$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: XZcrLii8OWS/fEcOipZ6VuPp1VnyidmNidtWYsBW9rE= Subject key identifier: 58:7D:19:EE:0E:A0:AF:30:88:98:16:B2:E5:03:1B:F1:6A:3A:2F:6B Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 2768 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 2768 Signing time: Fri 22 Aug 2025 15:41:28 +0000 Manifest this update: Fri 22 Aug 2025 15:41:27 +0000 Manifest next update: Fri 29 Aug 2025 15:41:27 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: u5K1DkocAAw+aS0toIJf+Gfu6bENh5VA9Nmns4/FojM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10088 (0x2768) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: Aug 22 15:41:27 2025 GMT Not After : Aug 29 15:41:27 2025 GMT Subject: CN=68a88fa7-f1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:cc:d1:a7:7c:c8:47:b7:92:d7:3d:a5:58: d7:0d:df:0f:4f:e0:d3:e2:01:c9:02:1b:45:b4:75: 1f:49:65:4b:c2:16:b6:13:cc:b1:bb:76:95:39:f5: 0d:41:60:f2:19:36:01:9c:aa:7e:1d:97:b9:9a:71: 67:ca:f4:fe:99:ce:81:10:f1:45:57:18:e2:83:79: 25:a6:b4:73:fb:0f:09:4a:32:fc:2f:7f:cd:7e:d7: 18:ff:00:f9:00:6e:6c:9d:70:da:b5:41:02:e3:9e: 3d:5a:0d:eb:79:2e:62:92:1c:09:a2:e3:47:00:54: de:93:c9:42:34:09:a9:f9:54:04:b3:20:a7:c6:c5: 87:82:b1:b7:bc:a3:44:48:75:0d:10:d2:23:0d:8b: cb:4a:ca:0d:51:64:9b:73:4b:77:6a:e7:eb:99:37: bb:3b:12:0b:16:3a:6a:b2:b1:bb:c2:21:96:b8:78: 6d:cb:a2:19:44:43:b1:06:32:a9:f9:e1:08:f8:a1: db:00:3f:f8:38:99:e1:c5:d9:33:ee:f5:f8:df:db: b7:08:cf:f3:8a:fd:7d:58:37:d6:7b:be:e1:90:32: 2b:5c:40:f3:a4:b1:c1:6c:b0:24:3c:ad:1e:d2:5a: a7:c0:76:36:87:e5:c3:7a:8d:b3:68:df:7c:f6:15: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7D:19:EE:0E:A0:AF:30:88:98:16:B2:E5:03:1B:F1:6A:3A:2F:6B X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:b3:64:c9:16:0b:8c:02:e0:71:91:c5:45:93:36:c6:90:11: 9c:5f:f7:52:a6:f3:91:70:53:c0:75:e9:91:ba:a6:b0:a3:6e: 5b:e2:84:93:a0:2b:3f:e7:11:f0:69:04:60:d3:c8:d4:f2:4f: c7:39:68:34:eb:f7:85:bc:9b:ef:09:a4:26:45:55:13:e0:28: d5:6f:6b:99:07:b9:c8:eb:81:82:3d:77:a7:9d:62:b2:c3:06: d0:f5:4b:2e:ee:52:f0:ce:83:c9:ee:d5:fd:0e:b0:b6:5b:ae: 66:4a:fd:20:5e:00:24:bf:06:d0:f2:77:18:6e:5f:26:6f:a8: d5:59:75:e9:56:7f:24:0e:f2:9d:65:f3:0b:fc:ae:57:00:c5: 6a:45:4e:d3:f9:00:2f:4e:3b:8c:18:39:97:f6:9b:1d:4c:2b: e4:f5:fb:26:f7:95:0d:7a:b2:49:1b:5d:4b:61:fa:7c:cd:33: d9:2b:ec:0d:b5:bc:38:38:c9:cc:93:86:d1:46:14:ff:d1:87: bd:80:d1:03:d2:4c:f4:f3:6a:4d:22:b8:43:8a:76:e9:22:28: af:a6:da:9a:7c:b1:a6:99:2c:98:22:3e:a7:22:0f:35:b4:c1: 4c:29:68:26:69:14:08:64:1c:1f:86:63:6f:b0:63:2e:0c:61: 4c:4a:87:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjUwODIyMTU0MTI3WhcNMjUwODI5MTU0MTI3WjAYMRYwFAYD VQQDEw02OGE4OGZhNy1mMWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPzM0ad8yEe3ktc9pVjXDd8PT+DT4gHJAhtFtHUfSWVLwha2E8yxu3aVOfUN QWDyGTYBnKp+HZe5mnFnyvT+mc6BEPFFVxjig3klprRz+w8JSjL8L3/NftcY/wD5 AG5snXDatUEC4549Wg3reS5ikhwJouNHAFTek8lCNAmp+VQEsyCnxsWHgrG3vKNE SHUNENIjDYvLSsoNUWSbc0t3aufrmTe7OxILFjpqsrG7wiGWuHhty6IZREOxBjKp +eEI+KHbAD/4OJnhxdkz7vX439u3CM/ziv19WDfWe77hkDIrXEDzpLHBbLAkPK0e 0lqnwHY2h+XDeo2zaN989hU4NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFh9Ge4O oK8wiJgWsuUDG/FqOi9rMB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHs2TJFguMAuBxkcVFkzbGkBGcX/dSpvORcFPAdemRuqawo25b4oST oCs/5xHwaQRg08jU8k/HOWg06/eFvJvvCaQmRVUT4CjVb2uZB7nI64GCPXennWKy wwbQ9Usu7lLwzoPJ7tX9DrC2W65mSv0gXgAkvwbQ8ncYbl8mb6jVWXXpVn8kDvKd ZfML/K5XAMVqRU7T+QAvTjuMGDmX9psdTCvk9fsm95UNerJJG11LYfp8zTPZK+wN tbw4OMnMk4bRRhT/0Ye9gNED0kz082pNIrhDinbpIiivptqafLGmmSyYIj6nIg81 tMFMKWgmaRQIZBwfhmNvsGMuDGFMSoce -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:32 2025 by rpki-client