$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: ARdF4vShDeGVe2A4Wjg+NmDmyWcTac6Fi2uknwjVlJU= Subject key identifier: 63:24:9B:EB:BE:C0:D4:08:9C:B1:FC:6C:D5:C7:9A:3E:D4:3A:22:C5 Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 3D Signing time: Tue 19 May 2026 08:27:54 +0000 Manifest this update: Tue 19 May 2026 08:27:54 +0000 Manifest next update: Tue 26 May 2026 08:27:54 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: 0SsXUjDWmQpcRcmdXWE7GbiztaPBapWXMJYLc2OOCY0=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: May 19 08:27:54 2026 GMT Not After : May 26 08:27:54 2026 GMT Subject: CN=6a0c1f0a-775b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:c9:64:06:68:bd:d0:8b:5e:45:c3:ae:a0: 28:04:43:41:46:a6:93:22:3f:ce:cb:a0:5c:5e:b5: ea:a9:12:95:e6:58:4a:6b:2d:d6:72:57:6a:16:b7: af:ac:38:57:61:1f:f2:df:37:f6:13:8d:53:00:0b: 3d:81:46:33:4a:c4:8b:1d:7d:7b:79:96:87:9c:04: 46:a5:3f:f7:22:87:99:dc:4c:81:fa:02:65:4f:2a: 40:40:22:39:e9:4e:70:8a:46:8c:67:4f:1e:ac:04: 60:2a:c1:8c:3a:fb:cb:54:f2:2f:c4:49:da:6c:e1: 81:ca:b2:0d:65:72:82:73:77:97:f4:5b:db:30:e2: 04:5d:45:22:3c:da:5e:11:1e:56:26:1f:50:01:7e: e7:6d:d8:b5:9c:bb:90:69:80:7c:8c:e1:72:cf:0e: 09:50:29:62:3a:e8:ed:a0:08:5d:f4:35:4d:e9:43: e5:5b:e4:86:ca:2d:aa:b9:a8:1a:69:98:e1:97:0c: e0:12:dc:05:52:00:8e:09:e9:72:a5:83:f8:04:3e: 29:55:ab:1e:a2:f1:b3:a7:07:79:22:21:88:02:06: 66:12:85:51:2a:42:97:ef:f0:7e:bd:1a:01:18:c0: 71:d3:aa:b2:b7:37:85:00:57:d1:d5:71:60:ca:b5: 31:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:24:9B:EB:BE:C0:D4:08:9C:B1:FC:6C:D5:C7:9A:3E:D4:3A:22:C5 X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4d:e4:f0:a4:e7:a9:bd:78:0a:30:16:19:5d:58:22:35:01: 64:4a:c4:0f:fd:b7:b8:7c:9b:c6:3c:bf:9a:c5:4b:46:58:0b: 63:60:2a:df:37:53:ac:41:b4:e1:22:4d:bc:79:c5:8f:b5:be: 7e:46:21:b2:f8:1b:d4:8a:3b:1c:35:53:5f:1c:3c:d5:0a:19: 42:54:8a:b4:20:22:87:75:14:01:7d:73:b8:4d:48:2b:e6:18: ac:70:9f:05:81:d1:24:01:0f:3d:fe:f7:52:ec:5c:7f:7c:1c: e1:e4:17:3b:37:69:8b:45:e2:d7:5e:92:52:a4:f7:83:55:57: 96:22:b7:f3:f0:45:d7:b3:9f:57:6f:76:48:60:52:36:bf:4e: 99:7f:1e:d7:0d:bb:4d:48:8f:3f:16:5e:f7:bb:32:56:f8:85: 45:2a:44:7a:ea:1d:29:92:9d:dc:aa:7c:05:6e:49:47:07:0a: a6:3b:ce:c6:01:c8:01:0b:3b:95:02:eb:40:d2:15:03:1d:ef: 97:bb:07:f1:ab:51:f5:06:9c:e9:61:90:f2:85:dd:95:50:34: 04:85:7c:07:87:da:fc:03:ff:f3:10:a1:d2:b7:97:4f:9e:1c: 00:d0:ce:d9:79:47:25:31:e7:54:9f:03:79:3d:cd:97:d3:73: 97:e9:e8:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTNDMDExMC8GA1UEBRMoQTVENEUxODhBQjI1RDg2OTQxRTA2QkM1RjBEMkJFOThE MEE1MEEyRDAeFw0yNjA1MTkwODI3NTRaFw0yNjA1MjYwODI3NTRaMBgxFjAUBgNV BAMTDTZhMGMxZjBhLTc3NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYKclkBmi90IteRcOuoCgEQ0FGppMiP87LoFxeteqpEpXmWEprLdZyV2oWt6+s OFdhH/LfN/YTjVMACz2BRjNKxIsdfXt5loecBEalP/cih5ncTIH6AmVPKkBAIjnp TnCKRoxnTx6sBGAqwYw6+8tU8i/ESdps4YHKsg1lcoJzd5f0W9sw4gRdRSI82l4R HlYmH1ABfudt2LWcu5BpgHyM4XLPDglQKWI66O2gCF30NU3pQ+Vb5IbKLaq5qBpp mOGXDOAS3AVSAI4J6XKlg/gEPilVqx6i8bOnB3kiIYgCBmYShVEqQpfv8H69GgEY wHHTqrK3N4UAV9HVcWDKtTEtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYySb677A 1Aicsfxs1ceaPtQ6IsUwHwYDVR0jBBgwFoAUpdThiKsl2GlB4GvF8NK+mNClCi0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFM0MwLzlBOEFEODUyMDFC MTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGRUaGlLc2wyR2xCNEd2RjhOSy1tTkNsQ2kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF M0MwLzlBOEFEODUyMDFCMTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkds QjRHdkY4TkstbU5DbENpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQTeTwpOepvXgKMBYZXVgiNQFkSsQP/be4fJvGPL+axUtGWAtjYCrfN1OsQbTh Ik28ecWPtb5+RiGy+BvUijscNVNfHDzVChlCVIq0ICKHdRQBfXO4TUgr5hiscJ8F gdEkAQ89/vdS7Fx/fBzh5Bc7N2mLReLXXpJSpPeDVVeWIrfz8EXXs59Xb3ZIYFI2 v06Zfx7XDbtNSI8/Fl73uzJW+IVFKkR66h0pkp3cqnwFbklHBwqmO87GAcgBCzuV AutA0hUDHe+Xuwfxq1H1BpzpYZDyhd2VUDQEhXwHh9r8A//zEKHSt5dPnhwA0M7Z eUclMedUnwN5Pc2X03OX6eiR -----END CERTIFICATE-----Generated at Thu May 21 09:39:02 2026 by rpki-client