbvp/N/C6B4ceB6l wJTgyq8CRMk5uUnqwW4S22F98pVVStPTo9x/MbyTE/eA9yoauuO1rw2v+X5UkWUX DNnu1EOFPQKWXOPbm7ttikR4 -----END CERTIFICATE-----Generated at Fri Jul 24 02:14:09 2026 by rpki-client