$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft File: parvp2FTU0y7DrZLaMQp9dx_ngo.mft (raw, json) Hash identifier: qf9Mb+XYHwm1kJj4cPIzmRsPzgGkbW84q2b3v/97YdE= Subject key identifier: B2:AE:D3:08:8D:29:A9:87:4D:32:F1:75:56:42:A1:0F:45:43:FC:92 Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft Manifest number: 2E Signing time: Sun 19 Oct 2025 11:11:51 +0000 Manifest this update: Sun 19 Oct 2025 11:11:50 +0000 Manifest next update: Sun 26 Oct 2025 11:11:50 +0000 Files and hashes: 1: parvp2FTU0y7DrZLaMQp9dx_ngo.crl (hash: 5UJmPQ9k9hfOMRWQs0QmA4UTrcREnFnxU8ggiZ8hNuM=) 2: B1291960691911F08409AD61C4F9AE02.roa (hash: hkVZ9bulChZT+JRQzeQV5xMH0Uf7jpvzU5/VZfM7gPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Validity Not Before: Oct 19 11:11:50 2025 GMT Not After : Oct 26 11:11:50 2025 GMT Subject: CN=68f4c776-1ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:e9:47:1a:d0:66:fc:6d:11:1c:7a:19:66: c8:97:20:52:cd:1b:be:d3:37:fb:f1:d1:b2:c9:79: de:ab:3a:f8:e8:9c:5e:14:1f:50:ab:b3:a6:e8:db: a9:6e:b8:fb:a4:c1:cf:c8:8f:49:86:f7:04:76:0b: f9:3d:f1:0b:5c:bd:a4:50:c4:88:c3:25:c6:b2:95: 62:f1:47:4d:19:ba:2f:90:07:c2:40:c4:0c:41:c6: 22:f7:aa:db:41:06:6a:92:b1:e5:44:0d:bf:c0:e7: 3d:8f:4e:9d:eb:82:db:0d:00:0a:f7:06:fe:07:9f: 24:0e:ed:7c:bf:43:ed:4a:bd:df:63:50:81:74:f9: e7:25:2f:34:e0:0a:fa:d9:c6:e6:d1:ef:75:7f:51: 5b:23:a2:93:56:fc:66:aa:1a:76:91:0d:68:8a:89: bd:b8:d5:ad:2f:d0:d1:63:80:83:4b:c1:8a:02:f5: 0f:76:a7:64:4a:65:d8:91:54:0b:51:fa:54:99:3d: d5:f1:ab:d0:46:7d:4a:90:65:22:1b:04:4b:2e:36: 3a:e3:01:70:a1:28:15:5a:3a:de:44:23:6b:b8:cb: 3d:3e:36:67:a2:bd:32:39:bb:df:2a:0f:59:11:d2: 18:1b:e0:a4:ea:7c:0c:d5:4f:83:a8:f6:ff:8c:03: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:D3:08:8D:29:A9:87:4D:32:F1:75:56:42:A1:0F:45:43:FC:92 X509v3 Authority Key Identifier: keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:ce:83:20:09:6c:60:fb:92:a9:46:cb:36:80:12:e7:7b:df: e8:3f:4a:ab:20:17:ff:ba:3b:25:3f:3f:56:bc:e2:92:ff:fb: f8:80:18:ec:ed:9a:3e:9d:e2:ce:cc:16:b0:65:f0:33:1c:11: 2b:cf:e8:55:6e:bd:b1:48:f1:e8:ed:9a:77:9c:f3:6b:28:87: 8a:4c:55:c1:dc:66:22:42:4d:cc:81:7e:5c:ff:9b:9f:46:d5: 19:38:a0:42:67:97:27:14:59:1d:cf:2e:57:cb:47:cd:a2:fd: 3c:e8:f8:6c:b6:fa:70:da:67:f1:cc:5a:bf:73:a0:78:c5:6b: 23:34:5a:7b:c0:4f:72:37:14:b4:c6:3c:6d:c0:19:8f:cd:47: a0:25:4e:f2:55:c8:95:35:f8:70:34:bf:5d:b9:3d:42:16:1f: 86:33:58:23:c5:94:e1:14:75:04:28:d0:76:04:0f:ad:eb:a7: 27:6a:b5:6d:e8:dd:42:41:52:a9:18:4a:fc:f7:7e:18:6d:d1: 19:8d:40:38:0b:ce:00:45:f2:9d:0c:ba:db:cc:d7:de:3e:79: 5f:71:90:37:d5:37:07:9b:42:a8:30:62:ec:5b:68:c4:2a:a6: dc:d4:39:23:e2:1f:09:47:a2:a5:25:60:e8:8d:b5:c2:3e:91: b2:5b:5f:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoQTVBQUVGQTc2MTUzNTM0Q0JCMEVCNjRCNjhDNDI5RjVE QzdGOUUwQTAeFw0yNTEwMTkxMTExNTBaFw0yNTEwMjYxMTExNTBaMBgxFjAUBgNV BAMTDTY4ZjRjNzc2LTFlYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbNOlHGtBm/G0RHHoZZsiXIFLNG77TN/vx0bLJed6rOvjonF4UH1Crs6bo26lu uPukwc/Ij0mG9wR2C/k98QtcvaRQxIjDJcaylWLxR00Zui+QB8JAxAxBxiL3qttB BmqSseVEDb/A5z2PTp3rgtsNAAr3Bv4HnyQO7Xy/Q+1Kvd9jUIF0+eclLzTgCvrZ xubR73V/UVsjopNW/GaqGnaRDWiKib241a0v0NFjgINLwYoC9Q92p2RKZdiRVAtR +lSZPdXxq9BGfUqQZSIbBEsuNjrjAXChKBVaOt5EI2u4yz0+NmeivTI5u98qD1kR 0hgb4KTqfAzVT4Oo9v+MAzB3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsq7TCI0p qYdNMvF1VkKhD0VD/JIwHwYDVR0jBBgwFoAUparvp2FTU0y7DrZLaMQp9dx/ngow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0U5RTE0NzRDNjkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25n by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGFydnAyRlRVMHk3RHJaTGFNUXA5ZHhfbmdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThB MkQ5L0U5RTE0NzRDNjkxODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5 N0RyWkxhTVFwOWR4X25nby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJPOgyAJbGD7kqlGyzaAEud73+g/SqsgF/+6OyU/P1a84pL/+/iAGOzt mj6d4s7MFrBl8DMcESvP6FVuvbFI8ejtmnec82soh4pMVcHcZiJCTcyBflz/m59G 1Rk4oEJnlycUWR3PLlfLR82i/Tzo+Gy2+nDaZ/HMWr9zoHjFayM0WnvAT3I3FLTG PG3AGY/NR6AlTvJVyJU1+HA0v125PUIWH4YzWCPFlOEUdQQo0HYED63rpydqtW3o 3UJBUqkYSvz3fhht0RmNQDgLzgBF8p0MutvM194+eV9xkDfVNwebQqgwYuxbaMQq ptzUOSPiHwlHoqUlYOiNtcI+kbJbX38= -----END CERTIFICATE-----Generated at Tue Oct 21 00:03:34 2025 by rpki-client