$ rpki-client -vvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: YboUEtJ2TxzqC486/+skyyq5yrUy36RZ2p1bXLUtB9M= Subject key identifier: 34:59:4A:F8:7A:B0:95:1E:20:28:04:F3:EE:79:90:B6:85:C4:0D:18 Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 5C Signing time: Tue 21 Jul 2026 10:03:25 +0000 Manifest this update: Tue 21 Jul 2026 10:03:24 +0000 Manifest next update: Tue 28 Jul 2026 10:03:24 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: 7Q3tQ3HuxAIUVLVTePsPZ8FEP2gXfwkPvVuftQgomSA=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: Jul 21 10:03:24 2026 GMT Not After : Jul 28 10:03:24 2026 GMT Subject: CN=6a5f43ed-5b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5a:93:ff:f0:50:d8:ce:8a:6f:90:39:9c:83: 3c:74:e2:1c:be:6e:1a:05:2d:f0:35:8e:4c:5d:c5: 4a:4d:37:61:44:f2:89:9e:37:20:65:c6:6b:94:f5: e1:d8:72:35:d6:5e:cb:d7:f3:b8:c6:fd:76:8f:e8: 5a:d5:84:a7:78:d5:ca:e9:7e:5e:83:18:00:d0:16: 2b:80:e5:af:63:cf:20:e9:8c:89:63:39:3d:78:68: ad:79:3e:a7:fa:d8:8b:34:04:37:64:6f:3e:94:e0: 6e:d3:c2:8b:81:55:15:4c:fe:f9:da:ad:f1:cb:6b: db:4a:8f:ac:5d:8b:bf:88:0d:62:f2:b5:7a:a9:ab: 1b:52:a5:1e:f4:85:25:86:2b:46:46:1d:e3:c4:c9: be:e7:c0:d8:ae:55:03:a5:66:a1:47:46:fe:46:cc: b5:72:0b:7d:b1:5b:c0:2f:e5:18:05:20:9f:88:c9: 3c:82:72:87:92:00:bf:0e:9b:73:ae:71:3c:62:25: 2d:51:32:b5:2d:26:78:02:46:76:b3:d8:66:98:4b: 7e:04:f3:cf:57:0a:59:e4:21:12:c5:bf:d3:ec:11: 56:0d:04:98:c1:d7:29:b9:be:72:a7:5c:52:79:48: c2:d4:7c:ec:c6:bd:2e:ab:30:25:a0:8a:e8:98:f9: 72:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:59:4A:F8:7A:B0:95:1E:20:28:04:F3:EE:79:90:B6:85:C4:0D:18 X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:89:99:59:ca:fb:5b:5d:30:89:a1:d8:46:eb:6b:e8:87:50: f5:fc:1e:dd:23:02:18:42:69:94:69:55:be:4b:ae:16:81:aa: 2b:1d:31:1f:6e:86:5d:9e:42:85:78:66:58:97:f3:05:ce:ad: 83:71:d3:d3:0f:42:9c:10:3e:1f:90:28:22:aa:ec:65:e6:4e: a5:d5:07:49:c5:8a:f4:c2:90:c2:95:1a:9c:20:38:a6:47:9a: 37:4e:28:c8:b6:60:5d:61:c2:7c:06:0a:d1:14:07:60:97:c0: 90:7c:ad:44:c5:90:2d:4f:66:f6:33:57:32:6d:fa:e3:8e:99: 7f:7f:e5:f4:1e:dc:6d:1f:62:a8:f0:70:e6:e7:4f:d2:44:b1: 56:df:08:3d:28:f0:00:bb:1f:32:75:f9:7c:ac:8e:16:48:5e: 29:e2:db:80:ac:7f:de:d8:aa:16:1e:00:7a:f8:c5:70:00:b5: 45:f0:ee:f9:e1:17:0d:e1:4a:c0:e6:26:59:ba:fa:6f:b7:dd: 11:6c:3e:7a:7c:03:3d:29:77:ce:31:84:54:de:23:90:ca:87: 4b:b3:89:37:14:ae:4b:78:f3:88:36:a7:1f:c3:9b:41:69:be: ba:ca:83:44:40:81:3d:d6:cf:96:dc:42:c8:44:1f:31:d7:7f: d3:bd:0e:3a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RTNDMDExMC8GA1UEBRMoQTVENEUxODhBQjI1RDg2OTQxRTA2QkM1RjBEMkJFOThE MEE1MEEyRDAeFw0yNjA3MjExMDAzMjRaFw0yNjA3MjgxMDAzMjRaMBgxFjAUBgNV BAMTDTZhNWY0M2VkLTViMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoWpP/8FDYzopvkDmcgzx04hy+bhoFLfA1jkxdxUpNN2FE8omeNyBlxmuU9eHY cjXWXsvX87jG/XaP6FrVhKd41crpfl6DGADQFiuA5a9jzyDpjIljOT14aK15Pqf6 2Is0BDdkbz6U4G7TwouBVRVM/vnarfHLa9tKj6xdi7+IDWLytXqpqxtSpR70hSWG K0ZGHePEyb7nwNiuVQOlZqFHRv5GzLVyC32xW8Av5RgFIJ+IyTyCcoeSAL8Om3Ou cTxiJS1RMrUtJngCRnaz2GaYS34E889XClnkIRLFv9PsEVYNBJjB1ym5vnKnXFJ5 SMLUfOzGvS6rMCWgiuiY+XKDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNFlK+Hqw lR4gKATz7nmQtoXEDRgwHwYDVR0jBBgwFoAUpdThiKsl2GlB4GvF8NK+mNClCi0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFM0MwLzlBOEFEODUyMDFC MTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENp MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcGRUaGlLc2wyR2xCNEd2RjhOSy1tTkNsQ2kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF M0MwLzlBOEFEODUyMDFCMTExRjE5QzFFNDJDMTZCNkY1NkJDL3BkVGhpS3NsMkds QjRHdkY4TkstbU5DbENpMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBYiZlZyvtbXTCJodhG62voh1D1/B7dIwIYQmmUaVW+S64WgaorHTEfboZdnkKF eGZYl/MFzq2DcdPTD0KcED4fkCgiquxl5k6l1QdJxYr0wpDClRqcIDimR5o3TijI tmBdYcJ8BgrRFAdgl8CQfK1ExZAtT2b2M1cybfrjjpl/f+X0HtxtH2Ko8HDm50/S RLFW3wg9KPAAux8ydfl8rI4WSF4p4tuArH/e2KoWHgB6+MVwALVF8O754RcN4UrA 5iZZuvpvt90RbD56fAM9KXfOMYRU3iOQyodLs4k3FK5LePOINqcfw5tBab66yoNE QIE91s+W3ELIRB8x13/TvQ46 -----END CERTIFICATE-----Generated at Tue Jul 21 21:31:04 2026 by rpki-client