$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: ifAcYPElgPvm6f0YKbDm7I9c3LC3d5CV+MHKsw3WXzE= Subject key identifier: DA:CC:AA:46:55:EE:AF:A1:A5:E7:6F:F4:11:05:87:63:7C:AE:63:7C Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1E0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1DF8 Signing time: Thu 24 Apr 2025 16:06:41 +0000 Manifest this update: Thu 24 Apr 2025 16:06:40 +0000 Manifest next update: Thu 01 May 2025 16:06:40 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: uqeAIIHkxhhYhB/oYrh8lB9oZHK4Z46lzI5PRRU/WNI=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: uuU+2b4TABJg99J2eIGANwe1poRJarA5qOxzJJ2GkQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7695 (0x1e0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: Apr 24 16:06:40 2025 GMT Not After : May 1 16:06:40 2025 GMT Subject: CN=680a6190-4d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7a:69:7b:55:3e:4a:8f:1a:f9:5a:91:94:70: 56:11:ae:68:89:7b:77:88:d5:4c:e6:2b:6e:6b:ba: 42:b8:27:89:0c:da:9c:d8:ab:9d:e2:97:80:b2:37: 2b:68:f5:3e:4f:2a:b9:81:b0:38:80:02:68:a5:e9: 9c:74:16:2d:ea:fd:1a:7e:94:b5:98:2c:49:b4:b6: 76:6e:1b:90:ca:12:2c:bb:16:40:bc:b1:b2:b9:53: 13:02:0c:3d:4b:a7:71:21:11:fd:b5:de:41:3e:5b: ae:8f:60:bb:65:ff:4f:01:8a:a0:13:cd:6f:66:23: 53:8e:40:c1:90:83:75:5b:cc:01:99:fa:a5:ff:7b: e9:1a:54:51:e8:82:e9:62:8c:1c:73:26:46:71:40: 1d:f5:56:38:f1:6e:cb:3c:09:a3:d9:70:6a:bc:1c: 76:5c:42:05:ba:95:96:73:89:62:a4:2b:e1:45:3a: 09:49:37:19:d8:45:37:2d:e0:d7:e6:a4:68:52:3e: 78:cb:7f:28:44:63:59:d9:a7:ae:d8:03:9c:8d:1a: c8:14:37:ab:ee:2b:25:67:c4:6c:c3:7a:05:07:58: 9a:ee:3e:09:99:0d:03:a2:0a:ff:cf:f2:ca:0d:5f: 4a:48:cc:eb:63:32:11:c2:c5:47:ad:1c:02:98:4c: a6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CC:AA:46:55:EE:AF:A1:A5:E7:6F:F4:11:05:87:63:7C:AE:63:7C X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4c:36:c4:29:7f:4a:8b:b4:7d:69:b9:b2:9d:2a:e9:2a:44: 2f:ed:8c:95:98:78:f2:e9:bc:93:0f:6b:52:e0:56:55:77:91: 64:53:9c:23:97:78:a7:de:a2:b9:12:6d:20:06:11:19:3e:ee: 65:3f:fa:d2:d3:fe:2b:bc:1e:3f:e2:6d:8a:98:a2:27:d6:50: 12:b9:7e:ce:e4:00:4e:eb:bb:ca:81:72:0b:84:af:1e:b4:f3: 45:5d:f1:46:23:e6:91:fc:55:09:29:48:a9:d0:f4:93:ef:c0: 0c:43:24:9d:18:ad:27:40:8d:d8:63:f4:5f:bf:12:e2:38:9f: 6b:d2:83:f8:7f:e4:24:c9:72:18:7c:cf:2b:36:11:9d:9e:e3: 40:a0:71:1f:ce:f1:5c:dc:03:5c:6e:ca:49:cc:fc:7e:bd:8f: c3:2a:ee:fd:0e:ef:78:4a:38:15:b1:d3:2f:2d:f7:74:b2:ec: 34:26:5e:12:41:45:35:dd:83:5c:82:75:1c:39:c1:ba:21:2f: ed:94:34:78:1d:fe:ee:47:00:6a:18:57:6b:a6:fd:2b:5a:70: eb:e2:8f:ae:09:17:a3:7a:cd:a2:b3:ea:25:05:69:e1:ce:9a: 14:30:1e:dc:be:11:a0:97:55:ff:01:a2:b5:d8:c8:1d:95:ec: 0e:a1:c7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjUwNDI0MTYwNjQwWhcNMjUwNTAxMTYwNjQwWjAYMRYwFAYD VQQDEw02ODBhNjE5MC00ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHppe1U+So8a+VqRlHBWEa5oiXt3iNVM5itua7pCuCeJDNqc2Kud4peAsjcr aPU+Tyq5gbA4gAJopemcdBYt6v0afpS1mCxJtLZ2bhuQyhIsuxZAvLGyuVMTAgw9 S6dxIRH9td5BPluuj2C7Zf9PAYqgE81vZiNTjkDBkIN1W8wBmfql/3vpGlRR6ILp YowccyZGcUAd9VY48W7LPAmj2XBqvBx2XEIFupWWc4lipCvhRToJSTcZ2EU3LeDX 5qRoUj54y38oRGNZ2aeu2AOcjRrIFDer7islZ8Rsw3oFB1ia7j4JmQ0Dogr/z/LK DV9KSMzrYzIRwsVHrRwCmEymiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrMqkZV 7q+hpedv9BEFh2N8rmN8MB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqTDbEKX9Ki7R9abmynSrpKkQv7YyVmHjy6byTD2tS4FZVd5FkU5wj l3in3qK5Em0gBhEZPu5lP/rS0/4rvB4/4m2KmKIn1lASuX7O5ABO67vKgXILhK8e tPNFXfFGI+aR/FUJKUip0PST78AMQySdGK0nQI3YY/RfvxLiOJ9r0oP4f+QkyXIY fM8rNhGdnuNAoHEfzvFc3ANcbspJzPx+vY/DKu79Du94SjgVsdMvLfd0suw0Jl4S QUU13YNcgnUcOcG6IS/tlDR4Hf7uRwBqGFdrpv0rWnDr4o+uCRejes2is+olBWnh zpoUMB7cvhGgl1X/AaK12MgdlewOoceP -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:57 2025 by rpki-client