$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft File: ngVdNc8yklM1zJQMyIKLY91gcws.mft (raw, json) Hash identifier: mCIhb5Z+Lk/3x7JIK4+OFQtKAeFU6NZWjEzj3fptwhw= Subject key identifier: 8E:46:9D:F4:6F:F5:CA:CD:A2:19:23:7C:64:8D:31:EF:0D:C3:19:8F Authority key identifier: 9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B Certificate issuer: /CN=A915BC2A/serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft Manifest number: 01B6 Signing time: Sat 23 Aug 2025 03:11:40 +0000 Manifest this update: Sat 23 Aug 2025 03:11:39 +0000 Manifest next update: Sat 30 Aug 2025 03:11:39 +0000 Files and hashes: 1: ngVdNc8yklM1zJQMyIKLY91gcws.crl (hash: q2PAWP4eJ6N7EtNjwQ6+cUoJnCiRPG7Egu6KIvwT1I4=) 2: 3A173FE4DE1C11ED8935D41DC4F9AE02.roa (hash: YAYh7VPX1+fJkNqhGMAOJAwYwHnzOloh8Ae+N/XNZQY=) 3: 398211B2DE1C11ED8935D41DC4F9AE02.roa (hash: 0dIV1BuMrGTI1eJ/F5rbagneYyyNugrEiUlk6vS+T68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BC2A, serialNumber=9E055D35CF32925335CC940CC8828B63DD60730B Validity Not Before: Aug 23 03:11:39 2025 GMT Not After : Aug 30 03:11:39 2025 GMT Subject: CN=68a9316b-fce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:54:5e:60:45:90:8e:5f:62:c8:8e:ef:15:37: 08:25:a8:89:ff:67:ae:cd:27:ed:52:81:34:1b:cb: a3:2c:2b:dc:1f:ad:e1:2d:18:53:53:9d:89:35:aa: 0c:95:55:a3:fb:39:f1:d6:e8:16:ab:d8:f9:fd:97: d0:7a:69:a6:63:12:fd:45:c6:0b:cf:2b:9c:05:08: ac:76:7d:32:2a:2d:60:fa:99:30:23:82:a1:7f:fe: 1c:bc:3b:08:b6:a4:58:6a:c7:d3:ac:8d:94:e7:f5: 80:17:89:a2:5d:fa:e1:39:43:4a:e4:50:eb:d1:23: a9:ce:51:36:c5:97:f7:9e:06:b5:3b:11:a7:35:9e: d2:8b:15:12:73:7f:fc:0b:6e:13:1f:c6:e9:2e:b4: c3:42:eb:ad:41:78:64:dc:43:c6:5b:da:c2:7d:6e: a7:7e:20:78:43:f6:b0:fe:da:1e:de:24:12:b5:b1: 12:62:5d:22:f0:1f:bc:da:0b:98:bd:9c:23:40:4f: 73:3e:63:8d:60:4d:df:21:76:91:84:26:8c:64:3f: 22:01:71:5f:a1:68:b3:4f:6a:d3:b2:96:42:89:d6: 82:20:58:ed:47:65:35:3b:94:bc:e3:5d:06:d4:c8: 04:75:65:7e:67:f8:bb:01:12:9f:19:85:43:2c:d1: 63:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:46:9D:F4:6F:F5:CA:CD:A2:19:23:7C:64:8D:31:EF:0D:C3:19:8F X509v3 Authority Key Identifier: keyid:9E:05:5D:35:CF:32:92:53:35:CC:94:0C:C8:82:8B:63:DD:60:73:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ngVdNc8yklM1zJQMyIKLY91gcws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC2A/ED9F8DBADE1111ED85EC0A49C4F9AE02/ngVdNc8yklM1zJQMyIKLY91gcws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4f:86:88:c3:5a:e7:cc:92:81:11:f2:39:40:c4:e4:81:e7: e3:83:db:fd:02:b5:a8:af:60:ea:db:d4:f1:19:bd:1a:d4:ed: c5:54:1f:8f:28:62:03:ba:f7:8d:32:8b:14:1e:60:85:fa:f8: c3:34:8b:8f:af:2d:67:94:72:1b:bd:83:aa:ba:91:8f:70:a4: bc:e7:de:2a:fd:b1:28:38:15:61:53:a4:95:52:19:4e:07:36: 74:0b:05:94:65:f7:6f:d3:bc:ad:ab:2e:7d:ed:9b:fe:c2:21: 53:a8:95:3e:40:6b:bf:81:d3:bb:3e:1a:13:f1:c6:5d:02:3e: a2:f8:0f:bd:68:c7:51:da:be:d6:23:ae:92:33:70:fd:d0:c8: af:ca:69:32:b0:01:c5:64:b0:29:4a:b7:48:0e:6c:0e:a3:4e: 5d:7a:72:eb:d3:74:d5:71:e5:a8:c1:39:e6:2f:59:04:58:ca: b2:44:3f:bf:0c:4b:a2:2d:56:ae:35:4f:bd:d6:c4:bd:31:ea: 8f:bb:6c:02:35:99:c5:b5:5e:67:f8:8c:f6:44:0b:b8:e8:85: 62:ba:42:15:83:b0:72:85:e4:15:fb:ed:72:73:73:a0:d7:e9: 2f:44:4d:81:6e:4b:50:ed:fd:b0:f5:1a:fa:88:fb:fc:09:81: 82:38:b3:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJDMkExMTAvBgNVBAUTKDlFMDU1RDM1Q0YzMjkyNTMzNUNDOTQwQ0M4ODI4QjYz REQ2MDczMEIwHhcNMjUwODIzMDMxMTM5WhcNMjUwODMwMDMxMTM5WjAYMRYwFAYD VQQDEw02OGE5MzE2Yi1mY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2VReYEWQjl9iyI7vFTcIJaiJ/2euzSftUoE0G8ujLCvcH63hLRhTU52JNaoM lVWj+znx1ugWq9j5/ZfQemmmYxL9RcYLzyucBQisdn0yKi1g+pkwI4Khf/4cvDsI tqRYasfTrI2U5/WAF4miXfrhOUNK5FDr0SOpzlE2xZf3nga1OxGnNZ7SixUSc3/8 C24TH8bpLrTDQuutQXhk3EPGW9rCfW6nfiB4Q/aw/toe3iQStbESYl0i8B+82guY vZwjQE9zPmONYE3fIXaRhCaMZD8iAXFfoWizT2rTspZCidaCIFjtR2U1O5S8410G 1MgEdWV+Z/i7ARKfGYVDLNFjUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5GnfRv 9crNohkjfGSNMe8NwxmPMB8GA1UdIwQYMBaAFJ4FXTXPMpJTNcyUDMiCi2PdYHML MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkMyQS9FRDlGOERCQURF MTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWtsTTF6SlFNeUlLTFk5MWdj d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25nVmROYzh5a2xNMXpKUU15SUtMWTkxZ2N3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkMyQS9FRDlGOERCQURFMTExMUVEODVFQzBBNDlDNEY5QUUwMi9uZ1ZkTmM4eWts TTF6SlFNeUlLTFk5MWdjd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCT4aIw1rnzJKBEfI5QMTkgefjg9v9ArWor2Dq29TxGb0a1O3FVB+P KGIDuveNMosUHmCF+vjDNIuPry1nlHIbvYOqupGPcKS8594q/bEoOBVhU6SVUhlO BzZ0CwWUZfdv07ytqy597Zv+wiFTqJU+QGu/gdO7PhoT8cZdAj6i+A+9aMdR2r7W I66SM3D90MivymkysAHFZLApSrdIDmwOo05denLr03TVceWowTnmL1kEWMqyRD+/ DEuiLVauNU+91sS9MeqPu2wCNZnFtV5n+Iz2RAu46IViukIVg7ByheQV++1yc3Og 1+kvRE2BbktQ7f2w9Rr6iPv8CYGCOLM5 -----END CERTIFICATE-----Generated at Sat Aug 23 14:19:13 2025 by rpki-client