$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: pJW2AIc9gckEpvsZjQbzYHfHvI1PJtyK215W3mjKWQQ= Subject key identifier: 25:93:51:A0:89:A9:66:44:AD:12:DE:53:74:EC:DB:6B:78:1B:E1:33 Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: EC Signing time: Sun 19 Oct 2025 08:16:54 +0000 Manifest this update: Sun 19 Oct 2025 08:16:53 +0000 Manifest next update: Sun 26 Oct 2025 08:16:53 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: +CT2339xIhqbhJrr1OtYil1KsISAb5Tq5ydXSWlNQi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Oct 19 08:16:53 2025 GMT Not After : Oct 26 08:16:53 2025 GMT Subject: CN=68f49e76-f743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:77:88:96:75:bc:a2:02:90:7e:d3:a9:0b: 66:7f:ce:9a:dc:77:7c:55:c5:67:f8:fa:1d:4a:ca: a9:95:02:4c:9e:84:dd:cb:a5:3f:3d:26:d6:e7:34: 45:6d:9d:d2:aa:cc:fb:aa:db:95:48:ec:98:96:26: 3e:4f:ff:16:0f:2f:4e:3a:1b:39:e5:bb:ee:fc:14: 85:e5:54:4d:20:3c:df:98:3a:b3:ca:63:76:3f:7c: 1c:44:cb:ff:b8:e6:d9:95:82:17:43:91:ae:db:c0: 3c:a2:7b:b0:7d:0a:23:f3:2d:f8:34:5a:94:ab:0d: d8:b1:35:7c:ad:64:48:9e:cd:9d:f1:1d:f3:7c:0f: 1b:54:b6:ff:a5:07:08:4e:31:20:01:07:7e:d6:cc: 83:57:6d:87:76:12:ff:18:f3:32:70:8f:d3:a3:ee: ec:a1:de:40:33:7d:6b:2b:df:e2:08:22:ae:74:3f: 29:95:d7:d9:5c:e4:50:b4:95:2e:fb:c3:c3:23:0a: c5:6d:f8:1a:a9:ef:37:cc:c5:fd:3e:a3:0a:d4:b7: c2:d7:d7:89:da:d6:20:af:71:8b:9f:bd:df:60:d5: 2b:f4:b2:30:96:f9:43:3b:02:41:50:87:eb:11:84: 27:34:e2:72:07:b4:86:22:45:e3:f8:bf:5c:21:d4: 18:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:51:A0:89:A9:66:44:AD:12:DE:53:74:EC:DB:6B:78:1B:E1:33 X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:91:06:f0:aa:be:2d:86:c0:70:6d:68:43:14:51:27:2e:c8: 27:c1:1c:e4:28:78:95:40:5d:c4:5b:44:4f:4d:5e:bd:07:50: e1:ef:fe:58:78:8d:10:58:83:c8:4e:fb:81:04:8e:19:27:9b: 50:de:5d:ae:0c:bf:f7:b8:32:df:c0:24:d8:f1:5e:30:c3:76: 18:7d:bc:d1:43:3a:0c:72:84:f3:23:35:78:3f:be:11:0e:d8: df:12:f1:c4:03:50:73:2e:b4:c7:d1:c3:8e:b6:59:1b:98:b8: f0:23:e4:dd:0a:a5:76:e2:81:14:3b:52:e8:88:b6:d5:13:92: af:86:ce:c0:b9:6a:77:74:da:b1:30:1f:21:c1:70:e7:ba:0e: 45:55:44:8d:25:cc:91:4d:0d:50:c2:74:6c:90:b4:f3:75:f7: d7:44:81:73:a7:b7:97:5e:74:ad:e9:01:8d:fd:af:1b:cf:8b: 29:9b:de:1c:93:0d:a1:a6:92:f7:23:e6:50:9d:b0:0b:27:b2: 55:06:17:db:ff:ab:79:f4:01:79:d6:9b:8a:ae:14:d4:7d:a1: 78:4f:e5:7c:39:14:8b:3b:a5:c2:fe:38:02:d4:dc:97:b8:cb: 8f:c4:26:75:02:f7:5b:c2:39:ca:a5:8d:c6:d7:97:45:46:c5: bb:b2:a4:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUxMDE5MDgxNjUzWhcNMjUxMDI2MDgxNjUzWjAYMRYwFAYD VQQDEw02OGY0OWU3Ni1mNzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypJ3iJZ1vKICkH7TqQtmf86a3Hd8VcVn+PodSsqplQJMnoTdy6U/PSbW5zRF bZ3Sqsz7qtuVSOyYliY+T/8WDy9OOhs55bvu/BSF5VRNIDzfmDqzymN2P3wcRMv/ uObZlYIXQ5Gu28A8onuwfQoj8y34NFqUqw3YsTV8rWRIns2d8R3zfA8bVLb/pQcI TjEgAQd+1syDV22HdhL/GPMycI/To+7sod5AM31rK9/iCCKudD8pldfZXORQtJUu +8PDIwrFbfgaqe83zMX9PqMK1LfC19eJ2tYgr3GLn73fYNUr9LIwlvlDOwJBUIfr EYQnNOJyB7SGIkXj+L9cIdQYzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWTUaCJ qWZErRLeU3Ts22t4G+EzMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdkQbwqr4thsBwbWhDFFEnLsgnwRzkKHiVQF3EW0RPTV69B1Dh7/5Y eI0QWIPITvuBBI4ZJ5tQ3l2uDL/3uDLfwCTY8V4ww3YYfbzRQzoMcoTzIzV4P74R DtjfEvHEA1BzLrTH0cOOtlkbmLjwI+TdCqV24oEUO1LoiLbVE5Kvhs7AuWp3dNqx MB8hwXDnug5FVUSNJcyRTQ1QwnRskLTzdffXRIFzp7eXXnSt6QGN/a8bz4spm94c kw2hppL3I+ZQnbALJ7JVBhfb/6t59AF51puKrhTUfaF4T+V8ORSLO6XC/jgC1NyX uMuPxCZ1AvdbwjnKpY3G15dFRsW7sqSc -----END CERTIFICATE-----Generated at Tue Oct 21 07:19:38 2025 by rpki-client