$ rpki-client -vvf rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft File: NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft (raw, json) Hash identifier: XY1ZCyfksfqppDnFcJy+PU0sVi1rkqt5FkL3QGaWcEM= Subject key identifier: 47:EC:95:4B:B2:2E:44:BB:3D:45:BB:05:CD:E1:E4:7A:35:27:18:3C Authority key identifier: 34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 Certificate issuer: /CN=A911C90F/serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft Manifest number: D9 Signing time: Wed 19 Aug 2026 07:19:19 +0000 Manifest this update: Wed 19 Aug 2026 07:19:18 +0000 Manifest next update: Wed 26 Aug 2026 07:19:18 +0000 Files and hashes: 1: NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl (hash: ylXA46yhKtjnzS3ahje3QfT7s6bbo+ehl0YJwTgL2og=) 2: CB4ACDBC54AF11F0999FAA3EC4F9AE02.roa (hash: xgivwJxveenvIu97Bz+/FrcRoG+/apEQkUFco+CmFm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 07:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C90F, serialNumber=343093AE13F586192ED30AE5E3D927D1873A6B46 Validity Not Before: Aug 19 07:19:18 2026 GMT Not After : Aug 26 07:19:18 2026 GMT Subject: CN=6a8558f6-7d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:be:62:82:19:4c:fc:86:31:d6:bc:c2:ea:9e: 3d:9b:cd:19:17:8a:24:66:4c:94:8f:41:0a:d6:73: 50:0e:6e:1b:a0:67:1f:8b:9e:ce:4a:88:11:d2:a7: 41:04:2c:52:5c:0c:9f:cd:ca:2a:ae:dd:dd:ae:e7: 93:a4:f6:59:04:6d:60:21:b8:b7:9a:a8:09:62:f9: e0:e1:6a:ae:a8:c8:83:5d:20:d9:4b:9c:0a:86:54: 8f:98:e3:e9:e9:96:eb:49:35:b7:46:c9:6d:d1:b7: a0:3b:f0:fa:ae:0c:d4:be:66:b9:0b:c6:45:40:9d: 8e:5a:3a:bb:cf:b0:2c:f9:d4:00:7a:b7:60:01:0f: 1b:2c:0c:90:cf:36:d3:d2:20:95:04:49:c1:54:e4: 26:2b:f2:0a:8f:e7:20:62:9c:33:ae:e6:db:dd:69: a7:e5:f3:c7:58:3e:23:20:eb:fb:b9:ad:88:49:58: 4e:34:55:1d:2c:e1:40:68:e2:e9:4e:7a:ae:c5:7e: cd:aa:9d:fb:4c:52:1e:43:84:c0:65:f3:f3:ab:e1: bc:30:11:ce:c1:21:db:30:6d:29:42:6e:4e:0f:6e: bd:e2:3a:f4:fc:0e:25:c2:90:0c:ec:ed:7c:6d:f0: b0:fa:57:15:65:d0:01:df:da:f4:80:21:68:ea:99: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EC:95:4B:B2:2E:44:BB:3D:45:BB:05:CD:E1:E4:7A:35:27:18:3C X509v3 Authority Key Identifier: keyid:34:30:93:AE:13:F5:86:19:2E:D3:0A:E5:E3:D9:27:D1:87:3A:6B:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDCTrhP1hhku0wrl49kn0Yc6a0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C90F/D35AC63E54AE11F08363EA23C4F9AE02/NDCTrhP1hhku0wrl49kn0Yc6a0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e2:66:e9:9d:9f:8d:16:bb:bf:77:3d:56:71:e5:dd:6c:dd: bb:ff:80:52:2a:9c:e3:7c:51:89:cd:f1:c4:70:f8:6e:18:c9: c4:1e:31:d8:59:b5:4f:e6:b7:37:7c:78:4a:4f:83:36:95:dc: 5c:b5:28:53:6f:01:09:ed:8c:99:4d:0f:91:03:b8:23:0f:c9: 65:6d:31:45:80:28:4b:ae:4d:91:15:21:a8:f6:4a:39:d9:c7: 76:87:b8:78:39:56:01:d3:bb:73:de:7e:f7:a3:d6:e5:20:f9: 0e:46:56:8a:34:cb:e8:16:20:50:9f:e4:59:51:a1:26:8b:80: ef:bc:ee:2d:c7:be:e7:31:cd:fd:45:46:11:33:cd:2a:f9:e1: 54:f7:8c:30:d9:3b:73:e8:b7:6f:99:35:41:1e:e7:f4:77:c4: 32:56:4a:d3:44:ca:44:cb:fa:23:65:31:0e:33:f9:f4:24:cd: 31:51:0b:06:8c:c2:f2:c0:14:e4:9d:a4:cd:a4:fa:14:71:b4: 77:cc:85:b9:66:01:b3:71:2a:5f:3c:d6:e8:7e:e2:3b:c3:b2: c6:66:5c:90:56:01:fe:d9:82:dd:ce:ba:f5:2d:d1:65:de:ed: 4d:e9:c9:e3:37:0f:48:6d:83:98:c1:7f:e6:a6:6d:bb:da:19: ec:09:3f:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5MEYxMTAvBgNVBAUTKDM0MzA5M0FFMTNGNTg2MTkyRUQzMEFFNUUzRDkyN0Qx ODczQTZCNDYwHhcNMjYwODE5MDcxOTE4WhcNMjYwODI2MDcxOTE4WjAYMRYwFAYD VQQDEw02YTg1NThmNi03ZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1r5ighlM/IYx1rzC6p49m80ZF4okZkyUj0EK1nNQDm4boGcfi57OSogR0qdB BCxSXAyfzcoqrt3drueTpPZZBG1gIbi3mqgJYvng4WquqMiDXSDZS5wKhlSPmOPp 6ZbrSTW3Rslt0begO/D6rgzUvma5C8ZFQJ2OWjq7z7As+dQAerdgAQ8bLAyQzzbT 0iCVBEnBVOQmK/IKj+cgYpwzrubb3Wmn5fPHWD4jIOv7ua2ISVhONFUdLOFAaOLp TnquxX7Nqp37TFIeQ4TAZfPzq+G8MBHOwSHbMG0pQm5OD2694jr0/A4lwpAM7O18 bfCw+lcVZdAB39r0gCFo6pk5NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfslUuy LkS7PUW7Bc3h5Ho1Jxg8MB8GA1UdIwQYMBaAFDQwk64T9YYZLtMK5ePZJ9GHOmtG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzkwRi9EMzVBQzYzRTU0 QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWhoa3Uwd3JsNDlrbjBZYzZh MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05EQ1RyaFAxaGhrdTB3cmw0OWtuMFljNmEwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzkwRi9EMzVBQzYzRTU0QUUxMUYwODM2M0VBMjNDNEY5QUUwMi9ORENUcmhQMWho a3Uwd3JsNDlrbjBZYzZhMFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAX+Jm6Z2fjRa7v3c9VnHl3Wzdu/+AUiqc43xRic3xxHD4bhjJxB4x2Fm1T+a3 N3x4Sk+DNpXcXLUoU28BCe2MmU0PkQO4Iw/JZW0xRYAoS65NkRUhqPZKOdnHdoe4 eDlWAdO7c95+96PW5SD5DkZWijTL6BYgUJ/kWVGhJouA77zuLce+5zHN/UVGETPN KvnhVPeMMNk7c+i3b5k1QR7n9HfEMlZK00TKRMv6I2UxDjP59CTNMVELBozC8sAU 5J2kzaT6FHG0d8yFuWYBs3EqXzzW6H7iO8OyxmZckFYB/tmC3c669S3RZd7tTenJ 4zcPSG2DmMF/5qZtu9oZ7Ak/Ow== -----END CERTIFICATE-----Generated at Wed Aug 19 11:46:15 2026 by rpki-client