$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: qEreHL+/uelYog6JsHQpvZZKQCysdes69LgY/9Cykjo= Subject key identifier: 8D:56:60:84:C6:D6:AB:E7:A3:F2:AB:C0:0A:98:43:C5:97:30:43:FD Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: CB Signing time: Thu 23 Jul 2026 08:36:25 +0000 Manifest this update: Thu 23 Jul 2026 08:36:25 +0000 Manifest next update: Thu 30 Jul 2026 08:36:25 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: QGabJMlyWZQ1kpSomP50mMu6CP1a2sJplGn2U1Q4kZc=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:36:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Jul 23 08:36:25 2026 GMT Not After : Jul 30 08:36:25 2026 GMT Subject: CN=6a61d289-68c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:ae:fc:67:03:c7:9b:6a:5e:3d:6c:ce:12: 5d:a3:8b:77:77:4e:08:75:0d:c1:3c:c4:bb:74:8b: e2:95:cc:19:0f:f2:75:f7:5c:bf:f2:81:9a:34:5a: c3:a0:47:24:f1:07:85:d6:4e:a1:87:25:e5:6d:42: c0:93:cd:71:3e:d4:fa:54:30:84:78:a4:04:69:59: f1:4c:68:ad:20:bb:56:3e:3a:46:c2:6f:e2:07:ae: a3:76:6e:21:e0:9f:c3:4e:66:77:f9:e1:9b:ca:81: 81:dd:83:24:cb:13:8e:a7:69:db:c0:ae:76:24:2a: 18:59:73:01:b0:5e:d1:f0:b3:63:06:3a:4a:36:25: 5d:1c:85:a9:80:83:93:8c:b9:c7:c6:1e:b1:b0:7b: 43:22:df:18:8f:c5:fc:55:84:66:1e:67:47:70:d1: 0e:4a:43:80:34:a7:9b:cd:5f:31:70:b1:ba:1c:36: d7:e3:27:8e:5b:dc:68:9a:bd:60:6e:ae:af:75:3f: 32:2f:5a:c7:ac:74:96:ff:0e:bb:44:fc:73:75:94: e0:7f:7a:26:03:70:da:00:c9:5b:4c:94:84:55:1a: 90:23:19:00:b3:7e:45:70:29:d8:f7:ef:9f:ee:02: 1c:4d:f2:d0:78:0e:a9:17:49:d2:f5:03:77:d7:6f: 35:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:56:60:84:C6:D6:AB:E7:A3:F2:AB:C0:0A:98:43:C5:97:30:43:FD X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:b3:a1:1b:a2:85:cf:e6:e9:81:75:11:76:b4:0d:b7:b4:6d: 48:8d:70:e3:0d:ac:0c:ce:55:d4:95:10:af:5c:35:1a:51:e3: eb:fd:fc:d6:6b:c4:f6:e5:65:62:ba:e2:89:9e:17:d7:ba:fc: 7e:26:c1:ca:24:66:e9:98:e4:c3:d3:44:2f:0a:d6:f0:c5:87: 83:ff:8e:38:78:04:39:02:71:9f:e8:99:6f:97:70:f0:7b:e6: fe:7d:9c:ec:8c:10:e8:0d:18:22:82:09:66:f2:85:16:81:18: fe:b8:13:40:aa:a7:41:6c:e9:b0:45:88:19:12:e8:e5:f5:e9: e9:bd:b3:38:ba:b5:11:84:64:be:70:93:6a:13:92:8d:a8:d3: bb:de:b2:6c:69:fc:ad:79:82:02:20:82:54:5a:54:44:b5:1d: 49:39:d1:91:52:9c:6b:00:fd:90:8a:e6:bf:06:4b:59:8d:12: 46:f2:81:fa:09:2a:ca:07:d5:02:e1:c0:ee:d0:56:dc:31:9f: 88:7b:34:26:59:16:b3:87:90:a0:b5:ee:aa:a8:d3:c6:65:34: fd:78:ea:47:1b:24:22:35:dd:06:42:02:f5:d7:35:fd:02:1a: b9:37:3b:df:2f:58:cf:25:68:66:13:e3:8d:1d:9a:71:50:9e: 82:cc:33:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYwNzIzMDgzNjI1WhcNMjYwNzMwMDgzNjI1WjAYMRYwFAYD VQQDEw02YTYxZDI4OS02OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPCu/GcDx5tqXj1szhJdo4t3d04IdQ3BPMS7dIvilcwZD/J191y/8oGaNFrD oEck8QeF1k6hhyXlbULAk81xPtT6VDCEeKQEaVnxTGitILtWPjpGwm/iB66jdm4h 4J/DTmZ3+eGbyoGB3YMkyxOOp2nbwK52JCoYWXMBsF7R8LNjBjpKNiVdHIWpgIOT jLnHxh6xsHtDIt8Yj8X8VYRmHmdHcNEOSkOANKebzV8xcLG6HDbX4yeOW9xomr1g bq6vdT8yL1rHrHSW/w67RPxzdZTgf3omA3DaAMlbTJSEVRqQIxkAs35FcCnY9++f 7gIcTfLQeA6pF0nS9QN31281DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1WYITG 1qvno/KrwAqYQ8WXMEP9MB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWho a3Uwd3JsNDlrbjBZYzZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA47OhG6KFz+bpgXURdrQNt7RtSI1w4w2sDM5V1JUQr1w1GlHj6/381mvE9uVl YrriiZ4X17r8fibByiRm6Zjkw9NELwrW8MWHg/+OOHgEOQJxn+iZb5dw8Hvm/n2c 7IwQ6A0YIoIJZvKFFoEY/rgTQKqnQWzpsEWIGRLo5fXp6b2zOLq1EYRkvnCTahOS jajTu96ybGn8rXmCAiCCVFpURLUdSTnRkVKcawD9kIrmvwZLWY0SRvKB+gkqygfV AuHA7tBW3DGfiHs0JlkWs4eQoLXuqqjTxmU0/XjqRxskIjXdBkIC9dc1/QIauTc7 3y9YzyVoZhPjjR2acVCegswzgg== -----END CERTIFICATE-----Generated at Fri Jul 24 11:37:25 2026 by rpki-client