$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: ekp8ERvj8364YfbWRLkWF3CM0j+LTdE6pHtlzX9kcBs= Subject key identifier: D3:7C:6B:6E:32:DB:B3:8B:52:4A:E7:1B:8D:5C:84:8F:7E:55:46:F9 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 0193 Signing time: Sun 15 Jun 2025 02:41:31 +0000 Manifest this update: Sun 15 Jun 2025 02:41:30 +0000 Manifest next update: Sun 22 Jun 2025 02:41:30 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: z8EclGEAzw2A56QZcPZx8TLabJSybJuCkvLNHQ8Q4gk=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Jun 15 02:41:30 2025 GMT Not After : Jun 22 02:41:30 2025 GMT Subject: CN=684e32db-944e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a6:ae:97:9d:e3:9d:e8:a5:37:d0:96:19:df: 52:d6:b8:85:39:b2:6c:60:25:74:5e:63:00:f3:f2: 81:59:9e:ad:6c:16:d3:88:6a:32:a4:97:18:59:cc: cc:fb:49:0e:36:94:e7:f2:da:01:9a:d0:40:03:e6: db:df:6f:0b:7c:83:7f:ee:89:77:2b:3f:59:8a:5f: 35:da:46:ae:a5:56:4a:4d:02:bd:27:2b:bc:42:41: 35:85:a5:d2:40:04:c4:65:33:92:f2:db:8c:ac:ee: 80:2a:4f:23:db:77:be:8c:18:af:c4:d2:ce:40:39: 77:19:47:c2:13:36:2f:14:94:bd:f9:d7:61:4f:b8: 70:ba:23:5a:2e:1c:56:c2:ea:8c:cf:48:82:ae:53: 7f:80:07:bb:66:08:aa:96:c4:e9:6a:de:ef:c5:7a: 3b:7f:5c:dd:e1:4d:78:8b:4f:c4:69:32:62:02:0e: 4b:15:76:d6:e9:ac:a0:0b:78:ce:cd:ac:11:1c:26: ae:57:0b:34:57:ee:70:88:18:a4:04:bc:3a:a7:16: 82:d3:9d:c5:7c:1b:16:38:cf:65:bb:5f:02:49:d1: d3:65:31:28:dd:fa:bc:34:99:fd:fc:14:b6:b2:4f: c6:0f:6d:f6:01:26:50:db:79:20:12:b8:d9:cc:d1: 2b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7C:6B:6E:32:DB:B3:8B:52:4A:E7:1B:8D:5C:84:8F:7E:55:46:F9 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8d:a1:69:74:e1:94:43:27:5b:30:d3:e1:0a:be:21:2a:f2: 3a:4a:91:8b:b5:f0:85:4a:41:eb:ca:66:b9:cc:c8:95:ba:6d: 4d:1b:e0:b5:4a:6b:2d:c5:74:ce:06:95:90:fd:ab:58:6a:43: e5:ac:42:2d:53:cd:10:c8:d7:c4:01:09:ce:c3:54:33:25:22: 96:72:00:86:87:93:de:ec:f1:29:cc:95:2d:36:7d:10:b6:9c: c0:bf:d4:34:3c:0a:af:1c:62:17:ea:ca:5d:4d:ac:81:35:c9: 23:82:ec:12:53:be:d6:42:d9:02:36:05:72:44:5e:94:29:32: 41:a2:7d:37:6d:6e:ba:80:11:32:12:4d:24:dd:24:e8:03:a5: f3:c2:72:39:0e:93:8b:84:c6:8c:28:50:15:ca:b8:4e:90:d3: 0a:8c:f7:6f:e1:75:25:af:57:d0:fe:39:31:6c:85:b4:c4:da: 34:a9:92:41:05:a3:fb:2b:20:88:8d:60:0d:60:45:c6:b9:d5: b4:73:fc:f8:e9:7c:82:8c:a0:14:0b:39:e0:5b:ca:34:2b:e8: a1:57:96:0f:96:25:66:6e:98:d3:a6:52:f6:f9:de:d0:b8:35: 2f:be:fa:bb:3d:c4:04:87:16:cc:cd:d5:d3:9a:d6:67:0f:b0: 35:ee:e2:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjUwNjE1MDI0MTMwWhcNMjUwNjIyMDI0MTMwWjAYMRYwFAYD VQQDEw02ODRlMzJkYi05NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqaul53jneilN9CWGd9S1riFObJsYCV0XmMA8/KBWZ6tbBbTiGoypJcYWczM +0kONpTn8toBmtBAA+bb328LfIN/7ol3Kz9Zil812kaupVZKTQK9Jyu8QkE1haXS QATEZTOS8tuMrO6AKk8j23e+jBivxNLOQDl3GUfCEzYvFJS9+ddhT7hwuiNaLhxW wuqMz0iCrlN/gAe7ZgiqlsTpat7vxXo7f1zd4U14i0/EaTJiAg5LFXbW6aygC3jO zawRHCauVws0V+5wiBikBLw6pxaC053FfBsWOM9lu18CSdHTZTEo3fq8NJn9/BS2 sk/GD232ASZQ23kgErjZzNErUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNN8a24y 27OLUkrnG41chI9+VUb5MB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6jaFpdOGUQydbMNPhCr4hKvI6SpGLtfCFSkHryma5zMiVum1NG+C1 SmstxXTOBpWQ/atYakPlrEItU80QyNfEAQnOw1QzJSKWcgCGh5Pe7PEpzJUtNn0Q tpzAv9Q0PAqvHGIX6spdTayBNckjguwSU77WQtkCNgVyRF6UKTJBon03bW66gBEy Ek0k3SToA6XzwnI5DpOLhMaMKFAVyrhOkNMKjPdv4XUlr1fQ/jkxbIW0xNo0qZJB BaP7KyCIjWANYEXGudW0c/z46XyCjKAUCzngW8o0K+ihV5YPliVmbpjTplL2+d7Q uDUvvvq7PcQEhxbMzdXTmtZnD7A17uKQ -----END CERTIFICATE-----Generated at Mon Jun 16 16:00:01 2025 by rpki-client