$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: Gtn+k9Aah+L7QFLFbSsSgzWO1g9Wb7Qdr8MGaE6skOM= Subject key identifier: F0:C6:87:28:E0:9B:8B:FE:75:E9:B8:1D:A0:49:B5:DC:47:24:3C:FE Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 2756 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 2756 Signing time: Fri 18 Jul 2025 15:44:39 +0000 Manifest this update: Fri 18 Jul 2025 15:44:38 +0000 Manifest next update: Fri 25 Jul 2025 15:44:38 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: gD/BxSRaNrHeERhCoMxaS6PA+QdEqeenyR8qO+poZjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:44:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10070 (0x2756) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: Jul 18 15:44:38 2025 GMT Not After : Jul 25 15:44:38 2025 GMT Subject: CN=687a6be7-9476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:b0:a6:e5:8b:b1:73:26:af:13:9b:f9:b0: bc:ca:07:a0:3a:03:90:bc:3e:a1:81:61:2b:e9:4b: fd:05:cb:4b:03:9d:48:86:95:14:50:7d:92:cd:9f: 91:bb:8c:02:cb:21:c1:cf:e5:8b:ad:78:07:45:6e: 3c:a6:03:b7:b7:77:ee:fe:00:15:9a:bb:72:22:0d: c8:1a:e4:50:2b:ab:c9:4a:e5:69:3f:3f:d1:d5:2c: b3:f8:92:61:77:7c:03:3f:93:c9:b2:e3:7f:4f:e4: 0c:2d:53:3a:56:2a:a6:b1:15:8a:66:86:3c:51:18: 37:3a:25:90:4e:43:0a:e5:3d:50:58:47:b9:c4:88: 40:fd:79:0a:29:f3:03:a7:a4:7b:a0:4e:40:6b:be: 1d:03:3f:53:3d:85:dd:08:8d:3e:ab:aa:ef:11:33: 43:ab:cb:80:14:6f:67:c4:8a:0f:26:31:ed:82:bb: e6:5b:9b:a7:ca:3d:67:34:9c:4d:65:e5:40:3a:32: 95:03:04:be:70:0e:f5:d3:5c:29:1e:66:50:be:aa: 28:c3:a3:c8:6e:0a:64:d0:36:52:ca:18:57:9c:c5: 4f:7d:80:65:05:d2:f5:54:5c:98:59:dc:03:3e:15: 52:33:4f:c5:a1:5e:5c:ac:9e:a0:f1:64:a6:56:90: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C6:87:28:E0:9B:8B:FE:75:E9:B8:1D:A0:49:B5:DC:47:24:3C:FE X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:a1:5c:1d:87:de:3b:23:e9:be:41:ad:e2:aa:34:13:6e:31: c1:d6:70:f4:31:3a:92:0e:ea:1e:c4:77:c3:c5:d6:9c:47:0f: ed:a3:2e:13:df:11:c3:d8:cd:77:01:3d:ca:cf:23:26:d8:08: b6:89:ec:01:60:a4:f8:7f:3a:60:8f:56:30:52:e1:a3:45:67: 1c:5d:26:e2:f2:b4:f2:93:08:17:f0:79:f8:8e:e3:a6:e1:1a: 53:f1:44:a8:4c:77:ea:26:5e:09:98:c9:92:2a:0a:c5:fe:fb: 25:e2:5a:9c:af:52:16:0d:49:21:b6:9a:46:fc:57:17:6f:a3: 7b:d8:65:fa:bd:b9:4a:0c:b5:07:43:fe:49:92:93:34:0a:5d: b2:36:9b:38:4f:b8:f4:8a:6c:d1:a4:42:c3:f0:36:71:c5:bc: 59:7d:0b:4a:af:e1:6c:e4:99:8a:9d:42:45:16:8f:50:71:93: b5:7e:68:d4:10:f4:56:fa:60:a3:99:33:c8:7d:13:fe:ce:b3: 8f:8a:57:b1:dd:3b:10:26:1a:eb:ea:a3:64:c0:11:c4:1d:be: a0:82:db:d6:8b:6f:96:85:52:a8:d4:f3:b7:d2:ae:d7:66:a7: 12:b9:65:e4:33:9d:61:66:cc:f3:55:39:6c:bc:d4:75:21:ab: 03:63:3b:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ1YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjUwNzE4MTU0NDM4WhcNMjUwNzI1MTU0NDM4WjAYMRYwFAYD VQQDEw02ODdhNmJlNy05NDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraWwpuWLsXMmrxOb+bC8ygegOgOQvD6hgWEr6Uv9BctLA51IhpUUUH2SzZ+R u4wCyyHBz+WLrXgHRW48pgO3t3fu/gAVmrtyIg3IGuRQK6vJSuVpPz/R1Syz+JJh d3wDP5PJsuN/T+QMLVM6ViqmsRWKZoY8URg3OiWQTkMK5T1QWEe5xIhA/XkKKfMD p6R7oE5Aa74dAz9TPYXdCI0+q6rvETNDq8uAFG9nxIoPJjHtgrvmW5unyj1nNJxN ZeVAOjKVAwS+cA7101wpHmZQvqoow6PIbgpk0DZSyhhXnMVPfYBlBdL1VFyYWdwD PhVSM0/FoV5crJ6g8WSmVpDyOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDGhyjg m4v+dem4HaBJtdxHJDz+MB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSoVwdh947I+m+Qa3iqjQTbjHB1nD0MTqSDuoexHfDxdacRw/toy4T 3xHD2M13AT3KzyMm2Ai2iewBYKT4fzpgj1YwUuGjRWccXSbi8rTykwgX8Hn4juOm 4RpT8USoTHfqJl4JmMmSKgrF/vsl4lqcr1IWDUkhtppG/FcXb6N72GX6vblKDLUH Q/5JkpM0Cl2yNps4T7j0imzRpELD8DZxxbxZfQtKr+Fs5JmKnUJFFo9QcZO1fmjU EPRW+mCjmTPIfRP+zrOPilex3TsQJhrr6qNkwBHEHb6ggtvWi2+WhVKo1PO30q7X ZqcSuWXkM51hZszzVTlsvNR1IasDYzts -----END CERTIFICATE-----Generated at Sun Jul 20 04:29:03 2025 by rpki-client