$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: LOIdji49XRhRFl21asQDZz9iVtyttl7NwpcWk5MeI8Q= Subject key identifier: 4C:48:B9:42:63:5B:56:C6:A0:F1:F6:6D:F3:7F:7C:4B:41:C5:07:DF Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: BE Signing time: Mon 21 Jul 2025 06:00:21 +0000 Manifest this update: Mon 21 Jul 2025 06:00:21 +0000 Manifest next update: Mon 28 Jul 2025 06:00:21 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: K7QEwqhZg8odeI4EYl6u3dJkaosCK+gtCO3l7Ir3j+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Jul 21 06:00:21 2025 GMT Not After : Jul 28 06:00:21 2025 GMT Subject: CN=687dd775-f50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:66:2a:17:3c:e4:71:bd:85:54:32:f1:71: e1:c3:0a:fe:2f:1f:61:45:25:9d:00:2d:48:94:4d: d9:71:67:92:0f:50:ba:11:4b:8a:c8:50:a1:20:78: a1:af:55:0f:81:3b:82:82:93:78:34:41:fb:dd:7d: 21:5b:06:ff:51:43:c6:6a:56:a8:6b:d1:6d:32:de: fa:47:9b:17:ed:78:94:8d:e4:37:08:f7:41:d3:9c: 81:70:9d:39:69:4a:32:fb:f5:f8:d6:16:c6:97:59: 2e:05:d6:fc:96:0d:4f:d5:0a:28:48:32:5a:ee:15: 93:45:ce:31:e7:dc:aa:02:6d:f2:f6:6f:c1:ff:c1: 81:c5:1c:e1:2d:e3:49:86:67:7e:e6:96:97:a9:4b: 9a:5e:19:e7:ae:1b:59:17:cd:c4:98:2d:b4:e9:40: 39:c3:d3:c5:ee:46:a4:39:e4:69:26:f2:78:28:26: 8e:79:84:79:78:79:ef:29:b5:01:db:98:10:f4:12: 11:fd:f2:7d:ee:b5:54:bc:ec:bb:2a:f1:37:96:23: 74:e5:6e:3b:ec:c2:e7:12:36:33:b7:dc:7d:6b:2e: 6d:aa:46:18:4e:8d:7f:15:d8:65:9a:2f:71:56:13: 1e:bf:2f:27:1f:c3:9d:05:7a:02:54:21:eb:c2:51: 76:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:48:B9:42:63:5B:56:C6:A0:F1:F6:6D:F3:7F:7C:4B:41:C5:07:DF X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:59:56:06:70:bd:cd:3b:93:56:ed:3a:95:de:3e:87:00:54: 59:2e:f3:04:8d:fb:6e:f8:4f:74:e1:71:9f:7e:33:b3:c5:5d: 9a:79:2c:b0:98:c3:fe:d9:04:bc:b4:80:52:4e:a2:1e:03:83: 17:19:62:32:97:49:63:a7:92:2f:52:7b:62:5f:8b:27:4f:c8: 71:bf:10:9d:89:df:07:f2:45:e5:76:a5:39:88:04:6b:3a:88: 3e:8d:f1:30:f6:92:fa:d3:9e:86:a5:9b:3d:2b:0b:bb:92:3a: 42:83:c8:c2:d5:6f:89:05:13:f5:f2:e4:ce:3e:e8:c4:e5:77: a0:4a:f0:d5:04:4f:ac:75:d0:88:41:ce:72:60:79:82:f8:b8: 1d:6d:38:49:d6:a2:e7:83:33:b8:9f:28:7e:ee:d9:0c:94:50: 30:fb:67:e6:b2:17:31:7b:4d:3d:26:da:e0:4a:6e:3c:16:fd: 23:f8:f1:32:15:e4:35:45:b7:87:be:65:97:8c:3f:d6:a5:93: 0a:62:3f:c7:df:bf:f2:50:c0:6c:1a:1e:d7:e3:ab:78:44:70: 81:02:86:30:ab:e9:21:35:bd:db:38:0a:44:60:ea:52:81:2e: e9:5a:92:a0:9b:cf:88:59:f9:ce:b1:89:ab:2e:71:cc:1f:75: bf:bd:8d:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwNzIxMDYwMDIxWhcNMjUwNzI4MDYwMDIxWjAYMRYwFAYD VQQDEw02ODdkZDc3NS1mNTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbJmKhc85HG9hVQy8XHhwwr+Lx9hRSWdAC1IlE3ZcWeSD1C6EUuKyFChIHih r1UPgTuCgpN4NEH73X0hWwb/UUPGalaoa9FtMt76R5sX7XiUjeQ3CPdB05yBcJ05 aUoy+/X41hbGl1kuBdb8lg1P1QooSDJa7hWTRc4x59yqAm3y9m/B/8GBxRzhLeNJ hmd+5paXqUuaXhnnrhtZF83EmC206UA5w9PF7kakOeRpJvJ4KCaOeYR5eHnvKbUB 25gQ9BIR/fJ97rVUvOy7KvE3liN05W477MLnEjYzt9x9ay5tqkYYTo1/Fdhlmi9x VhMevy8nH8OdBXoCVCHrwlF2iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFExIuUJj W1bGoPH2bfN/fEtBxQffMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlWVYGcL3NO5NW7TqV3j6HAFRZLvMEjftu+E904XGffjOzxV2aeSyw mMP+2QS8tIBSTqIeA4MXGWIyl0ljp5IvUntiX4snT8hxvxCdid8H8kXldqU5iARr Oog+jfEw9pL6056GpZs9Kwu7kjpCg8jC1W+JBRP18uTOPujE5XegSvDVBE+sddCI Qc5yYHmC+LgdbThJ1qLngzO4nyh+7tkMlFAw+2fmshcxe009JtrgSm48Fv0j+PEy FeQ1RbeHvmWXjD/WpZMKYj/H37/yUMBsGh7X46t4RHCBAoYwq+khNb3bOApEYOpS gS7pWpKgm8+IWfnOsYmrLnHMH3W/vY3p -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:30 2025 by rpki-client