$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: 0UqH0I/nS7kOkt1GA9PhOPE4bbzlaitlBSzx2Z5beos= Subject key identifier: 95:5F:96:8C:0F:1B:E0:E2:CA:F2:3A:44:63:7A:28:17:5F:53:47:CB Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 193A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B3D Signing time: Wed 02 Jul 2025 15:29:47 +0000 Manifest this update: Wed 02 Jul 2025 15:29:46 +0000 Manifest next update: Wed 09 Jul 2025 15:29:46 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: 4xKzXWj7YCAQXIfsZNP3IJtUuCXMpqWsdydyEqpdWxA=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6458 (0x193a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Jul 2 15:29:46 2025 GMT Not After : Jul 9 15:29:46 2025 GMT Subject: CN=6865506b-f69c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:9f:f4:64:1e:5e:87:1e:65:5f:ce:d7:fc: 48:d4:53:e1:60:95:af:02:e7:db:a0:dc:fc:4c:fe: 48:31:71:af:51:cd:69:ce:dd:97:df:40:e0:bf:4b: a5:2b:00:95:c3:14:d0:5e:b3:7f:5d:0c:10:5c:eb: 7a:1d:d5:35:6c:9c:8b:6c:cd:f2:60:d4:af:ed:c1: c8:47:bd:78:69:56:f5:bb:3a:36:aa:bc:e1:47:b5: 76:26:e8:f5:1b:72:7d:bc:1a:79:be:de:20:0f:2a: 85:8d:37:16:a4:ec:11:e8:0b:e1:f2:17:54:ad:49: d9:10:1c:67:0c:6e:30:d8:35:a9:77:af:71:4d:cc: d3:3f:f5:a6:6a:01:c4:34:1a:7b:0d:ee:b3:7c:ae: e6:a6:3c:8b:ce:a3:90:87:e4:d3:6f:72:7f:49:50: dc:a4:04:ce:63:cb:b5:03:11:b8:bd:34:22:8e:64: 84:9d:1e:f6:38:d9:75:a4:99:38:22:5d:1e:bd:39: 8e:10:43:1b:0b:7e:13:49:e9:01:89:ef:8d:dd:76: fc:45:e6:08:03:28:4c:9b:35:74:b4:df:bd:c8:98: d2:83:ab:96:07:47:23:a3:9b:eb:7b:72:f2:99:47: 50:a8:b3:ac:76:72:2f:89:b0:50:27:bf:43:35:7b: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:96:8C:0F:1B:E0:E2:CA:F2:3A:44:63:7A:28:17:5F:53:47:CB X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:bc:8a:ae:ea:af:86:c3:ff:9b:0e:c6:37:5a:e4:51:5d:b2: f5:35:c5:7e:87:8c:a6:1b:b5:b3:5a:b2:15:70:47:c0:74:c5: 82:5e:81:dc:ea:44:c4:1a:ea:26:3e:7b:0e:17:97:55:4b:8c: 01:2c:32:8f:46:94:8b:6a:d9:8c:06:35:ad:b0:0a:ad:cd:20: 70:ff:42:e3:0b:1b:9e:26:aa:cc:a3:9d:7d:82:89:14:4e:b1: a8:95:07:bd:2b:eb:80:5e:1b:e2:16:57:5a:17:cc:d6:e3:73: d8:ee:f5:b7:6f:0f:8d:af:31:8c:d5:18:ed:70:eb:4d:e6:9d: ce:b2:6a:90:f6:be:4b:ae:7e:92:4d:5c:18:23:f4:ea:de:ba: 7c:aa:e2:1a:fb:1b:1c:7a:a7:76:a9:aa:3e:32:32:53:3f:28: dc:71:7a:d3:80:f9:29:cb:2c:43:a8:d1:b4:0d:07:61:8d:91: f9:8f:09:66:85:60:9e:3b:c3:53:23:82:01:10:b5:9d:3d:16: 51:a5:58:10:7b:1d:fb:d7:17:1e:88:fa:d1:92:e8:43:fc:6a: 44:20:d1:e1:c2:b4:9f:ab:69:35:7c:e8:4c:68:56:53:45:75: 69:ba:ee:30:64:72:17:51:03:96:a9:df:5a:2a:42:6c:3b:62: 4b:4c:10:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNzAyMTUyOTQ2WhcNMjUwNzA5MTUyOTQ2WjAYMRYwFAYD VQQDEw02ODY1NTA2Yi1mNjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthaf9GQeXoceZV/O1/xI1FPhYJWvAufboNz8TP5IMXGvUc1pzt2X30Dgv0ul KwCVwxTQXrN/XQwQXOt6HdU1bJyLbM3yYNSv7cHIR714aVb1uzo2qrzhR7V2Juj1 G3J9vBp5vt4gDyqFjTcWpOwR6Avh8hdUrUnZEBxnDG4w2DWpd69xTczTP/WmagHE NBp7De6zfK7mpjyLzqOQh+TTb3J/SVDcpATOY8u1AxG4vTQijmSEnR72ONl1pJk4 Il0evTmOEEMbC34TSekBie+N3Xb8ReYIAyhMmzV0tN+9yJjSg6uWB0cjo5vre3Ly mUdQqLOsdnIvibBQJ79DNXvPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVflowP G+DiyvI6RGN6KBdfU0fLMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIvIqu6q+Gw/+bDsY3WuRRXbL1NcV+h4ymG7WzWrIVcEfAdMWCXoHc 6kTEGuomPnsOF5dVS4wBLDKPRpSLatmMBjWtsAqtzSBw/0LjCxueJqrMo519gokU TrGolQe9K+uAXhviFldaF8zW43PY7vW3bw+NrzGM1RjtcOtN5p3OsmqQ9r5Lrn6S TVwYI/Tq3rp8quIa+xsceqd2qao+MjJTPyjccXrTgPkpyyxDqNG0DQdhjZH5jwlm hWCeO8NTI4IBELWdPRZRpVgQex371xceiPrRkuhD/GpEINHhwrSfq2k1fOhMaFZT RXVpuu4wZHIXUQOWqd9aKkJsO2JLTBDk -----END CERTIFICATE-----Generated at Thu Jul 3 23:05:28 2025 by rpki-client