$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: CkEEsC3IeZaMZ+E/cdEjQdCE1heExAtmu7xwq8MB5zo= Subject key identifier: 2E:06:A0:B7:CE:CE:F0:BE:4D:F4:5D:43:FF:E7:42:E5:0B:04:F4:10 Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: B4 Signing time: Thu 03 Jul 2025 06:08:48 +0000 Manifest this update: Thu 03 Jul 2025 06:08:47 +0000 Manifest next update: Thu 10 Jul 2025 06:08:47 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: IwOIqLBIZkTDm44iP3Q9ewFtMJS4uw5bpjo3NF8DeB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Jul 3 06:08:47 2025 GMT Not After : Jul 10 06:08:47 2025 GMT Subject: CN=68661e70-3f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:1a:72:4d:e1:9b:53:34:4d:12:bb:66:a9: c8:79:4f:70:e8:59:cd:fc:ec:e0:11:00:c0:e1:13: b3:af:bc:6a:5a:c8:5e:8d:8d:f8:18:9e:98:ea:25: b1:d1:23:8b:8f:c0:51:a0:9b:e8:e7:c3:da:49:b5: 3a:61:80:46:13:30:2a:22:ed:fd:71:03:a1:53:46: c1:59:45:79:3f:fb:ac:9b:76:de:07:be:d9:e5:57: 68:52:58:18:d0:0c:9f:01:3b:57:45:aa:32:e2:f3: 8a:af:34:c2:36:4f:f1:f5:53:ac:89:ba:c4:22:cf: fd:d8:b1:aa:6b:f2:08:2a:0b:f5:06:2f:fb:fd:83: 8c:91:d3:23:4e:ac:97:3d:17:f8:12:eb:14:b9:f9: 0b:7c:b7:11:6a:c3:85:ee:75:e6:10:ca:bd:43:bf: 06:f2:08:0b:25:ae:db:18:e9:0c:67:b0:dc:f7:50: 4e:20:2f:37:f2:f7:dc:4e:3d:ab:84:83:36:06:ec: eb:dc:05:52:a0:78:80:3b:23:a6:ed:71:3b:46:0c: bc:49:91:c6:3f:21:41:3e:fe:ed:e1:32:ec:b7:3a: 0e:b0:51:f2:3e:78:d9:84:c1:9d:50:cc:e8:37:00: 5a:a3:cd:4c:fa:e0:0a:a7:b5:2a:e6:03:59:bc:6a: ea:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:06:A0:B7:CE:CE:F0:BE:4D:F4:5D:43:FF:E7:42:E5:0B:04:F4:10 X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f6:89:1f:c6:19:f1:08:81:43:a4:c5:f5:3d:97:99:c1:04: 7c:53:c4:df:38:17:3b:3c:fe:67:5e:e3:53:ee:f8:c3:c6:75: 7b:80:f0:52:6b:bd:0d:15:49:9e:83:e2:79:2d:d6:96:16:13: 33:e3:18:0d:70:44:68:95:a7:6a:e3:08:de:49:f8:5f:e5:5a: a8:bc:e5:e9:88:e7:1b:c2:1f:68:82:53:5f:18:53:37:7b:02: 48:34:85:17:45:de:5e:9b:63:f2:f4:99:0f:74:09:24:e5:c3: 5a:31:ab:15:c4:1d:c4:d7:63:fe:18:a1:fd:6d:18:79:03:d2: 1a:45:bc:fd:1d:2d:95:de:19:c6:6f:d4:83:a4:e1:3e:f3:97: b6:88:c8:6b:c7:5e:13:46:b2:0c:a0:0b:cc:b4:5d:57:19:4d: 1b:84:92:e5:aa:c1:a9:cc:09:01:4e:ad:81:ee:5a:52:07:f3: fb:2e:5a:ec:06:54:2b:c5:41:41:d2:af:56:17:de:bc:2a:0e: 91:3c:b0:14:9a:87:4c:75:c5:9f:59:aa:f9:43:9f:bb:75:a0: 30:19:df:2f:b4:e9:fe:18:13:60:34:39:93:62:2d:b0:71:a2: e6:d2:2f:3b:77:f2:35:e5:ee:ec:44:b2:e5:77:39:ec:d2:5b: c5:de:0f:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwNzAzMDYwODQ3WhcNMjUwNzEwMDYwODQ3WjAYMRYwFAYD VQQDEw02ODY2MWU3MC0zZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrIack3hm1M0TRK7ZqnIeU9w6FnN/OzgEQDA4ROzr7xqWshejY34GJ6Y6iWx 0SOLj8BRoJvo58PaSbU6YYBGEzAqIu39cQOhU0bBWUV5P/usm3beB77Z5VdoUlgY 0AyfATtXRaoy4vOKrzTCNk/x9VOsibrEIs/92LGqa/IIKgv1Bi/7/YOMkdMjTqyX PRf4EusUufkLfLcRasOF7nXmEMq9Q78G8ggLJa7bGOkMZ7Dc91BOIC838vfcTj2r hIM2Buzr3AVSoHiAOyOm7XE7Rgy8SZHGPyFBPv7t4TLstzoOsFHyPnjZhMGdUMzo NwBao81M+uAKp7Uq5gNZvGrqgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4GoLfO zvC+TfRdQ//nQuULBPQQMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE9okfxhnxCIFDpMX1PZeZwQR8U8TfOBc7PP5nXuNT7vjDxnV7gPBS a70NFUmeg+J5LdaWFhMz4xgNcERoladq4wjeSfhf5VqovOXpiOcbwh9oglNfGFM3 ewJINIUXRd5em2Py9JkPdAkk5cNaMasVxB3E12P+GKH9bRh5A9IaRbz9HS2V3hnG b9SDpOE+85e2iMhrx14TRrIMoAvMtF1XGU0bhJLlqsGpzAkBTq2B7lpSB/P7Llrs BlQrxUFB0q9WF968Kg6RPLAUmodMdcWfWar5Q5+7daAwGd8vtOn+GBNgNDmTYi2w caLm0i87d/I15e7sRLLldzns0lvF3g8d -----END CERTIFICATE-----Generated at Thu Jul 3 23:19:27 2025 by rpki-client