$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json) Hash identifier: 4SNnDNZmpL3Hxc04JfP0wPbJjU8XDsAKgMGBxSrvIlQ= Subject key identifier: E8:E7:25:93:50:B3:4D:20:B2:9B:F6:20:0C:E2:00:D7:9F:D6:01:E1 Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft Manifest number: 12 Signing time: Mon 25 Aug 2025 08:37:43 +0000 Manifest this update: Mon 25 Aug 2025 08:37:43 +0000 Manifest next update: Mon 01 Sep 2025 08:37:43 +0000 Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: 1i7J0r2B4S9IWjYaOpsHhaox8m65XrZQZHXLATLCwg0=) 2: B1291960691911F08409AD61C4F9AE02.roa (hash: hkVZ9bulChZT+JRQzeQV5xMH0Uf7jpvzU5/VZfM7gPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 01 Sep 2025 08:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Validity Not Before: Aug 25 08:37:43 2025 GMT Not After : Sep 1 08:37:43 2025 GMT Subject: CN=68ac20d7-b07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:d0:10:3f:16:09:0f:7b:5e:90:ad:71:b3: 1a:2e:48:81:3f:bc:af:10:d2:cc:53:34:90:a7:35: 25:87:a3:ad:58:eb:4a:b7:2e:b0:72:7a:cb:eb:0e: 29:59:04:34:fd:70:28:a4:0e:4e:13:1b:5f:77:ba: 7a:16:c6:dd:62:4c:99:6e:a8:31:9b:6d:e7:14:62: 29:86:e5:ff:88:cf:65:0f:6a:75:34:88:bf:cd:63: 23:2c:3e:47:04:26:7b:c4:9a:52:00:27:7a:71:94: e4:02:5e:24:af:9b:00:0b:c7:99:eb:08:d7:43:23: 8b:07:ef:2f:a2:57:24:f9:99:f7:ec:36:8c:bb:07: ec:1f:ec:75:65:88:99:49:e4:ec:74:9b:3a:c7:4b: d1:22:db:ed:d0:dd:fb:38:cd:34:d7:96:ff:1e:04: 9d:e1:31:da:63:79:bc:20:4e:45:eb:37:00:7e:4f: 2a:7c:b8:7c:ba:e4:c5:6d:07:6f:dc:98:2c:7b:d7: ff:05:8a:7f:06:d3:e2:bc:25:d5:d5:9f:a9:1e:c3: d2:c8:89:fb:a1:0f:83:02:ba:82:b0:d8:79:65:59: ac:3a:64:5a:fc:b0:cd:10:57:a3:6e:d4:4d:d8:50: 50:76:7b:90:51:5f:43:87:79:ad:d7:f0:b1:95:03: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E7:25:93:50:B3:4D:20:B2:9B:F6:20:0C:E2:00:D7:9F:D6:01:E1 X509v3 Authority Key Identifier: keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:66:53:78:23:ca:ea:de:29:b0:d6:d0:38:48:3b:27:50:27: 2d:5e:b9:06:47:f2:1c:e9:40:66:ab:71:c2:44:6c:34:4e:0a: 52:c1:8e:da:ed:b0:47:c6:13:13:e3:49:bb:c7:e9:f9:fe:99: 8d:f7:72:ca:0e:c2:09:e3:40:c6:1b:0c:e0:30:07:88:88:12: 47:6a:67:33:87:8d:71:f7:27:9b:07:73:b7:56:a8:14:c0:73: ea:62:eb:7a:12:27:a7:93:1a:a6:d0:93:49:04:5b:8f:6b:ca: 7a:58:9b:02:96:d2:5e:d7:43:3c:c3:89:85:ab:f5:65:98:db: 5a:bf:8e:a0:0f:94:9e:5d:01:c9:10:28:10:e7:ad:1b:cd:e5: 2f:4d:4b:06:12:9e:57:fa:51:3a:a4:b5:97:38:f4:ae:a9:c0: e0:c2:8c:23:a6:5f:b9:03:73:5e:e5:53:a9:b3:2c:22:04:59: 82:ea:bb:ff:51:eb:8e:55:cd:1d:f0:a7:50:af:19:7e:19:f0: 72:7d:50:ae:24:b5:33:7c:35:9e:5e:c4:b4:b5:97:89:7f:38: 66:f5:56:c2:fc:b5:ef:78:39:21:96:19:54:3a:fd:5b:2b:a8: 5d:bd:75:6e:c5:84:67:f8:1c:77:65:9e:69:18:82:77:2a:0a: a5:01:6a:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoQTVBQUVGQTc2MTUzNTM0Q0JCMEVCNjRCNjhDNDI5RjVE QzdGOUUwQTAeFw0yNTA4MjUwODM3NDNaFw0yNTA5MDEwODM3NDNaMBgxFjAUBgNV BAMTDTY4YWMyMGQ3LWIwN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ENAQPxYJD3tekK1xsxouSIE/vK8Q0sxTNJCnNSWHo61Y60q3LrByesvrDilZ BDT9cCikDk4TG193unoWxt1iTJluqDGbbecUYimG5f+Iz2UPanU0iL/NYyMsPkcE JnvEmlIAJ3pxlOQCXiSvmwALx5nrCNdDI4sH7y+iVyT5mffsNoy7B+wf7HVliJlJ 5Ox0mzrHS9Ei2+3Q3fs4zTTXlv8eBJ3hMdpjebwgTkXrNwB+Typ8uHy65MVtB2/c mCx71/8Fin8G0+K8JdXVn6kew9LIifuhD4MCuoKw2HllWaw6ZFr8sM0QV6Nu1E3Y UFB2e5BRX0OHea3X8LGVAx1JAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6Oclk1Cz TSCym/YgDOIA15/WAeEwHwYDVR0jBBgwFoAUparvp2FTU0y7DrZLaMQp9dx/ngow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0U5RTE0NzRDNjkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25n by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGFydnAyRlRVMHk3RHJaTGFNUXA5ZHhfbmdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0U5RTE0NzRDNjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5 N0RyWkxhTVFwOWR4X25nby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGpmU3gjyureKbDW0DhIOydQJy1euQZH8hzpQGarccJEbDROClLBjtrt sEfGExPjSbvH6fn+mY33csoOwgnjQMYbDOAwB4iIEkdqZzOHjXH3J5sHc7dWqBTA c+pi63oSJ6eTGqbQk0kEW49rynpYmwKW0l7XQzzDiYWr9WWY21q/jqAPlJ5dAckQ KBDnrRvN5S9NSwYSnlf6UTqktZc49K6pwODCjCOmX7kDc17lU6mzLCIEWYLqu/9R 645VzR3wp1CvGX4Z8HJ9UK4ktTN8NZ5exLS1l4l/OGb1VsL8te94OSGWGVQ6/Vsr qF29dW7FhGf4HHdlnmkYgncqCqUBao8= -----END CERTIFICATE-----Generated at Mon Aug 25 23:33:20 2025 by rpki-client