$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: CXtE66qkqXG+EWBe3KbDQNbXGsKbj+V+yC1axrKyrU4= Subject key identifier: 99:82:FF:A9:39:B6:14:28:F7:5B:FE:45:20:C2:2E:3C:A4:F2:98:2D Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 82 Signing time: Sat 03 Oct 2026 08:27:21 +0000 Manifest this update: Sat 03 Oct 2026 08:27:21 +0000 Manifest next update: Sat 10 Oct 2026 08:27:21 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: QrevUhE47yA8uzx45VgGb6PrxgpjsJOteXtdNMcIsT8=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 08:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: Oct 3 08:27:21 2026 GMT Not After : Oct 10 08:27:21 2026 GMT Subject: CN=6ac0bc69-2192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:93:37:3e:fb:69:3d:25:01:2a:27:5e:0e: 16:4c:c8:12:88:5c:ff:53:1e:b0:b7:1a:6d:d3:e7: a4:7e:85:da:3f:90:49:86:21:ab:73:21:b6:3a:60: 55:f8:38:1f:3f:69:e4:d9:26:d6:ce:91:8a:f5:1b: 84:c1:c4:e6:d5:da:23:bd:6e:11:ed:7b:a6:cb:7c: bd:fa:a6:99:25:74:bc:76:f2:dd:45:26:33:c7:16: d5:c6:55:d3:c2:72:3e:3d:23:17:66:98:72:d8:86: fd:55:0d:47:9e:8f:5c:9c:ef:b4:3b:3b:3b:c0:f1: 1d:d9:45:78:c3:50:02:9e:c4:05:09:09:5c:f0:16: 9f:bf:ec:f7:ff:30:6d:28:42:17:93:2d:2a:87:b9: 9f:3a:53:de:b0:83:b0:35:8b:4c:08:7c:6b:12:aa: 57:a8:23:fb:b5:ef:95:ae:79:30:2c:ae:c8:f8:c0: 7f:c0:95:0c:6d:ab:d0:d4:81:09:7d:b5:03:e6:73: 87:d6:92:22:4c:56:56:0a:81:a7:51:05:68:45:49: 8f:d2:ab:70:ac:a3:e5:5f:a7:ec:5f:eb:90:e6:db: 84:da:f1:5d:c8:8f:85:07:62:eb:c2:0a:ca:fb:60: f7:bf:d6:94:f9:95:ea:04:d6:47:68:df:43:ee:37: 3b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:82:FF:A9:39:B6:14:28:F7:5B:FE:45:20:C2:2E:3C:A4:F2:98:2D X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d1:eb:67:3b:66:dc:6f:bd:c6:36:f6:f9:dd:61:d4:94:85: b8:54:15:05:8d:e1:a0:ad:4a:1e:f0:56:47:f6:80:16:a5:80: ac:4e:d0:42:95:4e:9d:77:07:1b:9e:01:e2:b7:20:9f:b0:d7: 19:74:92:b9:13:10:52:90:c2:92:42:99:d5:71:9e:22:42:69: 35:4a:45:ce:09:96:54:62:af:84:dd:e2:36:61:b0:48:99:75: e2:ee:5a:01:a1:43:21:84:c3:e6:34:ef:61:36:14:be:3f:bc: 00:9b:fe:e0:99:45:03:b1:23:1f:5c:5b:a4:4c:21:33:84:6c: ea:e8:48:54:c5:f8:ed:4b:cc:d4:f4:e6:11:51:73:9a:c3:dd: 9a:77:4b:2e:e2:2a:9e:ff:ec:23:c2:47:d3:8a:ea:85:21:55: 6c:bc:d4:3c:22:c2:46:71:3d:b0:4a:39:4d:79:a2:7c:36:fd: a6:ad:87:4a:8b:8a:c1:fd:3f:1a:15:f3:12:10:71:89:0c:f6: 24:e4:2d:79:6c:9e:8f:08:44:31:67:5a:1f:a6:12:a3:a7:df: 2d:6e:61:b8:c4:d4:18:0d:24:cf:0f:10:0a:14:94:6e:1d:b1: d0:3f:ff:ee:64:6f:3f:7a:00:72:6f:c5:13:ea:ec:dc:46:89: 24:03:78:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzQzAxMTAvBgNVBAUTKEE1RDRFMTg4QUIyNUQ4Njk0MUUwNkJDNUYwRDJCRTk4 RDBBNTBBMkQwHhcNMjYxMDAzMDgyNzIxWhcNMjYxMDEwMDgyNzIxWjAYMRYwFAYD VQQDEw02YWMwYmM2OS0yMTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9KTNz77aT0lASonXg4WTMgSiFz/Ux6wtxpt0+ekfoXaP5BJhiGrcyG2OmBV +DgfP2nk2SbWzpGK9RuEwcTm1dojvW4R7Xumy3y9+qaZJXS8dvLdRSYzxxbVxlXT wnI+PSMXZphy2Ib9VQ1Hno9cnO+0Ozs7wPEd2UV4w1ACnsQFCQlc8Bafv+z3/zBt KEIXky0qh7mfOlPesIOwNYtMCHxrEqpXqCP7te+VrnkwLK7I+MB/wJUMbavQ1IEJ fbUD5nOH1pIiTFZWCoGnUQVoRUmP0qtwrKPlX6fsX+uQ5tuE2vFdyI+FB2LrwgrK +2D3v9aU+ZXqBNZHaN9D7jc7SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJmC/6k5 thQo91v+RSDCLjyk8pgtMB8GA1UdIwQYMBaAFKXU4YirJdhpQeBrxfDSvpjQpQot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTNDMC85QThBRDg1MjAx QjExMUYxOUMxRTQyQzE2QjZGNTZCQy9wZFRoaUtzbDJHbEI0R3ZGOE5LLW1OQ2xD aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTNDMC85QThBRDg1MjAxQjExMUYxOUMxRTQyQzE2QjZGNTZCQy9wZFRoaUtzbDJH bEI0R3ZGOE5LLW1OQ2xDaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE9HrZztm3G+9xjb2+d1h1JSFuFQVBY3hoK1KHvBWR/aAFqWArE7QQpVOnXcH G54B4rcgn7DXGXSSuRMQUpDCkkKZ1XGeIkJpNUpFzgmWVGKvhN3iNmGwSJl14u5a AaFDIYTD5jTvYTYUvj+8AJv+4JlFA7EjH1xbpEwhM4Rs6uhIVMX47UvM1PTmEVFz msPdmndLLuIqnv/sI8JH04rqhSFVbLzUPCLCRnE9sEo5TXmifDb9pq2HSouKwf0/ GhXzEhBxiQz2JOQteWyejwhEMWdaH6YSo6ffLW5huMTUGA0kzw8QChSUbh2x0D// 7mRvP3oAcm/FE+rs3EaJJAN4oQ== -----END CERTIFICATE-----Generated at Sun Oct 4 20:32:38 2026 by rpki-client