$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json) Hash identifier: +ysFv4XvRKee3beAWJrkrMC4IHpfA6kv45U0NrdzF78= Subject key identifier: 43:B4:4A:0B:A9:B5:CA:30:5C:48:30:C6:D7:26:D3:4F:8F:F4:D3:E3 Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:18:09 +0000 Manifest this update: Sat 23 Aug 2025 08:18:08 +0000 Manifest next update: Sat 30 Aug 2025 08:18:08 +0000 Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: 16G1d6mKxD8JJTTj1UpTrJHkGJ8/+69RZMTezaRYt8w=) 2: B1291960691911F08409AD61C4F9AE02.roa (hash: hkVZ9bulChZT+JRQzeQV5xMH0Uf7jpvzU5/VZfM7gPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Validity Not Before: Aug 23 08:18:08 2025 GMT Not After : Aug 30 08:18:08 2025 GMT Subject: CN=68a97941-92d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:14:bd:5b:c4:2d:59:5c:88:39:41:56:97:ab: 6c:46:02:7f:45:c5:e9:91:9f:51:60:43:41:1f:bc: f5:f9:dc:d1:55:86:83:18:fb:7b:7c:50:9e:c4:96: 46:0d:1a:59:79:07:6a:10:34:c5:1c:26:cb:94:6b: 29:8b:08:87:10:39:09:99:02:62:4e:43:30:cd:9f: 33:1d:dc:5a:2c:8a:ee:20:fc:91:24:bb:55:bc:78: 99:1e:67:c9:7a:6f:67:57:14:67:92:2e:70:cf:d0: 32:4f:60:3c:df:c7:c3:c6:96:07:e4:8d:01:ba:3d: 2f:52:12:f5:53:b7:94:4d:db:54:d5:81:66:19:db: cf:86:a7:a0:63:42:59:26:7b:21:ee:03:0e:b0:d1: 80:2a:27:2e:63:0a:af:c5:fd:a6:f8:fa:65:d9:f8: b7:e6:91:5f:47:74:4c:36:46:ec:0f:c5:12:3b:60: 6d:66:17:17:65:dd:f1:c9:9f:ee:73:b3:e7:bd:2c: 39:f0:58:76:41:2e:d7:19:55:ed:f6:09:5f:56:71: 89:be:dd:4a:a6:88:9d:1e:95:4e:f4:dc:d7:b5:53: 35:cc:17:6e:9e:e5:d0:7c:17:40:98:ba:c1:34:29: 2c:3e:b7:22:64:77:c8:04:2d:7f:1b:df:f7:f7:98: 85:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:4A:0B:A9:B5:CA:30:5C:48:30:C6:D7:26:D3:4F:8F:F4:D3:E3 X509v3 Authority Key Identifier: keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:dd:b1:d6:d0:27:06:57:ee:5a:cf:7d:e0:20:e5:d3:ea:bb: 26:28:89:7f:be:e6:eb:a7:b1:b0:92:08:a8:2f:a9:b6:06:b0: 8f:71:ae:fd:b7:74:f7:28:f5:43:ad:90:a5:97:9c:66:a1:2c: d8:18:ed:10:3a:ed:4a:02:f3:96:41:b2:58:38:d7:bb:30:83: c1:f1:56:34:79:7a:33:06:39:b1:1f:8e:af:9e:3c:b7:26:ac: 54:25:e2:51:b7:c7:44:ba:45:de:7d:4f:81:06:6c:17:0f:ae: ef:a6:f1:f5:b4:8b:4c:31:29:69:f6:0a:87:73:e8:e4:33:e3: 0d:6d:9f:61:01:fc:1a:ad:d0:64:15:d0:c1:3b:8a:02:18:f6: 66:bd:32:84:da:b2:a5:8a:cb:ae:c8:2f:e3:dc:35:83:eb:5c: 1e:f1:f2:22:48:f4:2b:89:b0:55:9c:76:9d:9b:66:fd:04:e0: 7e:04:7b:3f:0f:1c:de:78:44:13:3c:95:62:cf:d7:63:84:38: 46:43:89:57:71:61:6c:1a:87:c5:0b:a2:a0:43:bd:98:0b:e2: 2b:2f:5f:c7:54:0f:eb:ba:c0:69:4c:39:8d:11:0a:4b:94:aa: 8d:ed:35:c8:54:78:60:30:b0:39:bf:39:1e:41:6f:f2:bd:3c: ec:98:4c:5c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoQTVBQUVGQTc2MTUzNTM0Q0JCMEVCNjRCNjhDNDI5RjVE QzdGOUUwQTAeFw0yNTA4MjMwODE4MDhaFw0yNTA4MzAwODE4MDhaMBgxFjAUBgNV BAMTDTY4YTk3OTQxLTkyZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9FL1bxC1ZXIg5QVaXq2xGAn9FxemRn1FgQ0EfvPX53NFVhoMY+3t8UJ7ElkYN Gll5B2oQNMUcJsuUaymLCIcQOQmZAmJOQzDNnzMd3Fosiu4g/JEku1W8eJkeZ8l6 b2dXFGeSLnDP0DJPYDzfx8PGlgfkjQG6PS9SEvVTt5RN21TVgWYZ28+Gp6BjQlkm eyHuAw6w0YAqJy5jCq/F/ab4+mXZ+LfmkV9HdEw2RuwPxRI7YG1mFxdl3fHJn+5z s+e9LDnwWHZBLtcZVe32CV9WcYm+3UqmiJ0elU703Ne1UzXMF26e5dB8F0CYusE0 KSw+tyJkd8gELX8b3/f3mIVdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ7RKC6m1 yjBcSDDG1ybTT4/00+MwHwYDVR0jBBgwFoAUparvp2FTU0y7DrZLaMQp9dx/ngow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0U5RTE0NzRDNjkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25n by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGFydnAyRlRVMHk3RHJaTGFNUXA5ZHhfbmdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0U5RTE0NzRDNjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5 N0RyWkxhTVFwOWR4X25nby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADDdsdbQJwZX7lrPfeAg5dPquyYoiX++5uunsbCSCKgvqbYGsI9xrv23 dPco9UOtkKWXnGahLNgY7RA67UoC85ZBslg417swg8HxVjR5ejMGObEfjq+ePLcm rFQl4lG3x0S6Rd59T4EGbBcPru+m8fW0i0wxKWn2Codz6OQz4w1tn2EB/Bqt0GQV 0ME7igIY9ma9MoTasqWKy67IL+PcNYPrXB7x8iJI9CuJsFWcdp2bZv0E4H4Eez8P HN54RBM8lWLP12OEOEZDiVdxYWwah8ULoqBDvZgL4isvX8dUD+u6wGlMOY0RCkuU qo3tNchUeGAwsDm/OR5Bb/K9POyYTFw= -----END CERTIFICATE-----Generated at Sun Aug 24 03:13:17 2025 by rpki-client