$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: 3X81CaezBbo0K7xc9L+Jm+gb6q+xBaLSStcVnz3u1kg= Subject key identifier: 8B:9B:42:B3:98:CD:DD:75:0D:D4:89:68:38:5A:46:57:06:2D:77:B8 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1932 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B35 Signing time: Mon 16 Jun 2025 15:28:07 +0000 Manifest this update: Mon 16 Jun 2025 15:28:07 +0000 Manifest next update: Mon 23 Jun 2025 15:28:07 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: d0ckmEs8BNjLRJP7/P3a95ko6Vs8ooUBZL7Ae+s/A0s=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:28:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6450 (0x1932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Jun 16 15:28:07 2025 GMT Not After : Jun 23 15:28:07 2025 GMT Subject: CN=68503807-61bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cf:01:0b:31:c9:9e:2e:69:0a:23:0b:0c:c4: 52:14:93:c9:e4:da:a0:40:59:60:c4:1d:90:b1:9f: 8c:1a:b9:e6:43:e5:50:5e:bf:7e:08:47:8e:d2:1a: c9:19:7d:9e:36:4a:91:94:d0:1d:5b:f6:9e:85:0a: 3e:01:14:56:be:b6:27:2b:ad:fb:31:77:35:6d:4f: 59:06:b8:8f:e4:c1:41:a4:e2:f1:c7:5f:c3:44:36: 0d:fe:6f:5a:4e:97:c1:48:a8:0e:bb:64:8f:80:2d: 5c:c4:52:5a:ad:e2:cb:7f:e2:67:91:28:d9:38:d1: da:e6:a2:5e:96:b4:31:df:98:5d:9a:7b:d3:33:2b: 8b:c3:80:62:df:cc:0b:7b:ae:23:8b:b4:22:73:f5: be:d6:58:db:8f:9a:9b:d8:72:80:21:49:ac:a5:32: 52:7e:75:9f:c0:56:18:7c:98:32:85:76:81:4d:7e: e6:5f:63:85:f8:3b:46:4d:15:27:01:e8:9e:7c:04: 38:82:ef:6a:30:82:d3:1f:a2:46:da:72:61:fd:bf: 73:f4:fe:b2:2c:4a:f2:98:0f:67:87:e4:35:77:94: 3b:13:2e:56:76:4d:7d:ba:15:bf:1c:5e:87:24:10: ed:3c:82:89:8e:04:3c:36:f7:c8:af:03:e6:a8:eb: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9B:42:B3:98:CD:DD:75:0D:D4:89:68:38:5A:46:57:06:2D:77:B8 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:0c:27:ce:44:38:d9:da:aa:22:66:4f:7b:03:7b:71:44:0c: 7a:c4:6d:54:0d:bb:32:c0:bd:65:19:e2:c5:c0:71:84:31:4d: 96:99:be:7a:f2:6c:d4:ea:c5:4c:0e:e3:dc:74:d6:b5:f2:71: f4:55:1e:56:1f:2a:ca:0b:a0:7a:17:08:00:4d:32:33:50:a3: fd:63:87:04:3d:e2:dc:76:eb:da:da:4d:16:5b:e1:2a:64:e2: 78:40:34:9b:d6:b3:78:2c:7f:9a:b7:ce:61:7a:9e:41:fd:cd: e2:f1:c2:3d:c9:f1:0d:9b:cd:f5:9c:06:1c:aa:d2:9a:5b:72: 88:e1:24:a2:ff:47:ef:e4:a7:b8:a0:b4:61:e2:0a:0d:c4:e3: bd:ee:97:82:1c:3d:6d:e6:6b:07:92:9a:09:06:f4:e0:47:0d: de:60:1b:b5:f4:46:0d:23:13:23:f6:9a:45:3c:75:d5:a7:91: d4:61:29:f0:5d:79:de:5b:74:3e:97:cd:2a:09:f8:32:cf:8e: db:b5:64:0d:2a:67:f1:3d:b8:16:11:6a:16:1d:af:85:31:64: db:0a:61:07:30:e4:25:53:b5:b9:6e:16:a3:79:db:a4:cd:cf: af:8f:c2:2a:28:26:99:15:e5:df:6e:29:c2:9d:d3:f2:77:af: 38:7f:d0:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNjE2MTUyODA3WhcNMjUwNjIzMTUyODA3WjAYMRYwFAYD VQQDEw02ODUwMzgwNy02MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvs8BCzHJni5pCiMLDMRSFJPJ5NqgQFlgxB2QsZ+MGrnmQ+VQXr9+CEeO0hrJ GX2eNkqRlNAdW/aehQo+ARRWvrYnK637MXc1bU9ZBriP5MFBpOLxx1/DRDYN/m9a TpfBSKgOu2SPgC1cxFJareLLf+JnkSjZONHa5qJelrQx35hdmnvTMyuLw4Bi38wL e64ji7Qic/W+1ljbj5qb2HKAIUmspTJSfnWfwFYYfJgyhXaBTX7mX2OF+DtGTRUn AeiefAQ4gu9qMILTH6JG2nJh/b9z9P6yLErymA9nh+Q1d5Q7Ey5Wdk19uhW/HF6H JBDtPIKJjgQ8NvfIrwPmqOtv2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIubQrOY zd11DdSJaDhaRlcGLXe4MB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZDCfORDjZ2qoiZk97A3txRAx6xG1UDbsywL1lGeLFwHGEMU2Wmb56 8mzU6sVMDuPcdNa18nH0VR5WHyrKC6B6FwgATTIzUKP9Y4cEPeLcduva2k0WW+Eq ZOJ4QDSb1rN4LH+at85hep5B/c3i8cI9yfENm831nAYcqtKaW3KI4SSi/0fv5Ke4 oLRh4goNxOO97peCHD1t5msHkpoJBvTgRw3eYBu19EYNIxMj9ppFPHXVp5HUYSnw XXneW3Q+l80qCfgyz47btWQNKmfxPbgWEWoWHa+FMWTbCmEHMOQlU7W5bhajeduk zc+vj8IqKCaZFeXfbinCndPyd684f9Bt -----END CERTIFICATE-----Generated at Tue Jun 17 03:18:26 2025 by rpki-client