$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: 4jNs/KK+VGmCoXVrPJGWOF/EholRfSlIA0NelWlJ+i0= Subject key identifier: A1:84:3C:61:AE:51:CD:F8:28:AD:BD:95:5A:33:90:43:19:20:99:25 Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 4C Signing time: Tue 21 Jul 2026 10:13:30 +0000 Manifest this update: Tue 21 Jul 2026 10:13:30 +0000 Manifest next update: Tue 28 Jul 2026 10:13:30 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: GvqRlPNs/tjEmxiSHUVp/RUFAzEXNmzvph9NwroIq+w=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Jul 21 10:13:30 2026 GMT Not After : Jul 28 10:13:30 2026 GMT Subject: CN=6a5f464a-7e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:e9:cb:3f:21:2b:57:6f:ea:8f:53:c0:97: 4b:4b:55:1a:c6:7e:40:92:ac:ea:67:df:56:e3:c2: 81:bd:fd:ed:44:d4:e5:ef:18:c1:a8:9d:79:25:98: 5c:a9:a2:aa:e3:1a:bf:c4:97:40:b1:8f:d3:fa:b5: 96:6f:ea:ae:9b:6c:0a:0f:d2:16:79:e0:06:f4:87: 2f:26:50:9f:d5:79:d5:dc:e0:49:b5:d1:ec:ee:ad: f8:fd:bb:b1:1c:e9:cd:c0:b0:29:24:25:a5:f8:5b: e2:70:37:89:26:53:8f:c5:4b:be:95:a3:90:f7:b4: 28:5b:95:3f:e3:cc:85:c5:e4:f6:2e:83:23:4a:c7: 31:78:a0:b6:15:96:44:f4:52:1c:97:a0:ae:4d:2e: 00:cc:ea:62:84:15:dc:b3:6c:81:dc:89:11:fa:f2: da:5f:25:cc:bb:35:ad:fa:80:e3:c8:96:17:5f:68: b8:66:70:b0:65:3c:dc:79:54:8b:22:02:17:40:6d: 9b:ac:82:d3:0b:19:b4:eb:2b:53:63:f0:f9:a2:f0: b4:bd:87:96:fc:ef:94:bb:a2:d0:64:05:c0:b7:a5: da:c5:eb:b3:df:ca:ee:69:44:a0:61:70:6a:db:91: f8:07:f3:3a:06:94:08:c9:2d:12:ce:5b:6a:80:45: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:84:3C:61:AE:51:CD:F8:28:AD:BD:95:5A:33:90:43:19:20:99:25 X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:7b:d8:bc:66:56:95:ee:5a:36:7c:55:19:e8:b0:ea:7f:f2: 7f:81:2d:a4:82:c7:3d:83:ce:cf:25:3d:90:a3:fe:b7:16:0c: 4c:aa:d6:b4:cb:15:5b:d5:8f:aa:bb:fc:41:c9:7d:67:6a:e7: bc:7c:3d:64:90:4e:b7:e8:05:d4:2b:96:99:7e:c0:8a:37:f2: ad:75:e0:50:ab:26:b5:df:74:2d:41:0d:f5:a1:14:2d:03:e1: 34:ad:be:ff:37:14:f3:5f:e4:88:0e:4d:d0:4f:25:bd:e3:2d: a1:1e:e3:f9:9c:47:51:97:8c:84:a5:ff:da:1a:ee:9e:43:9b: 54:d7:49:4a:65:93:24:7e:e2:f2:d1:98:c6:a2:8d:58:9b:49: 7c:d8:7f:97:f8:a1:5b:a6:08:6b:e0:9d:e2:f7:b6:a7:c4:61: 1a:0b:c3:19:6a:c2:11:7b:3d:08:a8:62:96:0c:62:2a:a6:aa: f0:35:26:cd:8e:c3:0c:f8:6e:ee:1d:1e:ce:b2:a0:2a:54:b1: 00:37:72:ae:e6:26:d8:6c:14:95:d1:94:fc:52:90:97:74:8b: a8:32:cb:a4:ad:56:7f:78:65:3c:97:65:98:55:13:ac:13:71: e0:f4:80:1e:fb:69:f0:8e:df:ee:3b:49:60:1b:3b:f8:d2:76: f5:40:a4:64 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjA3MjExMDEzMzBaFw0yNjA3MjgxMDEzMzBaMBgxFjAUBgNV BAMTDTZhNWY0NjRhLTdlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfy+nLPyErV2/qj1PAl0tLVRrGfkCSrOpn31bjwoG9/e1E1OXvGMGonXklmFyp oqrjGr/El0Cxj9P6tZZv6q6bbAoP0hZ54Ab0hy8mUJ/VedXc4Em10ezurfj9u7Ec 6c3AsCkkJaX4W+JwN4kmU4/FS76Vo5D3tChblT/jzIXF5PYugyNKxzF4oLYVlkT0 UhyXoK5NLgDM6mKEFdyzbIHciRH68tpfJcy7Na36gOPIlhdfaLhmcLBlPNx5VIsi AhdAbZusgtMLGbTrK1Nj8Pmi8LS9h5b875S7otBkBcC3pdrF67Pfyu5pRKBhcGrb kfgH8zoGlAjJLRLOW2qARUmpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUoYQ8Ya5R zfgorb2VWjOQQxkgmSUwHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAie9i8ZlaV7lo2fFUZ6LDqf/J/gS2kgsc9g87PJT2Qo/63FgxMqta0yxVb1Y+q u/xByX1naue8fD1kkE636AXUK5aZfsCKN/KtdeBQqya133QtQQ31oRQtA+E0rb7/ NxTzX+SIDk3QTyW94y2hHuP5nEdRl4yEpf/aGu6eQ5tU10lKZZMkfuLy0ZjGoo1Y m0l82H+X+KFbpghr4J3i97anxGEaC8MZasIRez0IqGKWDGIqpqrwNSbNjsMM+G7u HR7OsqAqVLEAN3Ku5ibYbBSV0ZT8UpCXdIuoMsukrVZ/eGU8l2WYVROsE3Hg9IAe +2nwjt/uO0lgGzv40nb1QKRk -----END CERTIFICATE-----Generated at Tue Jul 21 16:07:33 2026 by rpki-client