$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft File: Ntd-kkOrui_VSWopGDC304sLy8Q.mft (raw, json) Hash identifier: cGL67IpoOXUPjcKD///dPpR5SPS5TTPkEEEWQnEwdUk= Subject key identifier: BD:67:D0:D0:3A:58:DE:33:7F:B0:96:24:0C:F1:F8:C6:FC:68:1D:4F Authority key identifier: 36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 Certificate issuer: /CN=A91452AC/serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Certificate serial: 08FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft Manifest number: 08E1 Signing time: Sat 06 Sep 2025 20:38:10 +0000 Manifest this update: Sat 06 Sep 2025 20:38:10 +0000 Manifest next update: Sat 13 Sep 2025 20:38:10 +0000 Files and hashes: 1: Ntd-kkOrui_VSWopGDC304sLy8Q.crl (hash: cAfqC63YlkoJ2PMlWpR/33LSf0XEGPtJ7QMHB1VpTDA=) 2: B453EBC4BB4011EAAF70B028C4F9AE02.roa (hash: Nz/7xCUgKfmqkXApuxeo5myCUO+mgajFtNE4r7Ggzao=) 3: A58B9338AD4A11EBA6B48687C4F9AE02.roa (hash: 9S3WJERMTtwQwqkFdyQh2FAfBQXuWIoDgdAQjyhftzk=) 4: 72E60DEA3CC911EDA5EBD21DC4F9AE02.roa (hash: zq2Qkn/Tk6HTf9mmAUUEV4eovm/AM6TvEoGB/VFCywQ=) 5: 0F91DE9EAD4C11EB903C150DC4F9AE02.roa (hash: KYXdBuY8eVoROAmSDw7JnT54RB6WWf5lcCmMUouYwzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 20:38:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2301 (0x8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91452AC, serialNumber=36D77E9243ABBA2FD5496A291830B7D38B0BCBC4 Validity Not Before: Sep 6 20:38:10 2025 GMT Not After : Sep 13 20:38:10 2025 GMT Subject: CN=68bc9bb2-0b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:42:6a:53:8a:45:0b:6d:98:2d:cb:25:6e: 82:a7:02:33:0b:c8:1a:d1:83:36:75:15:99:aa:14: 2d:ab:b3:ab:80:5c:e3:ea:27:61:6b:1d:4a:9a:9f: 4e:d0:a0:df:de:13:c2:76:70:f5:f0:17:04:ce:ff: 6b:24:bc:b8:f3:8a:c6:fc:e2:ab:44:59:c8:ff:4c: 97:6e:eb:9f:5d:90:e2:e1:46:24:f4:a3:99:42:62: 78:a4:22:e4:b2:f5:2c:7c:74:58:2d:10:01:5e:51: 37:a6:fa:2f:59:25:d9:18:2e:a7:a3:b1:e7:cd:db: fa:29:d4:ca:ce:b2:bb:6d:86:be:2e:63:3a:ea:06: be:75:93:96:93:0c:73:88:cb:c0:ba:7d:bb:2f:3e: 5a:3d:99:a2:9f:84:02:e6:35:a5:3c:ae:10:ad:62: 58:86:4e:c0:5c:62:eb:d8:f8:e4:fb:21:c1:30:a6: 64:eb:07:71:f8:58:6c:ae:63:74:e4:98:6c:0d:75: 43:94:74:ab:96:36:9d:72:2c:5f:d8:27:2e:a9:50: 64:dc:e8:56:8d:1f:f1:b4:cb:89:74:00:82:6f:55: 97:55:f5:9b:bd:3a:f4:c6:75:75:98:5b:55:1f:5d: 6d:72:dd:50:b4:b7:bc:82:bf:cd:b7:38:77:ad:1c: 1f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:D0:D0:3A:58:DE:33:7F:B0:96:24:0C:F1:F8:C6:FC:68:1D:4F X509v3 Authority Key Identifier: keyid:36:D7:7E:92:43:AB:BA:2F:D5:49:6A:29:18:30:B7:D3:8B:0B:CB:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ntd-kkOrui_VSWopGDC304sLy8Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/A48D5966BB3E11EAA29EE321C4F9AE02/Ntd-kkOrui_VSWopGDC304sLy8Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:df:d0:be:71:4e:8f:09:5c:39:73:94:49:2b:a8:82:2c:4d: 1e:92:7c:96:e0:94:00:50:d3:8b:4b:23:e4:96:51:ca:48:74: 2d:89:38:12:5c:d7:16:3c:ad:92:92:43:63:0f:3e:ba:43:b7: 20:22:00:1b:a7:8e:73:9c:2f:8c:ea:fa:0d:32:75:b5:55:ee: e1:90:0e:50:5e:8f:e2:9b:73:8d:6d:47:af:bd:66:38:a7:17: 4c:cf:a0:80:ae:d3:fe:84:10:c5:b4:4a:78:02:2f:3e:fe:64: 39:d6:4f:ac:ec:95:ff:63:9a:31:c9:2e:3d:e7:27:75:34:ce: 09:e4:cc:cd:ba:cc:b9:3a:98:d2:5d:08:e7:1f:b3:8c:77:23: 03:ab:bb:44:81:88:8c:8b:ff:d0:e5:54:58:d0:20:83:1f:b4: 07:71:3f:02:24:ff:d1:02:c8:20:79:fc:6d:6d:02:d0:e5:28: 68:4f:70:8c:a8:6d:20:83:00:5b:71:e9:b6:0c:b7:00:bc:9e: fe:c5:c8:03:3b:90:29:7f:70:5b:d2:cf:a2:75:02:16:82:01: a1:29:dc:b0:61:e9:51:af:0d:ef:08:5f:c9:e5:1d:e3:9f:1b: 23:af:c4:10:ad:06:08:d6:65:a8:66:4d:9c:43:55:41:89:79: e4:3b:eb:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyQUMxMTAvBgNVBAUTKDM2RDc3RTkyNDNBQkJBMkZENTQ5NkEyOTE4MzBCN0Qz OEIwQkNCQzQwHhcNMjUwOTA2MjAzODEwWhcNMjUwOTEzMjAzODEwWjAYMRYwFAYD VQQDEw02OGJjOWJiMi0wYjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/dCalOKRQttmC3LJW6CpwIzC8ga0YM2dRWZqhQtq7OrgFzj6idhax1Kmp9O 0KDf3hPCdnD18BcEzv9rJLy484rG/OKrRFnI/0yXbuufXZDi4UYk9KOZQmJ4pCLk svUsfHRYLRABXlE3pvovWSXZGC6no7Hnzdv6KdTKzrK7bYa+LmM66ga+dZOWkwxz iMvAun27Lz5aPZmin4QC5jWlPK4QrWJYhk7AXGLr2Pjk+yHBMKZk6wdx+FhsrmN0 5JhsDXVDlHSrljadcixf2CcuqVBk3OhWjR/xtMuJdACCb1WXVfWbvTr0xnV1mFtV H11tct1QtLe8gr/Ntzh3rRwfTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1n0NA6 WN4zf7CWJAzx+Mb8aB1PMB8GA1UdIwQYMBaAFDbXfpJDq7ov1UlqKRgwt9OLC8vE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy9BNDhENTk2NkJC M0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVpX1ZTV29wR0RDMzA0c0x5 OFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL050ZC1ra09ydWlfVlNXb3BHREMzMDRzTHk4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTJBQy9BNDhENTk2NkJCM0UxMUVBQTI5RUUzMjFDNEY5QUUwMi9OdGQta2tPcnVp X1ZTV29wR0RDMzA0c0x5OFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP39C+cU6PCVw5c5RJK6iCLE0eknyW4JQAUNOLSyPkllHKSHQtiTgS XNcWPK2SkkNjDz66Q7cgIgAbp45znC+M6voNMnW1Ve7hkA5QXo/im3ONbUevvWY4 pxdMz6CArtP+hBDFtEp4Ai8+/mQ51k+s7JX/Y5oxyS495yd1NM4J5MzNusy5OpjS XQjnH7OMdyMDq7tEgYiMi//Q5VRY0CCDH7QHcT8CJP/RAsggefxtbQLQ5ShoT3CM qG0ggwBbcem2DLcAvJ7+xcgDO5Apf3Bb0s+idQIWggGhKdywYelRrw3vCF/J5R3j nxsjr8QQrQYI1mWoZk2cQ1VBiXnkO+vg -----END CERTIFICATE-----Generated at Mon Sep 8 08:48:01 2025 by rpki-client