$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft File: Ngra_oYcSDq21UqjQPuE0kur8hs.mft (raw, json) Hash identifier: bWsW/pf/InJ2dKW9EMxzZvUo5NNKU3ptOeoE5a+44GA= Subject key identifier: 59:56:2E:B9:59:BA:5C:0E:04:29:8E:74:70:5F:AE:92:60:D5:F8:19 Authority key identifier: 36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B Certificate issuer: /CN=A914E4C3/serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Certificate serial: 2736 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft Manifest number: 2736 Signing time: Fri 16 May 2025 15:52:12 +0000 Manifest this update: Fri 16 May 2025 15:52:12 +0000 Manifest next update: Fri 23 May 2025 15:52:12 +0000 Files and hashes: 1: Ngra_oYcSDq21UqjQPuE0kur8hs.crl (hash: Q3LR9XZzjsQMcedDQCYhd9RTJQP8WmnkzUcm4A60IXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10038 (0x2736) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4C3, serialNumber=360ADAFE861C483AB6D54AA340FB84D24BABF21B Validity Not Before: May 16 15:52:12 2025 GMT Not After : May 23 15:52:12 2025 GMT Subject: CN=68275f2c-405f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:a9:5c:a3:37:c7:7d:49:32:d7:ed:b5:35: bc:84:68:c4:e9:3c:b6:1d:93:f8:40:77:8b:14:5e: 89:a2:85:ca:5c:33:77:5b:db:38:c3:d6:b3:7c:c3: 5f:ca:a2:3e:37:ac:ca:88:de:56:31:2d:2e:f5:22: 43:e0:92:5d:03:ae:03:fe:fa:4f:5f:cf:34:92:ae: 8a:20:1a:4e:7d:95:1d:13:86:47:49:d5:6c:90:0a: a7:91:9b:83:6f:7c:be:94:f5:ae:5f:8c:90:e4:dd: 6e:c1:11:50:f6:92:49:5b:a2:25:a1:ed:1a:39:78: 89:67:02:79:6e:39:eb:d1:2b:eb:9a:3d:77:77:71: c6:2d:5d:e9:aa:27:f7:1b:2f:54:fc:fb:11:17:95: 12:af:59:3f:59:bb:b9:2c:34:04:c9:00:a2:1e:57: f0:a0:d0:73:3a:09:c2:c3:70:8b:6c:46:fd:40:e9: b2:ba:6c:d8:e8:73:48:f3:9d:05:14:ff:11:21:da: 37:6b:29:07:0f:97:89:99:d8:4c:52:c7:45:bb:66: c5:62:72:93:33:45:13:90:ff:99:77:8c:7f:87:46: f2:83:d8:a7:c9:5f:81:c5:df:2e:52:3f:4d:04:5d: 6f:14:2c:d3:30:aa:af:2d:d2:2b:ea:e8:d9:81:d8: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:56:2E:B9:59:BA:5C:0E:04:29:8E:74:70:5F:AE:92:60:D5:F8:19 X509v3 Authority Key Identifier: keyid:36:0A:DA:FE:86:1C:48:3A:B6:D5:4A:A3:40:FB:84:D2:4B:AB:F2:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ngra_oYcSDq21UqjQPuE0kur8hs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/18ED3828B8B911E4901A6848C4F9AE02/Ngra_oYcSDq21UqjQPuE0kur8hs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:68:4d:a7:95:99:14:64:1a:1c:e7:1d:8c:bc:2e:83:a8:06: 3d:ff:67:38:a9:17:6d:e6:ec:10:df:03:16:73:81:a1:6b:53: 6d:d5:64:c5:2b:17:8a:d8:54:ab:a7:1b:e2:8a:9a:d0:a9:6f: bc:83:e2:e5:e7:21:98:22:3e:f6:ab:7b:17:01:98:cd:01:b1: 44:4d:fa:09:8c:ac:09:95:cb:30:26:7c:79:29:2b:92:2f:a3: d8:ca:e3:2e:0c:b5:ff:d3:8d:f8:fe:0b:f2:a6:f9:fa:65:17: 53:f1:7b:9b:08:06:3e:b1:96:4f:40:22:08:69:48:07:93:3e: 2c:11:86:d0:6b:6d:1b:ef:31:a7:f9:8f:f9:89:98:4f:a7:44: 95:99:f8:7d:18:fa:70:e0:5e:af:6f:e7:49:f1:4d:2e:1d:8d: 7b:e1:7d:b6:38:11:05:e9:75:fd:b6:08:82:50:9b:30:d1:2c: 45:f8:4a:7c:aa:b6:33:6e:e9:d6:3f:fa:56:bb:1a:e0:45:bf: 6c:1e:94:75:91:15:ba:d1:8e:4e:45:38:92:44:7c:ac:fd:2f: e8:36:10:c6:fc:86:19:44:1c:f1:0e:5b:b2:fd:fb:3c:38:65: 57:a6:ef:d8:87:38:e7:e3:72:98:2b:be:42:c2:a0:0b:50:af: 9a:1c:fa:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU0QzMxMTAvBgNVBAUTKDM2MEFEQUZFODYxQzQ4M0FCNkQ1NEFBMzQwRkI4NEQy NEJBQkYyMUIwHhcNMjUwNTE2MTU1MjEyWhcNMjUwNTIzMTU1MjEyWjAYMRYwFAYD VQQDEw02ODI3NWYyYy00MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlipXKM3x31JMtfttTW8hGjE6Ty2HZP4QHeLFF6JooXKXDN3W9s4w9azfMNf yqI+N6zKiN5WMS0u9SJD4JJdA64D/vpPX880kq6KIBpOfZUdE4ZHSdVskAqnkZuD b3y+lPWuX4yQ5N1uwRFQ9pJJW6Iloe0aOXiJZwJ5bjnr0Svrmj13d3HGLV3pqif3 Gy9U/PsRF5USr1k/Wbu5LDQEyQCiHlfwoNBzOgnCw3CLbEb9QOmyumzY6HNI850F FP8RIdo3aykHD5eJmdhMUsdFu2bFYnKTM0UTkP+Zd4x/h0byg9inyV+Bxd8uUj9N BF1vFCzTMKqvLdIr6ujZgdiYpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlWLrlZ ulwOBCmOdHBfrpJg1fgZMB8GA1UdIwQYMBaAFDYK2v6GHEg6ttVKo0D7hNJLq/Ib MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8xOEVEMzgyOEI4 QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NEcTIxVXFqUVB1RTBrdXI4 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05ncmFfb1ljU0RxMjFVcWpRUHVFMGt1cjhocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTRDMy8xOEVEMzgyOEI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi9OZ3JhX29ZY1NE cTIxVXFqUVB1RTBrdXI4aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWaE2nlZkUZBoc5x2MvC6DqAY9/2c4qRdt5uwQ3wMWc4Gha1Nt1WTF KxeK2FSrpxviiprQqW+8g+Ll5yGYIj72q3sXAZjNAbFETfoJjKwJlcswJnx5KSuS L6PYyuMuDLX/0434/gvypvn6ZRdT8XubCAY+sZZPQCIIaUgHkz4sEYbQa20b7zGn +Y/5iZhPp0SVmfh9GPpw4F6vb+dJ8U0uHY174X22OBEF6XX9tgiCUJsw0SxF+Ep8 qrYzbunWP/pWuxrgRb9sHpR1kRW60Y5ORTiSRHys/S/oNhDG/IYZRBzxDluy/fs8 OGVXpu/Yhzjn43KYK75CwqALUK+aHPo5 -----END CERTIFICATE-----Generated at Sat May 17 00:04:17 2025 by rpki-client