$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: LOogvYJh1ssklCvoTI0VDsyAkvDZk+iF+tuMLqIcr3g= Subject key identifier: C9:88:C0:06:72:35:C6:26:EB:86:A0:61:46:6D:DB:54:E3:E6:D6:15 Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 7A Signing time: Mon 19 Oct 2026 08:32:03 +0000 Manifest this update: Mon 19 Oct 2026 08:32:02 +0000 Manifest next update: Mon 26 Oct 2026 08:32:02 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: bcmBXx3co9KMEiWAcO3OLkY3NOJ/N5R4L/swDBU8oYE=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 08:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Oct 19 08:32:02 2026 GMT Not After : Oct 26 08:32:02 2026 GMT Subject: CN=6ad5d583-46a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:36:3e:95:10:be:76:1a:ec:ea:8b:f2:f5:95: e1:6d:76:04:9f:7f:11:e4:a2:48:db:6a:16:7d:ca: 47:2d:62:cc:fd:2a:83:f0:70:7f:6c:94:2f:7b:ce: 03:6c:ef:fa:26:2a:a3:64:2f:4f:8a:d6:59:65:ab: 93:67:b1:a6:64:d9:64:f4:92:4a:d9:95:73:05:a1: 0f:65:dd:e1:ac:15:4f:b1:86:d7:3c:f2:19:05:29: 2c:51:c3:14:b1:a9:cb:94:a4:ba:c0:6f:f8:a2:7f: 16:cd:88:2e:ca:7e:9c:49:ec:b2:b0:0b:e9:12:77: 51:d4:e4:29:1b:12:51:96:1c:1b:e8:71:d8:8f:88: 08:82:2b:e6:06:6f:37:a9:96:a9:8a:a7:da:ae:c2: 94:1f:0f:27:dd:86:04:0e:3f:f4:08:1e:39:34:61: e0:3d:d5:08:68:f1:23:25:ff:94:45:af:05:d0:b8: cf:3d:5b:4c:e5:7e:e9:74:be:96:1c:b6:ec:fe:d1: b0:94:f1:2a:7d:82:a9:a8:d9:13:56:c5:8b:71:e5: 25:9c:25:fe:a1:3c:49:ef:41:63:48:e9:cf:c7:83: 84:ed:72:df:03:a6:6d:8c:a7:4f:62:04:8f:11:6a: 4f:26:e9:27:ed:6c:23:89:cf:be:da:d4:17:11:78: 8e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:88:C0:06:72:35:C6:26:EB:86:A0:61:46:6D:DB:54:E3:E6:D6:15 X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:56:66:c9:f5:00:0b:b9:66:93:24:8a:d6:14:bf:f7:a3:34: 0e:ea:8c:5d:e5:74:b6:e6:31:48:89:2a:a1:2b:b8:af:aa:22: 5a:b5:db:81:d5:a0:2f:d6:c8:e6:24:7e:b8:7d:0e:47:74:0a: c3:51:a7:7b:96:62:bf:55:26:6d:f3:5b:2c:47:6c:91:2e:06: ee:ee:96:06:c4:36:89:fb:2a:db:c2:6e:34:5f:9b:0d:67:6d: 94:6a:62:7b:a8:a1:3b:39:6f:39:fe:4c:9e:7c:85:22:8b:5b: 9a:ec:e1:a9:52:3e:a5:a6:fd:05:4d:2e:68:e7:3f:8c:94:5d: 6a:50:9b:f1:96:e5:44:bf:08:43:60:da:65:44:07:55:02:ad: 22:9c:6f:46:e9:e9:81:d0:e6:23:77:d1:4e:e2:ef:4e:9c:e1: dc:be:c4:b9:59:31:98:4d:f5:cd:51:c6:c0:9e:d3:08:0c:16: 81:28:be:88:e9:ca:07:4a:99:6a:5d:bb:7a:1c:8b:f4:6e:ad: 8c:e5:84:f5:70:ea:23:65:1b:e9:58:b2:a1:ff:31:f1:de:7a: ab:c6:d9:63:78:de:71:ea:00:0a:4d:e5:87:f2:3e:2c:52:ac: 24:73:35:8d:3b:72:2d:bc:93:b4:91:cc:10:e3:a8:17:e2:3d: e9:be:30:e8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjEwMTkwODMyMDJaFw0yNjEwMjYwODMyMDJaMBgxFjAUBgNV BAMTDTZhZDVkNTgzLTQ2YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3Nj6VEL52Guzqi/L1leFtdgSffxHkokjbahZ9ykctYsz9KoPwcH9slC97zgNs 7/omKqNkL0+K1lllq5NnsaZk2WT0kkrZlXMFoQ9l3eGsFU+xhtc88hkFKSxRwxSx qcuUpLrAb/iifxbNiC7KfpxJ7LKwC+kSd1HU5CkbElGWHBvocdiPiAiCK+YGbzep lqmKp9quwpQfDyfdhgQOP/QIHjk0YeA91Qho8SMl/5RFrwXQuM89W0zlful0vpYc tuz+0bCU8Sp9gqmo2RNWxYtx5SWcJf6hPEnvQWNI6c/Hg4Ttct8Dpm2Mp09iBI8R ak8m6SftbCOJz77a1BcReI6pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyYjABnI1 xibrhqBhRm3bVOPm1hUwHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBqVmbJ9QALuWaTJIrWFL/3ozQO6oxd5XS25jFIiSqhK7ivqiJatduB1aAv1sjm JH64fQ5HdArDUad7lmK/VSZt81ssR2yRLgbu7pYGxDaJ+yrbwm40X5sNZ22UamJ7 qKE7OW85/kyefIUii1ua7OGpUj6lpv0FTS5o5z+MlF1qUJvxluVEvwhDYNplRAdV Aq0inG9G6emB0OYjd9FO4u9OnOHcvsS5WTGYTfXNUcbAntMIDBaBKL6I6coHSplq Xbt6HIv0bq2M5YT1cOojZRvpWLKh/zHx3nqrxtljeN5x6gAKTeWH8j4sUqwkczWN O3ItvJO0kcwQ46gX4j3pvjDo -----END CERTIFICATE-----Generated at Wed Oct 21 00:39:10 2026 by rpki-client