$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json) Hash identifier: xfHrH1enqBlDxxAWT24q/sdfg6p13Rlrz0i5rLh/bCQ= Subject key identifier: 76:C8:F9:43:33:22:8E:A8:79:0A:A4:79:BA:71:4C:3A:39:F5:73:EA Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft Manifest number: 2D Signing time: Fri 17 Oct 2025 11:26:59 +0000 Manifest this update: Fri 17 Oct 2025 11:26:58 +0000 Manifest next update: Fri 24 Oct 2025 11:26:58 +0000 Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: FOmSyajOin44td6pwDK60/06ADu0aJgD95RAjJUF6FY=) 2: B1291960691911F08409AD61C4F9AE02.roa (hash: hkVZ9bulChZT+JRQzeQV5xMH0Uf7jpvzU5/VZfM7gPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Validity Not Before: Oct 17 11:26:58 2025 GMT Not After : Oct 24 11:26:58 2025 GMT Subject: CN=68f22802-1565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:12:40:71:23:8b:69:1b:90:02:e4:31:8f:29: 1e:58:67:5d:eb:11:23:7a:87:f9:9f:63:a6:79:7d: f5:cc:7e:76:89:16:09:ba:5c:e0:f1:e6:cd:96:de: 86:f4:2c:0b:08:0a:3e:f2:cb:59:ec:b9:ab:0d:00: 81:0d:e9:91:de:20:fd:52:38:c0:19:47:5e:2d:b3: 36:15:b2:10:cf:6d:bc:46:90:31:bb:99:10:98:3d: 0f:d1:ce:d8:44:10:ba:22:76:7b:ba:8b:8f:af:bd: c5:e3:45:d8:97:cf:37:a2:ac:d0:10:4d:a6:a9:96: 57:59:94:57:58:d6:9c:57:09:c0:d8:09:09:87:81: 7d:97:31:c2:6f:54:dd:58:c7:8c:96:8b:a5:c0:53: d9:66:7a:17:2c:02:e0:27:70:56:ca:ae:24:85:63: 3b:8d:67:77:69:90:95:10:4c:64:05:9a:80:3c:60: b5:06:47:35:bb:14:f6:2c:ca:b6:57:b7:c3:42:f4: 08:cf:bf:30:36:66:a2:62:f5:4b:46:60:ce:0e:a7: 83:ff:c9:b4:88:0b:3b:9d:6a:cc:95:5c:1e:e4:a5: f0:84:b4:f3:c0:29:71:2a:32:77:04:2c:da:3b:7f: eb:e1:d8:b4:d5:90:80:bb:d7:9a:86:61:c9:ad:72: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C8:F9:43:33:22:8E:A8:79:0A:A4:79:BA:71:4C:3A:39:F5:73:EA X509v3 Authority Key Identifier: keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a7:f2:f0:e1:a0:6d:43:d6:68:5f:e5:4a:83:54:40:87:5f: 1f:c6:9e:1a:0f:1e:fb:2b:65:1f:02:a3:21:38:0d:a6:c4:2a: da:79:f3:dc:69:19:f7:fa:11:81:b3:c1:d1:ba:ee:d5:74:ea: c5:6c:86:d9:e2:f0:3b:20:2c:b2:09:dc:5c:25:5c:86:40:23: d5:6e:82:5c:05:aa:89:4f:b8:a9:29:aa:70:94:a1:97:56:0b: 54:41:6a:15:84:c8:94:cd:df:fe:fa:f8:2e:e1:ee:fa:94:f6: 78:9e:5c:ad:59:13:24:46:ef:4f:b7:b9:6c:e4:66:c1:d6:9c: 03:39:a6:06:28:f6:ee:36:7a:33:f0:ec:a4:37:8d:e6:82:c3: ba:ea:83:f4:b2:7d:9c:28:73:85:e7:33:c9:a0:3c:66:10:10: f1:59:0b:ef:36:7d:22:40:c8:a0:9b:70:a6:8f:dd:d9:c5:36: c7:d8:e2:15:b4:8c:67:5b:4f:b1:54:6b:21:62:98:c3:e7:cf: 75:65:38:78:6d:2e:70:80:fb:19:9c:ae:a5:54:7a:38:76:fe: c0:7c:76:9e:5f:e7:8d:8c:ff:d7:e1:75:af:04:b6:1f:40:90: 77:49:12:36:be:f8:d2:7f:8b:d7:ab:75:dd:dd:92:2f:6d:92: 27:eb:2d:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoQTVBQUVGQTc2MTUzNTM0Q0JCMEVCNjRCNjhDNDI5RjVE QzdGOUUwQTAeFw0yNTEwMTcxMTI2NThaFw0yNTEwMjQxMTI2NThaMBgxFjAUBgNV BAMTDTY4ZjIyODAyLTE1NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcEkBxI4tpG5AC5DGPKR5YZ13rESN6h/mfY6Z5ffXMfnaJFgm6XODx5s2W3ob0 LAsICj7yy1nsuasNAIEN6ZHeIP1SOMAZR14tszYVshDPbbxGkDG7mRCYPQ/RzthE ELoidnu6i4+vvcXjRdiXzzeirNAQTaaplldZlFdY1pxXCcDYCQmHgX2XMcJvVN1Y x4yWi6XAU9lmehcsAuAncFbKriSFYzuNZ3dpkJUQTGQFmoA8YLUGRzW7FPYsyrZX t8NC9AjPvzA2ZqJi9UtGYM4Op4P/ybSICzudasyVXB7kpfCEtPPAKXEqMncELNo7 f+vh2LTVkIC715qGYcmtckVxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdsj5QzMi jqh5CqR5unFMOjn1c+owHwYDVR0jBBgwFoAUparvp2FTU0y7DrZLaMQp9dx/ngow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0U5RTE0NzRDNjkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25n by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGFydnAyRlRVMHk3RHJaTGFNUXA5ZHhfbmdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0U5RTE0NzRDNjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5 N0RyWkxhTVFwOWR4X25nby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACyn8vDhoG1D1mhf5UqDVECHXx/GnhoPHvsrZR8CoyE4DabEKtp589xp Gff6EYGzwdG67tV06sVshtni8DsgLLIJ3FwlXIZAI9VuglwFqolPuKkpqnCUoZdW C1RBahWEyJTN3/76+C7h7vqU9nieXK1ZEyRG70+3uWzkZsHWnAM5pgYo9u42ejPw 7KQ3jeaCw7rqg/SyfZwoc4XnM8mgPGYQEPFZC+82fSJAyKCbcKaP3dnFNsfY4hW0 jGdbT7FUayFimMPnz3VlOHhtLnCA+xmcrqVUejh2/sB8dp5f542M/9fhda8Eth9A kHdJEja++NJ/i9erdd3dki9tkifrLYc= -----END CERTIFICATE-----Generated at Sat Oct 18 23:35:51 2025 by rpki-client