$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: xQR823/1KTXuo72Qsn8V/JK+BuiqItpWg5nNmviNFRw= Subject key identifier: B1:07:2E:79:EB:63:45:44:F8:42:D6:B3:95:72:62:B5:10:C3:30:81 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 18 Signing time: Mon 11 Aug 2025 08:14:00 +0000 Manifest this update: Mon 11 Aug 2025 08:14:00 +0000 Manifest next update: Mon 18 Aug 2025 08:14:00 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: lfdqXnpn1t78Z4DcY9ijmUrY84YufOAvC5i0jHTNgqA=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Aug 11 08:14:00 2025 GMT Not After : Aug 18 08:14:00 2025 GMT Subject: CN=6899a648-6f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:a7:83:09:9f:a7:9f:3c:d9:e9:26:93:4f: ac:14:2b:ab:cd:3f:ee:42:be:d1:22:88:46:f3:8c: 5f:ce:d7:5e:b5:5f:ff:bf:fb:79:82:02:a6:34:e5: fe:34:8f:e6:df:10:f8:ac:85:a6:82:ec:dc:97:ba: 53:f7:50:90:91:94:60:c6:29:f5:30:11:99:fc:5c: 58:83:db:e8:0f:1d:6e:3f:03:f3:8b:9d:5a:6b:9d: a2:80:0a:b1:73:89:bc:a4:65:d7:eb:65:04:1a:76: 13:89:68:6a:d7:97:88:b2:18:7c:1a:81:cd:91:ff: 01:c5:73:9f:98:3b:39:62:3b:7f:88:fd:ea:78:70: c6:db:d2:3a:14:74:f3:5b:d9:76:77:b1:20:c3:39: 1c:c5:d0:4c:6e:a4:b4:c1:18:bc:fc:16:4e:34:f3: a8:a0:19:fa:0b:81:14:b9:a0:55:f3:8e:4e:a0:89: e2:c4:5e:ae:e5:f9:7d:e9:09:49:96:53:a4:d6:03: 10:27:1b:7b:3c:26:48:72:65:9f:85:28:fd:4b:82: 77:bb:5d:d9:43:71:6e:4d:e7:75:f7:4f:5c:88:ce: 29:48:56:d8:80:c2:45:d3:f2:08:a6:8c:71:18:cf: 59:79:b2:73:ac:6b:df:56:c6:5a:4b:20:c7:43:22: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:07:2E:79:EB:63:45:44:F8:42:D6:B3:95:72:62:B5:10:C3:30:81 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d7:78:0d:ef:a1:42:f1:00:b3:e5:79:1e:cd:fb:bf:8b:70: 53:6b:36:72:16:49:47:3c:51:f7:6b:ac:26:ad:2a:5e:c7:a4: 94:18:7e:38:20:5f:51:af:1a:6b:c5:0b:bd:57:11:df:22:e1: 52:e2:2a:69:a1:e9:cb:7e:dc:6b:65:43:94:58:cd:c4:1d:58: ba:38:d5:d5:b8:a2:f5:71:b0:72:7f:bb:29:0c:ec:bc:85:7d: 72:bf:70:03:f7:0b:55:a0:6b:c0:0c:14:64:4a:a1:98:44:28: ad:29:26:f6:a5:62:8c:19:65:48:a0:78:02:d8:73:f9:ba:c2: 0f:46:d3:40:d8:5a:8d:8c:5a:c5:75:ea:9d:93:fc:a2:fb:d3: 04:3b:21:9d:03:7f:d0:df:8d:cf:db:4d:97:5c:bf:1a:e8:3d: 20:93:c1:20:54:93:24:7e:ec:e3:c6:d3:f7:e2:c0:59:f9:27: 7a:f3:b8:fc:20:f8:29:2e:1c:00:46:22:ec:7f:c8:5d:5a:6d: 6f:d5:c8:e2:51:d7:47:1b:9d:3d:99:74:89:1b:c1:be:66:94: c6:5f:4f:6b:77:fd:dc:7c:02:02:a0:6a:ae:3b:e0:69:1c:1a: 8c:54:88:0e:a8:c2:6d:36:91:de:ca:9e:23:e9:bb:33:95:7a: 16:07:5c:e8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTA4MTEwODE0MDBaFw0yNTA4MTgwODE0MDBaMBgxFjAUBgNV BAMTDTY4OTlhNjQ4LTZmOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjzKeDCZ+nnzzZ6SaTT6wUK6vNP+5CvtEiiEbzjF/O1161X/+/+3mCAqY05f40 j+bfEPishaaC7NyXulP3UJCRlGDGKfUwEZn8XFiD2+gPHW4/A/OLnVprnaKACrFz ibykZdfrZQQadhOJaGrXl4iyGHwagc2R/wHFc5+YOzliO3+I/ep4cMbb0joUdPNb 2XZ3sSDDORzF0ExupLTBGLz8Fk4086igGfoLgRS5oFXzjk6gieLEXq7l+X3pCUmW U6TWAxAnG3s8JkhyZZ+FKP1Lgne7XdlDcW5N53X3T1yIzilIVtiAwkXT8gimjHEY z1l5snOsa99WxlpLIMdDIohfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsQcueetj RUT4QtazlXJitRDDMIEwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OTBGL0QzNUFDNjNFNTRBRTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhr dTB3cmw0OWtuMFljNmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMjXeA3voULxALPleR7N+7+LcFNrNnIWSUc8UfdrrCatKl7HpJQYfjgg X1GvGmvFC71XEd8i4VLiKmmh6ct+3GtlQ5RYzcQdWLo41dW4ovVxsHJ/uykM7LyF fXK/cAP3C1Wga8AMFGRKoZhEKK0pJvalYowZZUigeALYc/m6wg9G00DYWo2MWsV1 6p2T/KL70wQ7IZ0Df9Dfjc/bTZdcvxroPSCTwSBUkyR+7OPG0/fiwFn5J3rzuPwg +CkuHABGIux/yF1abW/VyOJR10cbnT2ZdIkbwb5mlMZfT2t3/dx8AgKgaq474Gkc GoxUiA6owm02kd7KniPpuzOVehYHXOg= -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:58 2025 by rpki-client