$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft File: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft (raw, json) Hash identifier: A0Ll2qp/bjWKwo/JANQhFE+CvIrFanfhvjSEHPRiXdM= Subject key identifier: 51:2E:A9:4F:44:70:D0:06:28:28:32:2D:CC:1F:85:DD:B8:96:06:FD Authority key identifier: 35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 Certificate issuer: /CN=A918EDB2/serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Certificate serial: 192D Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft Manifest number: 4B30 Signing time: Fri 06 Jun 2025 15:28:11 +0000 Manifest this update: Fri 06 Jun 2025 15:28:10 +0000 Manifest next update: Fri 13 Jun 2025 15:28:10 +0000 Files and hashes: 1: NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl (hash: 1/iDTol9KbjNOgs7EfJKydsodnNhGzv8Y0mjdjV+CI4=) 2: F22C58CEE69611EAA594260CC4F9AE02.roa (hash: fnrYZYlCN57UVfp7zz/b0ADCI8GQeD8xxQSWqXCF91M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 15:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6445 (0x192d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=35A3F61FC5DFF192C1D90C74AB82C7A25D7E16D8 Validity Not Before: Jun 6 15:28:10 2025 GMT Not After : Jun 13 15:28:10 2025 GMT Subject: CN=6843090b-df41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:4a:8d:23:4b:5d:17:e3:4b:02:3f:a4:ff: 32:23:bf:0d:2e:19:23:87:42:b4:cf:eb:54:cb:17: 50:05:a6:d9:5d:77:3a:70:57:bf:ef:f3:39:06:50: 45:9c:e1:aa:1c:6c:0f:13:e3:75:f3:12:77:e2:73: 04:1b:e2:81:46:b7:de:44:6e:36:f2:76:96:17:b8: 07:7f:eb:9c:9f:fd:47:1b:03:6b:a1:46:04:fc:22: 62:7b:93:88:2a:1f:24:53:74:43:16:f9:4b:fb:0d: 92:58:f1:da:65:ae:e3:f9:30:18:f6:f0:bf:e6:80: 31:c6:bc:bb:06:75:c3:2f:50:8b:14:06:7c:5b:3f: a8:a5:50:66:88:c5:23:fe:9b:b0:04:7b:50:85:33: 24:db:1f:8a:6a:a1:73:90:03:53:17:1f:17:8d:3d: 18:b3:bb:f9:96:5d:e8:22:d1:09:42:c0:cc:d5:22: ce:a4:2b:61:b6:16:51:8a:33:c9:8b:8c:16:a9:19: 84:9f:ae:ab:49:68:d5:cb:ca:f4:a9:83:3f:cc:00: c0:32:3e:82:23:d9:b7:e8:eb:51:c7:f4:4d:ea:24: 53:e0:83:de:d0:42:85:53:55:24:06:a2:c5:59:3a: 24:14:5d:9b:bf:a4:33:76:c4:20:00:cd:f2:43:ea: b9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2E:A9:4F:44:70:D0:06:28:28:32:2D:CC:1F:85:DD:B8:96:06:FD X509v3 Authority Key Identifier: keyid:35:A3:F6:1F:C5:DF:F1:92:C1:D9:0C:74:AB:82:C7:A2:5D:7E:16:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/0DF3B25E70E911E2B36D4B6B2979BB20/NaP2H8Xf8ZLB2Qx0q4LHol1-Ftg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:48:d0:bc:bf:93:85:2e:5d:2e:e2:c4:ef:ea:3f:8e:28:cb: 81:65:66:8d:1b:a5:9f:de:3a:d0:a3:19:62:42:a2:04:d3:7d: f3:e7:0d:02:2f:8a:34:dd:99:f3:7b:f1:69:e0:18:2c:9e:c5: c1:e0:43:fe:56:12:23:65:19:b5:fe:d5:42:db:8b:20:7c:63: 84:0c:fd:f7:1f:1f:52:4b:da:35:3c:e1:dd:f0:9c:47:9f:33: cf:af:78:bd:fe:bd:94:95:1d:55:e1:a7:f7:16:92:94:96:e6: 09:3e:1b:fa:13:79:99:82:78:cd:c8:84:5a:b9:ce:b9:4e:df: 3b:a4:8c:d4:e3:89:8f:60:2d:87:8f:15:5e:fa:b3:cb:48:3e: 34:8e:06:5e:60:b5:7b:11:0c:25:d0:07:16:25:0f:d8:ea:d9: fc:b9:93:f1:ac:7c:53:ab:33:6f:b6:10:73:c9:84:aa:65:8d: 03:3c:fa:9d:9d:a8:b4:83:3b:53:52:85:84:08:bb:1f:6d:17: 05:61:93:0a:d6:77:7d:61:0b:4c:71:45:33:1a:a4:8a:01:fb: fe:e5:d2:2f:1d:72:d0:ec:a4:70:6b:a1:e2:fa:9c:43:dc:2a: db:5d:d4:5c:96:ae:7c:b7:58:a1:a1:b6:8b:96:98:08:95:b8: 37:78:da:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKDM1QTNGNjFGQzVERkYxOTJDMUQ5MEM3NEFCODJDN0Ey NUQ3RTE2RDgwHhcNMjUwNjA2MTUyODEwWhcNMjUwNjEzMTUyODEwWjAYMRYwFAYD VQQDEw02ODQzMDkwYi1kZjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniBKjSNLXRfjSwI/pP8yI78NLhkjh0K0z+tUyxdQBabZXXc6cFe/7/M5BlBF nOGqHGwPE+N18xJ34nMEG+KBRrfeRG428naWF7gHf+ucn/1HGwNroUYE/CJie5OI Kh8kU3RDFvlL+w2SWPHaZa7j+TAY9vC/5oAxxry7BnXDL1CLFAZ8Wz+opVBmiMUj /puwBHtQhTMk2x+KaqFzkANTFx8XjT0Ys7v5ll3oItEJQsDM1SLOpCththZRijPJ i4wWqRmEn66rSWjVy8r0qYM/zADAMj6CI9m36OtRx/RN6iRT4IPe0EKFU1UkBqLF WTokFF2bv6QzdsQgAM3yQ+q5kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEuqU9E cNAGKCgyLcwfhd24lgb9MB8GA1UdIwQYMBaAFDWj9h/F3/GSwdkMdKuCx6JdfhbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8wREYzQjI1RTcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjhaTEIyUXgwcTRMSG9sMS1G dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL05hUDJIOFhmOFpMQjJReDBxNExIb2wxLUZ0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi8wREYzQjI1RTcwRTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9OYVAySDhYZjha TEIyUXgwcTRMSG9sMS1GdGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNSNC8v5OFLl0u4sTv6j+OKMuBZWaNG6Wf3jrQoxliQqIE033z5w0C L4o03Znze/Fp4BgsnsXB4EP+VhIjZRm1/tVC24sgfGOEDP33Hx9SS9o1POHd8JxH nzPPr3i9/r2UlR1V4af3FpKUluYJPhv6E3mZgnjNyIRauc65Tt87pIzU44mPYC2H jxVe+rPLSD40jgZeYLV7EQwl0AcWJQ/Y6tn8uZPxrHxTqzNvthBzyYSqZY0DPPqd nai0gztTUoWECLsfbRcFYZMK1nd9YQtMcUUzGqSKAfv+5dIvHXLQ7KRwa6Hi+pxD 3CrbXdRclq58t1ihobaLlpgIlbg3eNr0 -----END CERTIFICATE-----Generated at Sun Jun 8 14:52:01 2025 by rpki-client