$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: bgTzxrRf66aOBC/dWvfpRNlttGtJR5re+0Sq4rAVVRI= Subject key identifier: 6F:D5:21:70:16:20:0A:65:ED:14:4D:6B:2E:14:20:FB:F5:B9:50:0B Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: D6 Signing time: Fri 05 Sep 2025 05:58:50 +0000 Manifest this update: Fri 05 Sep 2025 05:58:50 +0000 Manifest next update: Fri 12 Sep 2025 05:58:50 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: 93CN+tJWrdjjcCQ5r3vditwpY54B/WlJy4np/PqOi/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Sep 5 05:58:50 2025 GMT Not After : Sep 12 05:58:50 2025 GMT Subject: CN=68ba7c1a-36f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:e7:ea:f9:10:c4:fd:3e:ff:58:cc:0c:66: 0a:95:62:ee:2d:c2:9c:13:1b:85:fd:68:52:2d:93: 6d:16:ed:ba:e5:41:3b:8a:6f:82:64:cd:64:dc:28: 2e:bd:01:44:0f:9d:5a:0c:39:0a:22:3e:5a:ea:ec: f7:8e:4b:f6:2c:1e:25:58:c4:2b:83:05:52:77:1e: cb:c3:76:44:6a:c5:7e:6d:07:3f:47:03:5b:1c:c5: 86:fc:a0:ee:15:1b:38:5f:49:64:af:cb:84:a9:84: fc:b4:73:2c:dd:ac:84:c8:34:4e:5d:b0:db:01:87: e7:79:36:bb:c3:f2:53:f8:ec:1a:0d:c6:59:2d:f3: d9:0d:dc:72:19:95:bb:78:85:48:9e:14:3e:68:8c: 79:01:01:d3:70:63:8c:33:0f:8c:47:0c:29:ff:e5: 59:c5:c9:ba:5a:fa:96:26:36:85:8f:b9:bd:82:3c: ed:a1:a7:a4:aa:2f:f4:e1:06:15:e6:05:99:ce:88: e8:46:ad:6a:3f:9d:45:8a:45:88:77:5a:aa:6a:1b: 97:06:e2:1f:b7:4c:e8:f8:a1:2a:34:06:b2:d4:c3: 87:90:fc:73:3c:1a:12:65:ba:df:d4:d2:ba:7e:18: a8:3f:09:ed:49:04:ed:13:91:bc:ae:24:4b:00:ff: d7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:21:70:16:20:0A:65:ED:14:4D:6B:2E:14:20:FB:F5:B9:50:0B X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:6a:cf:b1:72:43:ff:0e:db:b0:1d:f0:3b:6e:f5:2e:44:39: bf:65:b9:6e:ff:d9:21:5d:2b:39:95:89:d4:3c:c7:3f:c7:b7: 2d:c3:63:c9:4c:54:65:bf:d0:6b:c7:b3:b7:b3:f0:c0:7c:93: 73:be:71:63:f2:28:63:47:1b:b7:c8:90:f8:98:4c:12:f5:b6: 11:3a:b4:ea:13:5a:79:53:f0:12:1d:04:61:cb:89:61:a1:5c: b3:09:d0:1e:5e:03:29:f5:02:8f:32:34:68:7c:fe:8b:b9:55: ae:e2:a9:27:05:aa:f3:78:53:07:b1:36:1d:2c:ae:76:9a:cb: c0:86:d3:ff:34:19:c7:e2:f0:de:ca:8a:4f:7f:12:a6:1f:d6: 09:5b:4b:89:df:ec:06:b0:fb:36:20:73:97:e1:af:bc:db:7f: 61:7d:f7:4d:5c:e2:f8:26:87:a9:40:7f:57:11:14:80:c4:b8: 9a:c2:33:27:ca:26:66:d0:25:00:37:cd:17:48:c1:fe:1d:30: 89:ed:52:0c:5c:3d:38:a1:ab:a7:34:4e:3a:b3:4e:93:e6:03: c0:22:e5:ef:4e:9e:13:19:d7:20:82:3f:8b:5f:70:c2:be:30: 29:29:b0:ca:d5:b2:15:a8:29:e9:79:31:c5:e7:a5:36:4c:18: 1a:d9:54:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwOTA1MDU1ODUwWhcNMjUwOTEyMDU1ODUwWjAYMRYwFAYD VQQDEw02OGJhN2MxYS0zNmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5N7n6vkQxP0+/1jMDGYKlWLuLcKcExuF/WhSLZNtFu265UE7im+CZM1k3Cgu vQFED51aDDkKIj5a6uz3jkv2LB4lWMQrgwVSdx7Lw3ZEasV+bQc/RwNbHMWG/KDu FRs4X0lkr8uEqYT8tHMs3ayEyDROXbDbAYfneTa7w/JT+OwaDcZZLfPZDdxyGZW7 eIVInhQ+aIx5AQHTcGOMMw+MRwwp/+VZxcm6WvqWJjaFj7m9gjztoaekqi/04QYV 5gWZzojoRq1qP51FikWId1qqahuXBuIft0zo+KEqNAay1MOHkPxzPBoSZbrf1NK6 fhioPwntSQTtE5G8riRLAP/XdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/VIXAW IApl7RRNay4UIPv1uVALMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWas+xckP/DtuwHfA7bvUuRDm/Zblu/9khXSs5lYnUPMc/x7ctw2PJ TFRlv9Brx7O3s/DAfJNzvnFj8ihjRxu3yJD4mEwS9bYROrTqE1p5U/ASHQRhy4lh oVyzCdAeXgMp9QKPMjRofP6LuVWu4qknBarzeFMHsTYdLK52msvAhtP/NBnH4vDe yopPfxKmH9YJW0uJ3+wGsPs2IHOX4a+8239hffdNXOL4JoepQH9XERSAxLiawjMn yiZm0CUAN80XSMH+HTCJ7VIMXD04oaunNE46s06T5gPAIuXvTp4TGdcggj+LX3DC vjApKbDK1bIVqCnpeTHF56U2TBga2VRu -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:14 2025 by rpki-client