$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: XkGVocQcWmn2kaPIU3pmL3YfcwwtTSPXdwKlA9k/bcY= Subject key identifier: 94:0C:3D:2C:E5:57:11:EA:13:C1:18:43:94:C5:2B:46:E8:61:0D:F9 Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: F4 Signing time: Wed 05 Nov 2025 05:23:03 +0000 Manifest this update: Wed 05 Nov 2025 05:23:02 +0000 Manifest next update: Wed 12 Nov 2025 05:23:02 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: Hz5UGqBEdtQfRCXQwKJ4wuzzDdq4JEO7KXumYrsTftQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Nov 5 05:23:02 2025 GMT Not After : Nov 12 05:23:02 2025 GMT Subject: CN=690adf36-995c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:3d:45:75:a6:63:fd:39:73:bb:ab:07:2a: 73:55:53:42:cb:60:23:af:d1:1b:53:15:4d:7a:9f: 01:a2:37:40:e1:6d:1f:be:1f:2a:cf:c7:a1:44:5a: 6c:cc:58:71:1d:42:9e:5c:2f:cb:88:72:bc:01:e2: 3e:f4:9d:ef:bb:11:8a:15:b6:89:68:4e:8f:b2:40: 69:6a:6e:80:b2:dc:64:4f:30:46:16:5e:5f:4f:98: f2:f7:35:6c:26:de:b9:f5:aa:6f:d6:6a:65:62:f4: 22:f2:23:a2:b5:92:05:85:0a:66:42:08:f8:86:4c: f6:e3:65:9b:23:42:b1:7e:ab:e4:a7:ba:11:bb:0f: 71:c2:84:af:47:ba:d5:88:73:ee:e0:7e:df:98:c8: 9f:8e:b5:56:6f:a8:95:65:84:98:e6:b4:25:86:9a: 5f:17:d5:54:1f:49:1f:19:94:92:1f:85:fb:81:f8: 97:6a:11:c1:c7:44:64:0e:87:99:78:be:22:49:54: d6:c6:be:f5:e9:de:9f:2b:87:b1:22:2c:16:0c:16: de:36:d0:b9:8a:bb:ae:2a:3e:da:aa:2b:28:6f:f9: c4:6e:6c:43:4b:0c:94:b7:4d:fb:4f:f2:e6:e0:09: 99:6d:51:32:ef:97:97:4a:ce:36:d8:fe:7b:b0:fb: ed:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0C:3D:2C:E5:57:11:EA:13:C1:18:43:94:C5:2B:46:E8:61:0D:F9 X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:76:e4:41:75:5a:10:2f:c3:33:ec:59:da:24:b2:78:44:5b: 5a:2c:c3:34:ca:78:69:46:fe:dc:1a:3b:73:03:bd:b2:c8:b2: ad:78:28:61:f8:c1:38:6e:18:84:9e:80:70:32:da:7f:4c:d6: 91:5e:ea:62:e4:37:27:f0:44:14:c7:c2:2a:2e:9c:d1:56:c8: 2a:83:cb:f6:c1:5b:e3:06:de:2a:00:9c:d9:a4:56:9c:da:73: b7:64:c5:6c:2a:91:ca:ff:e6:48:c1:36:5e:8d:1a:e8:e7:ed: d7:6e:2d:ff:3f:86:e1:42:4a:dc:00:f0:d0:69:ec:5e:e7:95: 76:8e:5d:7e:63:82:3a:b7:da:4d:22:68:43:42:b3:43:21:ac: 41:bf:8e:b4:31:13:07:b5:78:25:c2:81:1e:1b:5b:fa:c1:8b: 01:f1:d7:7b:8b:d2:88:29:93:64:df:cc:4a:58:78:b6:e0:29: 1d:90:5a:62:10:94:c2:5f:4c:90:3d:50:26:b4:b2:d5:2f:4b: 55:95:46:94:f7:6f:e2:89:71:3c:9b:86:44:41:03:83:17:bb: 0e:84:d8:1b:af:71:a8:31:86:0d:b0:33:28:b3:8c:d2:4d:10: 13:ac:b0:d5:cf:4b:47:6a:af:89:26:80:0a:7b:19:ba:39:93: b6:64:e8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUxMTA1MDUyMzAyWhcNMjUxMTEyMDUyMzAyWjAYMRYwFAYD VQQDEw02OTBhZGYzNi05OTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQo9RXWmY/05c7urBypzVVNCy2Ajr9EbUxVNep8BojdA4W0fvh8qz8ehRFps zFhxHUKeXC/LiHK8AeI+9J3vuxGKFbaJaE6PskBpam6AstxkTzBGFl5fT5jy9zVs Jt659apv1mplYvQi8iOitZIFhQpmQgj4hkz242WbI0Kxfqvkp7oRuw9xwoSvR7rV iHPu4H7fmMifjrVWb6iVZYSY5rQlhppfF9VUH0kfGZSSH4X7gfiXahHBx0RkDoeZ eL4iSVTWxr716d6fK4exIiwWDBbeNtC5iruuKj7aqisob/nEbmxDSwyUt037T/Lm 4AmZbVEy75eXSs422P57sPvt1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQMPSzl VxHqE8EYQ5TFK0boYQ35MB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLduRBdVoQL8Mz7FnaJLJ4RFtaLMM0ynhpRv7cGjtzA72yyLKteChh +ME4bhiEnoBwMtp/TNaRXupi5Dcn8EQUx8IqLpzRVsgqg8v2wVvjBt4qAJzZpFac 2nO3ZMVsKpHK/+ZIwTZejRro5+3Xbi3/P4bhQkrcAPDQaexe55V2jl1+Y4I6t9pN ImhDQrNDIaxBv460MRMHtXglwoEeG1v6wYsB8dd7i9KIKZNk38xKWHi24CkdkFpi EJTCX0yQPVAmtLLVL0tVlUaU92/iiXE8m4ZEQQODF7sOhNgbr3GoMYYNsDMos4zS TRATrLDVz0tHaq+JJoAKexm6OZO2ZOhn -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:13 2025 by rpki-client