$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: I6EiOsncIt0N6Sh3FBzyk/MjB/oMl8e0yVgVFZNxjys= Subject key identifier: D2:68:37:59:6D:E2:C7:4F:A7:1F:2A:0C:62:F9:08:E8:29:85:B9:36 Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 01AD Signing time: Tue 05 Aug 2025 03:37:24 +0000 Manifest this update: Tue 05 Aug 2025 03:37:24 +0000 Manifest next update: Tue 12 Aug 2025 03:37:24 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: FJJefbq2hXbItYXydlegauSenNt//cXpXwF805jo6SQ=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:37:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Aug 5 03:37:24 2025 GMT Not After : Aug 12 03:37:24 2025 GMT Subject: CN=68917c74-e57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:51:85:05:37:73:39:c2:77:2a:7d:69:c6:f8: 0d:49:6c:a9:97:e7:1b:ec:9e:f8:af:52:07:5d:d5: 80:7b:e8:8e:a2:06:a6:ab:b4:a6:82:f6:17:dd:5e: 43:38:81:9b:ff:32:5e:2b:dc:bb:f2:0d:a2:91:e4: a2:18:9e:4f:05:00:d1:f0:95:91:8e:a0:86:fd:c1: 54:d3:99:91:31:3c:64:bf:c0:11:71:d8:31:a5:5e: 09:1d:c2:a9:4b:11:1c:b3:73:89:8a:dd:29:50:95: 5e:2b:3a:3a:d6:e5:c9:ff:09:a8:7e:f3:e0:41:7c: 1d:dc:67:ab:65:a6:6e:7c:68:e0:55:01:e7:36:15: f2:3d:20:ed:20:ee:98:66:ae:98:f0:73:62:72:5d: e3:90:4c:0e:e7:b0:e3:10:56:8d:2b:97:de:8b:c8: 4c:9b:03:1a:13:1f:13:40:4a:4d:e2:b3:a5:14:51: 7a:99:04:9b:bc:54:de:77:7a:28:f7:3b:e7:37:39: 2f:ba:4a:fd:0d:96:36:3e:22:a9:e1:84:b0:07:a9: f6:11:a0:e4:33:d8:58:7b:de:c2:56:36:77:b9:cc: a6:90:0c:b5:a9:9b:e7:4b:31:c1:cf:d2:5f:28:08: 96:60:95:e1:3f:56:85:4a:ea:8b:29:02:ac:32:15: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:68:37:59:6D:E2:C7:4F:A7:1F:2A:0C:62:F9:08:E8:29:85:B9:36 X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a8:a4:c2:94:0a:f0:a8:01:94:f9:95:02:73:f2:c5:c9:ce: 0b:79:bb:f3:0c:5b:35:4d:e3:c6:51:e6:dd:cd:7e:01:b1:d2: 73:71:fc:82:46:8f:eb:4e:68:45:57:67:29:2f:16:cc:4e:e2: bf:c1:b6:b8:f7:9b:b4:93:7f:9f:c8:e0:8c:e7:af:de:a2:46: 78:03:c2:96:85:80:d9:98:41:aa:55:47:c0:ec:e2:c2:b2:49: 96:1f:23:ac:3c:ad:f8:50:e5:37:2c:32:a1:09:6d:f3:cb:50: 88:1b:23:8b:92:88:e0:2b:19:48:09:1e:24:a0:71:40:16:d3: 38:ca:43:68:e9:9d:2d:f4:4b:2b:b2:9b:18:cb:21:9d:a4:f4: 8a:be:a7:d3:b1:42:ba:f3:f6:7e:08:8e:1d:91:d6:62:da:ba: 18:78:e4:86:eb:7b:9e:44:d8:0f:d6:b5:ff:fb:1b:ab:b7:b8: b5:05:4a:83:6e:c1:68:a1:0d:69:bb:28:c0:b4:ae:d7:91:b0: 50:be:a8:9e:d0:44:3e:ba:c0:4c:71:37:34:a3:2f:e9:34:25: 40:aa:ed:80:26:40:d6:96:18:09:42:06:48:20:80:83:a9:d6: 80:72:09:d8:d4:af:a8:e1:17:51:99:06:f0:a2:29:e0:96:ad: 89:ca:c5:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjUwODA1MDMzNzI0WhcNMjUwODEyMDMzNzI0WjAYMRYwFAYD VQQDEw02ODkxN2M3NC1lNTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslGFBTdzOcJ3Kn1pxvgNSWypl+cb7J74r1IHXdWAe+iOogamq7SmgvYX3V5D OIGb/zJeK9y78g2ikeSiGJ5PBQDR8JWRjqCG/cFU05mRMTxkv8ARcdgxpV4JHcKp SxEcs3OJit0pUJVeKzo61uXJ/wmofvPgQXwd3GerZaZufGjgVQHnNhXyPSDtIO6Y Zq6Y8HNicl3jkEwO57DjEFaNK5fei8hMmwMaEx8TQEpN4rOlFFF6mQSbvFTed3oo 9zvnNzkvukr9DZY2PiKp4YSwB6n2EaDkM9hYe97CVjZ3ucymkAy1qZvnSzHBz9Jf KAiWYJXhP1aFSuqLKQKsMhXw0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJoN1lt 4sdPpx8qDGL5COgphbk2MB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCqKTClArwqAGU+ZUCc/LFyc4LebvzDFs1TePGUebdzX4BsdJzcfyC Ro/rTmhFV2cpLxbMTuK/wba495u0k3+fyOCM56/eokZ4A8KWhYDZmEGqVUfA7OLC skmWHyOsPK34UOU3LDKhCW3zy1CIGyOLkojgKxlICR4koHFAFtM4ykNo6Z0t9Esr spsYyyGdpPSKvqfTsUK68/Z+CI4dkdZi2roYeOSG63ueRNgP1rX/+xurt7i1BUqD bsFooQ1puyjAtK7XkbBQvqie0EQ+usBMcTc0oy/pNCVAqu2AJkDWlhgJQgZIIICD qdaAcgnY1K+o4RdRmQbwoinglq2JysUp -----END CERTIFICATE-----Generated at Wed Aug 6 14:21:55 2025 by rpki-client