$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: Rh1qOSuqO9z6e0yUgiSrT+nCCARSeLJAyepv3t3BVac= Subject key identifier: 60:68:C5:69:8A:3A:F4:45:6C:94:FD:A8:1C:1B:B7:FD:D7:60:CF:B5 Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 38 Signing time: Thu 11 Jun 2026 10:56:32 +0000 Manifest this update: Thu 11 Jun 2026 10:56:32 +0000 Manifest next update: Thu 18 Jun 2026 10:56:32 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: Wve4RBLNmKnuvQuyoz7jDtbfW1UBAhB4FxA3YOIcE+g=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 10:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Jun 11 10:56:32 2026 GMT Not After : Jun 18 10:56:32 2026 GMT Subject: CN=6a2a9460-c2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:61:f8:70:99:4d:5e:ed:e1:23:f8:5e:37: e7:01:64:ec:39:c3:cd:fb:1e:53:c7:30:4c:aa:10: 71:26:b2:c9:cf:79:56:8b:38:5a:3b:0b:a9:13:66: 0f:84:46:62:d7:3e:58:fd:51:8c:46:bc:f8:0a:61: 73:f6:78:d3:da:4c:b7:43:fa:d8:1b:f5:1b:ae:87: 07:3c:63:8c:7b:1c:fb:25:46:98:ee:61:86:58:50: 63:2c:a7:2c:88:4d:c6:6b:4b:fa:5e:24:9f:bf:e1: d9:34:7c:fa:f0:c9:dc:ae:7c:0d:c3:e1:0f:fe:96: 4f:cd:28:a4:a2:db:67:6a:13:f1:31:87:33:59:e4: 20:23:08:bb:0a:3b:32:4a:ac:29:df:ee:66:0a:ea: a0:f8:f7:a3:de:a4:29:8b:e6:ca:dc:58:be:18:b5: a2:57:5f:63:84:59:3c:c7:4f:d1:57:3a:bc:dd:d3: 11:e2:76:43:b7:af:46:f6:7a:e4:aa:2b:ac:98:29: ae:ee:3a:db:c7:e7:71:76:f5:5c:17:3e:ae:be:a1: c6:15:f3:74:56:3c:e4:87:87:6a:ff:54:1f:e3:a9: 50:ab:18:05:9d:bf:ce:ca:f0:7e:35:22:fb:12:77: 4a:fd:27:f6:13:6f:b0:d4:6b:08:79:d2:34:fe:53: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:68:C5:69:8A:3A:F4:45:6C:94:FD:A8:1C:1B:B7:FD:D7:60:CF:B5 X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:61:12:a2:85:e7:b0:7b:d5:03:08:45:c3:4d:1d:50:67:33: 76:bb:5f:20:63:6c:ec:12:1e:0a:be:79:38:c5:8b:ff:4b:75: 6f:70:a9:b6:2a:b7:1b:2d:c2:59:bd:b4:e8:aa:05:0d:48:41: 85:13:c4:d2:32:fc:17:47:c9:71:5d:d0:c5:46:4d:ba:e9:76: e2:0e:4d:1e:68:34:86:0a:aa:29:27:ff:53:28:83:f0:7d:ca: 4d:a9:9e:64:6c:95:da:b9:5c:6c:9d:7f:af:02:b7:19:5e:f9: e2:62:52:a3:8e:1e:fa:44:f1:78:a7:55:30:0b:b9:df:7c:3d: ac:5e:f6:3a:70:c9:8d:9a:19:ba:ae:0b:58:4d:ba:e2:dc:2a: 2d:6e:e2:64:84:be:69:d2:81:de:ac:13:60:ec:b8:be:c4:1b: 9f:55:31:fc:dc:e2:84:43:e8:e1:56:1e:27:4a:7d:52:23:f5: 5d:63:68:cd:f5:c2:1a:e4:ba:2d:15:63:be:ae:2d:af:fe:b6: c5:01:78:12:94:da:38:22:14:51:79:cd:c1:24:e4:e5:34:2f: 70:ae:d8:93:e3:21:62:fc:53:c9:01:bc:00:43:10:60:b9:73: 36:19:b6:ec:5c:1d:de:56:aa:32:f9:88:d1:c3:0e:1e:be:20: 7a:65:de:20 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjA2MTExMDU2MzJaFw0yNjA2MTgxMDU2MzJaMBgxFjAUBgNV BAMTDTZhMmE5NDYwLWMyZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0VmH4cJlNXu3hI/heN+cBZOw5w837HlPHMEyqEHEmssnPeVaLOFo7C6kTZg+E RmLXPlj9UYxGvPgKYXP2eNPaTLdD+tgb9Ruuhwc8Y4x7HPslRpjuYYZYUGMspyyI TcZrS/peJJ+/4dk0fPrwydyufA3D4Q/+lk/NKKSi22dqE/ExhzNZ5CAjCLsKOzJK rCnf7mYK6qD496PepCmL5srcWL4YtaJXX2OEWTzHT9FXOrzd0xHidkO3r0b2euSq K6yYKa7uOtvH53F29VwXPq6+ocYV83RWPOSHh2r/VB/jqVCrGAWdv87K8H41IvsS d0r9J/YTb7DUawh50jT+U5eLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYGjFaYo6 9EVslP2oHBu3/ddgz7UwHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXYRKiheewe9UDCEXDTR1QZzN2u18gY2zsEh4Kvnk4xYv/S3VvcKm2KrcbLcJZ vbToqgUNSEGFE8TSMvwXR8lxXdDFRk266XbiDk0eaDSGCqopJ/9TKIPwfcpNqZ5k bJXauVxsnX+vArcZXvniYlKjjh76RPF4p1UwC7nffD2sXvY6cMmNmhm6rgtYTbri 3CotbuJkhL5p0oHerBNg7Li+xBufVTH83OKEQ+jhVh4nSn1SI/VdY2jN9cIa5Lot FWO+ri2v/rbFAXgSlNo4IhRRec3BJOTlNC9wrtiT4yFi/FPJAbwAQxBguXM2Gbbs XB3eVqoy+YjRww4eviB6Zd4g -----END CERTIFICATE-----Generated at Sat Jun 13 09:15:51 2026 by rpki-client