$ rpki-client -vvf rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft File: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft (raw, json) Hash identifier: Qw3wvmzIvqpfXRYlZgnuuRV17CjXcMufARo2BGnPxZo= Subject key identifier: 56:F4:80:0B:DA:BF:02:E7:CE:1D:18:4B:6A:D0:D1:20:24:F0:8F:0C Authority key identifier: 0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7 Certificate issuer: /CN=A91B65F5/serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft Manifest number: 20 Signing time: Tue 19 May 2026 08:47:10 +0000 Manifest this update: Tue 19 May 2026 08:47:09 +0000 Manifest next update: Tue 26 May 2026 08:47:09 +0000 Files and hashes: 1: DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl (hash: RLhVNZ5JBjlqE23EGfdZgTPgr+JXEG9m+p9rrys1oic=) 2: A5F4101E265F11F1B94C1E8FA7833773.roa (hash: NdD/6yvqSj682GK/GjA29aCmHzw6OXoNpRKURJCciB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 08:47:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B65F5, serialNumber=0C353F3550EDE13EA7E5F28D23A341614E69D8C7 Validity Not Before: May 19 08:47:09 2026 GMT Not After : May 26 08:47:09 2026 GMT Subject: CN=6a0c238e-135c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:2f:88:9a:31:c8:70:c5:ba:1a:c9:f8:8e: 92:97:cc:32:05:77:be:49:5f:29:ca:32:a1:74:fd: 25:cb:59:c0:c2:7b:15:04:78:08:cc:cf:b3:71:15: bd:39:41:c0:7e:c0:c0:79:3e:2d:98:91:96:2b:13: 79:e7:46:4c:c7:bd:61:16:f8:52:af:9c:19:6d:f3: b2:11:c1:65:02:0a:58:6f:67:5f:eb:d0:32:ed:bf: 02:0f:69:92:69:5b:55:ad:36:05:d0:da:11:17:a2: 00:63:e4:d3:ae:64:5a:26:09:79:d0:69:d8:16:77: 64:0b:2f:c7:48:7f:96:bf:ff:c0:de:f9:9f:9d:3c: 2d:cc:5d:f2:28:e9:c7:1d:ee:8f:bf:5c:4a:8a:f2: 8b:2e:4f:20:e7:10:2b:94:79:b2:ef:50:08:91:6d: 97:fb:83:6c:37:12:0d:7a:13:7e:79:db:93:c8:b0: d6:62:d4:85:22:78:08:93:91:44:84:72:e7:99:6f: 47:71:83:9b:4f:5e:d7:58:a5:03:96:ec:04:7e:10: 0a:64:4e:1a:34:da:d8:a6:2f:fb:5f:e7:c0:a7:ca: aa:c5:76:1f:8c:64:fe:3b:41:df:2c:2d:26:4f:d2: 3f:41:b2:be:20:7b:32:a8:7b:02:9e:ac:f9:0a:70: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F4:80:0B:DA:BF:02:E7:CE:1D:18:4B:6A:D0:D1:20:24:F0:8F:0C X509v3 Authority Key Identifier: keyid:0C:35:3F:35:50:ED:E1:3E:A7:E5:F2:8D:23:A3:41:61:4E:69:D8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B65F5/A5596C2C265E11F1AD6F1E02A7833773/DDU_NVDt4T6n5fKNI6NBYU5p2Mc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:45:5c:9a:73:5a:c7:89:bd:14:a6:16:63:fd:20:d6:01:ef: c5:91:c3:bf:46:85:55:a5:19:2f:fe:89:8b:52:b9:1c:c4:74: e7:7d:d6:55:09:96:9c:c9:be:83:50:e0:ae:f8:52:df:09:12: f1:81:90:5e:56:10:3b:2d:38:e1:f8:6a:c2:ac:49:04:48:44: 1e:a5:6a:f7:5a:42:6c:c5:3f:46:fd:5d:28:22:85:f2:b2:1b: 5b:83:e8:5e:ff:b5:94:f5:e4:84:e0:a9:7c:5c:4a:be:4a:90: e1:4f:b1:80:79:eb:6f:cb:11:49:bd:94:a7:4c:06:56:dd:3e: 94:11:d8:c9:f7:ba:ac:5e:5f:3a:80:f1:53:32:96:55:57:d8: 9b:5c:99:d7:9c:df:61:66:fe:d2:9c:07:0b:44:00:30:32:c1: bd:3f:41:81:bf:ed:ba:58:c7:28:48:1b:59:e2:24:0d:33:30: 3d:aa:76:e8:94:ee:ee:4e:c2:9e:97:bd:93:93:52:17:ec:fe: 62:d5:b9:4e:b8:66:b2:ed:2e:01:7b:ed:e6:35:d6:97:f7:c9: 74:c8:e8:9d:5f:37:6d:38:e6:80:e6:e1:10:eb:77:4f:a3:40: 44:b1:0f:d8:3c:96:3f:ca:27:19:42:31:69:ff:88:e9:93:f1: 50:af:66:76 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NjVGNTExMC8GA1UEBRMoMEMzNTNGMzU1MEVERTEzRUE3RTVGMjhEMjNBMzQxNjE0 RTY5RDhDNzAeFw0yNjA1MTkwODQ3MDlaFw0yNjA1MjYwODQ3MDlaMBgxFjAUBgNV BAMTDTZhMGMyMzhlLTEzNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYfS+ImjHIcMW6Gsn4jpKXzDIFd75JXynKMqF0/SXLWcDCexUEeAjMz7NxFb05 QcB+wMB5Pi2YkZYrE3nnRkzHvWEW+FKvnBlt87IRwWUCClhvZ1/r0DLtvwIPaZJp W1WtNgXQ2hEXogBj5NOuZFomCXnQadgWd2QLL8dIf5a//8De+Z+dPC3MXfIo6ccd 7o+/XEqK8osuTyDnECuUebLvUAiRbZf7g2w3Eg16E35525PIsNZi1IUieAiTkUSE cueZb0dxg5tPXtdYpQOW7AR+EApkTho02timL/tf58CnyqrFdh+MZP47Qd8sLSZP 0j9Bsr4gezKoewKerPkKcIljAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVvSAC9q/ AufOHRhLatDRICTwjwwwHwYDVR0jBBgwFoAUDDU/NVDt4T6n5fKNI6NBYU5p2Mcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2NUY1L0E1NTk2QzJDMjY1 RTExRjFBRDZGMUUwMkE3ODMzNzczL0REVV9OVkR0NFQ2bjVmS05JNk5CWVU1cDJN Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRERVX05WRHQ0VDZuNWZLTkk2TkJZVTVwMk1jLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI2 NUY1L0E1NTk2QzJDMjY1RTExRjFBRDZGMUUwMkE3ODMzNzczL0REVV9OVkR0NFQ2 bjVmS05JNk5CWVU1cDJNYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBURVyac1rHib0UphZj/SDWAe/FkcO/RoVVpRkv/omLUrkcxHTnfdZVCZacyb6D UOCu+FLfCRLxgZBeVhA7LTjh+GrCrEkESEQepWr3WkJsxT9G/V0oIoXyshtbg+he /7WU9eSE4Kl8XEq+SpDhT7GAeetvyxFJvZSnTAZW3T6UEdjJ97qsXl86gPFTMpZV V9ibXJnXnN9hZv7SnAcLRAAwMsG9P0GBv+26WMcoSBtZ4iQNMzA9qnbolO7uTsKe l72Tk1IX7P5i1blOuGay7S4Be+3mNdaX98l0yOidXzdtOOaA5uEQ63dPo0BEsQ/Y PJY/yicZQjFp/4jpk/FQr2Z2 -----END CERTIFICATE-----Generated at Thu May 21 09:39:07 2026 by rpki-client