$ rpki-client -vvf rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft File: nA4b_LgfGS0vzKznmeFd8a28QS0.mft (raw, json) Hash identifier: s0qgctVgPZHfq64KO1KxWVbUrBWidMttKxNZ/fvMMDI= Subject key identifier: 8E:80:00:76:2F:F0:B9:BE:09:49:6A:03:0C:93:6D:32:CA:9C:F5:7B Authority key identifier: 9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D Certificate issuer: /CN=A9180562/serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Certificate serial: 1E53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft Manifest number: 1E3A Signing time: Sun 24 Aug 2025 16:03:48 +0000 Manifest this update: Sun 24 Aug 2025 16:03:48 +0000 Manifest next update: Sun 31 Aug 2025 16:03:48 +0000 Files and hashes: 1: nA4b_LgfGS0vzKznmeFd8a28QS0.crl (hash: MmnIYlLxp32kyZJn4mnID+L5hMyWsn8c90LNVGqLPAE=) 2: 38003F04CA8211EAA3838931C4F9AE02.roa (hash: UxhWyZVVGOaHnTJ2ecJ+4EhY7aL+ZMo65cqrYb+GALY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7763 (0x1e53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180562, serialNumber=9C0E1BFCB81F192D2FCCACE799E15DF1ADBC412D Validity Not Before: Aug 24 16:03:48 2025 GMT Not After : Aug 31 16:03:48 2025 GMT Subject: CN=68ab37e4-d176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:25:ce:2c:83:eb:b8:1e:6a:b4:04:e2:1c:44: e5:3a:32:6c:f7:3b:47:28:9a:ec:c8:16:1f:2e:16: 95:64:84:a4:96:81:8e:3f:87:60:09:79:93:e1:44: 10:25:97:be:9c:0d:69:e1:08:1c:7b:57:a8:41:0c: c1:68:c6:75:ef:9b:51:86:dc:93:85:67:b1:12:07: 67:a4:4b:f6:ef:d2:d4:ed:e1:f6:16:2f:92:f7:db: 72:67:17:13:1a:26:04:46:9b:8f:83:26:19:16:79: 22:40:a5:ed:1f:44:9d:de:60:9d:89:9d:57:7f:70: bd:e3:85:2b:db:f6:87:c7:f4:6f:a4:a5:8a:33:07: 58:36:b6:7a:f7:f4:74:1e:20:c4:eb:14:9b:c7:90: 1f:73:8b:1c:05:ac:39:77:b4:cb:21:b2:16:02:2e: 50:e5:a9:67:0c:ff:8e:29:68:7c:3c:77:59:de:69: f4:ac:7a:7d:68:d8:50:98:54:c3:bc:13:5e:26:37: 53:a2:9a:a3:f0:c2:4a:7d:ae:6d:80:00:e3:11:65: 0e:af:fc:93:bf:e6:66:14:27:fb:d6:6f:d5:50:a4: 4a:41:52:56:a4:b1:03:68:b0:f7:e7:b9:31:8c:5c: c2:bd:d1:63:a3:91:0d:4b:4f:78:49:50:74:98:27: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:00:76:2F:F0:B9:BE:09:49:6A:03:0C:93:6D:32:CA:9C:F5:7B X509v3 Authority Key Identifier: keyid:9C:0E:1B:FC:B8:1F:19:2D:2F:CC:AC:E7:99:E1:5D:F1:AD:BC:41:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA4b_LgfGS0vzKznmeFd8a28QS0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180562/C614F9588B8C11E68E185A3EC4F9AE02/nA4b_LgfGS0vzKznmeFd8a28QS0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:17:19:d8:50:4d:c1:f9:a1:7e:81:c7:78:53:83:e3:7a:6a: 34:7d:64:3f:07:3b:67:67:93:28:6f:e7:39:ff:94:cf:a8:23: 3f:e7:67:2e:6d:22:e3:14:4d:39:38:1f:2a:57:04:07:ed:e4: 20:73:ca:0b:ad:b5:3e:e0:3c:4b:15:33:05:12:12:46:3e:3f: a6:5c:d0:01:6b:e8:95:76:ec:8b:28:6f:61:61:3a:20:70:01: bb:d1:cc:03:5d:eb:9a:16:ca:a8:56:64:a9:97:13:e7:5e:28: ef:a2:41:94:60:94:8f:08:5b:94:ef:81:5e:a5:f1:8c:93:8d: 22:33:47:ec:cf:89:7d:59:ca:73:ce:8f:54:cc:81:69:d7:3a: 83:6f:eb:3e:f7:58:43:17:c0:57:34:3a:bd:ea:ed:63:79:1c: d8:9f:8b:a0:1d:46:01:ba:cc:7d:ee:d8:db:97:04:52:b0:a1: a1:c0:51:d6:c8:56:5d:58:7d:5f:4a:40:2a:2c:d6:09:a6:d9: 48:0d:0b:86:24:39:c1:51:3a:9f:a0:bb:5d:9c:82:07:1a:b9: 39:1e:f0:50:e0:e4:c4:21:63:1a:d3:7b:d0:07:da:63:7b:35: 56:e2:6b:fc:69:dc:e3:5f:0f:5e:cf:0f:25:fd:70:b0:8f:91: 27:1f:a2:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1NjIxMTAvBgNVBAUTKDlDMEUxQkZDQjgxRjE5MkQyRkNDQUNFNzk5RTE1REYx QURCQzQxMkQwHhcNMjUwODI0MTYwMzQ4WhcNMjUwODMxMTYwMzQ4WjAYMRYwFAYD VQQDEw02OGFiMzdlNC1kMTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyXOLIPruB5qtATiHETlOjJs9ztHKJrsyBYfLhaVZISkloGOP4dgCXmT4UQQ JZe+nA1p4Qgce1eoQQzBaMZ175tRhtyThWexEgdnpEv279LU7eH2Fi+S99tyZxcT GiYERpuPgyYZFnkiQKXtH0Sd3mCdiZ1Xf3C944Ur2/aHx/RvpKWKMwdYNrZ69/R0 HiDE6xSbx5Afc4scBaw5d7TLIbIWAi5Q5alnDP+OKWh8PHdZ3mn0rHp9aNhQmFTD vBNeJjdTopqj8MJKfa5tgADjEWUOr/yTv+ZmFCf71m/VUKRKQVJWpLEDaLD357kx jFzCvdFjo5ENS094SVB0mCfWMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6AAHYv 8Lm+CUlqAwyTbTLKnPV7MB8GA1UdIwQYMBaAFJwOG/y4HxktL8ys55nhXfGtvEEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU2Mi9DNjE0Rjk1ODhC OEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdTMHZ6S3pubWVGZDhhMjhR UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNGJfTGdmR1MwdnpLem5tZUZkOGEyOFFTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDU2Mi9DNjE0Rjk1ODhCOEMxMUU2OEUxODVBM0VDNEY5QUUwMi9uQTRiX0xnZkdT MHZ6S3pubWVGZDhhMjhRUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOFxnYUE3B+aF+gcd4U4Pjemo0fWQ/BztnZ5Mob+c5/5TPqCM/52cu bSLjFE05OB8qVwQH7eQgc8oLrbU+4DxLFTMFEhJGPj+mXNABa+iVduyLKG9hYTog cAG70cwDXeuaFsqoVmSplxPnXijvokGUYJSPCFuU74FepfGMk40iM0fsz4l9Wcpz zo9UzIFp1zqDb+s+91hDF8BXNDq96u1jeRzYn4ugHUYBusx97tjblwRSsKGhwFHW yFZdWH1fSkAqLNYJptlIDQuGJDnBUTqfoLtdnIIHGrk5HvBQ4OTEIWMa03vQB9pj ezVW4mv8adzjXw9ezw8l/XCwj5EnH6J3 -----END CERTIFICATE-----Generated at Sun Aug 24 22:04:53 2025 by rpki-client