$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: sFDg+v6omhOocOjH9byrByh2Z7XxxqkhaazIyZrCs5g= Subject key identifier: 4E:84:12:91:6C:4F:7F:7D:E3:99:8D:66:ED:5B:C3:FC:43:83:B6:AF Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: CF Signing time: Sat 23 Aug 2025 05:48:39 +0000 Manifest this update: Sat 23 Aug 2025 05:48:39 +0000 Manifest next update: Sat 30 Aug 2025 05:48:39 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: tQ8O/jktj7ssCyVOcNN0OUf67km8TZs6Ktk7JnRQBQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Aug 23 05:48:39 2025 GMT Not After : Aug 30 05:48:39 2025 GMT Subject: CN=68a95637-bdaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b3:ef:94:3e:7c:78:a6:f2:ff:78:d4:15:2c: 60:24:7a:fc:36:96:d9:c0:1d:2c:be:97:7e:75:ea: 77:8a:71:c6:8f:c6:3f:52:90:66:61:14:21:3e:81: 0b:eb:50:2e:d0:eb:9c:0b:a9:ab:07:88:a8:35:d2: 88:e5:ef:00:e7:dd:6c:6a:09:53:a5:55:43:27:29: 1a:4e:79:13:4d:00:c1:89:c1:7a:a8:72:45:dd:94: 64:31:bd:30:5d:bf:f8:32:ec:a1:bd:60:6e:41:c4: 3b:4f:5c:49:d6:30:b9:4f:41:71:b7:4c:21:ed:06: c2:a4:1e:d5:96:52:61:72:5d:f2:df:d7:7e:35:6d: 91:5d:aa:c0:22:40:92:e2:ad:90:2e:a7:3a:c9:c8: d6:84:90:40:13:ae:e0:7d:b2:f8:9f:ef:a3:8c:7f: ba:ea:31:f6:be:10:71:d2:49:ff:3a:be:e7:55:39: 84:d9:5b:6e:4e:53:4e:99:eb:c9:71:55:8e:02:13: 8c:16:f0:1f:8f:d6:f1:4a:cd:c8:c3:c7:1c:b5:82: d3:95:42:9f:a3:45:ff:c6:83:31:85:1b:6c:02:c4: e3:d4:88:ff:1b:2a:31:a5:03:a4:d2:c6:57:36:88: 89:bb:22:bd:8a:93:a8:5d:cc:39:d2:85:49:94:22: c9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:84:12:91:6C:4F:7F:7D:E3:99:8D:66:ED:5B:C3:FC:43:83:B6:AF X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9f:b1:fe:09:e0:65:be:a0:12:a1:1f:6c:57:f2:80:4f:6c: 5e:63:ca:7a:42:79:3c:f6:64:f7:9f:e9:a2:cc:a2:c3:01:6b: 3b:6d:87:2c:70:25:05:ea:67:3a:60:80:81:82:0b:f8:05:7c: ef:d2:b6:15:11:84:38:31:60:16:38:48:3f:b1:44:59:05:14: 54:35:b7:c4:0c:ae:66:31:23:08:8b:d8:3d:2e:ff:27:97:fc: af:33:11:67:43:27:23:8b:eb:c8:e2:04:04:d7:ae:bc:1b:32: e3:01:a9:20:9d:fb:d8:f0:4d:11:49:b5:a1:59:12:be:90:df: 7e:22:34:94:22:5c:36:1d:d0:9f:0e:67:bd:4c:1c:1f:09:36: 31:fb:ce:f5:f5:7d:24:90:88:23:c7:3a:aa:08:01:89:82:dc: 91:2b:a9:a3:e3:38:5d:3e:28:df:d9:86:a1:86:8f:32:f7:9d: e0:a3:19:6d:26:ec:f0:5e:c6:4f:71:cf:00:27:51:7f:6e:f6: 81:98:33:af:ac:b1:39:f5:6f:e7:d0:7b:77:b5:6e:b5:9d:6b: 28:ed:d0:ec:eb:d3:86:01:15:a0:98:bc:13:d4:cd:e4:a3:a1: 3b:96:f7:69:d7:de:e9:45:05:6c:cd:71:93:2d:e4:d7:cb:65: 03:76:7b:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwODIzMDU0ODM5WhcNMjUwODMwMDU0ODM5WjAYMRYwFAYD VQQDEw02OGE5NTYzNy1iZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bPvlD58eKby/3jUFSxgJHr8NpbZwB0svpd+dep3inHGj8Y/UpBmYRQhPoEL 61Au0OucC6mrB4ioNdKI5e8A591saglTpVVDJykaTnkTTQDBicF6qHJF3ZRkMb0w Xb/4MuyhvWBuQcQ7T1xJ1jC5T0Fxt0wh7QbCpB7VllJhcl3y39d+NW2RXarAIkCS 4q2QLqc6ycjWhJBAE67gfbL4n++jjH+66jH2vhBx0kn/Or7nVTmE2VtuTlNOmevJ cVWOAhOMFvAfj9bxSs3Iw8cctYLTlUKfo0X/xoMxhRtsAsTj1Ij/GyoxpQOk0sZX NoiJuyK9ipOoXcw50oVJlCLJswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6EEpFs T39945mNZu1bw/xDg7avMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbn7H+CeBlvqASoR9sV/KAT2xeY8p6Qnk89mT3n+mizKLDAWs7bYcs cCUF6mc6YICBggv4BXzv0rYVEYQ4MWAWOEg/sURZBRRUNbfEDK5mMSMIi9g9Lv8n l/yvMxFnQycji+vI4gQE1668GzLjAakgnfvY8E0RSbWhWRK+kN9+IjSUIlw2HdCf Dme9TBwfCTYx+8719X0kkIgjxzqqCAGJgtyRK6mj4zhdPijf2Yahho8y953goxlt JuzwXsZPcc8AJ1F/bvaBmDOvrLE59W/n0Ht3tW61nWso7dDs69OGARWgmLwT1M3k o6E7lvdp197pRQVszXGTLeTXy2UDdnsX -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:51 2025 by rpki-client