$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: tIVeUtCJAGwJlCs5Kjil5HqYR4g4Vyx6d9LNApNInpE= Subject key identifier: 88:1D:DC:03:55:05:04:83:0C:AA:76:34:D7:7B:A9:28:0C:DF:6D:8D Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 274E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 274E Signing time: Wed 02 Jul 2025 15:45:40 +0000 Manifest this update: Wed 02 Jul 2025 15:45:40 +0000 Manifest next update: Wed 09 Jul 2025 15:45:40 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: H1anFx0lPMKTCGsqNQlYsqI0YiDD2psmOul1nDKx62w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10062 (0x274e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: Jul 2 15:45:40 2025 GMT Not After : Jul 9 15:45:40 2025 GMT Subject: CN=68655424-7c95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c7:1f:49:de:c8:3e:6e:c3:5b:18:67:da:8c: 71:4f:a8:7e:d7:06:00:b1:18:97:41:c5:28:f4:96: 38:4d:d0:a0:a0:33:52:45:24:62:a4:d4:ae:da:11: db:3a:35:c1:6f:f5:64:b9:34:90:7b:ac:70:8d:48: 1a:86:a2:e2:87:49:99:e4:7e:57:97:29:75:df:3c: 9a:55:c4:a0:f3:f9:60:97:5f:50:43:3a:12:9c:fb: e3:b8:1f:5d:f9:ea:85:09:52:5e:ff:25:50:7e:b0: b7:81:d0:7b:04:1f:73:09:84:1b:62:08:e4:24:e5: 73:6e:33:d6:75:93:b8:ae:b8:de:a8:0a:d7:de:62: 4e:45:6b:85:ee:36:78:45:f7:aa:f2:57:6b:8a:45: 6e:2c:0b:18:0a:5a:6b:87:d7:58:90:8a:4d:7a:a6: 07:72:95:75:e3:6a:32:8b:b5:bc:56:5e:51:ef:b9: ec:5b:8c:41:f0:42:b8:31:04:b2:01:45:57:26:9b: 9d:b2:a1:63:01:3b:2e:e5:77:e0:57:db:7e:56:f0: b9:7d:88:fb:33:0d:d3:39:5a:1b:40:3e:01:eb:76: 33:ec:ed:b1:77:69:3a:b7:6a:ee:dd:12:71:0a:7b: 73:0e:d4:75:8d:d4:b9:83:42:2e:08:c7:ca:a2:61: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1D:DC:03:55:05:04:83:0C:AA:76:34:D7:7B:A9:28:0C:DF:6D:8D X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:bc:99:7a:a4:dc:81:13:8e:50:aa:97:b2:6e:77:ad:6a:0c: e5:dc:79:8e:69:81:87:2b:9a:af:5a:aa:0e:73:6e:1b:d1:56: 24:50:6e:30:1b:cd:35:d2:fb:2b:08:72:14:66:e1:53:cf:18: ca:87:54:1b:6c:ea:b7:05:ed:d3:7e:ac:af:67:9e:c3:ba:88: 96:99:1f:9f:8d:b1:3e:9f:03:69:db:1c:6f:97:e0:e1:3d:e1: ce:5f:ef:77:5f:3a:ca:8c:33:81:4b:74:9b:06:44:4b:a4:99: 41:3f:07:72:8f:d3:be:44:d9:aa:d2:db:90:c9:dd:77:13:b9: 18:b7:01:cf:f4:dd:4d:30:a0:2f:19:fb:d0:f1:67:ae:09:5b: 99:4a:fc:ea:e0:a5:0c:4f:66:95:39:ae:e6:9c:f4:06:7c:fa: e7:ae:27:c8:16:6a:a0:71:4f:7b:c7:23:d0:bb:81:37:d4:d7: 8a:ca:19:9c:45:11:d5:fd:42:e5:3e:ef:c1:0b:73:f4:ff:7d: 65:d8:e2:45:74:83:ac:1d:b0:28:76:02:b9:ce:13:5a:7b:a1: 6c:9e:fc:46:c7:4d:57:1a:a2:c8:75:b2:c4:bc:93:52:5e:e1: 91:c3:7e:03:cc:2b:9a:f6:e3:a2:6b:74:e8:3b:0e:43:a9:ff: b8:ee:70:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjUwNzAyMTU0NTQwWhcNMjUwNzA5MTU0NTQwWjAYMRYwFAYD VQQDEw02ODY1NTQyNC03Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuccfSd7IPm7DWxhn2oxxT6h+1wYAsRiXQcUo9JY4TdCgoDNSRSRipNSu2hHb OjXBb/VkuTSQe6xwjUgahqLih0mZ5H5Xlyl13zyaVcSg8/lgl19QQzoSnPvjuB9d +eqFCVJe/yVQfrC3gdB7BB9zCYQbYgjkJOVzbjPWdZO4rrjeqArX3mJORWuF7jZ4 Rfeq8ldrikVuLAsYClprh9dYkIpNeqYHcpV142oyi7W8Vl5R77nsW4xB8EK4MQSy AUVXJpudsqFjATsu5XfgV9t+VvC5fYj7Mw3TOVobQD4B63Yz7O2xd2k6t2ru3RJx CntzDtR1jdS5g0IuCMfKomG5VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIgd3ANV BQSDDKp2NNd7qSgM322NMB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDivJl6pNyBE45Qqpeybnetagzl3HmOaYGHK5qvWqoOc24b0VYkUG4w G8010vsrCHIUZuFTzxjKh1QbbOq3Be3TfqyvZ57DuoiWmR+fjbE+nwNp2xxvl+Dh PeHOX+93XzrKjDOBS3SbBkRLpJlBPwdyj9O+RNmq0tuQyd13E7kYtwHP9N1NMKAv GfvQ8WeuCVuZSvzq4KUMT2aVOa7mnPQGfPrnrifIFmqgcU97xyPQu4E31NeKyhmc RRHV/ULlPu/BC3P0/31l2OJFdIOsHbAodgK5zhNae6FsnvxGx01XGqLIdbLEvJNS XuGRw34DzCua9uOia3ToOw5Dqf+47nDx -----END CERTIFICATE-----Generated at Fri Jul 4 08:28:37 2025 by rpki-client