$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: uCEq468P89FXpzLQ5wq3H8CiTwUXYfnX4RWjZG7nvL0= Subject key identifier: 55:6B:65:7B:10:2A:C5:45:AC:1F:1A:E1:98:21:D8:36:51:1A:F2:E6 Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1E18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1E01 Signing time: Mon 12 May 2025 16:03:27 +0000 Manifest this update: Mon 12 May 2025 16:03:26 +0000 Manifest next update: Mon 19 May 2025 16:03:26 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: US6DNMkACm7u+s254uZ9u+PBSJ1Ox72a3hfCrFMXOE8=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: uuU+2b4TABJg99J2eIGANwe1poRJarA5qOxzJJ2GkQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7704 (0x1e18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: May 12 16:03:26 2025 GMT Not After : May 19 16:03:26 2025 GMT Subject: CN=68221bce-493f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:22:fc:d2:60:79:e9:41:df:32:d3:6a:44: a1:da:49:44:a9:50:67:1f:90:42:28:81:cb:e4:fc: 48:3d:2b:a9:25:06:03:ae:55:cf:82:c0:09:41:49: e8:ad:e0:cc:6a:14:b6:ec:82:d8:ed:c6:58:5e:95: d2:35:5a:97:45:f1:e3:c2:3c:6d:bb:45:50:d5:68: 15:4e:d7:ca:4c:ee:a8:72:ca:0f:a6:63:60:d7:42: 09:92:c3:14:af:27:00:72:4e:66:a7:b6:b7:74:ba: a5:11:45:88:0b:49:f9:75:e2:40:b8:08:8c:dd:ae: 81:e5:13:0a:f5:e9:8f:30:52:35:70:21:94:a8:5a: a8:2b:b0:93:1b:5a:1e:d7:58:52:2e:7b:11:c2:55: 52:00:8e:d4:68:87:95:7b:23:de:d1:46:b2:83:f5: 8c:38:9b:d9:a2:e6:43:7c:b1:08:e8:6b:41:b9:bb: be:a2:67:65:01:e9:c8:92:06:7f:5e:87:92:7d:3f: 59:0f:b3:69:25:5b:3a:87:db:f7:4e:3e:85:7c:a1: 6a:45:ce:d6:ff:cd:b1:31:bc:79:2b:18:bb:d5:cb: 5f:54:2c:a0:af:c1:73:56:59:a2:ba:7a:0e:c6:80: 28:62:a3:7d:56:a5:e3:a8:8a:c3:b4:ca:51:d5:97: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:65:7B:10:2A:C5:45:AC:1F:1A:E1:98:21:D8:36:51:1A:F2:E6 X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0d:e7:51:a4:ae:af:db:3e:9a:d4:a6:dd:4d:58:ae:28:48: b8:9d:cd:0b:23:71:fc:ee:d4:d1:e2:30:b5:90:d6:24:88:bf: 72:a1:18:79:5f:12:78:a8:83:26:bb:5e:f1:51:d0:b8:8b:52: 0b:b4:13:4c:db:90:b6:93:f2:d8:23:b5:2e:b9:d5:d8:3b:b7: f5:52:ec:61:b4:36:50:a8:3a:ce:60:26:e4:ee:f3:36:d0:c5: 37:9d:17:c8:1b:3a:ca:fe:e7:44:4d:14:11:66:c0:3d:0a:1b: a4:4e:23:54:78:af:16:8e:e9:d8:0a:74:89:ce:ee:c2:76:4b: db:eb:b6:94:33:66:a0:75:42:34:48:7f:71:8e:a7:87:d7:a3: 35:32:71:d9:e9:8d:b7:39:a0:de:44:4c:b9:0a:82:90:17:07: 2a:1b:e9:71:d0:48:6e:3f:9b:a6:84:02:e2:c4:de:e7:b9:5a: 41:3e:d5:da:56:42:ef:45:df:71:a1:3c:01:99:bb:38:52:fd: 79:ab:31:51:f9:76:9a:a3:5b:ea:3f:64:cd:fd:1b:20:d3:ce: fc:b5:a6:66:60:eb:2e:05:df:c0:ee:da:b2:b4:85:3b:aa:34: 7c:a7:3c:c8:83:61:a5:8e:00:7b:9d:00:d1:c1:53:0a:3f:c7: c3:40:0f:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjUwNTEyMTYwMzI2WhcNMjUwNTE5MTYwMzI2WjAYMRYwFAYD VQQDEw02ODIyMWJjZS00OTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKAi/NJgeelB3zLTakSh2klEqVBnH5BCKIHL5PxIPSupJQYDrlXPgsAJQUno reDMahS27ILY7cZYXpXSNVqXRfHjwjxtu0VQ1WgVTtfKTO6ocsoPpmNg10IJksMU rycAck5mp7a3dLqlEUWIC0n5deJAuAiM3a6B5RMK9emPMFI1cCGUqFqoK7CTG1oe 11hSLnsRwlVSAI7UaIeVeyPe0Uayg/WMOJvZouZDfLEI6GtBubu+omdlAenIkgZ/ XoeSfT9ZD7NpJVs6h9v3Tj6FfKFqRc7W/82xMbx5Kxi71ctfVCygr8FzVlmiunoO xoAoYqN9VqXjqIrDtMpR1ZcrMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFVrZXsQ KsVFrB8a4Zgh2DZRGvLmMB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7DedRpK6v2z6a1KbdTViuKEi4nc0LI3H87tTR4jC1kNYkiL9yoRh5 XxJ4qIMmu17xUdC4i1ILtBNM25C2k/LYI7UuudXYO7f1UuxhtDZQqDrOYCbk7vM2 0MU3nRfIGzrK/udETRQRZsA9ChukTiNUeK8WjunYCnSJzu7Cdkvb67aUM2agdUI0 SH9xjqeH16M1MnHZ6Y23OaDeREy5CoKQFwcqG+lx0EhuP5umhALixN7nuVpBPtXa VkLvRd9xoTwBmbs4Uv15qzFR+Xaao1vqP2TN/Rsg0878taZmYOsuBd/A7tqytIU7 qjR8pzzIg2GljgB7nQDRwVMKP8fDQA8L -----END CERTIFICATE-----Generated at Tue May 13 10:34:43 2025 by rpki-client