$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: knCpn3OGz2lS9AviqyPX2CU3OxK+BafrFdMOvpDKEkw= Subject key identifier: 6A:3D:05:20:DC:2B:38:51:D3:A4:3F:FF:8C:FB:D8:D5:0D:3C:A3:88 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 197B Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B7E Signing time: Tue 04 Nov 2025 15:24:54 +0000 Manifest this update: Tue 04 Nov 2025 15:24:54 +0000 Manifest next update: Tue 11 Nov 2025 15:24:54 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: VQWROfmESSgz/DeoDFeaPSPkSp0ch+ofEih6leeZR2Y=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6523 (0x197b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Nov 4 15:24:54 2025 GMT Not After : Nov 11 15:24:54 2025 GMT Subject: CN=690a1ac6-5187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:13:33:84:2d:1b:82:04:b6:c2:6c:60:3d: 60:ce:06:10:b5:de:b8:4b:d1:33:94:f4:88:eb:9c: 21:4e:9c:67:18:c8:c5:1e:ca:b2:30:1d:50:ba:e0: 06:0a:23:c8:ed:18:9a:b3:23:81:7f:4a:0b:17:7d: 57:90:d1:56:ba:95:83:ff:30:35:06:ff:18:a8:32: 5e:fa:d1:29:d0:fb:37:2a:4f:df:2c:bc:fb:98:2c: 29:ee:de:ee:62:b7:c3:72:01:f0:69:2d:e3:45:86: ed:df:b7:24:76:2f:3a:1d:56:b6:ea:c3:a9:52:06: ad:69:91:e6:d8:69:49:69:62:a2:42:b8:e8:fd:6a: ba:d5:be:8c:02:51:aa:0f:fb:50:cc:db:72:d8:1f: e9:70:8b:3a:90:f6:a3:82:51:f3:8b:61:62:7e:fb: 84:7b:76:c7:7a:a3:30:30:3a:9b:08:00:cb:01:58: c6:7b:ca:bb:48:4e:6e:80:02:66:a2:d1:4a:b2:38: 98:76:1d:93:35:1e:2b:6f:30:0d:bc:5c:0d:6d:6a: 00:82:7a:da:d9:9b:7d:b4:97:f1:49:eb:c1:b2:47: ab:fc:f8:32:55:8d:22:45:24:87:1b:30:09:d9:a0: 68:c1:49:22:45:64:e9:8d:7c:8e:83:77:9e:5c:3b: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:3D:05:20:DC:2B:38:51:D3:A4:3F:FF:8C:FB:D8:D5:0D:3C:A3:88 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e6:bb:cd:31:52:dd:f6:ea:99:56:99:7b:ba:b9:2f:97:ac: 9b:84:fe:fb:79:12:d4:cc:5b:fa:9e:04:36:3f:c2:62:55:8e: 7c:58:fa:41:d9:57:0d:2a:59:4d:af:d6:a5:7b:a2:a1:2d:f0: 98:be:96:3e:bf:1a:a3:47:90:f4:48:68:53:ed:ca:55:1b:a6: f0:5d:ae:65:26:5a:30:b1:33:07:0d:25:19:55:8c:08:14:04: 92:ac:4b:91:f4:fb:a1:c5:bb:7e:14:d8:b7:96:36:f7:c0:2b: 91:88:11:c9:96:ea:84:d3:c8:2a:91:aa:ff:8a:d4:aa:9f:b6: a8:70:52:c0:82:c1:ec:a1:74:8f:3a:06:1d:91:a6:4c:b4:d5: 3f:e2:16:cd:55:52:fb:b9:18:61:b6:b4:bd:39:57:e2:f8:cc: fa:7b:e9:a6:bd:72:29:ec:60:89:40:d6:0d:74:a9:3a:cf:51: c5:6e:43:95:53:36:7e:c1:cf:60:8b:38:58:cb:91:fe:49:c2: 76:65:e1:b2:c7:e6:49:ac:39:d1:52:cd:9f:bf:84:99:fd:1d: 52:6b:24:49:eb:46:0d:b1:25:3a:49:b0:0d:e1:85:5a:ba:74: 8d:a7:8d:2d:da:0c:d7:6a:74:a9:c0:7f:ca:6f:f0:8a:20:9f: 68:86:b0:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUxMTA0MTUyNDU0WhcNMjUxMTExMTUyNDU0WjAYMRYwFAYD VQQDEw02OTBhMWFjNi01MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/oTM4QtG4IEtsJsYD1gzgYQtd64S9EzlPSI65whTpxnGMjFHsqyMB1QuuAG CiPI7RiasyOBf0oLF31XkNFWupWD/zA1Bv8YqDJe+tEp0Ps3Kk/fLLz7mCwp7t7u YrfDcgHwaS3jRYbt37ckdi86HVa26sOpUgataZHm2GlJaWKiQrjo/Wq61b6MAlGq D/tQzNty2B/pcIs6kPajglHzi2FifvuEe3bHeqMwMDqbCADLAVjGe8q7SE5ugAJm otFKsjiYdh2TNR4rbzANvFwNbWoAgnra2Zt9tJfxSevBsker/PgyVY0iRSSHGzAJ 2aBowUkiRWTpjXyOg3eeXDuoowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGo9BSDc KzhR06Q//4z72NUNPKOIMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO5rvNMVLd9uqZVpl7urkvl6ybhP77eRLUzFv6ngQ2P8JiVY58WPpB 2VcNKllNr9ale6KhLfCYvpY+vxqjR5D0SGhT7cpVG6bwXa5lJlowsTMHDSUZVYwI FASSrEuR9Puhxbt+FNi3ljb3wCuRiBHJluqE08gqkar/itSqn7aocFLAgsHsoXSP OgYdkaZMtNU/4hbNVVL7uRhhtrS9OVfi+Mz6e+mmvXIp7GCJQNYNdKk6z1HFbkOV UzZ+wc9gizhYy5H+ScJ2ZeGyx+ZJrDnRUs2fv4SZ/R1SayRJ60YNsSU6SbAN4YVa unSNp40t2gzXanSpwH/Kb/CKIJ9ohrBa -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:52 2025 by rpki-client