$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: sB/Ut4Cpysf59+mdyVButVD0usHgKxFtKxSFJQqznlo= Subject key identifier: 8C:21:48:A2:0A:2A:A1:6F:34:1F:D8:19:D5:88:30:5B:DF:F9:0F:3D Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 9A Signing time: Sun 11 May 2025 05:03:14 +0000 Manifest this update: Sun 11 May 2025 05:03:14 +0000 Manifest next update: Sun 18 May 2025 05:03:14 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: xi80XTmR1T/dayH0FNFAAxOEyXVit5cp8tMohxRgw/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: May 11 05:03:14 2025 GMT Not After : May 18 05:03:14 2025 GMT Subject: CN=68202f92-3d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8f:01:e3:50:16:c9:ce:c0:a2:b0:24:91:14: b1:fe:c9:26:9e:36:a4:62:30:18:cd:74:44:9c:e3: 14:bf:a1:36:a3:e9:2f:72:82:58:fc:57:1e:d8:04: 7d:c6:59:1b:6e:d4:cc:be:d4:30:78:9e:62:53:12: 50:f4:7b:94:8e:6f:a7:5b:2e:75:d6:a1:2a:0d:68: 4a:d2:bd:ba:ee:31:a7:4b:60:50:8d:f9:17:c5:8a: 69:01:50:aa:20:eb:9c:98:01:21:f3:64:36:a7:85: 36:ca:77:6d:b2:97:6b:cb:bb:08:84:47:8f:11:ef: 07:ac:f8:65:ae:e0:4e:69:91:ca:ce:17:f4:16:50: 36:2e:ea:a9:3f:14:17:bd:d3:14:d7:61:c0:5b:ca: 3b:eb:26:c6:42:cc:7b:ed:4d:14:a0:e0:1e:f4:6b: 9b:a1:e1:41:6d:6d:4c:ba:f8:fe:c5:5b:4d:bc:c1: cb:fd:4d:fa:5e:b4:3d:b0:af:47:84:02:00:f1:d9: 9e:d6:7d:aa:51:be:b6:7f:9d:6b:87:94:50:c4:15: b6:a2:c1:f8:7d:a7:8e:df:de:9d:d7:d5:d7:3f:7d: fb:84:b1:68:ea:33:3a:90:f8:b6:83:dd:ba:42:e5: 2f:7f:e9:30:8f:4c:c3:75:48:42:67:aa:25:7f:50: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:21:48:A2:0A:2A:A1:6F:34:1F:D8:19:D5:88:30:5B:DF:F9:0F:3D X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:bb:58:1b:2c:97:79:73:a8:a3:9f:82:d5:fc:a4:19:ce:a3: e8:0a:30:a0:a5:1e:75:35:cb:07:e4:be:57:fe:94:e6:4c:13: dc:12:18:c2:b2:b2:b0:a1:17:16:c6:3f:cd:15:6f:2b:52:39: c1:a7:84:be:19:72:88:79:95:f1:1e:62:9a:26:f4:af:3e:d4: 3f:39:dc:52:b1:ef:6f:39:5b:01:33:af:5b:07:1d:94:10:42: c6:50:b3:42:d6:63:4e:ce:e9:57:25:08:0c:49:cc:41:b8:aa: 47:74:c2:b4:7e:7b:bd:46:fe:7b:49:02:66:b0:8c:b8:a7:1a: 86:bd:62:e7:12:59:69:a2:38:9f:1e:ab:f3:77:69:cf:ff:1f: dc:95:e6:95:af:ff:ca:ce:a3:4a:31:63:d1:db:d6:b8:84:0b: 3d:98:11:ea:42:06:b0:a9:66:72:aa:83:cc:93:fd:8f:6f:31: 4e:69:c4:0f:8e:cf:e6:31:e4:14:04:b7:24:16:4f:ac:b6:c1: de:5d:c9:df:d4:89:80:da:ea:81:e3:79:52:fb:e6:0e:2b:89: ad:1f:51:07:35:44:09:d0:f2:88:ab:e5:c0:de:79:3d:76:0c: aa:94:26:de:99:56:b2:17:2c:40:9e:8f:86:cb:be:0c:59:e2: 28:e2:47:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwNTExMDUwMzE0WhcNMjUwNTE4MDUwMzE0WjAYMRYwFAYD VQQDEw02ODIwMmY5Mi0zZDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt48B41AWyc7AorAkkRSx/skmnjakYjAYzXREnOMUv6E2o+kvcoJY/Fce2AR9 xlkbbtTMvtQweJ5iUxJQ9HuUjm+nWy511qEqDWhK0r267jGnS2BQjfkXxYppAVCq IOucmAEh82Q2p4U2yndtspdry7sIhEePEe8HrPhlruBOaZHKzhf0FlA2LuqpPxQX vdMU12HAW8o76ybGQsx77U0UoOAe9GuboeFBbW1Muvj+xVtNvMHL/U36XrQ9sK9H hAIA8dme1n2qUb62f51rh5RQxBW2osH4faeO396d19XXP337hLFo6jM6kPi2g926 QuUvf+kwj0zDdUhCZ6olf1Dg7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwhSKIK KqFvNB/YGdWIMFvf+Q89MB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARu1gbLJd5c6ijn4LV/KQZzqPoCjCgpR51NcsH5L5X/pTmTBPcEhjC srKwoRcWxj/NFW8rUjnBp4S+GXKIeZXxHmKaJvSvPtQ/OdxSse9vOVsBM69bBx2U EELGULNC1mNOzulXJQgMScxBuKpHdMK0fnu9Rv57SQJmsIy4pxqGvWLnEllpojif Hqvzd2nP/x/cleaVr//KzqNKMWPR29a4hAs9mBHqQgawqWZyqoPMk/2PbzFOacQP js/mMeQUBLckFk+stsHeXcnf1ImA2uqB43lS++YOK4mtH1EHNUQJ0PKIq+XA3nk9 dgyqlCbemVayFyxAno+Gy74MWeIo4kd1 -----END CERTIFICATE-----Generated at Mon May 12 07:24:55 2025 by rpki-client