$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: hfSL4dUbxnL9nzhtvoBYLEdU/RLRUSzRlfVBoQhrsN0= Subject key identifier: BA:C5:6B:F0:7F:7D:B5:1E:2F:6D:20:8F:B0:F6:0D:EE:56:DF:BF:EB Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 1C Signing time: Wed 15 Apr 2026 08:32:01 +0000 Manifest this update: Wed 15 Apr 2026 08:32:00 +0000 Manifest next update: Wed 22 Apr 2026 08:32:00 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: 7RA6IWx8XR6R/apm6hbY2rTmgjGzuVaupWQB1enjY2g=) 2: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) 3: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Apr 15 08:32:00 2026 GMT Not After : Apr 22 08:32:00 2026 GMT Subject: CN=69df4d01-f05b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:33:43:6f:21:a0:78:15:db:7e:fc:f6:91: 07:78:9b:ed:3a:d4:05:ee:c6:06:39:f0:3c:05:0d: de:11:b5:65:ea:79:80:37:a6:0b:c0:23:2a:54:05: b7:93:72:e4:a2:6b:de:fc:a4:ee:c6:6e:d1:2c:94: 65:b6:07:fb:3f:7f:bc:81:b1:00:fe:8b:f7:d7:9c: 66:5a:23:f3:5f:ce:d9:46:f8:5c:13:02:d7:df:8d: fe:4b:5d:74:9e:32:dc:90:18:33:cf:32:2e:1a:3e: 42:3d:a7:c3:5e:29:93:ac:43:cd:a4:e8:d8:c1:3a: a2:d5:2b:f1:8e:a0:a9:59:0f:56:6d:e5:70:14:d7: 17:19:0a:25:7b:b0:f5:cc:33:1e:f8:a0:14:2b:75: dc:c4:af:c4:5b:ae:60:b4:df:d0:ee:14:29:28:e7: d0:e1:e8:45:ee:fd:8e:99:b0:70:b4:e5:1a:0b:ed: 99:3e:31:24:11:4c:ce:e2:f3:37:1f:52:48:a2:a8: 80:1c:15:90:81:74:6d:2a:73:37:1d:dd:78:18:c4: c2:ed:d6:05:77:2c:c1:46:3b:24:8f:cf:ad:89:a6: 5a:41:e5:0b:44:83:d2:b9:d4:6d:1b:cd:37:11:90: 95:b7:fd:5d:41:77:4c:22:63:f5:ee:e8:32:15:2b: a7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C5:6B:F0:7F:7D:B5:1E:2F:6D:20:8F:B0:F6:0D:EE:56:DF:BF:EB X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:fc:9d:b5:fd:37:c5:c2:96:ed:8d:96:7f:04:38:37:fd:f3: ac:15:0f:97:e9:aa:fb:a1:0f:c0:ee:aa:63:f9:d0:c9:0e:ab: a7:ce:0b:a8:2b:da:ee:0f:a6:24:e7:9b:ca:4a:1e:80:72:98: 31:cf:45:99:ae:94:0b:aa:5b:9f:38:28:71:d3:0f:1c:40:3f: ea:ac:d8:dd:08:d8:1b:7d:06:a4:ed:ed:55:74:51:7d:b4:94: 41:77:be:5d:9a:d5:1b:65:f3:4f:b6:67:22:f9:5f:3c:e1:99: 9a:40:5b:b4:b8:97:bd:52:2a:ac:33:37:58:b2:6a:79:9e:67: 10:20:3f:b5:9c:6e:6c:a2:09:ff:29:f6:8e:d2:9e:61:e9:8e: 68:1b:06:eb:a3:8f:95:7f:63:ad:fa:64:2f:d2:97:aa:01:40: c4:51:1b:0e:7e:bd:cb:ff:9e:9e:ff:3e:82:65:8d:1f:94:60: 2f:0e:59:c8:53:4a:65:a0:bb:de:f0:24:4a:5d:56:73:fc:fe: 08:61:93:5e:58:54:16:cb:ca:44:83:f8:41:84:2a:b9:1a:12: ac:33:54:be:cc:93:13:6b:bb:80:d1:14:00:e3:00:c0:a7:c4: 79:c9:22:1a:2b:58:73:d9:40:fd:a4:7b:eb:f2:ba:a1:5e:44: 6f:7a:31:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjA0MTUwODMyMDBaFw0yNjA0MjIwODMyMDBaMBgxFjAUBgNV BAMTDTY5ZGY0ZDAxLWYwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjODNDbyGgeBXbfvz2kQd4m+061AXuxgY58DwFDd4RtWXqeYA3pgvAIypUBbeT cuSia978pO7GbtEslGW2B/s/f7yBsQD+i/fXnGZaI/NfztlG+FwTAtffjf5LXXSe MtyQGDPPMi4aPkI9p8NeKZOsQ82k6NjBOqLVK/GOoKlZD1Zt5XAU1xcZCiV7sPXM Mx74oBQrddzEr8RbrmC039DuFCko59Dh6EXu/Y6ZsHC05RoL7Zk+MSQRTM7i8zcf UkiiqIAcFZCBdG0qczcd3XgYxMLt1gV3LMFGOySPz62JplpB5QtEg9K51G0bzTcR kJW3/V1Bd0wiY/Xu6DIVK6c/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUusVr8H99 tR4vbSCPsPYN7lbfv+swHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA2/J21/TfFwpbtjZZ/BDg3/fOsFQ+X6ar7oQ/A7qpj+dDJDqunzguoK9ruD6Yk 55vKSh6Acpgxz0WZrpQLqlufOChx0w8cQD/qrNjdCNgbfQak7e1VdFF9tJRBd75d mtUbZfNPtmci+V884ZmaQFu0uJe9UiqsMzdYsmp5nmcQID+1nG5sogn/KfaO0p5h 6Y5oGwbro4+Vf2Ot+mQv0peqAUDEURsOfr3L/56e/z6CZY0flGAvDlnIU0ploLve 8CRKXVZz/P4IYZNeWFQWy8pEg/hBhCq5GhKsM1S+zJMTa7uA0RQA4wDAp8R5ySIa K1hz2UD9pHvr8rqhXkRvejFf -----END CERTIFICATE-----Generated at Fri Apr 17 05:58:27 2026 by rpki-client