$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: k/8lbChCoCra2nyM1P75RN3R8zU/xm6Lc8wDpxjG3g0= Subject key identifier: 93:28:52:F6:B3:F9:98:B6:40:EC:E0:D4:55:3A:11:1C:63:EE:B6:2F Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1907 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B0B Signing time: Fri 04 Apr 2025 15:27:17 +0000 Manifest this update: Fri 04 Apr 2025 15:27:17 +0000 Manifest next update: Fri 11 Apr 2025 15:27:17 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: +N5nlhdUNLi9X0n5vJ1gujofW561t1rZWla9+M7kODY=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: T2up6BLAo2bqeuWG4PUsHlE0/L5R2ojrPd9fvOrJMTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6407 (0x1907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2 Validity Not Before: Apr 4 15:27:17 2025 GMT Not After : Apr 11 15:27:17 2025 GMT Subject: CN=67effa55-8be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3c:d8:14:b3:cd:1d:b7:f2:f3:33:8f:53:fd: bb:f7:1d:0b:47:14:55:5d:f3:10:e8:03:c0:ed:0c: fd:63:f2:cc:51:be:31:a3:cc:a2:4e:eb:31:f0:ef: eb:b4:68:b3:73:de:c3:1d:7d:54:7b:e3:42:20:4a: 57:e1:68:e1:90:f5:f6:9e:d3:a3:af:f5:d5:7d:db: d7:4b:90:9d:34:54:64:3b:f1:d7:9a:29:c0:8a:a0: 7f:e0:33:df:69:74:f2:6c:39:2e:d9:17:63:e3:45: a0:91:61:dc:41:65:34:e9:0b:3d:c8:10:7d:94:ab: 1d:d5:c6:5f:79:10:42:39:2c:2d:76:87:f3:6e:72: a0:cc:fe:32:4c:b6:0b:ee:b7:bb:f9:e1:b1:db:e9: 80:dc:ce:8e:12:61:f9:6c:f2:4e:78:26:4b:9e:db: 95:fb:21:ac:05:c4:31:e9:74:c3:b7:c5:61:6a:0e: cc:8c:b5:6f:40:a9:22:9e:2e:71:2c:00:44:56:b8: 4b:1e:db:48:74:ed:3f:89:c5:14:f1:e3:ac:c8:0e: 04:b4:81:00:9b:2d:97:9c:a2:7a:9f:92:b2:6b:e2: 82:66:74:9d:c8:e2:87:8f:fc:33:d6:88:6f:b7:07: f2:46:26:41:b0:72:2b:1c:43:82:23:91:6b:d7:7b: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:28:52:F6:B3:F9:98:B6:40:EC:E0:D4:55:3A:11:1C:63:EE:B6:2F X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e1:06:60:78:32:fb:4a:8b:50:15:5e:ec:52:fa:bb:67:44: ae:b4:aa:3e:bb:da:e7:b0:63:ac:25:15:0b:9e:94:c6:69:81: d3:9f:8b:48:4b:4f:75:9f:d6:08:c0:be:8e:6a:19:e7:13:5d: c5:48:ea:66:fa:42:df:18:30:f7:30:6f:05:2c:d6:a5:25:d0: 5b:d4:10:73:ac:1b:b1:3a:ce:ff:6a:8c:16:aa:04:30:08:5e: ad:ad:42:af:43:c0:9d:97:63:3e:1c:1d:82:a1:e7:cd:b5:2d: 8f:a2:f4:d3:36:2c:98:65:a6:da:6c:26:72:e4:2f:77:9f:08: c9:9d:01:75:38:8a:ac:a5:6b:c2:d1:3a:36:77:ea:2c:8c:83: f8:3b:42:f5:a8:7f:fb:04:13:8b:6b:79:bb:16:05:3a:18:d2: 99:57:29:bd:60:bd:de:1d:b4:d4:07:26:e8:39:92:b2:1b:12: c3:c8:dd:76:32:6c:ce:a2:89:a3:9b:08:4e:a0:f6:5a:a3:8d: e6:d1:5a:ab:52:49:0c:91:fa:1c:e4:ec:8a:bb:ef:13:2c:93: e7:3e:16:6d:7e:55:33:e7:4e:b1:a0:de:10:f2:1a:84:7f:08: 3e:2c:01:98:39:bc:ab:08:6d:86:c2:f4:49:2a:31:13:b7:ab: 10:db:a1:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNDA0MTUyNzE3WhcNMjUwNDExMTUyNzE3WjAYMRYwFAYD VQQDEw02N2VmZmE1NS04YmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1TzYFLPNHbfy8zOPU/279x0LRxRVXfMQ6APA7Qz9Y/LMUb4xo8yiTusx8O/r tGizc97DHX1Ue+NCIEpX4WjhkPX2ntOjr/XVfdvXS5CdNFRkO/HXminAiqB/4DPf aXTybDku2Rdj40WgkWHcQWU06Qs9yBB9lKsd1cZfeRBCOSwtdofzbnKgzP4yTLYL 7re7+eGx2+mA3M6OEmH5bPJOeCZLntuV+yGsBcQx6XTDt8Vhag7MjLVvQKkini5x LABEVrhLHttIdO0/icUU8eOsyA4EtIEAmy2XnKJ6n5Kya+KCZnSdyOKHj/wz1ohv twfyRiZBsHIrHEOCI5Fr13sMMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJMoUvaz +Zi2QOzg1FU6ERxj7rYvMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC04QZgeDL7SotQFV7sUvq7Z0SutKo+u9rnsGOsJRULnpTGaYHTn4tI S091n9YIwL6OahnnE13FSOpm+kLfGDD3MG8FLNalJdBb1BBzrBuxOs7/aowWqgQw CF6trUKvQ8Cdl2M+HB2CoefNtS2PovTTNiyYZababCZy5C93nwjJnQF1OIqspWvC 0To2d+osjIP4O0L1qH/7BBOLa3m7FgU6GNKZVym9YL3eHbTUByboOZKyGxLDyN12 MmzOoomjmwhOoPZao43m0VqrUkkMkfoc5OyKu+8TLJPnPhZtflUz506xoN4Q8hqE fwg+LAGYObyrCG2GwvRJKjETt6sQ26F9 -----END CERTIFICATE-----Generated at Sat Apr 5 21:41:59 2025 by rpki-client