$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: Q/JcMGmyrVhAnUS8+FlHM9Gs0apdXEoybUYJIUGHRss= Subject key identifier: F6:E3:F5:2B:58:62:4B:72:E5:B2:91:19:24:D6:9E:33:9D:01:68:33 Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 63 Signing time: Thu 03 Sep 2026 08:19:32 +0000 Manifest this update: Thu 03 Sep 2026 08:19:31 +0000 Manifest next update: Thu 10 Sep 2026 08:19:31 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: 7MhpWdiA1ytp5jvsdvKbqBdtxW/CWQZn8aWB1euNOJ4=) 2: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) 3: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 08:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Sep 3 08:19:31 2026 GMT Not After : Sep 10 08:19:31 2026 GMT Subject: CN=6a992d94-a469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ea:b1:ef:ee:2a:01:4f:d0:95:c5:4f:9f:9b: ba:ea:cb:35:22:cd:64:32:3a:3c:9f:4f:3f:3a:29: e6:9b:ab:55:92:9c:6a:de:a5:93:93:62:48:e2:98: 3a:d8:f8:99:42:00:5e:b6:76:e1:a2:db:24:c0:ae: 43:c9:f5:91:ca:66:8b:69:9a:75:32:9d:86:e0:81: d0:96:67:37:cb:bc:0c:4f:d6:21:83:46:ab:f3:81: 4b:d2:70:30:a1:c4:5f:94:71:62:44:dc:fd:a2:d8: aa:7a:29:d1:75:c9:49:b0:9a:81:83:a4:89:bf:6c: c2:24:a4:ba:17:14:5f:33:cf:00:c3:76:91:1c:a5: 53:fe:6b:18:b8:fe:f3:ed:56:10:0b:07:86:2b:6e: 52:67:c2:4a:58:37:83:07:00:6b:3e:7e:ab:95:48: 74:a1:1e:2b:a2:31:d5:5b:56:da:cc:89:4c:64:a6: 4d:4b:e5:fd:da:7f:87:5a:a2:95:b4:77:cf:b7:ed: 82:d6:fc:19:66:71:9d:6b:84:09:f8:b3:a6:76:70: ff:7e:79:cd:d3:54:7f:82:c7:2a:1f:45:c4:e9:d8: fd:38:30:11:82:1c:d8:59:93:5e:c2:5c:c5:e3:a2: 19:b0:5f:f3:21:07:13:81:c6:ae:da:ac:fd:67:d1: d3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E3:F5:2B:58:62:4B:72:E5:B2:91:19:24:D6:9E:33:9D:01:68:33 X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:93:43:13:0f:da:82:e9:78:46:74:08:ab:40:36:1b:3c:8b: 25:84:b7:21:e8:96:f7:7a:e3:8c:e5:45:2b:46:98:8e:bf:96: 59:c0:13:1c:57:e6:0a:e9:d3:c6:31:1c:92:7d:b3:99:05:b8: 33:e7:82:43:55:49:4a:89:b4:75:88:f3:88:ff:8b:b4:bf:3f: 60:40:d0:06:e5:16:fb:a8:2c:5f:f9:1a:05:4c:20:cd:f0:91: 73:e8:1f:6b:33:5a:ea:3d:78:5a:40:ff:e3:2b:29:db:f2:e9: 6e:09:78:b5:bb:5c:30:ca:3c:5a:a2:a6:61:d9:4d:a0:b3:e8: 70:75:0b:60:72:e1:ba:d6:be:d3:e6:34:8f:61:20:c4:ae:cb: b9:fa:66:55:7a:29:04:c8:a5:cb:17:68:a8:76:38:5c:a0:60: e7:79:af:f6:97:6e:7e:78:59:01:42:28:6d:b6:5a:6c:1a:9f: 79:13:25:ae:1f:6e:58:e0:95:fb:1f:42:d3:ce:97:02:71:35: 7d:56:93:97:0d:9a:21:55:98:1d:2c:70:30:66:07:a5:87:ea: 5d:e6:66:ee:57:e5:35:91:ae:00:7e:2f:c3:5f:5b:32:1e:27: 62:f0:18:9b:e9:4f:67:f1:ed:09:a4:e3:e4:51:8c:de:c2:56: bf:2f:d6:e2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjA5MDMwODE5MzFaFw0yNjA5MTAwODE5MzFaMBgxFjAUBgNV BAMTDTZhOTkyZDk0LWE0NjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZ6rHv7ioBT9CVxU+fm7rqyzUizWQyOjyfTz86Keabq1WSnGrepZOTYkjimDrY +JlCAF62duGi2yTArkPJ9ZHKZotpmnUynYbggdCWZzfLvAxP1iGDRqvzgUvScDCh xF+UcWJE3P2i2Kp6KdF1yUmwmoGDpIm/bMIkpLoXFF8zzwDDdpEcpVP+axi4/vPt VhALB4YrblJnwkpYN4MHAGs+fquVSHShHiuiMdVbVtrMiUxkpk1L5f3af4daopW0 d8+37YLW/BlmcZ1rhAn4s6Z2cP9+ec3TVH+CxyofRcTp2P04MBGCHNhZk17CXMXj ohmwX/MhBxOBxq7arP1n0dNXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9uP1K1hi S3LlspEZJNaeM50BaDMwHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCLk0MTD9qC6XhGdAirQDYbPIslhLch6Jb3euOM5UUrRpiOv5ZZwBMcV+YK6dPG MRySfbOZBbgz54JDVUlKibR1iPOI/4u0vz9gQNAG5Rb7qCxf+RoFTCDN8JFz6B9r M1rqPXhaQP/jKynb8uluCXi1u1wwyjxaoqZh2U2gs+hwdQtgcuG61r7T5jSPYSDE rsu5+mZVeikEyKXLF2iodjhcoGDnea/2l25+eFkBQihttlpsGp95EyWuH25Y4JX7 H0LTzpcCcTV9VpOXDZohVZgdLHAwZgelh+pd5mbuV+U1ka4Afi/DX1syHidi8Bib 6U9n8e0JpOPkUYzewla/L9bi -----END CERTIFICATE-----Generated at Sat Sep 5 04:01:43 2026 by rpki-client