$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: Te9c22XyBVm4HiwUpKuWiTdHfESY6M9OWR/8wrFWOTo= Subject key identifier: 79:2E:11:E0:56:3D:4E:CA:9E:87:76:0F:29:CE:9F:66:35:ED:FF:E0 Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1E1B Signing time: Wed 02 Jul 2025 16:12:56 +0000 Manifest this update: Wed 02 Jul 2025 16:12:55 +0000 Manifest next update: Wed 09 Jul 2025 16:12:55 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: QFckdM5ZhpwWYxVSN7KXm+YUl2KlH5HSV9Flbmv5rWI=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: uuU+2b4TABJg99J2eIGANwe1poRJarA5qOxzJJ2GkQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7730 (0x1e32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: Jul 2 16:12:55 2025 GMT Not After : Jul 9 16:12:55 2025 GMT Subject: CN=68655a88-1ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:58:46:1f:f5:6c:84:39:56:ea:f3:86:bd: 42:9e:5a:7f:bd:79:3b:60:24:f8:8a:7e:91:20:03: 19:e9:90:2b:1e:11:04:cb:ff:11:0d:ca:0a:63:3b: 02:62:88:b9:2f:f4:3c:82:7d:2c:45:fb:a6:ae:84: 77:13:53:a1:30:fb:e7:59:0c:86:e3:1a:fd:45:17: 0d:a2:3b:6b:30:53:a4:3a:ce:54:cb:17:55:95:34: f1:04:20:79:f3:f1:aa:bf:32:bc:4a:0a:8c:d2:0e: b8:46:36:09:35:6f:15:af:6f:2a:1e:12:89:a6:1f: e9:0f:65:55:4c:1a:05:45:76:21:6f:b5:a2:f5:6b: 1a:30:a1:b7:8d:6a:75:75:66:d8:c0:90:2e:2f:1b: 63:94:4c:cb:2b:2c:a4:42:b0:2f:7c:a5:64:bc:7e: 2f:73:d9:e6:3c:ef:10:2f:af:2a:41:49:fd:7c:d9: 4f:1d:a6:53:d0:85:1b:37:db:8d:86:9e:07:72:62: 66:12:58:1f:31:85:01:6a:21:0b:7f:84:23:de:0f: 04:7f:d7:24:86:5e:59:58:7b:e5:9f:48:a9:a5:5a: 12:75:2b:b4:4e:f6:52:19:98:0f:64:a7:16:77:82: fb:31:1e:b5:f9:fa:8d:d8:ac:e5:71:08:ef:e1:9e: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2E:11:E0:56:3D:4E:CA:9E:87:76:0F:29:CE:9F:66:35:ED:FF:E0 X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d5:ac:77:14:dc:63:d5:bd:d9:b0:71:85:ed:c4:16:59:38: cb:d6:13:d9:ad:1d:cb:b3:75:e3:eb:7d:5b:70:0f:38:5b:41: e2:1b:7b:61:73:02:cf:6f:27:ad:c7:e1:d8:2d:d5:d6:ae:f6: 0a:cd:7b:63:8f:07:ba:52:d3:6f:d7:8a:65:a0:02:be:a7:67: ce:e3:81:ff:71:e6:d4:62:4d:71:2d:27:e3:d2:aa:de:c0:00: fa:21:1a:7c:e7:d2:46:5e:0f:df:73:88:fc:9f:ba:12:d2:81: 9f:08:00:8c:e8:6e:d3:1d:f6:f1:88:8b:15:5f:d0:25:27:d2: 08:81:a4:02:d4:46:d6:78:b6:44:3b:43:bd:e6:87:99:23:cc: b7:3f:d4:5e:5b:9f:5a:d7:7e:e9:ea:8c:6c:9e:64:ad:7f:54: f5:11:d3:40:33:6c:c6:3d:ba:c3:4c:9a:dc:e5:cb:4c:93:74: a1:9a:62:d9:04:c2:48:86:41:af:c2:58:3a:00:5e:f1:4c:13: a1:00:5b:dc:7b:ca:c3:dd:9c:24:72:d7:c5:8b:cb:2e:cf:0b: 02:0b:e4:6f:65:47:92:79:28:01:c2:2f:6b:a6:7a:80:8f:0d: 0a:87:75:f9:56:1f:9f:d8:e3:2a:95:c2:2e:4e:11:71:2f:b2: c0:63:71:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjUwNzAyMTYxMjU1WhcNMjUwNzA5MTYxMjU1WjAYMRYwFAYD VQQDEw02ODY1NWE4OC0xYWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0RYRh/1bIQ5Vurzhr1Cnlp/vXk7YCT4in6RIAMZ6ZArHhEEy/8RDcoKYzsC Yoi5L/Q8gn0sRfumroR3E1OhMPvnWQyG4xr9RRcNojtrMFOkOs5UyxdVlTTxBCB5 8/GqvzK8SgqM0g64RjYJNW8Vr28qHhKJph/pD2VVTBoFRXYhb7Wi9WsaMKG3jWp1 dWbYwJAuLxtjlEzLKyykQrAvfKVkvH4vc9nmPO8QL68qQUn9fNlPHaZT0IUbN9uN hp4HcmJmElgfMYUBaiELf4Qj3g8Ef9ckhl5ZWHvln0ippVoSdSu0TvZSGZgPZKcW d4L7MR61+fqN2KzlcQjv4Z4NTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHkuEeBW PU7Knod2DynOn2Y17f/gMB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB61ax3FNxj1b3ZsHGF7cQWWTjL1hPZrR3Ls3Xj631bcA84W0HiG3th cwLPbyetx+HYLdXWrvYKzXtjjwe6UtNv14ploAK+p2fO44H/cebUYk1xLSfj0qre wAD6IRp859JGXg/fc4j8n7oS0oGfCACM6G7THfbxiIsVX9AlJ9IIgaQC1EbWeLZE O0O95oeZI8y3P9ReW59a137p6oxsnmStf1T1EdNAM2zGPbrDTJrc5ctMk3ShmmLZ BMJIhkGvwlg6AF7xTBOhAFvce8rD3ZwkctfFi8suzwsCC+RvZUeSeSgBwi9rpnqA jw0Kh3X5Vh+f2OMqlcIuThFxL7LAY3HD -----END CERTIFICATE-----Generated at Wed Jul 2 20:06:54 2025 by rpki-client