$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft File: 2A-p-oQSVdW9py5S7AT9_tf-LVs.mft (raw, json) Hash identifier: qhLfQUgvL6lkd40H2FYd23RuzurFKdUmCCJyxWc95Ug= Subject key identifier: A1:E3:1F:20:E9:1D:82:68:66:B2:89:84:E2:78:C1:BC:34:D3:B8:F1 Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Certificate serial: 140A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft Manifest number: 13E1 Signing time: Sat 18 May 2024 17:29:36 +0000 Manifest this update: Sat 18 May 2024 17:29:35 +0000 Manifest next update: Sat 25 May 2024 17:29:35 +0000 Files and hashes: 1: 2A-p-oQSVdW9py5S7AT9_tf-LVs.crl (hash: qmQwTG6YmRl3cuCSwCywYXHxq+05xniGlmLtJLPk2E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 14:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5130 (0x140a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Validity Not Before: May 18 17:29:35 2024 GMT Not After : May 25 17:29:35 2024 GMT Subject: CN=6648e57f-10e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:80:0f:60:bf:2a:01:c5:94:fe:0d:6f:87:dd: a7:f1:f4:57:68:32:90:a1:c5:23:2f:64:30:33:d4: 82:d2:11:5d:58:04:fe:d1:61:fe:cf:ae:4c:e0:29: 37:aa:b6:df:f6:93:b8:07:6f:f4:67:17:d4:21:65: 37:a9:2e:dd:38:d1:11:43:46:b7:66:33:81:c6:fe: 04:10:18:f5:8d:dc:26:8c:8b:27:9d:51:05:3d:13: b6:c4:3f:37:a6:dd:7b:1b:78:3d:65:ff:4b:60:37: 0a:e8:e9:3a:ed:b2:d5:2e:f6:0c:99:da:6e:1a:6a: 73:be:ae:d0:2c:57:3f:41:b8:d8:2d:9d:a0:5d:bc: 81:b0:9e:55:cb:d6:7f:2f:f8:7a:0f:12:30:fc:2a: f6:7c:ff:d6:9c:37:b7:e9:56:32:81:6b:8c:5d:14: 87:ea:5a:d6:bf:a0:2c:d6:9f:5e:d3:6d:be:f0:2e: da:2e:41:46:2b:e2:7a:3c:41:d9:5a:87:dd:23:83: 44:45:7a:0d:0b:58:22:14:48:98:be:cb:8e:c4:82: 88:9e:25:1d:98:34:cd:86:89:ae:09:5e:60:94:11: 2f:a2:c0:12:e1:2a:b4:9b:c3:d1:f8:ce:c0:da:77: 4d:9d:7f:65:68:39:3d:a7:7a:c1:f0:0a:f5:ee:57: d6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E3:1F:20:E9:1D:82:68:66:B2:89:84:E2:78:C1:BC:34:D3:B8:F1 X509v3 Authority Key Identifier: keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:e3:1b:c6:86:c4:68:d1:42:d8:9f:46:77:26:d0:a1:ec:2a: e1:3f:d5:9b:37:7e:f7:2d:a6:8b:8d:9c:7f:60:6f:10:9d:56: c7:51:b8:d3:b2:34:b7:34:ef:fc:a4:b8:c8:a8:4b:e2:0d:65: 48:e2:9a:c5:a5:01:bd:a7:bb:98:b4:f2:37:3f:e9:94:82:cd: 4b:bd:35:6a:3c:e5:77:92:19:f5:0d:4b:1a:b3:81:5c:a7:7a: 42:76:6d:ed:bc:fe:9b:81:50:28:45:ed:68:aa:96:34:dd:06: 12:1a:22:09:18:eb:a7:ba:09:ef:d0:35:1d:59:42:43:f7:a9: c6:d7:4c:da:0c:2c:7c:60:26:9b:65:85:58:d6:a5:9a:e2:96: b1:c2:e3:7e:34:48:16:96:b4:70:22:90:ad:f6:20:58:6f:ef: 0a:86:f3:df:85:63:00:3d:03:3c:ae:17:93:81:a9:cd:5a:2c: 3d:54:d2:fb:e1:b1:ae:0b:f2:90:8d:e7:f6:1c:0e:68:22:f5: e9:71:47:bb:78:69:10:f9:e9:2a:c1:d2:1f:43:e1:78:d3:1c: 01:ef:f5:dd:34:19:4c:35:b9:84:9c:fc:50:5c:7d:4b:7d:c4: 86:a3:b9:12:c7:7a:d4:ae:50:e7:a6:de:93:01:ee:64:70:b5: 95:ec:f7:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3QUYxMTAvBgNVBAUTKEQ4MEZBOUZBODQxMjU1RDVCREE3MkU1MkVDMDRGREZF RDdGRTJENUIwHhcNMjQwNTE4MTcyOTM1WhcNMjQwNTI1MTcyOTM1WjAYMRYwFAYD VQQDEw02NjQ4ZTU3Zi0xMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54APYL8qAcWU/g1vh92n8fRXaDKQocUjL2QwM9SC0hFdWAT+0WH+z65M4Ck3 qrbf9pO4B2/0ZxfUIWU3qS7dONERQ0a3ZjOBxv4EEBj1jdwmjIsnnVEFPRO2xD83 pt17G3g9Zf9LYDcK6Ok67bLVLvYMmdpuGmpzvq7QLFc/QbjYLZ2gXbyBsJ5Vy9Z/ L/h6DxIw/Cr2fP/WnDe36VYygWuMXRSH6lrWv6As1p9e022+8C7aLkFGK+J6PEHZ WofdI4NERXoNC1giFEiYvsuOxIKIniUdmDTNhomuCV5glBEvosAS4Sq0m8PR+M7A 2ndNnX9laDk9p3rB8Ar17lfW0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHjHyDp HYJoZrKJhOJ4wbw007jxMB8GA1UdIwQYMBaAFNgPqfqEElXVvacuUuwE/f7X/i1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdBRi81NzlBOEJDMDY4 NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1ZkVzlweTVTN0FUOV90Zi1M VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBLXAtb1FTVmRXOXB5NVM3QVQ5X3RmLUxWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdBRi81NzlBOEJDMDY4NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1Zk VzlweTVTN0FUOV90Zi1MVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt4xvGhsRo0ULYn0Z3JtCh7CrhP9WbN373LaaLjZx/YG8QnVbHUbjT sjS3NO/8pLjIqEviDWVI4prFpQG9p7uYtPI3P+mUgs1LvTVqPOV3khn1DUsas4Fc p3pCdm3tvP6bgVAoRe1oqpY03QYSGiIJGOunugnv0DUdWUJD96nG10zaDCx8YCab ZYVY1qWa4paxwuN+NEgWlrRwIpCt9iBYb+8KhvPfhWMAPQM8rheTganNWiw9VNL7 4bGuC/KQjef2HA5oIvXpcUe7eGkQ+ekqwdIfQ+F40xwB7/XdNBlMNbmEnPxQXH1L fcSGo7kSx3rUrlDnpt6TAe5kcLWV7Pdo -----END CERTIFICATE-----Generated at Sat May 18 18:21:36 2024 by rpki-client on console-ams.rpki-client.org