$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: Mpoj0xVsbW0AcEgVFheXVk7xi+x4m76OYW5/0y7MAho= Subject key identifier: 77:F0:E6:1E:3A:1B:5F:8A:F0:AE:E4:52:F1:55:FF:1D:48:96:57:1D Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 01BE Signing time: Sun 07 Sep 2025 03:21:31 +0000 Manifest this update: Sun 07 Sep 2025 03:21:30 +0000 Manifest next update: Sun 14 Sep 2025 03:21:30 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: f3tE7Yk3khLBtfhvC88Wenac82ZVJUMhY1RfgcU4ocY=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:21:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Sep 7 03:21:30 2025 GMT Not After : Sep 14 03:21:30 2025 GMT Subject: CN=68bcfa3b-1f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:56:65:50:06:76:cd:f4:02:5e:a3:8b:c1: bd:f5:c5:9f:37:b9:f7:99:ec:4b:df:d6:a7:b0:ef: 62:08:2c:d5:5a:82:36:d4:c9:42:b5:d6:5c:fb:33: 41:74:31:1a:78:86:10:ba:bf:53:bb:1c:a7:e2:c8: b0:83:b7:fe:00:24:b6:cf:6b:41:f2:e4:18:1d:29: 2c:01:ae:16:cc:9f:b5:58:a9:b3:bb:ee:0d:0c:a2: 66:9a:a6:45:65:cb:e7:30:f8:bf:52:af:35:ce:dd: 0f:54:62:f7:c8:ec:c0:cb:c3:7e:9d:3a:88:f6:e6: 89:9e:ad:1e:c6:6c:16:4d:61:bb:9e:8b:2e:93:25: 58:81:d8:cf:95:fe:06:fe:6f:c7:38:f6:7a:4e:12: 3c:92:3e:92:ee:ad:ac:1a:64:e8:31:7e:65:c3:8f: cb:a7:32:54:a9:fc:2d:00:e2:a3:b9:ed:7b:88:a8: bc:e6:ba:42:78:6f:d4:ab:5c:09:a1:93:86:ca:0c: b3:08:c7:02:3e:71:bb:84:46:68:4c:71:20:fe:da: bd:7a:7a:03:5c:02:24:b1:6b:08:b8:4c:3a:7e:8a: 23:7b:99:1b:cc:e5:e9:22:0d:e2:dc:26:98:3a:38: 57:9d:4b:bd:8d:23:6c:5f:d8:79:21:33:71:ec:4c: 97:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F0:E6:1E:3A:1B:5F:8A:F0:AE:E4:52:F1:55:FF:1D:48:96:57:1D X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:61:d8:aa:81:15:75:96:6e:60:bf:f7:75:49:9e:fc:bf:ff: 6f:32:9b:27:ab:29:60:73:68:b7:be:ea:67:4b:f2:19:49:5c: fe:03:91:5a:48:69:cb:20:1e:7d:07:60:2a:2e:dd:54:a5:13: 22:c2:6e:94:0b:26:c6:96:31:da:16:d6:33:10:5d:9f:62:c4: 12:cc:c0:40:10:e5:21:b3:0d:63:e2:66:33:09:db:fa:61:61: 49:42:7f:c3:66:63:96:c8:86:73:64:90:2f:ee:30:ea:bc:6c: 51:be:78:20:a4:74:c7:31:a4:e0:40:e6:af:11:71:3b:02:21: b8:88:8e:86:dc:09:2a:80:f5:bb:80:f8:2d:5a:68:a8:c6:d9: 31:06:c3:1c:0b:13:5e:84:20:d5:97:59:99:6d:68:8a:54:b3: 37:4f:fd:7d:e7:a4:69:16:74:97:59:94:bc:d9:84:82:6d:aa: ac:1a:cb:97:60:39:32:50:dd:bb:92:4c:da:42:2c:65:67:87: f5:fd:41:5b:30:41:48:6a:24:53:86:80:70:03:12:38:27:ea: 98:64:f4:f6:52:7e:8c:6f:e9:ad:a9:61:aa:97:48:2f:54:9e: 11:3d:3e:d4:51:93:28:ec:da:e8:a6:2a:0d:8e:37:48:b8:d2: 0d:9e:b0:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjUwOTA3MDMyMTMwWhcNMjUwOTE0MDMyMTMwWjAYMRYwFAYD VQQDEw02OGJjZmEzYi0xZjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoCVWZVAGds30Al6ji8G99cWfN7n3mexL39ansO9iCCzVWoI21MlCtdZc+zNB dDEaeIYQur9Tuxyn4siwg7f+ACS2z2tB8uQYHSksAa4WzJ+1WKmzu+4NDKJmmqZF ZcvnMPi/Uq81zt0PVGL3yOzAy8N+nTqI9uaJnq0exmwWTWG7nosukyVYgdjPlf4G /m/HOPZ6ThI8kj6S7q2sGmToMX5lw4/LpzJUqfwtAOKjue17iKi85rpCeG/Uq1wJ oZOGygyzCMcCPnG7hEZoTHEg/tq9enoDXAIksWsIuEw6fooje5kbzOXpIg3i3CaY OjhXnUu9jSNsX9h5ITNx7EyXswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfw5h46 G1+K8K7kUvFV/x1IllcdMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTYdiqgRV1lm5gv/d1SZ78v/9vMpsnqylgc2i3vupnS/IZSVz+A5Fa SGnLIB59B2AqLt1UpRMiwm6UCybGljHaFtYzEF2fYsQSzMBAEOUhsw1j4mYzCdv6 YWFJQn/DZmOWyIZzZJAv7jDqvGxRvnggpHTHMaTgQOavEXE7AiG4iI6G3AkqgPW7 gPgtWmioxtkxBsMcCxNehCDVl1mZbWiKVLM3T/1956RpFnSXWZS82YSCbaqsGsuX YDkyUN27kkzaQixlZ4f1/UFbMEFIaiRThoBwAxI4J+qYZPT2Un6Mb+mtqWGql0gv VJ4RPT7UUZMo7NropioNjjdIuNINnrAn -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:26 2025 by rpki-client