$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: LUaBPdEqPKASQH2ZwFL1YeEtKgaDka9/8jTRuE9qy0E= Subject key identifier: 4B:59:2A:C7:5D:5E:D7:AE:72:3B:AE:FB:8C:8A:63:D1:0D:A2:08:EC Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: AD Signing time: Thu 19 Jun 2025 05:23:46 +0000 Manifest this update: Thu 19 Jun 2025 05:23:45 +0000 Manifest next update: Thu 26 Jun 2025 05:23:45 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: E41IEP8S1bmA/SFXBVyuXi5ixGaCzyxxYDxx/hNED9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Jun 19 05:23:45 2025 GMT Not After : Jun 26 05:23:45 2025 GMT Subject: CN=68539ee2-1174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:3e:e1:c8:ec:62:5f:e7:7f:b0:83:91:7a: 93:90:a9:49:76:e0:ab:8e:ae:5f:64:ed:e2:f2:90: 51:53:5c:4c:78:fd:9a:27:c5:d7:29:89:81:a5:ff: 21:70:59:38:96:e8:ae:72:60:2d:00:02:c0:86:af: d3:c5:c0:83:6c:c0:e3:a6:bc:f1:4e:d4:a8:3f:9a: e3:2a:a4:ef:c7:d9:70:e3:6f:2f:aa:3b:d1:f5:ef: 27:a0:78:f6:5c:34:a3:d1:cc:0d:50:81:86:53:d6: 6d:bd:67:86:2a:15:72:aa:db:d0:f2:dd:86:76:7f: 08:6e:67:cd:f8:10:ae:00:04:c6:82:b7:b6:f6:c9: 08:34:cb:25:05:66:34:21:de:48:bc:6e:af:ea:1d: e7:bd:21:ea:67:43:a9:4b:40:77:cb:fa:29:90:c0: b5:b2:5a:d5:4e:da:cc:e1:9b:84:65:80:39:d0:67: 2b:18:6a:c0:af:e8:15:35:5e:be:d9:09:80:02:e4: 08:5f:9b:1d:64:ba:3c:4b:35:9f:62:55:6b:03:cf: d7:23:f3:d4:16:7e:19:c5:7d:28:e4:77:63:8e:66: 45:f0:3a:ee:8d:d7:2a:e9:8a:53:30:74:c5:30:48: 08:a4:95:28:2f:0d:54:68:cd:04:9a:88:b0:0c:2c: 18:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:59:2A:C7:5D:5E:D7:AE:72:3B:AE:FB:8C:8A:63:D1:0D:A2:08:EC X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:9b:84:f8:8f:04:c8:1c:70:e5:2c:77:0c:f6:a3:67:59:7c: 06:b1:b3:02:4a:f8:fa:13:bd:21:e2:1b:2f:42:91:09:75:dc: 2f:1c:42:e1:e4:30:4c:1a:9d:fe:c9:89:c4:f3:89:b0:11:c8: fa:2d:0d:c6:ac:cb:59:a6:2a:c1:02:86:16:de:58:59:8b:4f: 18:57:d7:15:ce:35:c4:fb:25:99:e9:8f:33:44:02:35:d6:21: 04:9b:b2:e0:6c:fc:a8:cb:93:cb:e7:47:35:92:c8:d0:30:b2: 8b:f0:8d:41:42:22:7c:06:85:19:87:93:84:5b:c9:3c:2a:48: a8:0a:ca:be:ef:19:ce:1c:ac:7c:27:45:a6:6b:e0:8c:2b:ad: d8:f8:89:67:8d:4c:10:71:e9:bd:1f:10:4e:6a:42:4c:00:cd: e9:7a:6e:6a:aa:18:fb:16:bb:d0:33:e7:f9:93:18:63:a8:f3: 84:0b:86:4a:cd:fb:39:21:e8:29:0d:cb:33:95:90:f6:0d:98: ce:26:67:be:4c:1e:9b:48:e6:e3:da:9b:4a:ae:74:11:e1:6b: e0:cd:21:84:8d:e6:ca:cf:e0:ec:c7:d3:fb:b4:1c:fe:e8:e5: 4b:98:71:0b:39:32:6e:52:6a:22:1a:32:19:94:10:8c:9a:85: 89:df:b3:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwNjE5MDUyMzQ1WhcNMjUwNjI2MDUyMzQ1WjAYMRYwFAYD VQQDEw02ODUzOWVlMi0xMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/w+4cjsYl/nf7CDkXqTkKlJduCrjq5fZO3i8pBRU1xMeP2aJ8XXKYmBpf8h cFk4luiucmAtAALAhq/TxcCDbMDjprzxTtSoP5rjKqTvx9lw428vqjvR9e8noHj2 XDSj0cwNUIGGU9ZtvWeGKhVyqtvQ8t2Gdn8IbmfN+BCuAATGgre29skINMslBWY0 Id5IvG6v6h3nvSHqZ0OpS0B3y/opkMC1slrVTtrM4ZuEZYA50GcrGGrAr+gVNV6+ 2QmAAuQIX5sdZLo8SzWfYlVrA8/XI/PUFn4ZxX0o5HdjjmZF8Drujdcq6YpTMHTF MEgIpJUoLw1UaM0EmoiwDCwYsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtZKsdd Xteucjuu+4yKY9ENogjsMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACm4T4jwTIHHDlLHcM9qNnWXwGsbMCSvj6E70h4hsvQpEJddwvHELh 5DBMGp3+yYnE84mwEcj6LQ3GrMtZpirBAoYW3lhZi08YV9cVzjXE+yWZ6Y8zRAI1 1iEEm7LgbPyoy5PL50c1ksjQMLKL8I1BQiJ8BoUZh5OEW8k8KkioCsq+7xnOHKx8 J0Wma+CMK63Y+IlnjUwQcem9HxBOakJMAM3pem5qqhj7FrvQM+f5kxhjqPOEC4ZK zfs5IegpDcszlZD2DZjOJme+TB6bSObj2ptKrnQR4WvgzSGEjebKz+Dsx9P7tBz+ 6OVLmHELOTJuUmoiGjIZlBCMmoWJ37No -----END CERTIFICATE-----Generated at Thu Jun 19 07:50:17 2025 by rpki-client