$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: yhUe5uVMNUr39nbBSCefoiLtmj+YSH8vAzo8XY1sBCc= Subject key identifier: 68:E8:B3:46:BC:A3:BE:AD:4F:9D:73:1B:74:52:60:00:D6:F3:35:9E Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: A6 Signing time: Wed 13 May 2026 07:21:53 +0000 Manifest this update: Wed 13 May 2026 07:21:53 +0000 Manifest next update: Wed 20 May 2026 07:21:53 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: q80ZXa2hhGZFf/FIdxXNPqia0FrQ9mu/Yl78ZioFH58=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 07:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: May 13 07:21:53 2026 GMT Not After : May 20 07:21:53 2026 GMT Subject: CN=6a042691-1bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:db:ab:74:89:b3:01:5b:03:89:9e:77:55: 3e:39:a0:a1:55:d3:6d:81:6d:d2:85:60:b9:f5:8a: e9:ff:4a:27:78:5a:b8:6a:a4:d3:8c:e6:43:c9:43: fd:fb:7b:79:20:dd:15:55:12:da:ce:c3:8a:fa:a5: 00:15:49:3e:93:fa:dd:c0:8f:6f:26:1d:31:ab:07: 6d:b2:76:56:40:8c:56:c2:fa:98:7c:c0:83:9d:c4: 12:33:b2:02:10:f8:63:a3:1a:c9:2d:66:21:ab:dd: 82:1e:b3:2f:04:20:81:36:9f:80:9e:fc:81:0b:c5: 6b:a2:ab:31:f7:17:23:ce:80:ee:03:f6:df:60:3c: bd:79:36:7d:dd:7b:4e:6d:6e:a0:9a:46:7f:f0:96: de:48:4f:65:3c:b6:f8:14:8a:6f:77:d3:06:06:3b: e8:a6:2c:cf:71:ee:ab:ac:bb:6d:13:78:94:09:20: 3f:28:e3:79:7b:5e:00:0f:b8:b4:34:d4:b8:b9:7a: 23:83:c3:8f:b8:fe:f3:f5:c6:88:98:1a:3b:0d:32: 9d:73:a1:84:ee:d6:6e:82:40:c7:09:50:54:0a:98: 90:ad:e0:aa:2a:10:73:79:68:28:ad:35:bb:bf:38: 4a:0d:f0:c3:50:a3:32:9d:a3:29:04:25:04:07:6e: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E8:B3:46:BC:A3:BE:AD:4F:9D:73:1B:74:52:60:00:D6:F3:35:9E X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:da:d3:1e:0e:79:4f:8b:23:2b:00:45:fc:a6:98:04:a8:fb: de:f3:e9:cb:55:14:e5:a4:7e:5e:f1:40:07:76:b8:19:59:87: ab:15:fb:91:db:1d:d2:35:d3:fe:2a:1d:55:0c:37:1c:1f:21: 71:03:02:d8:8e:56:a9:02:8c:d5:05:2a:e7:6a:e6:cf:c9:2d: 16:5e:a7:65:43:48:1f:e4:c9:c0:05:cd:25:3d:39:c1:13:30: e3:34:c3:e0:b3:c0:d4:40:a3:00:2f:77:56:fd:de:ec:b5:b3: 30:f7:5a:b6:bb:72:2e:e2:8a:83:f6:4d:cd:02:5b:06:c4:a3: 76:4e:cc:9d:26:7c:a6:ce:a8:41:47:88:89:fc:1e:f8:d2:53: a8:91:71:c3:a2:36:52:ae:d3:3f:56:3d:a3:44:8d:e1:7c:0d: 27:e8:59:2c:3f:2c:13:1c:85:0d:e1:00:b5:09:65:8f:57:36: 74:ab:74:43:e1:89:9c:45:f7:09:9b:db:ed:a5:cd:4f:42:71: 5b:79:e4:3e:36:49:4a:4e:f4:3f:09:14:9a:c5:0c:82:38:d4: a1:0b:bb:0b:cb:e7:3a:16:85:04:0c:0e:42:47:ed:3c:ab:4c: 94:30:d1:cd:14:5d:80:d4:09:a4:3a:2a:4f:ff:9f:6a:79:1f: 32:6b:b8:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYwNTEzMDcyMTUzWhcNMjYwNTIwMDcyMTUzWjAYMRYwFAYD VQQDEw02YTA0MjY5MS0xYmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqeDbq3SJswFbA4med1U+OaChVdNtgW3ShWC59Yrp/0oneFq4aqTTjOZDyUP9 +3t5IN0VVRLazsOK+qUAFUk+k/rdwI9vJh0xqwdtsnZWQIxWwvqYfMCDncQSM7IC EPhjoxrJLWYhq92CHrMvBCCBNp+AnvyBC8Vroqsx9xcjzoDuA/bfYDy9eTZ93XtO bW6gmkZ/8JbeSE9lPLb4FIpvd9MGBjvopizPce6rrLttE3iUCSA/KON5e14AD7i0 NNS4uXojg8OPuP7z9caImBo7DTKdc6GE7tZugkDHCVBUCpiQreCqKhBzeWgorTW7 vzhKDfDDUKMynaMpBCUEB246rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjos0a8 o76tT51zG3RSYADW8zWeMB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWho a3Uwd3JsNDlrbjBZYzZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvtrTHg55T4sjKwBF/KaYBKj73vPpy1UU5aR+XvFAB3a4GVmHqxX7kdsd0jXT /iodVQw3HB8hcQMC2I5WqQKM1QUq52rmz8ktFl6nZUNIH+TJwAXNJT05wRMw4zTD 4LPA1ECjAC93Vv3e7LWzMPdatrtyLuKKg/ZNzQJbBsSjdk7MnSZ8ps6oQUeIifwe +NJTqJFxw6I2Uq7TP1Y9o0SN4XwNJ+hZLD8sExyFDeEAtQllj1c2dKt0Q+GJnEX3 CZvb7aXNT0JxW3nkPjZJSk70PwkUmsUMgjjUoQu7C8vnOhaFBAwOQkftPKtMlDDR zRRdgNQJpDoqT/+fankfMmu4cA== -----END CERTIFICATE-----Generated at Wed May 13 11:01:15 2026 by rpki-client