$ rpki-client -vvvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: bkAB7EIzA6HdtWZdhC3If9+OpcC/Fh7kuVh5F4/1ZV8= Subject key identifier: B7:FD:42:22:B9:E9:90:1F:1F:CB:A2:32:49:E3:F0:2E:80:86:90:5E Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: F5 Signing time: Tue 13 Oct 2026 06:58:53 +0000 Manifest this update: Tue 13 Oct 2026 06:58:52 +0000 Manifest next update: Tue 20 Oct 2026 06:58:52 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: UZsNfsR4uyB0zNnuYcfD5mbmPRyLost1Vi3Enwh6qvc=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 06:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Oct 13 06:58:52 2026 GMT Not After : Oct 20 06:58:52 2026 GMT Subject: CN=6acdd6ac-1ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:dd:24:f8:6b:53:16:03:ec:85:9a:8b:3b:3d: 62:a6:96:0e:77:6d:38:0d:a1:03:61:20:73:d9:63: 3c:f6:01:12:af:ec:54:5c:da:87:a2:57:25:39:5b: 86:ae:a2:6a:ff:a0:e5:48:80:a5:c4:b0:ed:d0:1b: ec:be:b5:ea:da:fc:4c:e5:22:9e:31:16:b2:4b:c2: 1e:1f:85:da:c5:19:7f:16:b2:78:a8:b0:6b:9d:d6: 84:a0:5b:0f:c3:b2:52:88:20:89:72:20:23:17:9b: a4:e2:06:0f:d3:13:e5:c1:86:90:d4:2e:e3:30:64: 6d:03:38:52:5d:b7:cf:1e:da:4b:cd:b3:e3:7e:ea: ca:bd:88:bb:44:8b:15:5c:7d:f3:b7:7a:00:7f:72: a4:76:fe:11:f4:a5:eb:da:ef:4a:0b:88:53:28:25: 29:2d:1d:bf:18:98:94:25:9b:e0:4d:0d:97:22:68: 07:51:ab:e7:d5:00:98:cd:7e:42:6d:30:a4:7b:78: 3f:0e:5c:66:b2:4b:ad:4d:d4:1f:cd:ff:65:0d:74: 42:7b:dd:64:64:33:f5:94:93:58:22:3e:86:44:50: 3e:d8:2f:79:18:87:09:10:fe:6d:a1:41:07:45:f5: 7e:24:7c:9e:e4:ce:c9:68:1b:ee:1a:6a:f7:73:e0: 3a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FD:42:22:B9:E9:90:1F:1F:CB:A2:32:49:E3:F0:2E:80:86:90:5E X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:58:0a:aa:e7:e4:67:96:a0:6e:db:15:8e:6c:ab:e1:73:42: 41:41:c0:74:99:7f:ea:04:f2:34:f8:37:b2:0a:3f:4e:06:45: 5d:89:ec:e6:11:0b:08:fe:f3:aa:f6:7c:95:8a:f9:71:de:1c: 1b:de:d1:5c:a4:c0:3a:d1:84:a7:64:ec:d2:9a:36:1d:ab:a3: 36:4b:4b:19:16:e3:b5:97:e8:7f:05:55:60:ea:a0:66:79:52: 8c:38:97:51:6d:b4:22:d7:35:19:4b:21:51:8b:4b:77:62:7c: 18:59:a5:eb:3d:0c:dc:07:86:fe:cc:3b:8b:bb:92:0d:26:67: 72:82:d2:28:2c:f4:56:51:79:14:95:1b:d9:e9:51:a1:a4:36: f3:77:3f:dc:a5:90:77:90:c7:c0:64:32:47:c1:ef:ed:d3:bf: 7d:c2:a9:7e:cb:1c:48:39:7a:32:50:8f:bc:bb:00:46:31:cf: 31:51:5b:a6:0f:2e:57:93:9a:69:31:62:5f:2c:0a:94:48:95: b8:08:79:d5:f2:a7:9f:1d:78:2c:50:23:4b:29:aa:49:cc:2b: 0a:f5:ad:1e:10:05:4c:9c:b0:cd:5d:4d:3f:83:97:a5:24:e3: 53:a5:98:24:6d:ce:c5:a4:6a:3f:b8:88:92:59:d5:13:cb:cc: 9c:aa:f4:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYxMDEzMDY1ODUyWhcNMjYxMDIwMDY1ODUyWjAYMRYwFAYD VQQDEw02YWNkZDZhYy0xZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6N0k+GtTFgPshZqLOz1ippYOd204DaEDYSBz2WM89gESr+xUXNqHolclOVuG rqJq/6DlSIClxLDt0BvsvrXq2vxM5SKeMRayS8IeH4XaxRl/FrJ4qLBrndaEoFsP w7JSiCCJciAjF5uk4gYP0xPlwYaQ1C7jMGRtAzhSXbfPHtpLzbPjfurKvYi7RIsV XH3zt3oAf3Kkdv4R9KXr2u9KC4hTKCUpLR2/GJiUJZvgTQ2XImgHUavn1QCYzX5C bTCke3g/DlxmskutTdQfzf9lDXRCe91kZDP1lJNYIj6GRFA+2C95GIcJEP5toUEH RfV+JHye5M7JaBvuGmr3c+A6jQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLf9QiK5 6ZAfH8uiMknj8C6AhpBeMB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWho a3Uwd3JsNDlrbjBZYzZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEVgKqufkZ5agbtsVjmyr4XNCQUHAdJl/6gTyNPg3sgo/TgZFXYns5hELCP7z qvZ8lYr5cd4cG97RXKTAOtGEp2Ts0po2HaujNktLGRbjtZfofwVVYOqgZnlSjDiX UW20Itc1GUshUYtLd2J8GFml6z0M3AeG/sw7i7uSDSZncoLSKCz0VlF5FJUb2elR oaQ283c/3KWQd5DHwGQyR8Hv7dO/fcKpfsscSDl6MlCPvLsARjHPMVFbpg8uV5Oa aTFiXywKlEiVuAh51fKnnx14LFAjSymqScwrCvWtHhAFTJywzV1NP4OXpSTjU6WY JG3OxaRqP7iIklnVE8vMnKr0qg== -----END CERTIFICATE-----Generated at Thu Oct 15 08:13:37 2026 by rpki-client