$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: NMcgSqhW3T3hN6WBJ59y6jfLtUqm9juJ9z3U1AHaNvI= Subject key identifier: 3B:B9:22:C5:F3:CC:D9:C2:E7:B5:F6:76:09:5D:F2:E7:7E:FC:A0:3F Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 8D Signing time: Wed 25 Mar 2026 06:45:08 +0000 Manifest this update: Wed 25 Mar 2026 06:45:08 +0000 Manifest next update: Wed 01 Apr 2026 06:45:08 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: K9+/RYGD8XSvcY3GquwNsidTLPjqECz91zcujTCfHrs=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Mar 25 06:45:08 2026 GMT Not After : Apr 1 06:45:08 2026 GMT Subject: CN=69c38474-758e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:4c:be:dc:ae:fc:02:db:2c:f9:07:5c:f5: b9:24:82:be:72:df:31:80:18:19:81:5d:84:77:22: e8:8a:be:c1:f5:f5:0f:89:16:9c:8a:dc:4b:ae:ac: a8:38:9a:c9:96:0c:f2:e2:97:c6:a3:8c:89:3c:ee: 6e:10:89:f0:d8:2f:85:41:cd:0b:10:eb:3e:6d:26: 14:2e:8e:3a:42:b9:71:cf:da:aa:4e:52:33:ed:43: cf:ad:3c:49:ea:29:65:9d:e4:3d:a3:7d:2c:90:84: b1:70:e5:80:90:e5:90:04:67:d5:2f:8e:a3:73:16: 1b:8a:43:7a:e0:ac:32:e0:a2:0c:5e:ba:c6:82:26: 09:dd:4f:9c:b8:e3:af:8d:75:c1:a6:aa:50:bc:fa: 14:67:d2:8a:18:fb:f1:96:cc:0a:77:63:2a:4f:b5: c6:89:95:cd:48:0f:9f:12:54:ae:83:5c:c0:b3:97: ac:39:e6:79:c2:98:5d:94:b5:13:13:7b:33:ae:9b: 59:9b:14:14:5e:9c:8a:bc:6f:1d:54:a4:e4:d2:a0: a0:34:72:bb:f6:15:87:a7:12:39:4a:6b:dc:40:75: 84:56:2f:83:dd:31:98:50:57:01:b8:af:74:ec:b4: b0:54:37:6a:1c:37:e8:6f:e3:55:e4:09:c4:01:ce: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B9:22:C5:F3:CC:D9:C2:E7:B5:F6:76:09:5D:F2:E7:7E:FC:A0:3F X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:db:bf:28:23:c2:49:4f:fd:7f:a7:2b:0f:5e:ab:ee:66:d4: ab:82:a4:a4:bb:b8:ab:6c:fe:5c:34:54:be:b1:10:75:02:ae: 8c:26:c8:41:3b:20:8d:c3:a6:8f:0e:c0:b9:f8:67:5c:9a:40: d7:7c:c7:16:5a:b5:8b:f8:dc:86:b1:51:23:11:32:66:6e:04: 12:4b:0c:0d:c7:a9:d7:36:4b:ce:16:6e:35:cf:84:8b:b8:a1: 6c:43:aa:b8:4b:a2:9f:9b:85:55:0d:2a:cc:c1:ba:dc:3a:a6: 5b:af:5a:c3:60:ec:cb:11:64:00:c7:a3:e0:2b:44:e3:5b:d4: 45:99:cb:85:9f:af:80:fb:08:34:a4:b9:b2:ba:15:47:fc:5a: 97:a2:16:dc:54:f3:f1:81:a0:06:0d:24:5c:d4:ee:c8:31:cc: a7:6b:97:1c:5e:23:6b:fe:d3:51:1c:53:3b:1d:85:fc:56:d7: 0c:61:df:a5:34:75:b8:57:07:0f:07:17:a5:a7:11:66:fe:38: b7:02:91:22:6e:42:68:30:3d:05:e3:97:bf:6a:51:5f:3e:5a: 51:42:51:21:75:68:91:7d:b7:55:31:4e:75:4e:85:b5:7a:be: eb:21:24:70:6c:bf:d3:1e:46:b5:1c:a6:df:78:f1:30:44:2d: 5f:d5:2d:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYwMzI1MDY0NTA4WhcNMjYwNDAxMDY0NTA4WjAYMRYwFAYD VQQDEw02OWMzODQ3NC03NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3ZMvtyu/ALbLPkHXPW5JIK+ct8xgBgZgV2EdyLoir7B9fUPiRacitxLrqyo OJrJlgzy4pfGo4yJPO5uEInw2C+FQc0LEOs+bSYULo46Qrlxz9qqTlIz7UPPrTxJ 6illneQ9o30skISxcOWAkOWQBGfVL46jcxYbikN64Kwy4KIMXrrGgiYJ3U+cuOOv jXXBpqpQvPoUZ9KKGPvxlswKd2MqT7XGiZXNSA+fElSug1zAs5esOeZ5wphdlLUT E3szrptZmxQUXpyKvG8dVKTk0qCgNHK79hWHpxI5SmvcQHWEVi+D3TGYUFcBuK90 7LSwVDdqHDfob+NV5AnEAc6TewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDu5IsXz zNnC57X2dgld8ud+/KA/MB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWho a3Uwd3JsNDlrbjBZYzZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4Nu/KCPCSU/9f6crD16r7mbUq4KkpLu4q2z+XDRUvrEQdQKujCbIQTsgjcOm jw7AufhnXJpA13zHFlq1i/jchrFRIxEyZm4EEksMDcep1zZLzhZuNc+Ei7ihbEOq uEuin5uFVQ0qzMG63DqmW69aw2DsyxFkAMej4CtE41vURZnLhZ+vgPsINKS5sroV R/xal6IW3FTz8YGgBg0kXNTuyDHMp2uXHF4ja/7TURxTOx2F/FbXDGHfpTR1uFcH DwcXpacRZv44twKRIm5CaDA9BeOXv2pRXz5aUUJRIXVokX23VTFOdU6FtXq+6yEk cGy/0x5GtRym33jxMEQtX9UteQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:44:08 2026 by rpki-client