$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: ME4FZzkhgKNuJJQmUc3oWJCtZIaGkUfeQ1CLgtSx1c0= Subject key identifier: C8:2A:5D:92:83:EA:37:9A:FD:E5:63:EB:CC:E5:76:F3:10:49:B8:F0 Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 0922 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 0902 Signing time: Tue 04 Nov 2025 20:39:39 +0000 Manifest this update: Tue 04 Nov 2025 20:39:38 +0000 Manifest next update: Tue 11 Nov 2025 20:39:38 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: s5jSoNJOvqwPbTb+oR58RnblLziUX3SU0rozYtbGnjs=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: UE5+ErJEcnaRAzrTj0O4uJaAR4eaT67kWYQs9QGi9rM=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: LDyZCEh4lHkU/m1TvJhILb1LRL3feZ7tdaVfK9q/FJE=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: d9vZgZrOvFQ4TRJSBIsKc/8yFGao6z4V3n1WpvXvkS8=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: UMY2SMXz/mJaifHHi29M/g1LYVd8AUhMyEaWSsVqYYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:39:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2338 (0x922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: Nov 4 20:39:38 2025 GMT Not After : Nov 11 20:39:38 2025 GMT Subject: CN=690a648b-5758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:22:17:6c:8d:c7:94:c1:3b:f0:47:56:d8: ec:2b:e0:4d:b2:11:1a:50:87:94:ce:64:eb:4e:65: 8a:c5:7e:dc:91:25:f3:99:d7:94:8a:96:e0:12:93: a3:ba:36:02:56:b5:01:da:dd:24:b6:3f:b2:a6:b8: a8:67:e2:0b:90:c1:8a:c5:7f:3b:61:b9:dd:8d:51: 37:cf:65:86:fa:9c:d9:e4:b1:bf:bb:86:79:85:1b: 52:20:ff:6e:67:8e:46:38:2d:d4:b7:d9:a4:9a:31: 44:ca:19:f7:a5:d6:a2:53:e3:7b:49:df:95:86:c5: cc:83:c3:60:53:c8:84:b5:31:db:3c:de:2c:60:84: 83:36:12:c8:12:6c:b4:fb:aa:77:ab:5e:63:33:57: b4:4c:64:7a:ff:30:83:e1:84:7a:99:f3:d4:57:29: 5c:10:19:49:16:67:30:23:a2:6d:a5:49:53:61:93: 17:7e:6e:1d:96:a2:77:5c:5a:cd:83:e3:3c:d5:a6: 28:c9:36:6e:3d:09:be:be:c1:7c:94:10:f1:50:35: a2:5d:85:b4:30:b6:a2:d2:b6:74:60:ff:90:10:80: b3:f7:f1:f9:b2:81:c8:8a:72:1a:f0:64:a0:d5:f6: 6f:6f:bc:e1:58:85:31:ab:52:43:85:45:e2:7e:d9: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2A:5D:92:83:EA:37:9A:FD:E5:63:EB:CC:E5:76:F3:10:49:B8:F0 X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:fd:da:cd:45:13:bd:5e:74:36:75:b3:dd:79:d7:5f:e3:27: cc:bb:69:45:47:f9:64:d4:87:f3:47:05:51:24:b0:06:03:f3: 7a:8d:3d:22:66:8b:25:1d:11:5e:9a:d9:6f:7f:b9:ab:54:48: 8b:54:55:be:e1:f0:c1:88:1e:14:6f:b8:49:bf:fc:18:b7:d1: 72:c3:12:a4:e7:fe:04:01:f4:eb:0f:1d:62:13:8a:ec:72:f4: 8f:89:bf:35:12:1c:a6:f1:c3:ef:1c:2f:b8:e5:47:3f:84:d6: 0d:be:d3:68:45:ad:b7:0f:bd:53:fb:c7:fc:97:0e:76:38:c3: 57:22:9b:be:70:87:d4:46:ac:09:15:b1:85:8d:75:8b:3a:1c: 96:b7:ee:8e:80:9b:ef:3c:a3:2b:41:c4:41:ef:93:66:c3:c8: d4:22:12:a9:04:0d:cd:68:42:aa:a2:a0:ce:13:3a:c8:44:32: eb:10:e8:56:6d:d6:29:36:f4:04:84:b6:94:52:bc:ee:80:3e: a0:51:bb:04:61:a0:56:a4:39:5f:3a:a3:02:9d:66:cf:5e:3b: 92:01:c2:40:58:1e:4e:25:7a:0e:50:f8:17:13:33:16:52:20: 26:d3:d5:c0:df:64:38:fb:1a:cf:f2:a2:34:2b:ff:ce:65:aa: d9:49:5f:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUxMTA0MjAzOTM4WhcNMjUxMTExMjAzOTM4WjAYMRYwFAYD VQQDEw02OTBhNjQ4Yi01NzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA118iF2yNx5TBO/BHVtjsK+BNshEaUIeUzmTrTmWKxX7ckSXzmdeUipbgEpOj ujYCVrUB2t0ktj+yprioZ+ILkMGKxX87YbndjVE3z2WG+pzZ5LG/u4Z5hRtSIP9u Z45GOC3Ut9mkmjFEyhn3pdaiU+N7Sd+VhsXMg8NgU8iEtTHbPN4sYISDNhLIEmy0 +6p3q15jM1e0TGR6/zCD4YR6mfPUVylcEBlJFmcwI6JtpUlTYZMXfm4dlqJ3XFrN g+M81aYoyTZuPQm+vsF8lBDxUDWiXYW0MLai0rZ0YP+QEICz9/H5soHIinIa8GSg 1fZvb7zhWIUxq1JDhUXiftkcwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgqXZKD 6jea/eVj68zldvMQSbjwMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm/drNRRO9XnQ2dbPdeddf4yfMu2lFR/lk1IfzRwVRJLAGA/N6jT0i ZoslHRFemtlvf7mrVEiLVFW+4fDBiB4Ub7hJv/wYt9FywxKk5/4EAfTrDx1iE4rs cvSPib81Ehym8cPvHC+45Uc/hNYNvtNoRa23D71T+8f8lw52OMNXIpu+cIfURqwJ FbGFjXWLOhyWt+6OgJvvPKMrQcRB75Nmw8jUIhKpBA3NaEKqoqDOEzrIRDLrEOhW bdYpNvQEhLaUUrzugD6gUbsEYaBWpDlfOqMCnWbPXjuSAcJAWB5OJXoOUPgXEzMW UiAm09XA32Q4+xrP8qI0K//OZarZSV8+ -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:07 2025 by rpki-client