$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft File: 2A-p-oQSVdW9py5S7AT9_tf-LVs.mft (raw, json) Hash identifier: 1BgDBOt3fS+KDhGx8Y5CjJQmOSTjhhTzBa/lj3+9wdg= Subject key identifier: C0:DA:D7:B5:97:E8:89:49:68:8F:AD:66:1E:BC:EF:C0:CB:5A:60:DA Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Certificate serial: 14B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft Manifest number: 148C Signing time: Sat 12 Apr 2025 16:50:18 +0000 Manifest this update: Sat 12 Apr 2025 16:50:18 +0000 Manifest next update: Sat 19 Apr 2025 16:50:18 +0000 Files and hashes: 1: 2A-p-oQSVdW9py5S7AT9_tf-LVs.crl (hash: liA6VadpTjyidLpfaxEttMRktMdfoeDJwFzWN6zqE/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5301 (0x14b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427AF, serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Validity Not Before: Apr 12 16:50:18 2025 GMT Not After : Apr 19 16:50:18 2025 GMT Subject: CN=67fa99ca-e35a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ec:dd:d2:e1:4f:6d:7e:a2:17:a5:87:c3:8a: 65:25:a7:13:7e:78:ee:11:b8:8b:23:36:af:12:6b: 48:3f:64:7f:6c:3e:80:52:6c:48:13:54:f1:13:7b: eb:3e:ab:83:32:52:5a:c4:74:68:2e:0d:fd:e1:2c: 15:20:37:cf:06:c8:73:73:e0:f9:9f:a1:47:16:ba: ee:ab:d1:20:ce:a6:94:5d:27:8b:9f:68:36:f3:ce: 10:99:a1:57:7d:61:d1:dd:d5:00:0d:be:5e:c8:9b: ce:3e:2b:f0:a4:1f:8d:ca:e8:99:93:bf:e6:f6:4c: bf:a9:5e:72:77:2b:28:b2:eb:df:48:1f:e9:2d:97: 1d:8e:2e:7b:16:5b:e6:3c:e8:50:9a:cf:05:f1:fd: 5a:77:29:78:28:87:85:8a:6f:a5:49:84:5c:5e:b2: ce:34:b7:fd:33:ed:18:c9:11:64:8c:dd:5b:1b:e4: 95:a7:df:e7:28:9e:74:20:70:91:a0:58:74:5d:7c: d9:31:6b:e8:cd:5e:60:6f:cf:66:74:36:73:8c:5d: 5c:01:02:39:1a:e9:98:f7:79:3a:22:56:60:14:44: 50:28:42:6d:24:76:62:9c:27:83:c2:ad:a8:bf:4c: 9b:e2:ee:dc:3e:90:63:c8:08:5e:05:67:6f:d7:0f: 4c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:D7:B5:97:E8:89:49:68:8F:AD:66:1E:BC:EF:C0:CB:5A:60:DA X509v3 Authority Key Identifier: keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:c6:95:b8:de:2e:6d:dc:27:a0:9a:82:27:ca:58:d2:af:ea: 35:b5:c1:84:98:a4:89:df:74:72:7c:c1:4a:8d:f5:5c:7a:70: 58:d9:13:5b:bd:13:f9:23:f8:92:97:cf:0a:72:85:59:aa:e9: cc:a5:75:ce:44:98:2d:90:7d:0f:87:58:38:18:f0:a9:0a:9d: 12:e8:0d:6e:fa:8a:20:78:fb:c0:ef:01:b3:b5:64:15:85:b5: 10:3c:8f:bc:66:13:7b:f1:0b:51:9f:dd:61:12:f6:91:d9:30: 29:39:7b:d1:21:4d:35:74:87:43:79:16:9a:04:84:51:7e:63: 36:21:21:17:84:2b:65:95:fb:e4:f8:ca:1a:83:f6:4a:f1:7f: c6:53:7b:8b:5c:e2:56:79:e2:fa:a0:9b:e7:11:8e:0f:bb:a6: b3:bc:d9:4e:79:7a:c2:62:30:f0:b7:2e:76:47:67:1c:68:02: 53:7a:7d:e6:51:85:03:29:f5:b4:ec:94:86:e3:35:58:91:f9: 6a:4e:5d:53:c9:82:4f:ef:66:93:64:35:dd:6f:b2:7c:75:4b: 17:b9:9a:7f:4d:f1:72:98:c3:ee:d0:3c:d1:68:98:82:80:2a: 66:a8:f0:7e:5e:61:a4:c4:90:32:d3:29:09:31:76:4c:60:ec: 9a:cc:79:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3QUYxMTAvBgNVBAUTKEQ4MEZBOUZBODQxMjU1RDVCREE3MkU1MkVDMDRGREZF RDdGRTJENUIwHhcNMjUwNDEyMTY1MDE4WhcNMjUwNDE5MTY1MDE4WjAYMRYwFAYD VQQDEw02N2ZhOTljYS1lMzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+zd0uFPbX6iF6WHw4plJacTfnjuEbiLIzavEmtIP2R/bD6AUmxIE1TxE3vr PquDMlJaxHRoLg394SwVIDfPBshzc+D5n6FHFrruq9EgzqaUXSeLn2g2884QmaFX fWHR3dUADb5eyJvOPivwpB+NyuiZk7/m9ky/qV5ydysosuvfSB/pLZcdji57Flvm POhQms8F8f1adyl4KIeFim+lSYRcXrLONLf9M+0YyRFkjN1bG+SVp9/nKJ50IHCR oFh0XXzZMWvozV5gb89mdDZzjF1cAQI5GumY93k6IlZgFERQKEJtJHZinCeDwq2o v0yb4u7cPpBjyAheBWdv1w9M8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDa17WX 6IlJaI+tZh6878DLWmDaMB8GA1UdIwQYMBaAFNgPqfqEElXVvacuUuwE/f7X/i1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdBRi81NzlBOEJDMDY4 NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1ZkVzlweTVTN0FUOV90Zi1M VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBLXAtb1FTVmRXOXB5NVM3QVQ5X3RmLUxWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdBRi81NzlBOEJDMDY4NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1Zk VzlweTVTN0FUOV90Zi1MVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIxpW43i5t3CegmoInyljSr+o1tcGEmKSJ33RyfMFKjfVcenBY2RNb vRP5I/iSl88KcoVZqunMpXXORJgtkH0Ph1g4GPCpCp0S6A1u+oogePvA7wGztWQV hbUQPI+8ZhN78QtRn91hEvaR2TApOXvRIU01dIdDeRaaBIRRfmM2ISEXhCtllfvk +Moag/ZK8X/GU3uLXOJWeeL6oJvnEY4Pu6azvNlOeXrCYjDwty52R2ccaAJTen3m UYUDKfW07JSG4zVYkflqTl1TyYJP72aTZDXdb7J8dUsXuZp/TfFymMPu0DzRaJiC gCpmqPB+XmGkxJAy0ykJMXZMYOyazHns -----END CERTIFICATE-----Generated at Sun Apr 13 04:08:44 2025 by rpki-client