$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: 4J4K5qZd9EKhFh6TjWqu5hOR9h5TKn5TmdLOU+nPols= Subject key identifier: D4:10:D8:B1:D4:8D:C2:EE:75:2B:A1:36:E1:2F:AA:F0:6F:63:4B:CA Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 11 Signing time: Wed 25 Mar 2026 08:16:41 +0000 Manifest this update: Wed 25 Mar 2026 08:16:40 +0000 Manifest next update: Wed 01 Apr 2026 08:16:40 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: UPCPHE1eJkACWepBdDZGK1BqRgu7me8Kl2f8wTRKmG8=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Mar 25 08:16:40 2026 GMT Not After : Apr 1 08:16:40 2026 GMT Subject: CN=69c399e9-a347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:52:ee:37:82:5c:5e:11:1b:b9:33:e4:73: 9c:fd:f9:2b:9e:4b:3f:1e:9e:74:7c:0d:d7:41:d4: 0c:b6:38:a8:8d:ab:17:1b:1b:86:bb:59:8a:20:a5: a7:60:2c:12:3d:0d:b6:93:ea:2b:90:c7:70:d3:67: 2f:bf:a0:0c:03:4c:80:c8:3b:b7:11:c5:74:a0:36: 49:f7:0e:85:21:3c:de:ca:94:0d:6e:65:53:c8:89: 86:7a:d2:36:c3:7c:09:ff:a0:64:06:64:47:5a:d1: 52:46:ba:e8:a6:2c:66:46:f7:47:dd:97:3a:cc:25: 7e:93:f2:a6:06:4e:7f:15:a0:61:df:6d:44:2a:a3: e5:09:37:b8:98:5c:14:b9:a3:a0:7c:91:34:f7:b7: 14:72:de:db:e1:99:b2:24:e0:4c:da:8b:a6:7f:e8: 30:31:d1:11:96:49:e4:ba:a9:80:3d:00:6e:76:92: 13:01:1c:2d:76:97:e5:98:61:32:5a:12:17:49:3f: ec:94:6b:01:5e:33:d7:50:0a:10:a9:99:bc:fd:74: ca:97:f3:bb:47:39:ca:4c:0f:77:a0:9b:54:3a:a9: c2:9a:79:8c:24:a1:46:74:ea:34:9b:2e:71:30:3d: 0b:a4:97:c5:0e:9b:22:55:03:32:9f:a8:ed:75:25: 98:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:D8:B1:D4:8D:C2:EE:75:2B:A1:36:E1:2F:AA:F0:6F:63:4B:CA X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:36:5f:0f:49:3f:b7:9c:de:bb:fb:55:e2:5b:9b:07:17:d2: 45:28:a6:fe:13:0b:0a:3a:e3:69:35:6f:b2:0f:6d:10:5d:a5: d1:b1:7f:71:2c:68:ea:2d:8d:72:bb:5b:6a:f2:7b:69:73:ce: a3:ce:c8:60:9d:f3:b0:af:cd:99:ac:b6:da:27:92:cd:34:04: 89:62:24:fb:4f:bd:be:25:fa:ba:87:1e:72:6a:5f:35:9e:be: a7:af:84:bc:0e:2e:73:be:b8:f6:1d:4a:ec:8d:72:8f:68:49: 5d:a0:8b:31:72:07:56:d7:fc:18:13:2f:d5:1c:b9:f4:22:3c: a9:de:06:34:c6:cc:dc:bf:a0:77:f4:e7:73:99:11:34:8a:c4: 91:99:a9:24:40:d8:dc:9c:b5:7b:3e:3e:60:ed:c9:8f:c0:26: 12:5d:ff:10:5f:e6:f8:68:e8:7d:0e:e2:4c:53:48:e2:b0:11: f7:f3:24:9b:a3:46:2d:17:09:2c:b9:a8:a9:c1:2a:fd:fe:f7: 67:97:f9:40:03:4d:f4:b2:2c:0f:8b:30:04:ae:83:67:2f:4e: ff:e4:f9:98:bc:b2:40:fb:04:85:f3:e6:08:e0:53:20:cc:a6: 58:06:9a:bd:64:db:86:0b:e0:6c:28:7a:09:e3:4a:65:dd:26: 33:8c:68:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUZBNTExMC8GA1UEBRMoQUREMTZDNzc3Rjg1QUMzMzI4MzQ5N0Y5Njg2NkI5NUY3 QzVBNzg4RjAeFw0yNjAzMjUwODE2NDBaFw0yNjA0MDEwODE2NDBaMBgxFjAUBgNV BAMTDTY5YzM5OWU5LWEzNDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZBlLuN4JcXhEbuTPkc5z9+SueSz8ennR8DddB1Ay2OKiNqxcbG4a7WYogpadg LBI9DbaT6iuQx3DTZy+/oAwDTIDIO7cRxXSgNkn3DoUhPN7KlA1uZVPIiYZ60jbD fAn/oGQGZEda0VJGuuimLGZG90fdlzrMJX6T8qYGTn8VoGHfbUQqo+UJN7iYXBS5 o6B8kTT3txRy3tvhmbIk4Ezai6Z/6DAx0RGWSeS6qYA9AG52khMBHC12l+WYYTJa EhdJP+yUawFeM9dQChCpmbz9dMqX87tHOcpMD3egm1Q6qcKaeYwkoUZ06jSbLnEw PQukl8UOmyJVAzKfqO11JZiNAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1BDYsdSN wu51K6E24S+q8G9jS8owHwYDVR0jBBgwFoAUrdFsd3+FrDMoNJf5aGa5X3xaeI8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RkE1LzMzMUYwMzI0MTZG QTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcmRGc2QzLUZyRE1vTkpmNWFHYTVYM3hhZUk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5 RkE1LzMzMUYwMzI0MTZGQTExRjFBMjA2QzkwMTNEM0Q4QzY3L3JkRnNkMy1GckRN b05KZjVhR2E1WDN4YWVJOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB+Nl8PST+3nN67+1XiW5sHF9JFKKb+EwsKOuNpNW+yD20QXaXRsX9xLGjqLY1y u1tq8ntpc86jzshgnfOwr82ZrLbaJ5LNNASJYiT7T72+Jfq6hx5yal81nr6nr4S8 Di5zvrj2HUrsjXKPaEldoIsxcgdW1/wYEy/VHLn0Ijyp3gY0xszcv6B39OdzmRE0 isSRmakkQNjcnLV7Pj5g7cmPwCYSXf8QX+b4aOh9DuJMU0jisBH38ySbo0YtFwks uaipwSr9/vdnl/lAA030siwPizAEroNnL07/5PmYvLJA+wSF8+YI4FMgzKZYBpq9 ZNuGC+BsKHoJ40pl3SYzjGi2 -----END CERTIFICATE-----Generated at Thu Mar 26 09:07:39 2026 by rpki-client