$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: h1nm9NX0jjuzNvZixcN3zRSwSMLAoI2bb6tHh77/9tU= Subject key identifier: B1:46:B7:06:83:19:D2:F6:9F:33:5C:3A:6A:7F:C2:85:EC:6D:D4:0C Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 7F Signing time: Sun 01 Mar 2026 08:59:41 +0000 Manifest this update: Sun 01 Mar 2026 08:59:41 +0000 Manifest next update: Sun 08 Mar 2026 08:59:41 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: uiHWn45Ny7qQge9dtO97tKooJejWEspYoxbVeuAwt44=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: hHYSoks3N580H/sZ6fmFRM6go8LEkil7hnIQ/XlH+xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Mar 1 08:59:41 2026 GMT Not After : Mar 8 08:59:41 2026 GMT Subject: CN=69a3fffd-423e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:85:ed:6c:fc:fd:1a:87:cd:08:93:ac:c9: 02:af:06:da:cf:5c:8c:1f:81:41:d1:4e:89:7a:86: f3:c1:b5:ec:7c:f6:ed:3a:39:eb:b1:34:3d:94:e7: c8:ed:0a:81:15:e7:5e:5d:0e:7f:35:91:61:ad:9a: 2e:7f:cb:3d:6c:a9:fd:c7:6b:94:d1:c5:4b:c6:25: f9:e0:2d:f2:cf:05:f8:50:83:e4:95:21:3a:b9:5b: ac:9a:cb:63:c6:ee:60:5e:f5:75:46:a3:a6:0b:02: 64:0e:78:e9:4d:7c:ec:5a:5a:ca:29:83:47:fc:7e: 76:5d:c0:9b:48:e4:a0:1e:ae:05:9d:4b:28:d9:6e: 12:c7:58:ed:de:33:3e:8c:69:07:6b:d9:68:cd:43: 32:7b:6c:53:e5:d9:93:96:66:11:62:82:93:1d:2b: 2b:bc:96:35:d7:4f:71:b4:19:24:82:2a:df:7b:cd: e3:16:ae:e7:8c:88:a2:1b:b3:d7:99:dd:0f:6f:23: 39:c2:64:7f:3e:f7:ff:c7:da:29:a1:0e:20:ee:d2: 8f:0f:79:e7:14:8b:16:7e:db:c7:8d:54:eb:dc:98: 62:d0:5a:a8:3d:86:39:5b:e9:2d:45:3b:55:46:f6: 7b:7b:69:e7:55:01:92:4d:0c:44:59:75:fd:a1:61: 87:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:B7:06:83:19:D2:F6:9F:33:5C:3A:6A:7F:C2:85:EC:6D:D4:0C X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:dc:48:c0:07:ce:0d:1b:b7:24:38:db:47:7e:cc:6e:76:6b: 3b:db:51:f5:c4:2c:3c:4f:04:c9:c9:32:96:3a:04:4b:cb:54: b5:b9:92:27:9c:81:f3:51:8b:01:26:ea:d1:61:c4:62:e0:69: 93:b9:a6:aa:e2:1c:54:8b:c4:d0:55:25:21:28:a7:fb:8e:4b: c0:5e:d7:db:e7:87:3b:87:ef:c2:83:cd:b3:74:61:f7:30:ff: fa:be:78:a3:70:8e:90:36:61:30:7c:de:6e:90:00:e7:73:c7: d1:4f:ca:6b:1b:ee:df:a4:8a:7e:5e:98:04:ea:17:56:02:29: 41:bb:b8:23:71:36:1a:34:4f:f8:0a:82:95:68:51:ee:4c:f2: 30:60:00:f4:83:f3:bb:a1:92:66:e5:fa:74:1b:f2:ac:4a:53: 75:58:1b:83:25:e4:e5:69:a8:fa:d9:f6:eb:61:4c:74:df:35: b6:34:ba:55:74:0f:12:46:da:d2:a3:b3:39:b4:74:28:f3:96: 22:29:8a:ab:cd:e2:27:4c:b1:80:71:12:a7:22:63:4e:11:ce: 60:a3:27:40:d1:7a:01:73:d1:81:80:36:9a:d2:6b:50:aa:55: 9f:6e:6d:97:29:57:fb:83:b5:c0:3e:d5:32:9a:50:b8:3f:85: 3f:8d:13:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYwMzAxMDg1OTQxWhcNMjYwMzA4MDg1OTQxWjAYMRYwFAYD VQQDEw02OWEzZmZmZC00MjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1EqF7Wz8/RqHzQiTrMkCrwbaz1yMH4FB0U6JeobzwbXsfPbtOjnrsTQ9lOfI 7QqBFedeXQ5/NZFhrZouf8s9bKn9x2uU0cVLxiX54C3yzwX4UIPklSE6uVusmstj xu5gXvV1RqOmCwJkDnjpTXzsWlrKKYNH/H52XcCbSOSgHq4FnUso2W4Sx1jt3jM+ jGkHa9lozUMye2xT5dmTlmYRYoKTHSsrvJY1109xtBkkgirfe83jFq7njIiiG7PX md0PbyM5wmR/Pvf/x9opoQ4g7tKPD3nnFIsWftvHjVTr3Jhi0FqoPYY5W+ktRTtV RvZ7e2nnVQGSTQxEWXX9oWGHbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLFGtwaD GdL2nzNcOmp/woXsbdQMMB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWho a3Uwd3JsNDlrbjBZYzZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXNxIwAfODRu3JDjbR37MbnZrO9tR9cQsPE8EyckyljoES8tUtbmSJ5yB81GL ASbq0WHEYuBpk7mmquIcVIvE0FUlISin+45LwF7X2+eHO4fvwoPNs3Rh9zD/+r54 o3COkDZhMHzebpAA53PH0U/Kaxvu36SKfl6YBOoXVgIpQbu4I3E2GjRP+AqClWhR 7kzyMGAA9IPzu6GSZuX6dBvyrEpTdVgbgyXk5Wmo+tn262FMdN81tjS6VXQPEkba 0qOzObR0KPOWIimKq83iJ0yxgHESpyJjThHOYKMnQNF6AXPRgYA2mtJrUKpVn25t lylX+4O1wD7VMppQuD+FP40TJA== -----END CERTIFICATE-----Generated at Mon Mar 2 18:24:53 2026 by rpki-client