$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft File: NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json) Hash identifier: 67Pk3UrHmoAY7qaLuZvSDCCXlwZzBDXFg/yOSOjattg= Subject key identifier: AD:41:D5:EA:D0:41:8D:00:C9:CC:1A:CC:E7:16:19:AF:0D:55:48:2D Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft Manifest number: 0A Signing time: Sat 23 Aug 2025 08:21:52 +0000 Manifest this update: Sat 23 Aug 2025 08:21:52 +0000 Manifest next update: Sat 30 Aug 2025 08:21:52 +0000 Files and hashes: 1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: 3ja2Q6ltPy4IIvun9zqyo5tTtJKGu7tzY63GToJFRY4=) 2: A34995A0733611F08B36357EC4F9AE02.roa (hash: DNeQ3aExMNnXkQv8BbuT6dDsTINDHvSinFiupC0OEnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Validity Not Before: Aug 23 08:21:52 2025 GMT Not After : Aug 30 08:21:52 2025 GMT Subject: CN=68a97a20-5ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:d3:35:fd:2d:d3:41:12:e7:12:ee:db:9a: e4:f5:68:19:ea:23:ed:c8:ec:4b:54:37:1a:ce:c0: c5:1a:d3:85:4e:1f:c4:33:03:be:13:e3:7f:69:2a: cc:e0:63:9d:a0:75:98:be:1d:4e:83:f4:92:b5:73: e7:57:ba:ab:eb:66:8b:2b:62:1b:bb:69:d8:63:f7: c2:6a:11:d9:fa:9d:98:e1:17:b2:9f:6d:11:87:96: f8:25:b6:08:cb:d6:f6:c0:50:c3:48:66:4a:cc:47: 04:15:7b:f2:bf:b2:e2:f1:46:44:14:b8:54:c8:39: af:aa:15:61:f4:93:81:e6:39:09:ad:3d:4e:51:d5: e3:90:1b:85:8d:20:a5:e3:97:59:51:a1:7a:53:db: bc:5b:e4:47:97:69:56:96:a9:96:48:35:6f:f5:cc: c1:5c:16:94:ad:ab:f0:6e:d2:98:3e:ae:1a:bb:94: 4b:3b:9d:f5:0f:08:2f:db:80:6e:b4:ac:da:5b:e9: 97:59:52:59:03:2e:b7:21:90:d6:bf:d5:0a:b3:f6: 96:60:14:38:30:d7:0d:94:66:31:07:61:c9:30:8a: cd:0b:fc:2f:b9:c4:0f:6c:30:68:9f:0c:85:c4:f8: 2b:70:1f:f4:60:15:1c:9a:b1:a3:af:47:b5:d2:07: 77:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:41:D5:EA:D0:41:8D:00:C9:CC:1A:CC:E7:16:19:AF:0D:55:48:2D X509v3 Authority Key Identifier: keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:e3:5c:eb:f9:e6:36:5f:b7:4f:9f:cf:e4:6b:97:d6:13:d2: e2:dd:61:4f:e5:e7:95:ba:67:94:09:d8:91:55:b9:36:95:e2: 79:3c:8b:fb:a1:d2:b5:f5:45:db:89:7a:85:96:cb:33:10:c1: f2:a1:49:9a:38:7f:d6:07:e8:83:d7:94:99:e0:95:2d:65:38: 39:b3:36:d5:3f:79:04:2d:9e:c0:9c:f3:63:15:9c:2c:8a:c4: 97:6a:0c:27:eb:81:57:90:64:aa:fa:c0:18:1e:13:d3:b3:01: a7:49:9c:4c:cb:7c:ae:ef:6f:73:5a:89:50:b9:2f:b9:eb:9c: c8:e3:e8:ae:58:e9:7d:eb:ea:eb:71:e9:90:5b:ea:aa:23:60: ab:11:72:6e:1e:87:b2:08:2c:b9:27:b6:3f:3c:44:ac:62:cf: 26:8d:d1:0d:9d:df:8d:61:74:77:da:b8:73:74:f9:fb:24:9d: 58:76:fc:bf:3c:98:da:a3:4d:a3:a0:89:f3:4f:74:45:b3:c5: ac:9d:37:08:00:e1:2b:0a:00:24:b6:95:2b:fc:57:02:63:50: 72:e4:b3:70:e3:4d:b4:16:60:a4:42:1a:0e:32:3c:3b:30:db: ce:86:42:b3:e5:8f:40:b8:f8:41:ea:2b:df:e3:31:84:14:69: d4:c9:b7:62 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0IzNjExMC8GA1UEBRMoMzQzNTRDRkNEQTIyOTg1MTYxQjVFQjYyOEI1NDkzRkRE MkU5NkMzQjAeFw0yNTA4MjMwODIxNTJaFw0yNTA4MzAwODIxNTJaMBgxFjAUBgNV BAMTDTY4YTk3YTIwLTVlY2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+hdM1/S3TQRLnEu7bmuT1aBnqI+3I7EtUNxrOwMUa04VOH8QzA74T439pKszg Y52gdZi+HU6D9JK1c+dXuqvrZosrYhu7adhj98JqEdn6nZjhF7KfbRGHlvgltgjL 1vbAUMNIZkrMRwQVe/K/suLxRkQUuFTIOa+qFWH0k4HmOQmtPU5R1eOQG4WNIKXj l1lRoXpT27xb5EeXaVaWqZZINW/1zMFcFpStq/Bu0pg+rhq7lEs7nfUPCC/bgG60 rNpb6ZdZUlkDLrchkNa/1Qqz9pZgFDgw1w2UZjEHYckwis0L/C+5xA9sMGifDIXE +CtwH/RgFRyasaOvR7XSB3fhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrUHV6tBB jQDJzBrM5xYZrw1VSC0wHwYDVR0jBBgwFoAUNDVM/NoimFFhtetii1ST/dLpbDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQjM2L0M2RDREMEJDNzMz NTExRjA5Q0M1OTQ1MUM0RjlBRTAyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJE cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRWTV9Ob2ltRkZodGV0aWkxU1RfZExwYkRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QjM2L0M2RDREMEJDNzMzNTExRjA5Q0M1OTQ1MUM0RjlBRTAyL05EVk1fTm9pbUZG aHRldGlpMVNUX2RMcGJEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAILjXOv55jZft0+fz+Rrl9YT0uLdYU/l55W6Z5QJ2JFVuTaV4nk8i/uh 0rX1RduJeoWWyzMQwfKhSZo4f9YH6IPXlJnglS1lODmzNtU/eQQtnsCc82MVnCyK xJdqDCfrgVeQZKr6wBgeE9OzAadJnEzLfK7vb3NaiVC5L7nrnMjj6K5Y6X3r6utx 6ZBb6qojYKsRcm4eh7IILLkntj88RKxizyaN0Q2d341hdHfauHN0+fsknVh2/L88 mNqjTaOgifNPdEWzxaydNwgA4SsKACS2lSv8VwJjUHLks3DjTbQWYKRCGg4yPDsw 286GQrPlj0C4+EHqK9/jMYQUadTJt2I= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:53 2025 by rpki-client