$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: MdPhbxew+JD/lvUZdKteYAaYDUVFIVgkySj/lnxJTxg= Subject key identifier: 45:82:ED:A2:60:88:89:02:1C:54:D8:75:6C:14:CC:72:14:9A:CC:01 Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 1974 Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B77 Signing time: Wed 22 Oct 2025 15:29:43 +0000 Manifest this update: Wed 22 Oct 2025 15:29:42 +0000 Manifest next update: Wed 29 Oct 2025 15:29:42 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: C1mKGYTE20T6vqGznq7pbKrxWvol6z0YOSC+bPIglqI=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6516 (0x1974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Oct 22 15:29:42 2025 GMT Not After : Oct 29 15:29:42 2025 GMT Subject: CN=68f8f867-4fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:74:08:0a:b3:4c:19:a7:24:b9:d9:94:83: 2f:ca:46:7f:35:11:a3:cd:c6:44:6a:93:32:ee:78: e6:f1:0d:1d:cd:f6:69:02:c5:90:85:43:1e:f3:54: 58:92:dd:0e:a1:85:e7:b8:6c:68:66:25:83:db:70: 95:d7:54:55:c8:c5:29:e5:02:07:5f:15:25:9c:26: e7:a8:af:d8:92:2e:c0:a0:d3:ab:1c:ee:08:43:1a: 7d:6e:3b:88:62:0c:95:c9:90:10:2d:78:e1:6d:06: 8d:dd:d9:1a:ea:9b:8b:71:79:d4:a4:48:10:ed:c9: bd:1e:6c:54:26:01:67:3d:74:73:e2:5c:97:35:1a: e9:75:01:b5:30:3f:1d:ed:4c:3f:56:43:5e:cc:7e: 96:61:81:54:ac:eb:d7:64:49:aa:8d:96:e2:c5:2e: 00:d8:fe:6c:f1:bc:b0:1e:0f:55:94:94:cb:7c:ff: d9:55:16:aa:5b:a0:20:d5:3a:43:8e:e1:d3:b0:4b: 35:fa:99:32:d8:66:d6:a6:92:f3:57:72:ee:bc:e1: 2b:59:80:9a:08:29:b8:ec:53:58:93:22:97:e0:c8: 22:40:22:91:c1:57:30:a4:6f:18:25:68:6b:1c:ee: 8c:b2:90:f6:62:bf:56:31:c6:2b:50:2e:05:9b:79: 68:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:82:ED:A2:60:88:89:02:1C:54:D8:75:6C:14:CC:72:14:9A:CC:01 X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:cc:43:28:c5:dc:ea:f0:fd:75:37:c7:5b:c6:4e:93:41:b7: 00:e5:96:5b:8b:b7:a0:80:3b:c5:9c:ae:a4:65:e8:1c:44:b1: 30:97:9c:37:ef:2b:93:11:cd:87:6c:03:5a:c2:e8:0e:13:aa: 5d:f2:df:f9:51:b9:35:2b:40:3a:e3:24:19:25:ed:87:9a:d2: 66:c8:e1:b4:4b:f9:b6:09:92:c3:ea:b5:c9:a5:bd:df:3d:e3: 53:67:38:8b:16:c1:b5:b7:6f:a0:19:a1:45:8f:de:60:26:08: 76:61:44:0e:d8:7a:7e:43:b4:32:40:70:76:68:71:6d:5c:82: 34:4e:5d:81:64:c8:45:bf:80:cd:bc:42:b0:e2:bf:6e:b1:bb: 89:44:33:ca:22:7b:90:db:38:61:6c:76:29:19:6f:8e:65:b4: eb:57:c2:61:75:f8:0a:4a:ef:b3:58:54:1d:57:96:32:8f:f2: 0a:d2:b4:a8:e1:df:77:61:ee:0d:43:21:fb:55:ea:0e:6f:b0: e5:f3:d0:43:fc:9f:c7:2c:08:98:6d:8b:7d:18:2b:19:ca:b3: d7:ea:ea:26:7d:3d:a4:c6:e3:8e:5b:1c:ed:92:92:f9:01:65: 37:0c:ea:72:eb:de:f6:b2:98:f2:3a:90:15:57:91:7d:14:53: 39:ff:fa:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUxMDIyMTUyOTQyWhcNMjUxMDI5MTUyOTQyWjAYMRYwFAYD VQQDEw02OGY4Zjg2Ny00ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujZ0CAqzTBmnJLnZlIMvykZ/NRGjzcZEapMy7njm8Q0dzfZpAsWQhUMe81RY kt0OoYXnuGxoZiWD23CV11RVyMUp5QIHXxUlnCbnqK/Yki7AoNOrHO4IQxp9bjuI YgyVyZAQLXjhbQaN3dka6puLcXnUpEgQ7cm9HmxUJgFnPXRz4lyXNRrpdQG1MD8d 7Uw/VkNezH6WYYFUrOvXZEmqjZbixS4A2P5s8bywHg9VlJTLfP/ZVRaqW6Ag1TpD juHTsEs1+pky2GbWppLzV3LuvOErWYCaCCm47FNYkyKX4MgiQCKRwVcwpG8YJWhr HO6MspD2Yr9WMcYrUC4Fm3logwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWC7aJg iIkCHFTYdWwUzHIUmswBMB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2zEMoxdzq8P11N8dbxk6TQbcA5ZZbi7eggDvFnK6kZegcRLEwl5w3 7yuTEc2HbANawugOE6pd8t/5Ubk1K0A64yQZJe2HmtJmyOG0S/m2CZLD6rXJpb3f PeNTZziLFsG1t2+gGaFFj95gJgh2YUQO2Hp+Q7QyQHB2aHFtXII0Tl2BZMhFv4DN vEKw4r9usbuJRDPKInuQ2zhhbHYpGW+OZbTrV8JhdfgKSu+zWFQdV5Yyj/IK0rSo 4d93Ye4NQyH7VeoOb7Dl89BD/J/HLAiYbYt9GCsZyrPX6uomfT2kxuOOWxztkpL5 AWU3DOpy6972spjyOpAVV5F9FFM5//oh -----END CERTIFICATE-----Generated at Wed Oct 22 18:38:07 2025 by rpki-client