$ rpki-client -vvf rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft File: NDVM_NoimFFhtetii1ST_dLpbDs.mft (raw, json) Hash identifier: 3BBDzYohukjKQ+PxLAwWeoKU4k//viZWkfukK1QzFt0= Subject key identifier: 06:E9:BD:A0:A5:18:C7:52:05:6E:B5:2A:25:8C:44:7B:06:91:47:8E Authority key identifier: 34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B Certificate issuer: /CN=A915CB36/serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft Manifest number: 2B Signing time: Sun 19 Oct 2025 11:16:17 +0000 Manifest this update: Sun 19 Oct 2025 11:16:16 +0000 Manifest next update: Sun 26 Oct 2025 11:16:16 +0000 Files and hashes: 1: NDVM_NoimFFhtetii1ST_dLpbDs.crl (hash: i9uS4AOiOHvkzqzDSBcfyXv5YkCk3S5E1TadjROfdsk=) 2: A34995A0733611F08B36357EC4F9AE02.roa (hash: 3gyKIBhhVCuLkaaGqX6IUF1yiNlF1HDxwo5W0jFJsGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CB36, serialNumber=34354CFCDA22985161B5EB628B5493FDD2E96C3B Validity Not Before: Oct 19 11:16:16 2025 GMT Not After : Oct 26 11:16:16 2025 GMT Subject: CN=68f4c881-e41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:7e:94:fe:99:0c:59:37:6d:a5:57:38:41: f8:e1:ec:a2:00:29:02:b2:22:8a:ee:e7:72:93:a8: e3:1e:3a:32:a7:a4:4a:65:c9:4d:9d:54:b4:c8:7f: 02:20:7b:f8:54:83:39:94:6a:a0:3d:af:82:0a:ac: 96:c9:69:68:7c:60:80:59:a5:4b:e2:6c:fb:27:0c: 84:a8:90:9d:e9:95:d8:e2:1b:36:0f:d1:7f:9a:ea: ac:64:47:a9:83:c0:3b:ca:10:6c:59:22:87:a3:93: 4c:dc:83:51:7f:91:7b:d4:35:02:8c:f8:9f:a0:cc: 5e:b2:15:c9:d2:e7:88:d8:ce:2d:da:6a:1d:f9:81: 81:59:4c:77:5c:5e:52:a3:f4:62:e4:ca:64:ed:77: 71:51:20:ab:d7:6e:a2:cc:aa:c4:7f:ff:34:f5:a5: 5c:f0:7b:f1:05:63:41:bb:19:0d:a2:a2:40:7f:cb: e2:c1:35:9c:5a:ca:c1:9b:30:93:6e:02:c6:aa:b2: 4b:0e:3c:d3:89:47:8d:0a:08:4a:59:9f:99:cf:8c: d9:07:5f:09:ec:bf:95:b4:13:ba:48:a6:1c:f1:f2: 50:4d:15:88:b6:e2:41:bf:54:89:25:ca:6f:dd:cf: e9:83:39:a3:a0:b4:d8:a4:8a:82:2f:6b:9f:d7:12: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E9:BD:A0:A5:18:C7:52:05:6E:B5:2A:25:8C:44:7B:06:91:47:8E X509v3 Authority Key Identifier: keyid:34:35:4C:FC:DA:22:98:51:61:B5:EB:62:8B:54:93:FD:D2:E9:6C:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDVM_NoimFFhtetii1ST_dLpbDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CB36/C6D4D0BC733511F09CC59451C4F9AE02/NDVM_NoimFFhtetii1ST_dLpbDs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fe:0c:e7:c2:70:3e:38:02:5d:f2:b0:1a:26:90:62:00:cd: e0:72:71:08:9d:f8:a4:28:fa:bb:87:3f:62:5c:99:51:2a:da: d6:4b:d8:92:85:af:bd:ec:22:f3:4c:5e:98:e0:7a:49:d1:aa: 1c:e0:82:68:b8:b7:a5:d6:92:55:9f:09:22:12:ad:a5:78:01: 02:a7:1d:ac:64:c9:cf:f4:cf:30:ac:76:b4:03:1a:c7:ac:63: d4:ee:cf:e5:66:04:1c:6b:d4:38:e2:f3:77:06:3b:62:d3:46: ac:b9:6a:b8:07:3e:02:d4:a8:e2:66:1e:13:1c:7b:bb:12:3e: 93:1c:4f:19:51:52:13:a0:03:41:ba:26:6c:31:60:b3:de:68: 7e:3a:aa:68:dd:ed:8d:ec:c2:14:2d:5c:9f:d7:4a:0c:7a:de: 0c:89:6a:f6:78:b8:7c:c8:d7:f8:58:1e:33:d5:9d:a9:ad:86: 2a:27:4d:1b:e9:80:4f:99:e5:28:9b:3a:0f:c6:20:62:8e:de: 86:02:81:f5:87:ed:9c:d7:37:a6:a1:64:a8:63:b6:e3:14:d7: c3:6e:7a:46:29:fb:c8:6c:95:61:47:ee:a1:99:36:af:23:6c: f4:6d:f2:6a:89:bf:50:24:b3:dd:8d:8f:9e:a7:d1:df:f7:1c: 49:b8:18:03 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0IzNjExMC8GA1UEBRMoMzQzNTRDRkNEQTIyOTg1MTYxQjVFQjYyOEI1NDkzRkRE MkU5NkMzQjAeFw0yNTEwMTkxMTE2MTZaFw0yNTEwMjYxMTE2MTZaMBgxFjAUBgNV BAMTDTY4ZjRjODgxLWU0MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Mn6U/pkMWTdtpVc4Qfjh7KIAKQKyIoru53KTqOMeOjKnpEplyU2dVLTIfwIg e/hUgzmUaqA9r4IKrJbJaWh8YIBZpUvibPsnDISokJ3pldjiGzYP0X+a6qxkR6mD wDvKEGxZIoejk0zcg1F/kXvUNQKM+J+gzF6yFcnS54jYzi3aah35gYFZTHdcXlKj 9GLkymTtd3FRIKvXbqLMqsR//zT1pVzwe/EFY0G7GQ2iokB/y+LBNZxaysGbMJNu AsaqsksOPNOJR40KCEpZn5nPjNkHXwnsv5W0E7pIphzx8lBNFYi24kG/VIklym/d z+mDOaOgtNikioIva5/XEoazAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBum9oKUY x1IFbrUqJYxEewaRR44wHwYDVR0jBBgwFoAUNDVM/NoimFFhtetii1ST/dLpbDsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQjM2L0M2RDREMEJDNzMz NTExRjA5Q0M1OTQ1MUM0RjlBRTAyL05EVk1fTm9pbUZGaHRldGlpMVNUX2RMcGJE cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRWTV9Ob2ltRkZodGV0aWkxU1RfZExwYkRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QjM2L0M2RDREMEJDNzMzNTExRjA5Q0M1OTQ1MUM0RjlBRTAyL05EVk1fTm9pbUZG aHRldGlpMVNUX2RMcGJEcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJr+DOfCcD44Al3ysBomkGIAzeBycQid+KQo+ruHP2JcmVEq2tZL2JKF r73sIvNMXpjgeknRqhzggmi4t6XWklWfCSISraV4AQKnHaxkyc/0zzCsdrQDGses Y9Tuz+VmBBxr1Dji83cGO2LTRqy5argHPgLUqOJmHhMce7sSPpMcTxlRUhOgA0G6 JmwxYLPeaH46qmjd7Y3swhQtXJ/XSgx63gyJavZ4uHzI1/hYHjPVnamthionTRvp gE+Z5SibOg/GIGKO3oYCgfWH7ZzXN6ahZKhjtuMU18NuekYp+8hslWFH7qGZNq8j bPRt8mqJv1Aks92Nj56n0d/3HEm4GAM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:15:39 2025 by rpki-client