$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: hAC7bPF576d0bVdBIu6bsXEBnamH0XBQ5Ybv1jfNH/U= Subject key identifier: C0:92:51:7C:24:57:B0:B7:96:B1:81:05:DC:44:18:EC:6E:FC:BB:14 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 1E Signing time: Sat 23 Aug 2025 08:06:14 +0000 Manifest this update: Sat 23 Aug 2025 08:06:13 +0000 Manifest next update: Sat 30 Aug 2025 08:06:13 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: kCrWnL/HXo4cgQRpSF+h4kY55GOhwZ+NNHoA1EjNBlM=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Aug 23 08:06:13 2025 GMT Not After : Aug 30 08:06:13 2025 GMT Subject: CN=68a97676-c2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:3e:c8:24:2c:2c:5e:10:1b:26:3f:e1:4f: 02:8e:16:3c:55:fb:20:d5:7c:72:d9:dc:63:2c:9a: 94:e7:72:c2:75:67:81:17:22:66:93:dd:fa:e5:54: bd:dc:d9:50:bf:b6:59:48:ed:9a:08:ec:1b:75:7b: f9:ec:3e:6d:5c:5e:6f:10:ed:73:7e:65:67:71:b7: 8d:bd:30:a9:d9:56:18:e5:c5:4a:dd:a9:5c:3a:90: a1:f2:cc:a0:05:b6:da:94:78:84:1b:57:4e:e6:4e: 4f:b3:79:e5:6f:f8:90:38:53:4d:62:0b:df:a5:a6: 27:76:2f:a1:68:52:13:87:23:83:2f:f5:b8:f2:93: 0b:7c:e1:f8:59:32:57:cf:b0:69:1f:8f:3b:1d:9d: 9d:fd:21:f1:0e:c0:52:46:62:03:f7:89:be:9b:6f: 57:ff:34:b4:79:b3:1b:e4:8e:8f:de:21:c0:0d:d7: 78:2d:c6:e9:c6:90:59:74:d7:7c:76:78:6c:f6:fe: ab:ec:74:59:06:d5:5c:57:a8:9a:3f:7e:e8:0b:79: 12:e1:80:c9:02:d6:63:35:b0:27:77:80:1f:7b:c3: 45:0d:a5:6c:dc:d3:ff:21:7f:b1:10:a6:13:e8:60: 0b:0a:9d:3f:58:f2:52:40:26:b6:05:cf:d1:fc:f2: fb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:92:51:7C:24:57:B0:B7:96:B1:81:05:DC:44:18:EC:6E:FC:BB:14 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:36:7d:b3:05:10:28:27:97:f9:b1:31:aa:dd:2b:9c:2f:07: ab:b4:49:01:b7:82:bf:4b:a3:67:6a:be:93:05:2b:e4:51:0c: d3:78:5d:ee:45:ca:32:de:5c:b0:b5:35:8a:73:67:9e:6b:7c: f3:3a:a3:3f:3a:88:77:49:eb:ac:36:24:78:e9:18:8d:9c:05: 6a:fa:c5:cb:a9:cf:81:36:6e:88:25:5c:59:a0:95:d5:63:58: df:02:99:f5:46:90:db:41:88:89:a6:10:8d:b8:b7:7f:51:c8: 2a:a0:68:9b:4f:c4:bd:0d:a3:24:19:40:c8:c0:ce:72:1a:26: 86:e9:a4:50:d6:60:44:68:f1:1f:60:6d:83:3b:d2:0f:84:6f: 60:38:2d:11:dd:f2:4f:aa:6d:89:93:52:d3:83:a8:4b:a4:f3: 20:ab:ae:91:85:3d:7f:62:df:bd:3e:10:6c:9b:52:d1:c2:31: b2:f4:ed:d1:98:69:5f:1b:c9:92:18:b9:d0:dd:0b:ce:64:b3: dc:83:b9:5d:5b:27:2f:a6:c0:e3:a6:cb:03:66:bd:00:db:de: 6c:47:2d:1b:c4:1a:2d:89:4b:19:c9:b6:ee:69:12:a3:87:3d: c8:3f:ab:5b:36:b6:3f:44:95:32:d6:1c:60:6f:9f:ec:98:3f: 50:bd:33:52 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTA4MjMwODA2MTNaFw0yNTA4MzAwODA2MTNaMBgxFjAUBgNV BAMTDTY4YTk3Njc2LWMyYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2jT7IJCwsXhAbJj/hTwKOFjxV+yDVfHLZ3GMsmpTncsJ1Z4EXImaT3frlVL3c 2VC/tllI7ZoI7Bt1e/nsPm1cXm8Q7XN+ZWdxt429MKnZVhjlxUrdqVw6kKHyzKAF ttqUeIQbV07mTk+zeeVv+JA4U01iC9+lpid2L6FoUhOHI4Mv9bjykwt84fhZMlfP sGkfjzsdnZ39IfEOwFJGYgP3ib6bb1f/NLR5sxvkjo/eIcAN13gtxunGkFl013x2 eGz2/qvsdFkG1VxXqJo/fugLeRLhgMkC1mM1sCd3gB97w0UNpWzc0/8hf7EQphPo YAsKnT9Y8lJAJrYFz9H88vtlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwJJRfCRX sLeWsYEF3EQY7G78uxQwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OTBGL0QzNUFDNjNFNTRBRTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhr dTB3cmw0OWtuMFljNmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQ2fbMFECgnl/mxMardK5wvB6u0SQG3gr9Lo2dqvpMFK+RRDNN4Xe5F yjLeXLC1NYpzZ55rfPM6oz86iHdJ66w2JHjpGI2cBWr6xcupz4E2boglXFmgldVj WN8CmfVGkNtBiImmEI24t39RyCqgaJtPxL0NoyQZQMjAznIaJobppFDWYERo8R9g bYM70g+Eb2A4LRHd8k+qbYmTUtODqEuk8yCrrpGFPX9i370+EGybUtHCMbL07dGY aV8byZIYudDdC85ks9yDuV1bJy+mwOOmywNmvQDb3mxHLRvEGi2JSxnJtu5pEqOH Pcg/q1s2tj9ElTLWHGBvn+yYP1C9M1I= -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:05 2025 by rpki-client