$ rpki-client -vvvf rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft File: pdThiKsl2GlB4GvF8NK-mNClCi0.mft (raw, json) Hash identifier: vDREmMN9fespyeNkLlk88W9LWr4GbkU9tCPbRsbzf4k= Subject key identifier: ED:D7:66:DB:0F:23:BC:6E:3B:69:A9:2D:56:01:4E:FF:E2:FE:6E:D1 Authority key identifier: A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D Certificate issuer: /CN=A918E3C0/serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft Manifest number: 8D Signing time: Sun 25 Oct 2026 08:00:33 +0000 Manifest this update: Sun 25 Oct 2026 08:00:32 +0000 Manifest next update: Sun 01 Nov 2026 08:00:32 +0000 Files and hashes: 1: pdThiKsl2GlB4GvF8NK-mNClCi0.crl (hash: cye65oOXG0vZDnsYPal2JbMaUwO6D2mb7u/d4Xtz18A=) 2: 3EE95EC801B211F19B62C4E66C6F56BC.roa (hash: B0jnDdaxg9Qc3b+l9St8mXLfihlNO3bYzJFFHiKIOSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E3C0, serialNumber=A5D4E188AB25D86941E06BC5F0D2BE98D0A50A2D Validity Not Before: Oct 25 08:00:32 2026 GMT Not After : Nov 1 08:00:32 2026 GMT Subject: CN=6addb720-677d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:7d:af:d7:ac:4b:7d:d5:8a:5e:b5:29:b1:2c: c8:8a:e4:fe:20:99:29:a9:a9:de:0f:06:ff:4a:01: ac:08:d8:1f:d3:6c:5c:a8:2d:4f:8d:f2:ba:f8:ec: a5:c5:2d:c1:92:ac:40:ea:18:91:20:01:f0:e0:0c: a7:13:05:8d:0f:34:06:ec:85:e1:fb:19:8d:bc:a0: a2:f0:f0:b7:6e:3a:75:9a:dd:13:4b:ba:9a:1b:9c: 84:f9:63:ce:f8:9a:bc:ac:3b:8d:2e:c6:31:be:06: 9a:26:14:5c:bb:7b:31:13:7d:dd:77:9c:98:04:44: be:c4:4d:70:50:14:22:84:3b:85:f3:44:84:5f:88: 99:ad:22:4e:7e:73:18:02:52:60:ab:c1:3e:87:71: 0d:66:a0:d9:22:35:09:83:fe:a0:7c:c3:30:50:f7: 35:02:60:20:09:cd:2c:8a:b2:98:07:d3:0a:d5:7f: 73:7f:9a:78:fb:9b:4f:7d:45:4a:ff:a2:14:56:c7: 31:0b:1c:f0:d4:15:5d:af:2d:61:0a:1e:36:e7:c9: f0:e7:2d:4b:a7:60:f1:65:7a:45:35:42:2e:a4:f8: 8a:4a:87:1b:59:6d:ac:94:76:36:c7:f6:24:26:68: 16:32:e7:b3:ed:c6:ce:78:dd:2f:f9:15:a2:18:c8: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:66:DB:0F:23:BC:6E:3B:69:A9:2D:56:01:4E:FF:E2:FE:6E:D1 X509v3 Authority Key Identifier: keyid:A5:D4:E1:88:AB:25:D8:69:41:E0:6B:C5:F0:D2:BE:98:D0:A5:0A:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pdThiKsl2GlB4GvF8NK-mNClCi0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E3C0/9A8AD85201B111F19C1E42C16B6F56BC/pdThiKsl2GlB4GvF8NK-mNClCi0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:e0:6f:cc:63:a3:fd:83:f4:a2:3f:e4:74:bf:ce:2a:93:fe: 70:98:9f:cd:48:d9:d0:a3:77:74:e1:06:4b:52:a0:5f:a1:8c: 07:42:0b:38:c5:f2:cc:58:ff:98:51:fa:d2:98:40:56:81:ea: eb:81:f0:8e:33:5f:e8:43:fb:7a:93:2e:53:47:28:8f:35:a5: 23:33:23:b8:f7:60:a0:35:5e:3b:cf:6f:71:8b:e1:2d:4a:19: 83:a4:cc:c8:f4:3d:21:cb:c4:61:d8:cf:48:65:54:e1:09:5c: 2f:82:94:10:ee:2b:51:ae:b8:b4:d8:8b:2e:29:6a:1f:6d:cb: 0f:5c:a8:f3:de:07:c6:39:21:ec:de:dd:25:fd:95:4a:6b:02: a1:97:6f:32:da:a7:39:d5:8c:87:3d:1f:45:59:71:69:dc:bd: 5e:09:bb:ce:72:50:64:15:7e:5b:36:c0:38:24:9c:d1:4d:78: b6:b0:77:ba:48:b5:85:43:05:10:3b:92:f8:1e:49:04:80:18: 3c:e8:b6:1f:01:0a:d5:42:20:53:2d:e0:5a:15:ce:a9:e8:d3: 9d:0b:08:6f:1c:9e:1b:26:14:e5:c2:ff:88:46:0d:26:13:b9: b3:df:98:42:5e:94:8c:fe:57:a4:62:80:e9:b2:10:c3:19:27: 3d:cf:9f:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzQzAxMTAvBgNVBAUTKEE1RDRFMTg4QUIyNUQ4Njk0MUUwNkJDNUYwRDJCRTk4 RDBBNTBBMkQwHhcNMjYxMDI1MDgwMDMyWhcNMjYxMTAxMDgwMDMyWjAYMRYwFAYD VQQDEw02YWRkYjcyMC02NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA732v16xLfdWKXrUpsSzIiuT+IJkpqaneDwb/SgGsCNgf02xcqC1PjfK6+Oyl xS3BkqxA6hiRIAHw4AynEwWNDzQG7IXh+xmNvKCi8PC3bjp1mt0TS7qaG5yE+WPO +Jq8rDuNLsYxvgaaJhRcu3sxE33dd5yYBES+xE1wUBQihDuF80SEX4iZrSJOfnMY AlJgq8E+h3ENZqDZIjUJg/6gfMMwUPc1AmAgCc0sirKYB9MK1X9zf5p4+5tPfUVK /6IUVscxCxzw1BVdry1hCh4258nw5y1Lp2DxZXpFNUIupPiKSocbWW2slHY2x/Yk JmgWMuez7cbOeN0v+RWiGMgNYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO3XZtsP I7xuO2mpLVYBTv/i/m7RMB8GA1UdIwQYMBaAFKXU4YirJdhpQeBrxfDSvpjQpQot MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTNDMC85QThBRDg1MjAx QjExMUYxOUMxRTQyQzE2QjZGNTZCQy9wZFRoaUtzbDJHbEI0R3ZGOE5LLW1OQ2xD aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BkVGhpS3NsMkdsQjRHdkY4TkstbU5DbENpMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTNDMC85QThBRDg1MjAxQjExMUYxOUMxRTQyQzE2QjZGNTZCQy9wZFRoaUtzbDJH bEI0R3ZGOE5LLW1OQ2xDaTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYuBvzGOj/YP0oj/kdL/OKpP+cJifzUjZ0KN3dOEGS1KgX6GMB0ILOMXyzFj/ mFH60phAVoHq64HwjjNf6EP7epMuU0cojzWlIzMjuPdgoDVeO89vcYvhLUoZg6TM yPQ9IcvEYdjPSGVU4QlcL4KUEO4rUa64tNiLLilqH23LD1yo894Hxjkh7N7dJf2V SmsCoZdvMtqnOdWMhz0fRVlxady9Xgm7znJQZBV+WzbAOCSc0U14trB3uki1hUMF EDuS+B5JBIAYPOi2HwEK1UIgUy3gWhXOqejTnQsIbxyeGyYU5cL/iEYNJhO5s9+Y Ql6UjP5XpGKA6bIQwxknPc+f+Q== -----END CERTIFICATE-----Generated at Mon Oct 26 21:19:24 2026 by rpki-client