$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: d2sV9pqnLc5oi11ynEsJzctudFUe48uU7btFPCXogCA= Subject key identifier: 5C:AC:85:5D:3D:19:7A:C5:D7:59:BF:27:71:2D:25:08:A3:9B:C9:1A Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 191E Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B21 Signing time: Sat 10 May 2025 15:20:48 +0000 Manifest this update: Sat 10 May 2025 15:20:47 +0000 Manifest next update: Sat 17 May 2025 15:20:47 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: P3zswgnUfrU2ZCPQM1ZzEQlIidgmh5vi5llu2bLoJAY=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 15:20:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6430 (0x191e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: May 10 15:20:47 2025 GMT Not After : May 17 15:20:47 2025 GMT Subject: CN=681f6ecf-45e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:79:71:38:75:7e:ed:f5:64:29:6b:bc:b9: 8c:82:18:d6:54:88:9b:de:a8:77:ee:fc:f2:d3:f2: b6:46:43:c3:a4:6d:00:f6:9c:5c:09:00:89:16:ff: 47:58:1e:90:f4:9f:22:42:56:ff:a7:32:26:4e:b9: e2:97:c8:0c:96:c4:69:81:28:0a:93:92:21:e5:c8: f8:49:09:45:3c:1e:aa:fb:4c:cd:77:ae:31:45:89: b2:e1:40:8c:2b:0e:ec:48:d1:e6:0e:50:59:16:95: 51:a9:90:19:67:3c:9c:c2:25:19:92:65:15:e1:f6: 49:d1:e2:95:ad:2e:6e:39:1d:4a:0f:29:77:16:9a: 3a:e1:80:4d:5a:88:eb:9c:fe:e1:d5:e2:0f:d4:a3: b6:46:b2:32:34:d1:b7:60:5a:7a:f6:35:90:00:38: c5:25:50:13:a1:82:39:eb:bc:72:e4:e7:b3:90:81: f3:b3:7b:4d:4d:43:84:09:23:2d:4f:d7:16:49:f8: a0:f7:0a:6f:fe:d9:c1:c4:f4:a0:80:75:00:be:d7: 83:fc:2f:da:f7:bb:6c:5b:d7:c4:35:48:e3:78:0b: 70:d8:f2:5e:97:89:99:07:c4:41:50:f1:69:9c:08: 09:bf:26:9d:95:f7:5b:1a:fa:ac:fb:23:b2:e3:04: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:AC:85:5D:3D:19:7A:C5:D7:59:BF:27:71:2D:25:08:A3:9B:C9:1A X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:39:16:e0:ca:b1:a7:66:8b:2d:b4:df:d2:4f:9b:65:df:e3: 7c:c5:55:41:be:1c:6c:b2:06:24:90:a9:7e:65:47:14:ca:f4: d5:a5:85:a7:86:1e:59:0f:67:f2:dc:88:04:4b:1c:43:f9:ec: e5:ee:99:f1:18:1b:98:03:71:24:3b:1f:33:b7:25:48:bf:c3: 34:f9:b4:48:e8:da:39:99:3a:e9:52:cf:c0:de:22:52:ae:cf: 40:dd:1c:c4:19:3c:04:43:0c:33:07:0f:91:b3:99:61:e2:fb: 0b:ba:3a:a3:6a:b5:54:ac:60:ca:c2:df:0a:fe:80:1e:97:ec: a4:b8:f9:eb:98:43:ee:34:ca:6e:74:80:10:74:fd:b6:7c:01: 08:26:a8:ee:48:b4:e4:50:4a:c2:09:b0:67:37:35:62:59:fa: b3:18:09:4d:04:9f:aa:fa:bd:e1:63:38:78:04:a8:b3:16:d5: 42:47:45:6d:39:42:3a:56:a1:db:87:f9:28:b9:46:4d:f7:a0: cf:48:1b:05:e4:65:1c:0b:a2:59:af:e7:a6:84:5f:9a:27:85: fc:16:ef:b7:87:77:d9:27:ef:5b:ca:7e:09:ee:3b:2d:3f:d2: 98:4a:3a:49:50:6a:f3:8a:48:ae:6c:3b:da:2b:a1:b4:9d:d7: f8:11:d3:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNTEwMTUyMDQ3WhcNMjUwNTE3MTUyMDQ3WjAYMRYwFAYD VQQDEw02ODFmNmVjZi00NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o15cTh1fu31ZClrvLmMghjWVIib3qh37vzy0/K2RkPDpG0A9pxcCQCJFv9H WB6Q9J8iQlb/pzImTrnil8gMlsRpgSgKk5Ih5cj4SQlFPB6q+0zNd64xRYmy4UCM Kw7sSNHmDlBZFpVRqZAZZzycwiUZkmUV4fZJ0eKVrS5uOR1KDyl3Fpo64YBNWojr nP7h1eIP1KO2RrIyNNG3YFp69jWQADjFJVAToYI567xy5OezkIHzs3tNTUOECSMt T9cWSfig9wpv/tnBxPSggHUAvteD/C/a97tsW9fENUjjeAtw2PJel4mZB8RBUPFp nAgJvyadlfdbGvqs+yOy4wQZIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyshV09 GXrF11m/J3EtJQijm8kaMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGORbgyrGnZosttN/ST5tl3+N8xVVBvhxssgYkkKl+ZUcUyvTVpYWn hh5ZD2fy3IgESxxD+ezl7pnxGBuYA3EkOx8ztyVIv8M0+bRI6No5mTrpUs/A3iJS rs9A3RzEGTwEQwwzBw+Rs5lh4vsLujqjarVUrGDKwt8K/oAel+ykuPnrmEPuNMpu dIAQdP22fAEIJqjuSLTkUErCCbBnNzViWfqzGAlNBJ+q+r3hYzh4BKizFtVCR0Vt OUI6VqHbh/kouUZN96DPSBsF5GUcC6JZr+emhF+aJ4X8Fu+3h3fZJ+9byn4J7jst P9KYSjpJUGrzikiubDvaK6G0ndf4EdOV -----END CERTIFICATE-----Generated at Sun May 11 00:55:05 2025 by rpki-client