$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json) Hash identifier: mKE1PIPaJvSwN1IYFfzJxTIALmpeqtE9zh35hKGT/yk= Subject key identifier: 3C:27:73:97:DD:A8:5C:14:D1:74:C6:83:41:1A:88:EE:EB:06:11:B1 Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft Manifest number: 35 Signing time: Mon 03 Nov 2025 07:35:09 +0000 Manifest this update: Mon 03 Nov 2025 07:35:08 +0000 Manifest next update: Mon 10 Nov 2025 07:35:08 +0000 Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: az9muTMVTY1iEN3NZIT+0w2yaSHVzHE9TpcVL5wdPZg=) 2: B1291960691911F08409AD61C4F9AE02.roa (hash: hkVZ9bulChZT+JRQzeQV5xMH0Uf7jpvzU5/VZfM7gPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Validity Not Before: Nov 3 07:35:08 2025 GMT Not After : Nov 10 07:35:08 2025 GMT Subject: CN=69085b2c-267d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:92:e5:35:61:a2:b2:40:62:7e:47:7d:6b:ce: 2c:c5:84:c2:70:23:96:0f:20:f5:07:e6:2e:15:8b: 49:75:80:36:6e:4f:03:ec:e3:6c:50:dc:5f:10:50: a4:10:a5:12:22:5b:15:9d:69:99:e7:ae:32:9c:c3: 95:55:37:6a:b0:ee:cb:b4:37:6d:79:a0:d2:d8:b6: 45:3b:f2:21:bb:ba:fe:3a:a8:c9:74:2e:dc:81:58: e4:e0:01:12:01:70:21:1d:c3:74:78:21:6d:c2:56: 31:af:9d:7b:e9:8e:2b:30:6c:fd:97:4a:3a:97:ca: 99:24:4d:28:e2:34:6f:ac:81:85:99:27:f5:75:f2: 32:cd:18:93:1e:bf:84:ca:39:ed:e5:d3:c5:49:f6: cf:bf:00:49:f9:b2:f0:0c:33:bb:a2:2f:d8:c0:11: 56:b0:92:34:59:48:97:29:7e:7f:96:bd:91:40:31: 1d:e2:93:e9:de:b5:d0:65:b8:4c:34:af:2e:46:ce: 9d:aa:f7:a0:eb:db:e1:87:f4:dd:5e:98:54:fb:04: 11:cc:c1:1d:2a:5c:68:a9:c1:44:1c:ab:a4:49:40: 6b:0a:09:65:b7:6b:bb:77:88:26:16:f3:16:08:93: e8:e2:ea:17:ef:75:f8:95:72:cd:f1:b3:45:dd:cd: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:27:73:97:DD:A8:5C:14:D1:74:C6:83:41:1A:88:EE:EB:06:11:B1 X509v3 Authority Key Identifier: keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:0f:54:b9:38:cd:61:60:7a:d3:17:ba:1d:45:fa:01:08:cb: 3d:1e:d4:4f:88:ed:fb:f4:dc:6b:4e:94:45:3c:a0:66:ea:e4: 72:8d:79:28:74:75:ed:23:23:39:a8:da:1f:64:7b:1e:a5:37: 65:fb:fb:75:25:7c:48:37:88:36:e0:68:20:43:9b:9e:ae:c1: e5:a7:65:70:21:9e:c4:20:f4:5e:d7:ba:d3:91:4f:cb:76:b5: 59:18:b9:70:89:95:e7:8a:c9:6e:87:d3:e5:66:02:4c:27:d0: e7:7c:0b:7c:28:10:47:52:02:96:a8:15:12:a9:be:6b:0b:93: 0c:c2:e3:21:b7:c3:d9:66:47:2f:79:50:96:84:24:13:60:0e: e7:37:97:ce:eb:59:c9:17:6a:8b:a3:f5:e4:7f:ba:7b:ee:35: 54:e2:1d:fa:9b:25:d5:6b:56:e7:ec:dc:01:d7:fa:27:d4:0c: 10:39:7c:4d:2f:ef:60:4e:b8:c8:79:32:fb:bc:f5:99:68:a4: 8e:3c:a0:8f:b5:c3:11:92:11:11:1e:96:cc:70:20:4b:78:3f: b3:11:22:72:c9:af:71:92:16:58:22:5a:34:34:a9:c5:66:75: 8e:f2:09:b5:b5:5f:88:c6:5c:99:c2:27:63:08:d8:14:47:0f: a3:d5:a4:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoQTVBQUVGQTc2MTUzNTM0Q0JCMEVCNjRCNjhDNDI5RjVE QzdGOUUwQTAeFw0yNTExMDMwNzM1MDhaFw0yNTExMTAwNzM1MDhaMBgxFjAUBgNV BAMTDTY5MDg1YjJjLTI2N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDckuU1YaKyQGJ+R31rzizFhMJwI5YPIPUH5i4Vi0l1gDZuTwPs42xQ3F8QUKQQ pRIiWxWdaZnnrjKcw5VVN2qw7su0N215oNLYtkU78iG7uv46qMl0LtyBWOTgARIB cCEdw3R4IW3CVjGvnXvpjiswbP2XSjqXypkkTSjiNG+sgYWZJ/V18jLNGJMev4TK Oe3l08VJ9s+/AEn5svAMM7uiL9jAEVawkjRZSJcpfn+WvZFAMR3ik+netdBluEw0 ry5Gzp2q96Dr2+GH9N1emFT7BBHMwR0qXGipwUQcq6RJQGsKCWW3a7t3iCYW8xYI k+ji6hfvdfiVcs3xs0Xdzd/BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPCdzl92o XBTRdMaDQRqI7usGEbEwHwYDVR0jBBgwFoAUparvp2FTU0y7DrZLaMQp9dx/ngow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0U5RTE0NzRDNjkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25n by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGFydnAyRlRVMHk3RHJaTGFNUXA5ZHhfbmdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0U5RTE0NzRDNjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5 N0RyWkxhTVFwOWR4X25nby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkPVLk4zWFgetMXuh1F+gEIyz0e1E+I7fv03GtOlEU8oGbq5HKNeSh0 de0jIzmo2h9kex6lN2X7+3UlfEg3iDbgaCBDm56uweWnZXAhnsQg9F7XutORT8t2 tVkYuXCJleeKyW6H0+VmAkwn0Od8C3woEEdSApaoFRKpvmsLkwzC4yG3w9lmRy95 UJaEJBNgDuc3l87rWckXaouj9eR/unvuNVTiHfqbJdVrVufs3AHX+ifUDBA5fE0v 72BOuMh5Mvu89ZlopI48oI+1wxGSEREelsxwIEt4P7MRInLJr3GSFlgiWjQ0qcVm dY7yCbW1X4jGXJnCJ2MI2BRHD6PVpEc= -----END CERTIFICATE-----Generated at Wed Nov 5 00:23:01 2025 by rpki-client