$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: hkEnfn9drg2kh9AVFBEh0TSyj5X0nl5xGN0Spl2Jb74= Subject key identifier: 08:36:2D:C7:3D:48:CE:14:D7:34:19:90:A0:AF:A3:A4:FF:16:D5:71 Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: 05 Signing time: Sat 05 Jul 2025 08:30:46 +0000 Manifest this update: Sat 05 Jul 2025 08:30:45 +0000 Manifest next update: Sat 12 Jul 2025 08:30:45 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: 4ez1hd2+LHLRAdGRnBZ1A1v8Nfd2OIKrvVC3zsa0cao=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: YI5KTewQHT3HCq7P4Cu8YAVGa4eC3SI/cxqK9ohfnmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:30:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Jul 5 08:30:45 2025 GMT Not After : Jul 12 08:30:45 2025 GMT Subject: CN=6868e2b6-c259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4c:0b:fe:de:f7:e4:8d:54:dd:0e:fd:d5:9c: b2:7a:50:db:ed:5c:46:6b:33:00:b4:c5:36:6d:8e: 83:7d:08:e3:4f:9b:cd:d5:eb:19:57:46:c3:b2:89: 5d:6d:9e:ba:82:d1:4b:15:8e:aa:ca:a1:49:d6:66: a9:df:53:a1:8a:e0:6d:3a:c9:31:cc:0e:95:9e:20: 69:15:22:ce:ab:fe:ae:3d:04:d4:06:2f:97:4d:9e: 20:65:08:c6:7f:6f:74:e2:13:7b:74:fe:20:3a:17: e4:49:93:57:69:2b:26:48:fd:12:9e:3e:45:b2:e3: af:3f:2c:df:73:76:20:c4:86:5e:c2:1d:b1:f7:86: d5:6b:c8:f5:74:ae:d4:de:9f:7c:7d:e7:24:da:e5: 6e:0e:23:b5:68:82:8c:00:af:14:10:65:d1:4f:9d: 78:7c:3f:ff:7c:aa:10:6b:2f:62:bf:10:bf:0b:ae: 86:f2:60:5a:73:a0:84:22:d8:43:b8:5e:70:e1:92: d2:32:03:89:f0:59:2b:78:8b:97:84:97:bf:e0:39: f9:16:3f:87:b3:90:89:30:69:c2:4c:34:47:34:a2: 0c:36:7a:36:b4:80:33:35:5b:b7:16:be:ed:20:31: 37:b6:82:3f:73:af:9c:8e:77:a6:8d:28:77:db:c5: 1f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:36:2D:C7:3D:48:CE:14:D7:34:19:90:A0:AF:A3:A4:FF:16:D5:71 X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:74:12:dc:7a:73:64:3f:d9:c0:6f:3c:d4:1a:2c:42:22:28: 7e:12:89:c2:7a:f1:19:e6:e5:f7:7c:43:1a:69:36:c7:f4:9c: c2:86:53:70:68:11:43:9e:cb:a9:5c:93:a3:f7:ae:5f:d6:b8: 19:72:14:fd:82:bc:0c:63:84:45:c2:b1:a7:4f:6b:a4:32:3f: f5:f0:f7:b7:a6:ab:73:fb:e1:3c:e8:35:59:99:e9:5a:cf:bc: 19:aa:d8:4a:6e:bb:48:ec:8a:66:e7:0b:3b:60:13:ee:fe:5b: ad:0a:4d:41:3a:5f:86:da:17:6e:34:50:64:88:b5:8e:49:91: f3:d0:7f:0a:51:aa:ac:71:da:84:60:c0:96:8a:d3:53:36:04: d5:f1:43:70:68:1c:6b:02:6d:b6:b4:b2:9b:f1:9d:32:10:69: 9b:2c:08:e9:97:d6:40:94:0f:a5:1b:be:fa:a0:b5:88:03:4b: 40:ce:0f:d6:43:8a:55:d1:5c:77:9e:7a:7b:38:24:f0:d5:8a: 16:c8:03:f6:86:26:33:e5:0b:84:bf:01:3d:ee:0e:7a:a4:d3: c0:9e:7b:87:9d:5a:4f:ff:aa:55:45:d0:57:17:f9:4e:88:58: 1d:db:43:1e:00:1e:07:b7:98:b3:22:4a:f9:f8:68:fa:89:7a: f5:3c:2c:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzkwRjExMC8GA1UEBRMoMzQzMDkzQUUxM0Y1ODYxOTJFRDMwQUU1RTNEOTI3RDE4 NzNBNkI0NjAeFw0yNTA3MDUwODMwNDVaFw0yNTA3MTIwODMwNDVaMBgxFjAUBgNV BAMTDTY4NjhlMmI2LWMyNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHTAv+3vfkjVTdDv3VnLJ6UNvtXEZrMwC0xTZtjoN9CONPm83V6xlXRsOyiV1t nrqC0UsVjqrKoUnWZqnfU6GK4G06yTHMDpWeIGkVIs6r/q49BNQGL5dNniBlCMZ/ b3TiE3t0/iA6F+RJk1dpKyZI/RKePkWy468/LN9zdiDEhl7CHbH3htVryPV0rtTe n3x95yTa5W4OI7VogowArxQQZdFPnXh8P/98qhBrL2K/EL8LrobyYFpzoIQi2EO4 XnDhktIyA4nwWSt4i5eEl7/gOfkWP4ezkIkwacJMNEc0ogw2eja0gDM1W7cWvu0g MTe2gj9zr5yOd6aNKHfbxR+LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCDYtxz1I zhTXNBmQoK+jpP8W1XEwHwYDVR0jBBgwFoAUNDCTrhP1hhku0wrl49kn0Yc6a0Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDOTBGL0QzNUFDNjNFNTRB RTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEw WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTkRDVHJoUDFoaGt1MHdybDQ5a24wWWM2YTBZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD OTBGL0QzNUFDNjNFNTRBRTExRjA4MzYzRUEyM0M0RjlBRTAyL05EQ1RyaFAxaGhr dTB3cmw0OWtuMFljNmEwWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJV0Etx6c2Q/2cBvPNQaLEIiKH4SicJ68Rnm5fd8QxppNsf0nMKGU3Bo EUOey6lck6P3rl/WuBlyFP2CvAxjhEXCsadPa6QyP/Xw97emq3P74TzoNVmZ6VrP vBmq2Epuu0jsimbnCztgE+7+W60KTUE6X4baF240UGSItY5JkfPQfwpRqqxx2oRg wJaK01M2BNXxQ3BoHGsCbba0spvxnTIQaZssCOmX1kCUD6UbvvqgtYgDS0DOD9ZD ilXRXHeeens4JPDVihbIA/aGJjPlC4S/AT3uDnqk08Cee4edWk//qlVF0FcX+U6I WB3bQx4AHge3mLMiSvn4aPqJevU8LKk= -----END CERTIFICATE-----Generated at Mon Jul 7 09:28:42 2025 by rpki-client