$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: d6F29EAtDA04rW3EDyVpk01PWF2OINq3eFp1LZHBU/c= Subject key identifier: 79:EC:C1:8D:7B:9E:F9:AA:88:67:CF:D0:93:27:89:EE:4B:B2:8A:9D Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 92 Signing time: Fri 25 Apr 2025 05:23:13 +0000 Manifest this update: Fri 25 Apr 2025 05:23:13 +0000 Manifest next update: Fri 02 May 2025 05:23:13 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: Cyb9F2Np5bxElN5o0S117ZzoTAILVGm1l8WNxEvHEfg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Apr 25 05:23:13 2025 GMT Not After : May 2 05:23:13 2025 GMT Subject: CN=680b1c41-054f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9a:af:e4:6c:38:41:75:5b:06:ad:d1:af:a9: 2a:9d:ed:a4:f5:00:6c:70:08:bf:1f:1d:16:68:02: 6a:f2:ae:36:d6:f6:ca:f2:af:33:a8:4c:0c:6f:8c: 1a:5f:b2:eb:f9:1e:46:d7:29:29:c6:48:5f:ef:98: 8b:37:11:a6:f0:23:e7:a9:f6:3f:67:c0:86:3a:9e: 22:f2:7e:de:d5:46:6c:00:cb:b6:39:26:2b:c5:34: 02:17:29:02:08:b3:a7:57:6c:b2:03:87:63:a9:56: 39:b8:a0:1d:d0:fe:b5:0b:48:f1:9c:e8:d1:cf:51: 99:93:d1:3c:3b:58:30:cc:e1:ac:9f:79:a4:b8:a6: 01:42:9e:36:b8:14:c0:62:7b:1b:af:64:1d:98:c8: fd:72:92:9e:f6:58:55:1b:e8:6c:ee:69:76:8d:cd: e6:9c:f7:88:d8:88:fc:dc:a0:67:c8:c2:e4:65:4e: 98:c4:73:88:69:82:e0:f3:a4:01:32:c1:c9:f0:91: 56:a1:26:b8:c8:3e:a0:54:4f:89:89:63:b2:80:83: 8e:5a:02:10:c1:50:4a:73:86:8d:70:cd:38:33:be: 67:2a:69:af:61:e1:b5:6f:0a:c7:f2:bb:ea:b2:1f: 2b:44:27:27:84:5e:00:ec:79:93:a5:f9:ff:bb:17: e6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EC:C1:8D:7B:9E:F9:AA:88:67:CF:D0:93:27:89:EE:4B:B2:8A:9D X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c0:6e:88:55:f5:d0:8d:5f:94:5a:31:54:ab:9f:6d:22:d0: 61:61:52:6a:f6:48:85:73:03:cd:dd:cf:ef:01:49:bc:50:e3: 23:35:e6:17:82:e5:97:9f:e8:7d:3f:da:de:fa:c5:55:41:bd: 32:6e:0c:38:f6:6f:cb:a0:4f:64:fd:8c:4b:83:71:8b:54:67: ad:e0:23:7d:2a:ea:81:94:26:d6:b0:e0:06:ff:fa:c1:7c:14: 0a:be:eb:13:6e:0c:10:ba:81:89:10:ff:0c:02:17:02:c6:f4: 00:59:8a:8e:32:95:21:16:c3:b1:a4:11:15:b6:d5:09:ea:cc: 65:eb:f6:23:83:de:08:e0:21:d7:39:e7:9b:ba:62:5a:f3:9e: 89:b7:f4:6d:83:ac:50:04:24:c7:3f:bb:27:5f:e7:33:a7:28: 2d:c2:ad:ca:24:5f:cf:b7:ad:71:9a:57:33:7a:88:dc:a2:03: 0b:39:e6:2d:7f:b1:32:54:6d:07:77:99:a8:ce:4e:58:8c:c0: 53:3c:39:fa:85:a4:78:44:e5:ad:9b:ac:0e:98:1b:46:bd:52: 26:39:b3:1d:fd:42:63:7b:f3:fe:43:28:bd:8f:d5:73:f1:23: 2d:e5:16:73:71:00:ff:d2:76:4f:87:34:ff:77:ff:88:b0:b6: 46:b7:b3:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwNDI1MDUyMzEzWhcNMjUwNTAyMDUyMzEzWjAYMRYwFAYD VQQDEw02ODBiMWM0MS0wNTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pqv5Gw4QXVbBq3Rr6kqne2k9QBscAi/Hx0WaAJq8q421vbK8q8zqEwMb4wa X7Lr+R5G1ykpxkhf75iLNxGm8CPnqfY/Z8CGOp4i8n7e1UZsAMu2OSYrxTQCFykC CLOnV2yyA4djqVY5uKAd0P61C0jxnOjRz1GZk9E8O1gwzOGsn3mkuKYBQp42uBTA Ynsbr2QdmMj9cpKe9lhVG+hs7ml2jc3mnPeI2Ij83KBnyMLkZU6YxHOIaYLg86QB MsHJ8JFWoSa4yD6gVE+JiWOygIOOWgIQwVBKc4aNcM04M75nKmmvYeG1bwrH8rvq sh8rRCcnhF4A7HmTpfn/uxfmTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnswY17 nvmqiGfP0JMnie5LsoqdMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNwG6IVfXQjV+UWjFUq59tItBhYVJq9kiFcwPN3c/vAUm8UOMjNeYX guWXn+h9P9re+sVVQb0ybgw49m/LoE9k/YxLg3GLVGet4CN9KuqBlCbWsOAG//rB fBQKvusTbgwQuoGJEP8MAhcCxvQAWYqOMpUhFsOxpBEVttUJ6sxl6/Yjg94I4CHX OeebumJa856Jt/Rtg6xQBCTHP7snX+czpygtwq3KJF/Pt61xmlczeojcogMLOeYt f7EyVG0Hd5mozk5YjMBTPDn6haR4ROWtm6wOmBtGvVImObMd/UJje/P+Qyi9j9Vz 8SMt5RZzcQD/0nZPhzT/d/+IsLZGt7Mz -----END CERTIFICATE-----Generated at Sat Apr 26 12:26:51 2025 by rpki-client