$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: 45+Ebyn++ET+JlIJ+IhY15nnGhyAsRoYHdzGb0gYLlM= Subject key identifier: 55:7D:8A:9C:87:AA:2E:87:25:51:D9:2F:71:A0:E4:D4:E0:D7:5E:D8 Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: 0130 Signing time: Sun 01 Mar 2026 06:29:56 +0000 Manifest this update: Sun 01 Mar 2026 06:29:55 +0000 Manifest next update: Sun 08 Mar 2026 06:29:55 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: 1UnfjHIx7qd6406ScwNCSKbjP5+5MzSq8Vh5XrAkXUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 06:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Mar 1 06:29:55 2026 GMT Not After : Mar 8 06:29:55 2026 GMT Subject: CN=69a3dce3-e1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:54:be:04:08:5f:29:60:0c:f1:96:ed:8a: ec:c2:64:ee:8e:b7:07:84:56:04:e1:f8:7b:12:cd: a8:80:42:6c:b9:a5:5e:56:3b:bc:a6:29:9a:48:4a: ea:23:8c:71:df:17:54:b3:9e:d2:60:aa:0f:d2:8d: 25:6a:f9:5e:ad:52:de:c9:46:cc:86:4c:0b:54:bd: 3d:a7:8f:b1:57:92:d9:3f:ad:80:96:80:72:1e:8d: 20:f1:7e:11:51:96:81:48:bf:02:89:77:64:d5:fa: ae:5e:60:de:27:3e:31:2b:59:29:34:0a:08:ed:ee: 3f:a8:2f:90:57:f1:d4:48:37:9d:b6:7b:2d:c6:ab: f3:13:48:4e:c4:9a:0b:f8:9c:1d:a8:bb:d1:b0:b2: a0:60:0a:49:af:2c:ef:33:fb:ea:da:cf:86:2c:f7: 55:07:83:2d:7d:2a:27:4d:09:4f:4b:2b:a2:eb:1f: 55:96:e3:d5:0d:ec:02:10:41:49:84:b0:46:ec:d9: a7:12:54:45:0a:7a:7a:4a:75:b8:e0:c9:d3:f6:18: 9c:d4:9b:b0:e7:2b:07:61:21:bf:31:72:61:60:dd: f0:a0:cc:74:ca:88:f3:11:35:df:66:1d:25:23:92: 84:cd:8c:1c:7b:e5:f1:99:f0:09:36:0e:6f:b9:d3: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7D:8A:9C:87:AA:2E:87:25:51:D9:2F:71:A0:E4:D4:E0:D7:5E:D8 X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:d7:b2:2e:d6:92:dc:b9:69:8b:a5:8b:56:f1:49:6e:2a:f6: ba:5e:ae:58:3f:83:a6:b2:2b:d1:ac:9f:d3:ec:12:87:4c:ab: de:d3:62:fe:96:66:60:e6:10:9d:8d:4c:97:f6:3e:88:be:38: 69:38:1c:8c:a4:54:c4:b2:df:88:47:9e:fe:14:23:f9:33:51: 9d:3b:a6:c4:84:47:33:0f:d9:f7:1d:97:da:bf:24:2d:78:60: 12:aa:fb:5e:29:9e:b3:77:b3:d0:94:59:1a:c9:cc:74:75:02: b7:ff:01:71:25:e2:2a:d0:71:13:e9:dc:59:90:52:d4:4a:3e: dd:e8:26:dd:f6:3e:d1:da:5b:8e:f3:93:76:d6:89:fd:a5:be: ab:c0:c2:62:55:f6:4f:c9:dd:de:ed:5b:15:8b:96:5a:f5:1b: 20:e3:83:54:69:5c:c0:8c:1c:95:cf:04:e3:d1:d3:6c:5b:18: ca:3e:1e:28:6a:af:66:c5:30:b0:ea:5d:c3:c9:5a:66:3d:18: 45:d4:59:bd:1f:62:00:df:7f:d8:26:46:7a:3c:8a:6f:8d:39: fc:7f:52:94:0e:da:61:b9:24:cb:e8:0f:4a:5e:51:22:95:da: 2c:e0:42:c3:0a:8d:ed:1c:63:e4:a5:a5:0a:e5:11:7a:54:d4: 20:96:06:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjYwMzAxMDYyOTU1WhcNMjYwMzA4MDYyOTU1WjAYMRYwFAYD VQQDEw02OWEzZGNlMy1lMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxNJUvgQIXylgDPGW7YrswmTujrcHhFYE4fh7Es2ogEJsuaVeVju8pimaSErq I4xx3xdUs57SYKoP0o0lavlerVLeyUbMhkwLVL09p4+xV5LZP62AloByHo0g8X4R UZaBSL8CiXdk1fquXmDeJz4xK1kpNAoI7e4/qC+QV/HUSDedtnstxqvzE0hOxJoL +JwdqLvRsLKgYApJryzvM/vq2s+GLPdVB4MtfSonTQlPSyui6x9VluPVDewCEEFJ hLBG7NmnElRFCnp6SnW44MnT9hic1Juw5ysHYSG/MXJhYN3woMx0yojzETXfZh0l I5KEzYwce+XxmfAJNg5vudMIuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFV9ipyH qi6HJVHZL3Gg5NTg117YMB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEteyLtaS3Llpi6WLVvFJbir2ul6uWD+DprIr0ayf0+wSh0yr3tNi/pZmYOYQ nY1Ml/Y+iL44aTgcjKRUxLLfiEee/hQj+TNRnTumxIRHMw/Z9x2X2r8kLXhgEqr7 Ximes3ez0JRZGsnMdHUCt/8BcSXiKtBxE+ncWZBS1Eo+3egm3fY+0dpbjvOTdtaJ /aW+q8DCYlX2T8nd3u1bFYuWWvUbIOODVGlcwIwclc8E49HTbFsYyj4eKGqvZsUw sOpdw8laZj0YRdRZvR9iAN9/2CZGejyKb405/H9SlA7aYbkky+gPSl5RIpXaLOBC wwqN7Rxj5KWlCuURelTUIJYGgQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:40 2026 by rpki-client