$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: 11VYlC9TNFU+lpjblsqr4ihvPNiTznqixk0/N4K9YSY= Subject key identifier: A9:81:43:C0:43:E1:16:45:DA:D2:DB:C9:43:CF:95:29:2F:6A:9D:3E Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 1E Signing time: Sun 19 Apr 2026 08:30:52 +0000 Manifest this update: Sun 19 Apr 2026 08:30:51 +0000 Manifest next update: Sun 26 Apr 2026 08:30:51 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: jUwHtxFirY+OplsVKdzKZw85fm8Odqf5jJ7e/pijXGA=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 08:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Apr 19 08:30:51 2026 GMT Not After : Apr 26 08:30:51 2026 GMT Subject: CN=69e492bc-00df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ec:f9:2d:54:2e:c5:00:2a:db:95:1f:89:aa: 4f:d5:af:91:af:2d:9f:ac:e6:21:f3:ee:59:e8:2f: ca:23:95:4d:8e:8a:d4:de:e3:1a:f5:c7:06:90:41: 2d:06:dd:d0:c9:ab:cd:4e:21:5e:9c:dc:35:92:bb: b6:04:60:74:b5:83:12:e9:cb:8c:fc:c3:ee:21:ce: f1:6c:96:26:8f:35:d8:db:c1:b2:d1:af:17:b1:49: 76:2b:91:87:c2:66:c6:7c:28:df:6e:22:b2:e4:d3: 8d:f3:36:77:5d:27:89:80:8e:31:63:de:91:ef:0d: 55:ed:f8:b4:57:e4:ca:a5:83:33:ce:21:69:dd:37: 70:a8:2a:64:2a:73:7f:e9:94:b6:81:6e:f0:e6:11: a2:86:30:24:32:d3:42:9c:a4:e2:c6:a3:52:7c:36: 7a:af:57:b1:37:16:fe:99:01:35:e0:88:57:ef:6e: a6:98:9d:a1:46:8c:d3:38:81:d5:4e:db:8b:04:46: 03:2c:52:d8:c2:b7:b3:b0:d4:7c:0d:29:6d:6f:8d: 8d:23:7b:73:01:4f:58:33:13:57:86:46:97:2a:7e: ce:d6:55:b2:be:99:dd:3b:b8:05:63:bd:c4:1b:52: 69:5d:f4:25:3d:e2:6b:ac:55:91:43:ba:91:6c:cf: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:81:43:C0:43:E1:16:45:DA:D2:DB:C9:43:CF:95:29:2F:6A:9D:3E X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9c:92:fb:1e:0f:12:4b:a5:61:aa:b5:19:bd:ea:c1:73:4c: 80:32:62:f6:23:1e:97:99:52:55:c6:25:e5:80:2f:97:bf:db: 2f:a0:79:9d:01:2d:ec:7a:9f:c1:eb:25:81:b4:75:10:32:a4: fe:72:45:8c:ff:06:17:a8:c2:69:71:cc:56:59:8c:1f:76:5a: 97:e7:88:22:d4:08:5d:1e:01:15:1b:c5:24:79:3f:17:27:d7: 2c:0e:1d:f7:24:da:0a:8f:8c:ee:11:7b:fd:e1:d6:20:ad:7d: 8b:7d:17:68:dd:63:44:e5:0d:d9:70:d4:9b:9f:81:e8:1f:9a: 29:7b:52:ad:26:cd:a8:89:c1:6f:24:24:6f:f9:34:c4:73:6f: 50:08:71:7c:ff:34:78:0e:23:af:71:6c:56:66:7f:6b:f8:37: bf:00:08:f4:f8:70:0a:52:83:31:13:af:b0:5b:5c:e0:c0:d0: 95:68:74:0e:52:68:3f:f4:9a:36:b7:af:1f:50:8f:73:04:de: af:a8:a4:a7:be:77:45:e6:65:d1:05:03:6e:c1:60:fe:ed:6d: d4:25:e6:f4:cc:d4:22:fb:c7:92:c7:d7:0e:76:94:69:e4:e0: 58:76:17:f7:6c:ba:68:70:ce:60:4a:e4:69:d3:3e:50:7b:fe: 34:c9:60:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjA0MTkwODMwNTFaFw0yNjA0MjYwODMwNTFaMBgxFjAUBgNV BAMTDTY5ZTQ5MmJjLTAwZGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi7PktVC7FACrblR+Jqk/Vr5GvLZ+s5iHz7lnoL8ojlU2OitTe4xr1xwaQQS0G 3dDJq81OIV6c3DWSu7YEYHS1gxLpy4z8w+4hzvFsliaPNdjbwbLRrxexSXYrkYfC ZsZ8KN9uIrLk043zNnddJ4mAjjFj3pHvDVXt+LRX5MqlgzPOIWndN3CoKmQqc3/p lLaBbvDmEaKGMCQy00KcpOLGo1J8NnqvV7E3Fv6ZATXgiFfvbqaYnaFGjNM4gdVO 24sERgMsUtjCt7Ow1HwNKW1vjY0je3MBT1gzE1eGRpcqfs7WVbK+md07uAVjvcQb Umld9CU94musVZFDupFsz+udAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqYFDwEPh FkXa0tvJQ8+VKS9qnT4wHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBmnJL7Hg8SS6VhqrUZverBc0yAMmL2Ix6XmVJVxiXlgC+Xv9svoHmdAS3sep/B 6yWBtHUQMqT+ckWM/wYXqMJpccxWWYwfdlqX54gi1AhdHgEVG8UkeT8XJ9csDh33 JNoKj4zuEXv94dYgrX2LfRdo3WNE5Q3ZcNSbn4HoH5ope1KtJs2oicFvJCRv+TTE c29QCHF8/zR4DiOvcWxWZn9r+De/AAj0+HAKUoMxE6+wW1zgwNCVaHQOUmg/9Jo2 t68fUI9zBN6vqKSnvndF5mXRBQNuwWD+7W3UJeb0zNQi+8eSx9cOdpRp5OBYdhf3 bLpocM5gSuRp0z5Qe/40yWAW -----END CERTIFICATE-----Generated at Mon Apr 20 04:53:14 2026 by rpki-client