$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: Tm+iHY4Wxqx8lJzrhfw06BTes9Yvhf/rnttiSwWy1BY= Subject key identifier: 78:26:13:2D:45:94:CC:AE:D9:BE:0E:99:36:62:D4:2C:B1:DF:F5:00 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1972 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B75 Signing time: Mon 20 Oct 2025 15:30:53 +0000 Manifest this update: Mon 20 Oct 2025 15:30:52 +0000 Manifest next update: Mon 27 Oct 2025 15:30:52 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: fvirFlLzgL2uunFXVstgk+mWNr0fnFyT1Pglrkr7YDY=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6514 (0x1972) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Oct 20 15:30:52 2025 GMT Not After : Oct 27 15:30:52 2025 GMT Subject: CN=68f655ac-b92b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c3:49:8c:cc:44:4d:d0:23:83:f6:18:3d:9b: 71:ca:d4:8f:c6:f3:9a:a9:c6:4f:63:02:8c:19:c7: df:64:12:a3:11:6b:b3:48:73:18:3f:a1:1c:0f:81: 71:32:cd:10:34:e2:10:ab:98:4d:72:7d:af:28:49: 9e:18:1d:23:73:7c:7b:45:58:1b:48:a2:2c:20:d2: 98:70:ca:d2:ca:16:13:08:e9:0c:d7:05:0e:7d:4b: 88:db:65:e6:ff:c7:bf:fb:6e:fa:0c:40:3c:ed:f4: 93:b1:7b:4b:62:52:1b:2b:f5:1a:a8:2e:89:0c:fe: 36:b1:b2:4e:fe:9e:9c:b4:25:b0:b5:3e:4d:5a:62: ad:d8:3e:32:4d:1f:97:42:7a:75:1b:c8:93:ac:8d: 14:e2:f9:4d:78:6e:5e:1e:dc:36:bf:14:99:49:96: f4:ef:e1:f7:3f:53:c7:8f:c9:18:5e:67:47:21:91: 76:5b:1e:41:4c:7c:57:b9:42:48:c7:bc:1f:65:c0: 45:13:e0:04:60:16:b6:8d:41:da:33:3d:83:d9:da: 3c:f9:bf:7d:85:95:af:e5:41:59:6d:d9:40:0c:df: 8e:b0:28:25:7c:6f:88:9a:82:b0:11:d4:32:e9:f7: cc:de:39:74:72:5a:09:71:d8:2b:5d:5b:96:89:2e: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:26:13:2D:45:94:CC:AE:D9:BE:0E:99:36:62:D4:2C:B1:DF:F5:00 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:82:19:09:78:ff:dc:4e:c8:65:98:16:67:0a:de:ef:e6:23: 17:4b:a1:f4:16:bf:f6:07:f8:e2:e7:e3:b2:b6:c6:84:6b:7a: 53:a6:d6:3c:1b:a2:14:ea:30:cf:29:c1:c4:11:6a:3e:90:54: cc:37:f6:d5:9d:a6:a6:b5:1f:a9:23:5b:58:37:ee:60:c6:1d: 39:68:74:6d:f2:b2:36:05:a7:c2:a2:e4:d5:5c:29:96:06:81: 44:9e:9c:8f:30:05:e6:11:91:a4:cb:18:57:8d:bc:36:e1:bc: 23:be:42:e2:15:4d:1f:41:23:13:94:64:03:05:7a:5d:fc:9f: c9:31:28:e5:fe:95:c4:8f:0b:4d:90:44:6d:da:17:91:f6:e4: 89:80:38:44:70:93:66:8e:a2:44:71:69:32:86:ef:39:6f:59: 23:69:4a:89:3d:cc:96:f9:17:fd:08:b0:2e:4c:89:77:5b:f7: f3:36:0b:18:d4:86:46:7a:98:1f:32:47:f1:03:3e:aa:c4:80: 24:86:a6:54:1a:60:65:cc:fa:8e:b3:51:26:f9:df:6d:60:7f: 06:ee:ce:0f:dc:e8:db:2b:26:0c:b2:cc:5d:de:b1:1b:b0:31: e7:d8:7e:aa:99:23:22:c8:aa:e5:03:7c:2b:fb:64:86:8a:0d: 8d:c1:24:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUxMDIwMTUzMDUyWhcNMjUxMDI3MTUzMDUyWjAYMRYwFAYD VQQDEw02OGY2NTVhYy1iOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzsNJjMxETdAjg/YYPZtxytSPxvOaqcZPYwKMGcffZBKjEWuzSHMYP6EcD4Fx Ms0QNOIQq5hNcn2vKEmeGB0jc3x7RVgbSKIsINKYcMrSyhYTCOkM1wUOfUuI22Xm /8e/+276DEA87fSTsXtLYlIbK/UaqC6JDP42sbJO/p6ctCWwtT5NWmKt2D4yTR+X Qnp1G8iTrI0U4vlNeG5eHtw2vxSZSZb07+H3P1PHj8kYXmdHIZF2Wx5BTHxXuUJI x7wfZcBFE+AEYBa2jUHaMz2D2do8+b99hZWv5UFZbdlADN+OsCglfG+ImoKwEdQy 6ffM3jl0cloJcdgrXVuWiS4QFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgmEy1F lMyu2b4OmTZi1Cyx3/UAMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIghkJeP/cTshlmBZnCt7v5iMXS6H0Fr/2B/ji5+OytsaEa3pTptY8 G6IU6jDPKcHEEWo+kFTMN/bVnaamtR+pI1tYN+5gxh05aHRt8rI2BafCouTVXCmW BoFEnpyPMAXmEZGkyxhXjbw24bwjvkLiFU0fQSMTlGQDBXpd/J/JMSjl/pXEjwtN kERt2heR9uSJgDhEcJNmjqJEcWkyhu85b1kjaUqJPcyW+Rf9CLAuTIl3W/fzNgsY 1IZGepgfMkfxAz6qxIAkhqZUGmBlzPqOs1Em+d9tYH8G7s4P3OjbKyYMssxd3rEb sDHn2H6qmSMiyKrlA3wr+2SGig2NwSQo -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:36 2025 by rpki-client