$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft File: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft (raw, json) Hash identifier: lQkZpoAAmUpqw8BCZ8fuYlUSZj84FAvCpD64N2qvsCQ= Subject key identifier: 99:0B:35:72:23:FB:C7:7E:E9:41:3E:0B:F9:FD:B8:F1:F8:33:5B:CE Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7 Certificate issuer: /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft Manifest number: 09 Signing time: Sun 05 Apr 2026 08:30:03 +0000 Manifest this update: Sun 05 Apr 2026 08:30:03 +0000 Manifest next update: Sun 12 Apr 2026 08:30:03 +0000 Files and hashes: 1: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl (hash: pSSPtlQURrX5KZmo5zUTHdcwjjF9FcOTpIfMEB95kQU=) 2: A5F4101E265F11F1B94C1E8FA7833773.roa (hash: aVk5ZwfUy/pOCzqQnIGlE5CsRTH7ieZRP+rktUubD1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7 Validity Not Before: Apr 5 08:30:03 2026 GMT Not After : Apr 12 08:30:03 2026 GMT Subject: CN=69d21d8b-6c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:86:11:ae:a4:ad:36:11:e7:e8:5c:07:54: e8:fd:68:40:6a:cb:37:22:6d:cc:46:cf:e4:52:7f: 04:33:74:d5:c7:f7:55:41:cf:11:79:c9:f1:c2:cc: 7a:b3:ae:47:aa:a9:35:a0:2d:8c:af:73:f6:92:78: 0d:f9:d8:02:9c:12:e0:46:32:dd:26:db:bc:9a:27: 1c:6c:38:b8:98:79:75:6a:f5:d8:29:f4:3e:05:51: 7d:66:94:4d:ca:a8:9f:2e:ef:73:80:27:c2:61:fc: 82:a3:6a:f3:fc:4e:e4:ae:c2:53:68:24:3b:84:f7: 5f:95:3b:a0:ac:1d:90:a3:bc:3a:2c:79:3c:44:c4: 30:90:47:f9:74:2e:45:78:1e:ab:bb:3b:16:81:e1: 80:f1:da:2c:96:93:da:6f:37:d6:be:b9:42:65:91: 38:ac:2f:8f:c3:52:28:ed:83:54:ed:7b:f9:1f:54: 09:3d:66:d0:a6:a4:cc:e4:2c:0a:b8:2b:5d:33:b3: 67:72:5b:7a:50:6a:3a:f8:46:7d:ab:4a:ea:71:58: ec:1d:40:02:d9:79:79:a8:0f:ca:c3:43:1b:91:cb: 77:83:67:76:3b:cf:3a:6b:51:05:7b:2e:10:10:8b: 71:42:19:93:f3:53:28:44:06:1b:a8:a9:5c:a8:2d: 45:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0B:35:72:23:FB:C7:7E:E9:41:3E:0B:F9:FD:B8:F1:F8:33:5B:CE X509v3 Authority Key Identifier: keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:5d:7f:d5:b9:cb:59:cc:c7:d1:e7:59:1f:71:86:27:66:a4: 3e:87:88:f5:02:41:29:be:ec:c7:f0:36:2d:4e:c1:08:0e:16: 04:87:a8:95:13:b7:66:8e:6f:84:97:25:c2:1d:b6:4d:64:90: bf:6a:1c:7e:2f:ca:00:cd:15:80:37:67:38:d5:74:37:95:9a: 18:4f:db:5f:9c:88:3c:d4:64:86:19:4e:3f:5f:90:7a:f5:34: d7:02:65:da:12:2b:02:02:76:01:4f:26:a3:c5:03:e9:58:9e: 09:d2:2d:8e:ed:1e:30:68:e6:d9:55:5c:5b:22:f5:ec:0b:b3: 3d:dc:44:72:ec:64:be:d7:95:c2:0f:68:11:bc:7e:e1:f7:f3: b6:71:83:45:c6:73:6f:b0:9e:59:10:ca:80:7b:74:9d:d4:95: ca:a7:a2:cb:c4:07:b3:65:05:32:51:ce:a1:13:ce:bb:5d:da: 32:68:78:d7:e4:59:6b:13:15:b0:ca:a7:9d:06:d6:35:4e:42: 19:a7:f2:42:ff:c8:c6:92:83:41:bd:95:9b:56:af:4b:c4:88: 6a:93:23:e8:ba:8b:ac:3a:e9:30:95:21:e9:50:f4:21:8f:d7: 95:d6:1a:7d:de:14:56:1c:ad:ca:fc:5b:79:91:48:70:e7:e2: 65:bf:48:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjVGNTExMC8GA1UEBRMoMEMzNTNGMzU1MEVERTEzRUE3RTVGMjhEMjNBMzQxNjE0 RTY5RDhDNzAeFw0yNjA0MDUwODMwMDNaFw0yNjA0MTIwODMwMDNaMBgxFjAUBgNV BAMTDTY5ZDIxZDhiLTZjMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1T4YRrqStNhHn6FwHVOj9aEBqyzcibcxGz+RSfwQzdNXH91VBzxF5yfHCzHqz rkeqqTWgLYyvc/aSeA352AKcEuBGMt0m27yaJxxsOLiYeXVq9dgp9D4FUX1mlE3K qJ8u73OAJ8Jh/IKjavP8TuSuwlNoJDuE91+VO6CsHZCjvDoseTxExDCQR/l0LkV4 Hqu7OxaB4YDx2iyWk9pvN9a+uUJlkTisL4/DUijtg1Tte/kfVAk9ZtCmpMzkLAq4 K10zs2dyW3pQajr4Rn2rSupxWOwdQALZeXmoD8rDQxuRy3eDZ3Y7zzprUQV7LhAQ i3FCGZPzUyhEBhuoqVyoLUWjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmQs1ciP7 x37pQT4L+f248fgzW84wHwYDVR0jBBgwFoAUDDU/NVDt4T6n5fKNI6NBYU5p2Mcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NUY1L0E1NTk2QzJDMjY1 RTExRjFBRDZGMUUwMkE3ODMzNzczL0REVV9OVkR0NFQ2bjVmS05JNk5CWVU1cDJN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRERVX05WRHQ0VDZuNWZLTkk2TkJZVTVwMk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NUY1L0E1NTk2QzJDMjY1RTExRjFBRDZGMUUwMkE3ODMzNzczL0REVV9OVkR0NFQ2 bjVmS05JNk5CWVU1cDJNYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAiXX/VuctZzMfR51kfcYYnZqQ+h4j1AkEpvuzH8DYtTsEIDhYEh6iVE7dmjm+E lyXCHbZNZJC/ahx+L8oAzRWAN2c41XQ3lZoYT9tfnIg81GSGGU4/X5B69TTXAmXa EisCAnYBTyajxQPpWJ4J0i2O7R4waObZVVxbIvXsC7M93ERy7GS+15XCD2gRvH7h 9/O2cYNFxnNvsJ5ZEMqAe3Sd1JXKp6LLxAezZQUyUc6hE867XdoyaHjX5FlrExWw yqedBtY1TkIZp/JC/8jGkoNBvZWbVq9LxIhqkyPouousOukwlSHpUPQhj9eV1hp9 3hRWHK3K/Ft5kUhw5+Jlv0jY -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:32 2026 by rpki-client