$ rpki-client -vvf rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft File: nnabVGgi7tWnPT9dAt-atImAA6k.mft (raw, json) Hash identifier: J0vmVYJ6HONLovC4AzUVLMogqPtzadZ2ryotJmEhHLs= Subject key identifier: 43:52:24:B1:1F:AC:C6:21:46:19:48:56:79:CB:95:04:C2:C9:5A:74 Authority key identifier: 9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 Certificate issuer: /CN=A914B1DB/serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft Manifest number: C7 Signing time: Thu 07 Aug 2025 06:18:46 +0000 Manifest this update: Thu 07 Aug 2025 06:18:45 +0000 Manifest next update: Thu 14 Aug 2025 06:18:45 +0000 Files and hashes: 1: nnabVGgi7tWnPT9dAt-atImAA6k.crl (hash: RZ8QNBntPdTS+xT5Tpx/8PA15n1KquiqEoaIFUWoHEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B1DB, serialNumber=9E769B546822EED5A73D3F5D02DF9AB4898003A9 Validity Not Before: Aug 7 06:18:45 2025 GMT Not After : Aug 14 06:18:45 2025 GMT Subject: CN=68944546-344b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:be:8f:37:51:c6:36:cd:ed:aa:8c:4a:1b:5b: 38:a3:c8:24:17:17:59:3b:8c:b3:3e:ea:78:4f:b6: 46:ad:31:92:7a:e5:1a:22:d6:7f:38:10:ba:92:7a: 17:be:ec:ce:3c:9b:76:6c:2f:eb:e3:73:54:9f:f5: 04:26:0d:7f:eb:19:40:1f:96:5a:15:61:9e:f7:21: df:c9:a7:a1:e7:ed:14:01:b6:2a:b9:ec:77:e2:c2: de:09:df:c7:20:41:bf:c2:fb:b7:f9:2a:2e:86:c3: a2:5f:f8:be:7e:86:08:f0:87:22:34:f0:14:8c:46: b1:34:0e:ec:1f:49:b2:4e:7b:2f:24:32:b9:82:97: 03:29:d7:d8:4e:6a:38:18:fa:7e:6a:67:6d:87:70: 01:3c:4c:c1:07:b8:1f:d1:1a:5b:41:41:0b:85:7d: 69:1d:4a:ab:69:e9:fd:60:b6:6b:5c:67:e1:c0:b4: ef:32:3f:a5:a4:7d:23:37:28:6b:6c:96:a4:2e:10: db:a3:12:8d:4f:74:8a:fe:6b:7b:f6:9c:a6:b0:3d: 8c:76:e7:99:52:58:d2:fd:ef:dd:7a:44:77:16:39: 51:24:12:d8:59:d8:6f:1c:9d:54:d1:6e:fa:75:66: cc:88:72:1e:1b:54:e2:ae:0b:80:8a:f9:8d:f0:0b: 3b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:52:24:B1:1F:AC:C6:21:46:19:48:56:79:CB:95:04:C2:C9:5A:74 X509v3 Authority Key Identifier: keyid:9E:76:9B:54:68:22:EE:D5:A7:3D:3F:5D:02:DF:9A:B4:89:80:03:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nnabVGgi7tWnPT9dAt-atImAA6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B1DB/2D87DFD6431011EF868B2B81C4F9AE02/nnabVGgi7tWnPT9dAt-atImAA6k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:82:ba:04:eb:9c:74:2b:9c:40:c7:04:9b:83:f4:b9:96:c0: 48:bd:8f:21:e7:32:98:4e:15:0c:1f:94:21:c1:91:e8:f9:48: ab:c5:ed:45:f6:74:25:c4:33:84:d6:79:03:08:78:49:8f:09: 41:94:da:94:30:3c:bb:f3:f8:0c:2a:29:8e:d1:6f:4b:1e:b5: 21:64:9f:59:82:d3:16:b3:c5:ea:50:91:b8:b2:6b:1c:03:fd: ff:e2:13:12:74:e6:38:c6:a6:f9:75:94:79:2a:4f:85:5c:bf: bb:ab:5e:4f:5c:e9:c1:ca:95:e9:a3:38:0e:ea:02:9f:d8:1f: a1:af:1e:1f:4d:96:0d:7b:ab:ba:8d:13:2d:a1:da:71:27:32: ae:c3:06:7b:7f:a7:c3:42:98:31:8f:d4:8f:c4:4f:7c:80:e2: c0:8e:5a:e7:62:0c:7f:aa:04:31:4a:b2:44:dc:42:d0:bc:29: bf:c0:58:9c:d2:f3:94:df:c1:fc:04:64:fd:3c:82:75:cf:67: 1e:69:8e:14:c3:bf:51:66:4e:20:66:dd:63:f1:21:68:35:ea: 32:df:70:a0:17:44:36:ff:9e:c7:eb:c7:5b:02:9f:1d:51:51: c3:db:a9:93:13:31:b6:4d:4d:92:9d:6c:c6:9f:11:96:6c:e1: 14:bf:4a:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEIxREIxMTAvBgNVBAUTKDlFNzY5QjU0NjgyMkVFRDVBNzNEM0Y1RDAyREY5QUI0 ODk4MDAzQTkwHhcNMjUwODA3MDYxODQ1WhcNMjUwODE0MDYxODQ1WjAYMRYwFAYD VQQDEw02ODk0NDU0Ni0zNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb6PN1HGNs3tqoxKG1s4o8gkFxdZO4yzPup4T7ZGrTGSeuUaItZ/OBC6knoX vuzOPJt2bC/r43NUn/UEJg1/6xlAH5ZaFWGe9yHfyaeh5+0UAbYquex34sLeCd/H IEG/wvu3+SouhsOiX/i+foYI8IciNPAUjEaxNA7sH0myTnsvJDK5gpcDKdfYTmo4 GPp+amdth3ABPEzBB7gf0RpbQUELhX1pHUqraen9YLZrXGfhwLTvMj+lpH0jNyhr bJakLhDboxKNT3SK/mt79pymsD2MdueZUljS/e/dekR3FjlRJBLYWdhvHJ1U0W76 dWbMiHIeG1TirguAivmN8As72QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENSJLEf rMYhRhlIVnnLlQTCyVp0MB8GA1UdIwQYMBaAFJ52m1RoIu7Vpz0/XQLfmrSJgAOp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjFEQi8yRDg3REZENjQz MTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0V25QVDlkQXQtYXRJbUFB NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25uYWJWR2dpN3RXblBUOWRBdC1hdEltQUE2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QjFEQi8yRDg3REZENjQzMTAxMUVGODY4QjJCODFDNEY5QUUwMi9ubmFiVkdnaTd0 V25QVDlkQXQtYXRJbUFBNmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpgroE65x0K5xAxwSbg/S5lsBIvY8h5zKYThUMH5QhwZHo+Uirxe1F 9nQlxDOE1nkDCHhJjwlBlNqUMDy78/gMKimO0W9LHrUhZJ9ZgtMWs8XqUJG4smsc A/3/4hMSdOY4xqb5dZR5Kk+FXL+7q15PXOnBypXpozgO6gKf2B+hrx4fTZYNe6u6 jRMtodpxJzKuwwZ7f6fDQpgxj9SPxE98gOLAjlrnYgx/qgQxSrJE3ELQvCm/wFic 0vOU38H8BGT9PIJ1z2ceaY4Uw79RZk4gZt1j8SFoNeoy33CgF0Q2/57H68dbAp8d UVHD26mTEzG2TU2SnWzGnxGWbOEUv0qt -----END CERTIFICATE-----Generated at Sat Aug 9 02:45:31 2025 by rpki-client