$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft File: rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft (raw, json) Hash identifier: 6EGUdCT7MZI4iC84efetpde4Loyw/4hHwTKH/NzMVj0= Subject key identifier: 89:60:1E:0C:CC:05:F9:F6:37:45:63:A2:A6:31:A5:0C:D4:80:44:0D Authority key identifier: AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F Certificate issuer: /CN=A91C9FA5/serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft Manifest number: 88 Signing time: Sun 15 Nov 2026 07:50:33 +0000 Manifest this update: Sun 15 Nov 2026 07:50:33 +0000 Manifest next update: Sun 22 Nov 2026 07:50:33 +0000 Files and hashes: 1: rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl (hash: IXBvxciDenejGvdmQ0SzCA2h4ipqTWJ/jCU1FqFQ44s=) 2: C170DB5816FE11F18F088F02403D8C67.roa (hash: yX4W8DdJSN3+Xr/0WS2vJ+YF9+T+T0hVhVlvyeFeK9c=) 3: C0E909DA16FE11F18F088F02403D8C67.roa (hash: VjPxAhas5Pw+fqOZlP4hHQhYpUtxADZwSrxgwjbLmBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 07:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9FA5, serialNumber=ADD16C777F85AC33283497F96866B95F7C5A788F Validity Not Before: Nov 15 07:50:33 2026 GMT Not After : Nov 22 07:50:33 2026 GMT Subject: CN=6af96449-ebd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:c6:b6:19:6b:9d:be:7c:6f:f8:96:d0:b3: 38:46:1c:7d:51:1f:76:7f:bb:7e:6b:26:ec:b2:38: e5:b9:6f:1f:d1:ad:cd:5e:a1:69:ef:65:5b:03:54: 80:0e:18:4a:dd:2f:4f:72:64:ef:75:31:14:34:f1: 73:94:78:38:ec:a9:c2:1e:59:a3:12:76:37:f5:d2: ce:ec:c9:fe:fd:e1:4b:d5:eb:06:f8:c8:ed:84:01: fc:da:6a:bc:a9:19:34:43:05:75:fa:76:30:92:7b: 10:9c:07:f8:14:a7:76:4e:74:c8:d1:a0:fa:67:30: a7:e2:f3:c6:a2:b0:82:7e:30:f9:41:2f:42:2b:04: 60:d8:95:55:b7:00:d8:67:bb:c7:1c:fb:d7:eb:f0: 3d:9f:f3:61:82:10:a6:0e:9f:58:88:b2:c2:30:03: 7f:b1:14:bb:a9:a4:70:9b:30:0e:29:b7:9c:32:ac: c6:0d:46:62:82:f5:9a:51:5b:13:4c:e4:f3:67:d1: 33:5c:ab:5d:65:04:57:72:bd:74:15:96:3a:a8:67: d8:1d:6f:61:ae:93:47:84:14:f5:97:c0:f7:c6:f7: 09:f6:7c:81:45:86:d3:29:bc:e2:79:06:23:9f:00: 76:6a:3e:27:2a:e2:a6:06:a5:c2:63:76:e7:00:65: ff:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:60:1E:0C:CC:05:F9:F6:37:45:63:A2:A6:31:A5:0C:D4:80:44:0D X509v3 Authority Key Identifier: keyid:AD:D1:6C:77:7F:85:AC:33:28:34:97:F9:68:66:B9:5F:7C:5A:78:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rdFsd3-FrDMoNJf5aGa5X3xaeI8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9FA5/331F032416FA11F1A206C9013D3D8C67/rdFsd3-FrDMoNJf5aGa5X3xaeI8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e8:72:64:ad:13:df:d1:41:6e:47:81:d0:c0:ca:51:e8:67: 1f:c2:7a:3c:4d:f1:e0:ce:86:ad:c7:8b:45:f5:3d:1c:ca:97: a2:76:f6:c3:d4:7b:ae:42:ba:8d:b6:8e:ba:aa:f8:60:86:ee: a4:84:c1:3b:0d:38:53:9a:f6:f6:d2:01:e9:ec:f1:91:d8:7a: 4f:99:bd:71:9d:69:a1:80:1b:bc:cc:c0:2e:92:37:53:70:3d: 5c:2e:5a:4c:5f:96:0b:ff:86:d4:4f:79:06:c2:94:8c:93:c3: f5:2f:f8:21:79:8f:da:5a:67:87:19:0f:8b:a0:56:da:a5:df: 8a:9d:55:78:56:8e:f3:f3:2d:66:d9:9b:62:69:d9:e0:e9:4b: 3a:cc:ae:a8:56:91:93:fd:06:01:75:90:1f:aa:a8:b4:4d:1a: 03:09:07:5d:3c:b7:95:3e:49:90:8a:97:d7:72:a1:f2:ad:e6: b4:58:b7:96:d8:6e:01:43:5b:38:15:c2:45:f6:0e:9f:ee:71: 45:b6:4f:ee:5e:5f:16:a2:06:cf:6e:8a:9b:c3:9b:1a:4d:b2: 72:16:d0:d2:7c:2a:5b:48:18:30:10:6d:a4:a8:0c:92:46:93: 5e:ec:2c:1d:53:c0:42:b2:ee:81:7d:eb:70:1e:3a:15:ef:86: a0:b4:18:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlGQTUxMTAvBgNVBAUTKEFERDE2Qzc3N0Y4NUFDMzMyODM0OTdGOTY4NjZCOTVG N0M1QTc4OEYwHhcNMjYxMTE1MDc1MDMzWhcNMjYxMTIyMDc1MDMzWjAYMRYwFAYD VQQDEw02YWY5NjQ0OS1lYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorvGthlrnb58b/iW0LM4Rhx9UR92f7t+aybssjjluW8f0a3NXqFp72VbA1SA DhhK3S9PcmTvdTEUNPFzlHg47KnCHlmjEnY39dLO7Mn+/eFL1esG+MjthAH82mq8 qRk0QwV1+nYwknsQnAf4FKd2TnTI0aD6ZzCn4vPGorCCfjD5QS9CKwRg2JVVtwDY Z7vHHPvX6/A9n/NhghCmDp9YiLLCMAN/sRS7qaRwmzAOKbecMqzGDUZigvWaUVsT TOTzZ9EzXKtdZQRXcr10FZY6qGfYHW9hrpNHhBT1l8D3xvcJ9nyBRYbTKbzieQYj nwB2aj4nKuKmBqXCY3bnAGX/8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlgHgzM Bfn2N0VjoqYxpQzUgEQNMB8GA1UdIwQYMBaAFK3RbHd/hawzKDSX+WhmuV98WniP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUZBNS8zMzFGMDMyNDE2 RkExMUYxQTIwNkM5MDEzRDNEOEM2Ny9yZEZzZDMtRnJETW9OSmY1YUdhNVgzeGFl STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkRnNkMy1GckRNb05KZjVhR2E1WDN4YWVJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUZBNS8zMzFGMDMyNDE2RkExMUYxQTIwNkM5MDEzRDNEOEM2Ny9yZEZzZDMtRnJE TW9OSmY1YUdhNVgzeGFlSTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOOhyZK0T39FBbkeB0MDKUehnH8J6PE3x4M6GrceLRfU9HMqXonb2w9R7rkK6 jbaOuqr4YIbupITBOw04U5r29tIB6ezxkdh6T5m9cZ1poYAbvMzALpI3U3A9XC5a TF+WC/+G1E95BsKUjJPD9S/4IXmP2lpnhxkPi6BW2qXfip1VeFaO8/MtZtmbYmnZ 4OlLOsyuqFaRk/0GAXWQH6qotE0aAwkHXTy3lT5JkIqX13Kh8q3mtFi3lthuAUNb OBXCRfYOn+5xRbZP7l5fFqIGz26Km8ObGk2ychbQ0nwqW0gYMBBtpKgMkkaTXuws HVPAQrLugX3rcB46Fe+GoLQYnA== -----END CERTIFICATE-----Generated at Sun Nov 15 15:30:39 2026 by rpki-client