$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: SnZnxJkkoVxzV+BCOkKa8x26waAj1zhksYFFC+PUYTA= Subject key identifier: D8:08:49:28:F7:B2:31:9F:22:84:72:F5:26:D3:4E:E9:21:CB:5D:B2 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 194E Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B51 Signing time: Sun 10 Aug 2025 15:20:30 +0000 Manifest this update: Sun 10 Aug 2025 15:20:29 +0000 Manifest next update: Sun 17 Aug 2025 15:20:29 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: zP3WR1Caox2VG0KA9pscgVIFLDoJztRka1wcfpoBWWA=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6478 (0x194e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Aug 10 15:20:29 2025 GMT Not After : Aug 17 15:20:29 2025 GMT Subject: CN=6898b8be-7754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:e9:65:a8:62:49:5f:bb:93:f5:33:76:90: 21:a0:82:60:dd:98:11:bf:c2:3d:11:78:53:61:a2: 42:54:4c:39:c1:1f:f2:30:35:18:cd:d8:8f:0b:f0: 45:3f:6d:ec:78:fb:0d:17:94:91:ad:8e:7f:df:61: 32:bb:83:ab:93:cb:a1:56:70:be:71:42:9e:c1:1a: d0:2d:e9:48:75:e2:76:4e:22:cc:db:41:e9:84:02: 7d:2a:9d:34:27:98:d9:3b:aa:9b:49:be:a3:25:1d: 67:ec:7e:83:4b:cc:f5:ea:72:ad:0e:15:58:14:43: ab:73:50:ac:cd:6f:0d:58:6b:10:46:2c:10:46:03: f9:23:9f:0b:eb:f5:20:aa:f3:14:45:14:98:cd:34: 5d:3d:f2:31:3c:b6:dc:42:0b:45:f2:17:78:24:65: d3:77:a9:f2:1d:35:6a:c2:bc:0b:2c:51:cf:de:1e: a4:2c:96:11:ed:84:1e:f9:c2:ac:b3:ca:3e:cd:ea: 48:1e:06:cf:2d:48:65:7a:0b:ff:5a:72:8a:bf:01: 37:e1:e1:4b:de:78:13:6a:ce:b9:7d:79:9d:b3:f1: 0c:03:cd:f7:da:1f:24:92:1d:48:11:0c:f8:2f:36: 51:47:af:f6:0c:13:33:b0:86:a6:24:c3:6b:fb:fb: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:08:49:28:F7:B2:31:9F:22:84:72:F5:26:D3:4E:E9:21:CB:5D:B2 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:9a:1c:4f:6f:57:73:4a:16:e6:80:58:92:96:8c:7e:38:fe: e1:a0:5c:17:1f:dc:05:8e:11:f9:8e:b2:e7:12:e4:c0:43:2d: 0a:42:0f:7b:d1:88:7d:28:fb:ac:3a:d3:5a:bb:8b:75:5c:86: 99:44:0d:2d:47:60:b7:83:c4:38:9b:6b:f5:71:13:ac:7f:4e: 8c:06:5b:8e:95:45:2f:da:5b:d6:cb:c6:ef:81:a6:86:11:b6: 78:36:40:e2:4c:da:45:df:d2:51:ec:c9:b0:01:12:99:76:4c: fb:56:50:01:17:be:91:c9:df:24:c9:b7:b4:c1:be:5a:69:dc: 24:27:19:fd:40:04:ba:83:45:79:53:ac:66:57:cb:df:62:2c: 96:58:79:e0:96:75:9d:78:75:5a:c2:65:30:69:ad:c7:6c:bd: 72:19:47:45:d9:a2:fb:72:73:ae:f3:4f:45:5d:a0:ff:74:f7: 20:c7:35:72:88:3c:58:8a:80:a6:ef:9c:35:4d:3a:1d:93:45: e6:2e:39:2b:06:b0:f4:72:af:39:bc:d4:56:a4:10:00:9e:e4: cd:93:ef:6e:31:f3:2f:11:fd:6b:a7:df:ec:1e:d0:0d:f2:55: bb:e4:1b:0a:1a:26:dc:7a:37:08:af:f8:88:2b:79:15:4d:2e: 3b:0a:aa:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwODEwMTUyMDI5WhcNMjUwODE3MTUyMDI5WjAYMRYwFAYD VQQDEw02ODk4YjhiZS03NzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluXpZahiSV+7k/UzdpAhoIJg3ZgRv8I9EXhTYaJCVEw5wR/yMDUYzdiPC/BF P23sePsNF5SRrY5/32Eyu4Ork8uhVnC+cUKewRrQLelIdeJ2TiLM20HphAJ9Kp00 J5jZO6qbSb6jJR1n7H6DS8z16nKtDhVYFEOrc1CszW8NWGsQRiwQRgP5I58L6/Ug qvMURRSYzTRdPfIxPLbcQgtF8hd4JGXTd6nyHTVqwrwLLFHP3h6kLJYR7YQe+cKs s8o+zepIHgbPLUhlegv/WnKKvwE34eFL3ngTas65fXmds/EMA8332h8kkh1IEQz4 LzZRR6/2DBMzsIamJMNr+/tstwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgISSj3 sjGfIoRy9SbTTukhy12yMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtmhxPb1dzShbmgFiSlox+OP7hoFwXH9wFjhH5jrLnEuTAQy0KQg97 0Yh9KPusOtNau4t1XIaZRA0tR2C3g8Q4m2v1cROsf06MBluOlUUv2lvWy8bvgaaG EbZ4NkDiTNpF39JR7MmwARKZdkz7VlABF76Ryd8kybe0wb5aadwkJxn9QAS6g0V5 U6xmV8vfYiyWWHnglnWdeHVawmUwaa3HbL1yGUdF2aL7cnOu809FXaD/dPcgxzVy iDxYioCm75w1TTodk0XmLjkrBrD0cq85vNRWpBAAnuTNk+9uMfMvEf1rp9/sHtAN 8lW75BsKGibcejcIr/iIK3kVTS47Cqrj -----END CERTIFICATE-----Generated at Mon Aug 11 14:47:00 2025 by rpki-client