$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: TnaABuobjEwkz4CSpcNOBdv3fxEL9jA7V0LHLLeJD7Y= Subject key identifier: 93:90:F2:4C:07:54:4C:44:A7:AA:D3:1F:DE:D6:28:39:3E:53:26:38 Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 2786 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 2786 Signing time: Mon 20 Oct 2025 15:49:30 +0000 Manifest this update: Mon 20 Oct 2025 15:49:29 +0000 Manifest next update: Mon 27 Oct 2025 15:49:29 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: hzXkOqhfLEnitcArcyHWOj+GAt9enEoD+aN1dbBIDLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 15:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10118 (0x2786) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: Oct 20 15:49:29 2025 GMT Not After : Oct 27 15:49:29 2025 GMT Subject: CN=68f65a0a-24c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:40:93:5a:27:45:81:43:2f:44:7c:d6:0d: 3a:8f:c5:3e:d6:9a:0f:04:3f:ac:4f:0b:c5:bc:b0: 9a:db:b5:5f:6d:a3:8b:36:58:99:67:d8:9b:8c:4a: 52:fb:c6:4c:35:c8:0c:77:7a:0a:9e:20:24:9b:49: d1:0e:85:c5:53:15:c1:e3:31:f7:c1:66:f1:1d:f3: 55:70:b8:f6:33:42:5e:6c:33:66:b1:ad:e8:e7:35: 96:8e:d6:7f:e0:d5:1d:67:cf:18:62:55:15:a9:55: 77:02:5c:6f:79:0b:ba:a2:8e:24:9b:49:ff:d6:27: ae:f7:ae:34:b7:44:50:98:ba:86:f4:0f:cd:05:ee: ea:aa:53:b0:b3:0a:27:bf:f9:48:63:6c:41:7b:b3: b3:f2:f2:e9:a1:a6:84:c2:44:57:9a:5f:5c:85:d0: c1:06:05:23:b3:fd:47:98:09:e0:fa:b8:5e:68:af: 2b:26:8d:a1:0b:0e:49:67:72:d6:51:6f:4e:2c:7e: 7a:cd:3f:9c:c4:25:1a:0a:bc:7a:23:8c:4e:d6:ca: ef:08:2f:80:f8:6f:72:ab:36:85:ed:7e:5e:7c:f3: 59:a2:39:f9:66:1c:d8:50:b1:10:5f:98:15:1a:79: 57:0c:62:17:c0:5a:75:43:14:6b:14:ee:df:63:98: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:90:F2:4C:07:54:4C:44:A7:AA:D3:1F:DE:D6:28:39:3E:53:26:38 X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f7:3f:e1:57:e2:5d:43:38:5b:7b:84:f3:08:2e:9d:3b:f4: 3d:e7:48:42:e2:2c:00:ea:3f:be:1f:14:17:86:ca:80:3f:68: 27:f1:2c:7d:d9:12:a7:c4:9d:ed:c9:9d:d9:59:47:df:cf:f1: c5:5a:4f:f3:3a:7f:46:ee:f5:65:35:6f:af:f8:d3:d6:9f:27: 57:c8:de:b1:1b:e2:a0:81:4f:06:85:74:24:ce:11:2a:09:df: d0:6b:a2:63:da:e2:15:09:b9:34:ec:6f:20:6e:a8:18:cc:0f: a7:06:60:de:80:ca:54:2f:a2:66:c7:d0:61:5a:73:e5:36:08: 19:65:88:2e:23:d3:d3:57:9e:7f:9d:93:a8:0b:ab:b9:b1:4a: dc:40:93:81:c8:b6:2f:03:4c:a5:ec:fa:f5:80:9a:ea:b5:83: 8d:a0:22:bf:51:39:38:ba:8f:a4:36:06:0d:4c:3e:04:5d:95: 26:ce:4b:52:00:38:95:73:e0:1d:bd:f5:2e:33:77:e7:98:a1: 5f:6e:6f:4b:5c:fb:8e:2e:96:2e:25:ef:46:48:a1:c7:a0:c6: bb:95:ba:fb:16:31:4e:82:0a:ac:20:82:8d:59:ab:11:65:24: 31:50:4d:af:bd:cc:89:cd:15:eb:94:84:67:a2:ce:3a:ca:5b: c7:2a:57:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ4YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjUxMDIwMTU0OTI5WhcNMjUxMDI3MTU0OTI5WjAYMRYwFAYD VQQDEw02OGY2NWEwYS0yNGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/9Ak1onRYFDL0R81g06j8U+1poPBD+sTwvFvLCa27VfbaOLNliZZ9ibjEpS +8ZMNcgMd3oKniAkm0nRDoXFUxXB4zH3wWbxHfNVcLj2M0JebDNmsa3o5zWWjtZ/ 4NUdZ88YYlUVqVV3AlxveQu6oo4km0n/1ieu9640t0RQmLqG9A/NBe7qqlOwswon v/lIY2xBe7Oz8vLpoaaEwkRXml9chdDBBgUjs/1HmAng+rheaK8rJo2hCw5JZ3LW UW9OLH56zT+cxCUaCrx6I4xO1srvCC+A+G9yqzaF7X5efPNZojn5ZhzYULEQX5gV GnlXDGIXwFp1QxRrFO7fY5hzpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJOQ8kwH VExEp6rTH97WKDk+UyY4MB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA99z/hV+JdQzhbe4TzCC6dO/Q950hC4iwA6j++HxQXhsqAP2gn8Sx9 2RKnxJ3tyZ3ZWUffz/HFWk/zOn9G7vVlNW+v+NPWnydXyN6xG+KggU8GhXQkzhEq Cd/Qa6Jj2uIVCbk07G8gbqgYzA+nBmDegMpUL6Jmx9BhWnPlNggZZYguI9PTV55/ nZOoC6u5sUrcQJOByLYvA0yl7Pr1gJrqtYONoCK/UTk4uo+kNgYNTD4EXZUmzktS ADiVc+AdvfUuM3fnmKFfbm9LXPuOLpYuJe9GSKHHoMa7lbr7FjFOggqsIIKNWasR ZSQxUE2vvcyJzRXrlIRnos46ylvHKlfP -----END CERTIFICATE-----Generated at Tue Oct 21 10:42:12 2025 by rpki-client