$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: VpwRrnfQQQcuLano4dAfYfXMaUMc0YMx185KXEeu5S4= Subject key identifier: A1:53:B7:F7:21:2A:EE:54:E3:87:45:EE:0E:9E:17:E7:AF:11:82:8C Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1E32 Signing time: Fri 08 Aug 2025 16:13:55 +0000 Manifest this update: Fri 08 Aug 2025 16:13:54 +0000 Manifest next update: Fri 15 Aug 2025 16:13:54 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: Hff7QZmI/ulVijSvrivZcNJw2vTL21jJiaHWMhgIkF0=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: UxhWyZVVGOaHnTJ2ecJ+4EhY7aL+ZMo65cqrYb+GALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7755 (0x1e4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: Aug 8 16:13:54 2025 GMT Not After : Aug 15 16:13:54 2025 GMT Subject: CN=68962243-8862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:29:0b:b3:85:ed:48:02:e8:c7:96:91:74:87: 84:29:ef:66:71:30:d1:eb:c4:c6:a2:f0:9e:95:0b: 2f:6e:1d:d4:2a:2c:7c:16:1f:55:2d:1a:b9:e8:a0: 75:a3:0b:84:1c:42:de:fd:46:2d:07:67:1e:2b:2c: 3a:a2:38:d5:e7:e1:60:66:7e:59:57:62:45:ae:07: 64:aa:37:89:23:08:4f:99:72:87:67:3d:ff:96:13: d6:88:d2:2a:60:b1:cd:31:38:fa:69:f5:02:10:c4: 86:f7:3a:8f:1e:60:8a:be:0c:4b:20:9f:13:60:37: ef:f9:2c:0e:bb:1a:f5:66:d2:f3:7e:0f:4c:90:87: 2b:9e:fb:b4:b9:d8:d2:d9:cb:f9:d7:01:35:fd:e1: bf:46:7d:f0:a7:f4:97:32:7f:b4:2a:f0:2f:fa:cd: 04:1b:80:9b:1c:41:61:11:92:f8:c9:b8:b3:98:a5: ca:e3:1f:c8:c4:4a:c2:f8:49:df:df:4a:54:d7:4e: b2:25:9a:ec:8b:91:cd:f9:7c:fc:53:59:dc:03:2d: e1:0a:55:f3:b5:24:ab:b7:fd:b0:33:b2:23:90:40: 09:a1:9e:05:2e:6d:37:8e:db:17:c6:e8:c7:4f:39: ba:bc:15:b5:52:b1:23:d4:dc:e0:0b:be:49:3b:07: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:53:B7:F7:21:2A:EE:54:E3:87:45:EE:0E:9E:17:E7:AF:11:82:8C X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:14:68:d2:4c:74:b6:c5:b6:95:c1:0c:d0:e1:b6:3b:1d:c5: fe:4e:cc:cf:18:d5:97:2d:22:75:fb:75:d3:a6:b5:e3:9f:98: a8:7f:aa:7c:db:8d:17:c9:f3:39:9b:65:4b:27:63:a5:b6:b4: 6a:e0:db:13:ec:5a:9b:cb:f2:cc:9a:c5:68:7b:5c:98:60:2a: 37:3d:a7:33:7b:03:90:ae:fc:7f:51:09:e4:0f:e1:6c:c4:2b: 46:25:70:82:3a:8c:3e:8a:b4:83:14:33:01:e3:36:e5:0c:d9: 62:5e:de:2f:e6:bf:54:c7:a2:03:67:b4:4f:7e:3c:b4:02:80: 7f:69:4d:6f:74:db:d8:5d:19:50:d9:8e:5a:6e:db:42:45:aa: 77:30:23:02:3d:69:1b:3d:9c:48:54:d3:d6:98:a4:32:1d:ef: c2:28:9b:7f:ac:6e:25:31:05:b1:43:f7:50:93:27:35:28:f2: ba:90:89:3a:43:60:fa:a1:a9:1c:5a:e7:5e:2d:6d:64:fe:6a: a5:7c:74:55:0b:01:eb:d6:76:ee:09:6d:55:94:b2:ae:e5:08: 05:e7:b6:72:bb:be:4e:79:4d:a4:a9:b8:cd:1c:8a:73:ef:5f: 60:ff:0e:43:21:a5:0b:da:a1:bd:7c:c9:b1:91:92:d5:2d:fa: 0d:a7:11:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjUwODA4MTYxMzU0WhcNMjUwODE1MTYxMzU0WjAYMRYwFAYD VQQDEw02ODk2MjI0My04ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5ykLs4XtSALox5aRdIeEKe9mcTDR68TGovCelQsvbh3UKix8Fh9VLRq56KB1 owuEHELe/UYtB2ceKyw6ojjV5+FgZn5ZV2JFrgdkqjeJIwhPmXKHZz3/lhPWiNIq YLHNMTj6afUCEMSG9zqPHmCKvgxLIJ8TYDfv+SwOuxr1ZtLzfg9MkIcrnvu0udjS 2cv51wE1/eG/Rn3wp/SXMn+0KvAv+s0EG4CbHEFhEZL4ybizmKXK4x/IxErC+Enf 30pU106yJZrsi5HN+Xz8U1ncAy3hClXztSSrt/2wM7IjkEAJoZ4FLm03jtsXxujH Tzm6vBW1UrEj1NzgC75JOwdlhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFTt/ch Ku5U44dF7g6eF+evEYKMMB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBFGjSTHS2xbaVwQzQ4bY7HcX+TszPGNWXLSJ1+3XTprXjn5iof6p8 240XyfM5m2VLJ2OltrRq4NsT7Fqby/LMmsVoe1yYYCo3PaczewOQrvx/UQnkD+Fs xCtGJXCCOow+irSDFDMB4zblDNliXt4v5r9Ux6IDZ7RPfjy0AoB/aU1vdNvYXRlQ 2Y5abttCRap3MCMCPWkbPZxIVNPWmKQyHe/CKJt/rG4lMQWxQ/dQkyc1KPK6kIk6 Q2D6oakcWudeLW1k/mqlfHRVCwHr1nbuCW1VlLKu5QgF57Zyu75OeU2kqbjNHIpz 719g/w5DIaUL2qG9fMmxkZLVLfoNpxG7 -----END CERTIFICATE-----Generated at Sat Aug 9 10:47:18 2025 by rpki-client