$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: HYIx2pU+uEfMd6RLUfwlWHS19ckRDNCATjZveNY17uo= Subject key identifier: 2D:59:E9:C6:73:4C:9C:04:1B:F4:BF:BC:E9:BB:9D:59:1D:02:F3:1F Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1954 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B57 Signing time: Fri 22 Aug 2025 15:26:00 +0000 Manifest this update: Fri 22 Aug 2025 15:26:00 +0000 Manifest next update: Fri 29 Aug 2025 15:26:00 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: VAqpKI1nR/D6RaTXdB+ToKc1ESnTEij+9UtWR5V1boQ=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6484 (0x1954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Aug 22 15:26:00 2025 GMT Not After : Aug 29 15:26:00 2025 GMT Subject: CN=68a88c08-215a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:ae:0c:ba:7b:01:76:9b:fb:c0:d5:ef:7a: 22:8d:5f:1f:9f:c5:b3:d4:f9:ca:32:64:b8:a5:e6: 38:4c:ff:b4:ea:a2:d8:22:b6:ee:b5:f9:64:94:9a: 87:2c:fe:b1:63:ed:51:ee:99:c8:a7:c2:d7:b6:1f: 5f:cc:32:2c:ef:91:45:41:8f:03:4e:90:7e:f2:a4: 42:d9:97:4e:d6:ca:0d:ca:77:7a:69:74:bd:36:07: 18:55:8d:71:0a:d9:84:25:52:1a:bf:b1:31:76:6c: 58:fa:a0:79:23:e3:44:28:39:da:b4:2b:55:89:8f: 59:18:b2:2f:e7:79:fe:69:4a:8b:b1:2b:fb:32:89: 6a:0b:17:18:09:06:78:eb:93:10:02:66:b1:80:fc: 52:44:0c:c7:d6:03:10:ec:33:e5:bc:93:d3:bc:f9: 1a:cf:92:7a:5e:47:cd:3d:69:af:b5:0b:52:77:c0: 59:c5:d4:da:a4:03:f6:51:de:b6:d2:04:5b:65:bd: d5:02:17:d4:89:0b:53:64:59:77:d4:06:1e:8d:f7: 62:a4:01:6b:ae:7d:26:57:b1:70:55:0d:ce:33:ef: d0:af:f1:4d:8f:10:70:4a:30:2b:c6:83:62:dd:9f: 50:9d:2b:8e:ff:da:6d:dd:d7:8e:b2:4a:d3:b8:4e: 8f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:59:E9:C6:73:4C:9C:04:1B:F4:BF:BC:E9:BB:9D:59:1D:02:F3:1F X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7b:59:a8:f1:4b:ee:df:12:6c:ea:53:c2:2c:d6:ec:7d:5c: 8a:b0:54:13:c8:42:b1:bc:1d:bc:83:68:24:60:30:87:87:22: e7:43:a6:06:fb:8d:50:30:1a:96:c8:03:51:5c:5f:64:ee:e6: d0:9c:ed:d1:bd:07:42:4f:3d:72:f3:f9:e3:73:b4:22:6c:49: e9:90:bd:0b:92:fb:33:af:12:a5:0a:cd:aa:b0:68:4a:4f:0f: 7f:29:96:23:95:7f:04:48:8b:e6:ec:0b:ec:cd:f3:88:fc:b9: f0:19:4a:6f:0e:a5:50:56:ba:9f:ce:5d:cb:d3:35:f6:2d:45: 70:73:d1:8c:85:e2:b6:b8:e6:3b:be:c7:64:53:b5:0c:ee:7e: 7c:21:76:f8:7c:43:61:3c:3a:a9:14:9a:2e:35:bd:90:69:fb: 83:90:32:03:ac:c4:fb:e3:15:86:40:4b:49:71:ae:f7:6c:6c: cc:61:7c:68:08:27:1e:a0:5b:00:eb:11:ef:7f:82:6e:f3:b9: a9:6e:52:ce:a1:14:41:ed:cc:7f:7f:68:84:84:86:1f:c3:1d: c6:7d:ac:e4:14:0b:91:49:cd:9c:04:55:5d:d4:03:29:9e:eb: e0:19:03:5a:62:11:61:fc:c7:12:38:f1:95:ed:b5:33:af:d0: 70:e6:e2:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwODIyMTUyNjAwWhcNMjUwODI5MTUyNjAwWjAYMRYwFAYD VQQDEw02OGE4OGMwOC0yMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCquDLp7AXab+8DV73oijV8fn8Wz1PnKMmS4peY4TP+06qLYIrbutflklJqH LP6xY+1R7pnIp8LXth9fzDIs75FFQY8DTpB+8qRC2ZdO1soNynd6aXS9NgcYVY1x CtmEJVIav7ExdmxY+qB5I+NEKDnatCtViY9ZGLIv53n+aUqLsSv7MolqCxcYCQZ4 65MQAmaxgPxSRAzH1gMQ7DPlvJPTvPkaz5J6XkfNPWmvtQtSd8BZxdTapAP2Ud62 0gRbZb3VAhfUiQtTZFl31AYejfdipAFrrn0mV7FwVQ3OM+/Qr/FNjxBwSjArxoNi 3Z9QnSuO/9pt3deOskrTuE6PzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1Z6cZz TJwEG/S/vOm7nVkdAvMfMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEe1mo8Uvu3xJs6lPCLNbsfVyKsFQTyEKxvB28g2gkYDCHhyLnQ6YG +41QMBqWyANRXF9k7ubQnO3RvQdCTz1y8/njc7QibEnpkL0LkvszrxKlCs2qsGhK Tw9/KZYjlX8ESIvm7AvszfOI/LnwGUpvDqVQVrqfzl3L0zX2LUVwc9GMheK2uOY7 vsdkU7UM7n58IXb4fENhPDqpFJouNb2QafuDkDIDrMT74xWGQEtJca73bGzMYXxo CCceoFsA6xHvf4Ju87mpblLOoRRB7cx/f2iEhIYfwx3GfazkFAuRSc2cBFVd1AMp nuvgGQNaYhFh/McSOPGV7bUzr9Bw5uJn -----END CERTIFICATE-----Generated at Sun Aug 24 04:51:42 2025 by rpki-client