$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: BW3gUAqC6ix4EphWglDnKCFWffqodfGLqaZSolokMH4= Subject key identifier: DA:A6:99:2A:8B:2A:DD:2F:2B:7C:D2:F6:36:A8:19:25:A8:2F:79:76 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 3B Signing time: Sun 19 Oct 2025 10:57:21 +0000 Manifest this update: Sun 19 Oct 2025 10:57:21 +0000 Manifest next update: Sun 26 Oct 2025 10:57:21 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: ipkPpJov9Qk1J16TPbFdAFOtngyRfUrKHaBZpvRSjrc=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Oct 19 10:57:21 2025 GMT Not After : Oct 26 10:57:21 2025 GMT Subject: CN=68f4c411-3f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:63:d2:db:e2:b4:8a:a8:f4:97:dd:07:b7:35: 35:3e:ed:90:b5:f9:16:17:3a:26:35:ea:ba:61:23: 69:1a:28:d3:db:78:82:75:eb:d8:fb:d3:58:e1:12: e2:88:84:56:e3:7c:6d:cd:62:b0:92:a8:4e:c7:31: 2f:27:2a:0d:6c:6f:18:9a:67:d7:07:4e:1a:a5:be: 92:68:b6:51:5a:3f:86:99:6e:d7:d6:e0:91:21:4c: da:d9:b1:48:ae:f4:5f:07:54:7a:81:73:4f:7f:68: c6:47:40:75:40:c2:0e:55:06:8d:0a:ff:d1:c2:df: 28:9e:5c:76:22:16:26:e6:89:28:2e:0c:ce:62:46: 8f:43:74:6b:1d:65:46:ad:31:c2:5c:c2:54:75:4e: f4:1c:fb:4e:af:53:d8:13:1f:fb:a6:a5:08:c9:58: 33:8d:2d:26:c9:2e:e1:37:5c:dd:c2:7e:c9:24:26: c3:af:fa:f8:c8:85:52:d7:41:df:17:dd:81:61:d9: 9d:8e:b5:99:4d:77:95:2b:78:a1:d6:ba:cf:ed:78: 24:0d:2b:6f:f9:79:bd:26:90:cf:4c:ff:e9:ef:3d: 7f:a9:92:4b:62:b2:9d:c6:14:8a:77:49:83:fe:a7: 9c:57:45:9d:20:f2:56:c2:70:82:05:26:50:07:2b: 16:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A6:99:2A:8B:2A:DD:2F:2B:7C:D2:F6:36:A8:19:25:A8:2F:79:76 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e3:d2:c9:6b:59:74:47:2e:f3:9b:98:da:e6:53:b5:ec:9b:c0: 19:96:4a:62:b2:5e:36:5f:fe:45:2a:ae:a4:ab:15:9b:00:78: 4c:41:66:57:fe:1f:8a:9b:48:1a:93:9e:f9:34:4f:60:dc:e5: c5:1e:48:b6:31:da:9b:be:4c:87:51:89:62:f1:82:0b:d1:c5: c2:df:4c:38:cd:05:cd:6b:73:39:cd:6e:d6:83:fe:20:74:9a: 20:a2:6d:31:4d:dd:c2:5b:e7:a4:5a:88:63:cb:0a:c8:c9:20: 3e:cc:37:b8:a7:e0:9f:d3:88:b5:29:f7:61:e2:47:e5:f9:ca: 1b:05:98:35:fb:f3:c3:f5:8e:5d:62:6d:c5:7b:a1:7d:af:73: a2:84:87:ee:23:d3:91:96:9c:47:27:47:09:7b:96:9a:74:32: c3:85:55:50:e8:02:8e:53:d7:cc:f2:0f:1f:1c:33:bc:54:7d: 68:a8:f0:5d:72:90:67:54:75:16:5d:d9:d0:0c:00:3c:64:ae: 0e:a2:4d:e8:63:e0:0d:15:9b:1a:d2:3d:61:76:20:af:08:38: d2:43:50:28:f0:87:92:d4:b0:68:90:f6:04:ee:2d:8e:4d:31: 51:5e:d9:0c:ae:fc:3e:4f:9d:8e:1d:b7:9b:6f:e3:19:9a:3c: a9:37:05:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTEwMTkxMDU3MjFaFw0yNTEwMjYxMDU3MjFaMBgxFjAUBgNV BAMTDTY4ZjRjNDExLTNmNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4Y9Lb4rSKqPSX3Qe3NTU+7ZC1+RYXOiY16rphI2kaKNPbeIJ169j701jhEuKI hFbjfG3NYrCSqE7HMS8nKg1sbxiaZ9cHThqlvpJotlFaP4aZbtfW4JEhTNrZsUiu 9F8HVHqBc09/aMZHQHVAwg5VBo0K/9HC3yieXHYiFibmiSguDM5iRo9DdGsdZUat McJcwlR1TvQc+06vU9gTH/umpQjJWDONLSbJLuE3XN3CfskkJsOv+vjIhVLXQd8X 3YFh2Z2OtZlNd5UreKHWus/teCQNK2/5eb0mkM9M/+nvPX+pkktisp3GFIp3SYP+ p5xXRZ0g8lbCcIIFJlAHKxatAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2qaZKosq 3S8rfNL2NqgZJagveXYwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OTBGL0QzNUFDNjNFNTRBRTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhr dTB3cmw0OWtuMFljNmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOPSyWtZdEcu85uY2uZTteybwBmWSmKyXjZf/kUqrqSrFZsAeExBZlf+ H4qbSBqTnvk0T2Dc5cUeSLYx2pu+TIdRiWLxggvRxcLfTDjNBc1rcznNbtaD/iB0 miCibTFN3cJb56RaiGPLCsjJID7MN7in4J/TiLUp92HiR+X5yhsFmDX788P1jl1i bcV7oX2vc6KEh+4j05GWnEcnRwl7lpp0MsOFVVDoAo5T18zyDx8cM7xUfWio8F1y kGdUdRZd2dAMADxkrg6iTehj4A0VmxrSPWF2IK8IONJDUCjwh5LUsGiQ9gTuLY5N MVFe2Qyu/D5PnY4dt5tv4xmaPKk3BXw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:35 2025 by rpki-client