$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: g4cTKHp5QmGQ34UZmV1qhicXG1X0d9iPR1bojd1AVaQ= Subject key identifier: 1C:6A:33:A7:10:E6:BE:0C:97:0B:A7:16:1B:8A:E7:7D:E0:8B:C4:06 Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 4F Signing time: Mon 27 Jul 2026 10:38:50 +0000 Manifest this update: Mon 27 Jul 2026 10:38:49 +0000 Manifest next update: Mon 03 Aug 2026 10:38:49 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: xydXchmIB3tYXraoeNTHjtYfSzcFETh8kwpwS0qPBeY=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Jul 27 10:38:49 2026 GMT Not After : Aug 3 10:38:49 2026 GMT Subject: CN=6a67353a-02d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:ee:95:1d:19:eb:64:73:6d:1d:12:df:d0: 80:6f:09:be:b0:e5:16:46:04:22:ae:04:b0:1a:23: 0b:63:b8:1a:49:b3:52:5d:7d:b8:00:d2:93:5e:2e: 68:cb:9b:54:0b:6d:fc:a3:76:80:9d:61:22:f0:0f: 34:2d:ea:fb:d3:ec:b8:0b:8a:c4:c1:fa:14:b5:92: 46:9a:37:65:5c:88:c0:bb:71:02:b2:e7:73:8c:a8: 0e:c9:c5:f6:e5:fe:4d:6f:b4:49:4b:e3:b2:ba:43: 1a:c8:fb:9b:4f:b6:ca:b2:b2:ea:20:14:66:27:79: 35:8e:09:f1:66:f0:04:51:31:9d:48:f4:fc:c0:9f: 8a:e1:5b:bc:ea:1b:92:ba:35:34:7d:77:d7:7a:de: 59:25:6f:d0:1d:fe:a2:31:c7:d6:e3:65:bd:e1:8c: 9d:0a:18:1b:87:7c:d2:17:df:d1:1c:07:f0:83:5f: 08:66:64:8e:af:e1:1b:61:6c:17:6c:a8:e5:a9:42: da:97:17:ba:f5:be:14:98:d4:5d:ec:d3:c3:cc:1c: dd:19:30:3f:42:14:9b:e3:79:f1:f4:d4:25:da:f4: e5:20:92:04:fe:2d:f9:43:4a:b6:81:a4:f7:52:30: b3:ec:4c:ee:0a:79:3c:3a:62:28:27:b5:ad:66:92: d1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:33:A7:10:E6:BE:0C:97:0B:A7:16:1B:8A:E7:7D:E0:8B:C4:06 X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:67:03:ac:f9:ee:8d:25:05:7b:89:1b:57:ad:9b:52:42:7b: f2:d3:98:37:1a:a9:cc:54:34:71:4d:dc:ec:3e:db:be:90:a5: 17:26:3c:a7:2d:3a:68:b6:3f:f9:4a:22:b1:8a:49:a4:b2:f0: 81:35:45:a3:7d:ae:c7:9f:3b:ba:de:a9:b3:aa:9f:9f:fc:d8: 94:0e:00:0e:12:5e:e9:8d:c3:25:5e:e3:aa:85:55:a0:ff:23: 78:7f:0a:57:c7:53:bd:32:23:ac:a4:78:75:44:fa:d0:0d:ef: bf:9f:5c:c4:43:df:0c:66:fb:b0:9d:29:d1:91:79:33:87:25: b7:1a:92:76:79:c8:aa:62:4e:7c:87:32:75:19:8f:81:f1:e1: 9a:9d:55:79:f0:c5:c9:c5:cb:59:b9:be:5e:b0:22:f8:08:c2: aa:d8:c7:cc:0e:29:8a:fe:df:51:ac:7c:42:2c:c0:01:60:75: b1:01:75:10:98:13:61:8c:d5:21:2e:b3:d6:3b:77:6d:4a:91: 67:83:c7:55:01:4a:d7:15:8f:62:7e:66:a9:c0:0e:82:54:db: 2e:46:0b:57:c5:83:ac:d5:87:7d:8f:61:a2:f1:29:c8:ec:30: 59:7c:5a:d9:96:be:4b:4e:d3:e8:6d:ee:3f:34:b9:55:a8:29: f2:a2:3d:25 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjA3MjcxMDM4NDlaFw0yNjA4MDMxMDM4NDlaMBgxFjAUBgNV BAMTDTZhNjczNTNhLTAyZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4He6VHRnrZHNtHRLf0IBvCb6w5RZGBCKuBLAaIwtjuBpJs1JdfbgA0pNeLmjL m1QLbfyjdoCdYSLwDzQt6vvT7LgLisTB+hS1kkaaN2VciMC7cQKy53OMqA7Jxfbl /k1vtElL47K6QxrI+5tPtsqysuogFGYneTWOCfFm8ARRMZ1I9PzAn4rhW7zqG5K6 NTR9d9d63lklb9Ad/qIxx9bjZb3hjJ0KGBuHfNIX39EcB/CDXwhmZI6v4RthbBds qOWpQtqXF7r1vhSY1F3s08PMHN0ZMD9CFJvjefH01CXa9OUgkgT+LflDSraBpPdS MLPsTO4KeTw6Yignta1mktF/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHGozpxDm vgyXC6cWG4rnfeCLxAYwHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVZwOs+e6NJQV7iRtXrZtSQnvy05g3GqnMVDRxTdzsPtu+kKUXJjynLTpotj/5 SiKxikmksvCBNUWjfa7Hnzu63qmzqp+f/NiUDgAOEl7pjcMlXuOqhVWg/yN4fwpX x1O9MiOspHh1RPrQDe+/n1zEQ98MZvuwnSnRkXkzhyW3GpJ2eciqYk58hzJ1GY+B 8eGanVV58MXJxctZub5esCL4CMKq2MfMDimK/t9RrHxCLMABYHWxAXUQmBNhjNUh LrPWO3dtSpFng8dVAUrXFY9ifmapwA6CVNsuRgtXxYOs1Yd9j2Gi8SnI7DBZfFrZ lr5LTtPobe4/NLlVqCnyoj0l -----END CERTIFICATE-----Generated at Tue Jul 28 18:10:05 2026 by rpki-client