$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft File: 2A-p-oQSVdW9py5S7AT9_tf-LVs.mft (raw, json) Hash identifier: HqWWLyeyrUgq0uj6p+xQFPKC8WOwBmviZiMurw/Up5k= Subject key identifier: 57:26:9D:3D:03:8F:BB:F8:64:C8:95:90:55:26:AF:1D:2D:BC:20:66 Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Certificate serial: 1402 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft Manifest number: 13D9 Signing time: Thu 02 May 2024 17:33:51 +0000 Manifest this update: Thu 02 May 2024 17:33:51 +0000 Manifest next update: Thu 09 May 2024 17:33:51 +0000 Files and hashes: 1: 2A-p-oQSVdW9py5S7AT9_tf-LVs.crl (hash: PQCjfQTvSvSdDa7CRfTsMHBTSfWekvIMs+9QA1Xpuv4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 09 May 2024 17:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5122 (0x1402) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Validity Not Before: May 2 17:33:51 2024 GMT Not After : May 9 17:33:51 2024 GMT Subject: CN=6633ce7f-c307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:73:71:de:ea:80:ba:cc:7e:5b:bc:40:1b: 8e:14:3d:08:b9:94:f8:20:75:3c:c1:ac:a9:c4:06: 54:2c:b7:e0:28:8e:7e:f4:f5:ba:fb:3a:84:fc:3e: f1:fb:93:3f:9d:9c:35:95:9a:8e:76:16:e3:cf:18: 7c:a8:7b:64:a0:f1:67:a7:7e:a3:e4:f5:20:9b:9d: f0:7a:2f:74:f5:ac:23:1e:f9:b9:08:c5:07:2f:c7: 09:60:d8:5f:f8:ee:10:ec:34:6f:5b:5d:aa:8d:a6: 0d:ce:ce:10:87:ab:6c:e9:f7:18:11:15:fe:fa:bc: 1a:b6:d1:50:7b:43:c7:bb:d8:38:12:31:fa:1c:9a: 9e:f1:a2:8a:dd:33:a3:4b:8e:80:5e:d9:29:82:13: 3a:5c:d5:55:77:ec:a6:42:d9:37:d7:c0:4e:f7:f7: d8:9f:05:a7:3f:f4:49:f3:eb:eb:7f:b9:42:c8:17: c9:b6:f3:fd:2e:70:1d:9b:fe:c6:40:b9:df:39:8b: 17:62:8a:63:21:21:f9:65:9a:29:b8:b2:9d:4b:12: 60:38:7d:d9:a0:00:b8:e7:c4:77:c4:a5:6f:91:17: 17:09:bd:07:5c:7b:3d:b3:21:47:8b:50:3c:98:f0: 0b:02:9c:20:ec:dc:8a:b0:36:7d:c7:be:c7:5d:c9: de:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:26:9D:3D:03:8F:BB:F8:64:C8:95:90:55:26:AF:1D:2D:BC:20:66 X509v3 Authority Key Identifier: keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:9b:6f:ed:47:65:21:38:1e:1a:10:7a:67:c1:b1:25:28:b4: e1:7a:38:12:8a:69:84:f5:1a:ea:4e:01:d8:6c:61:81:0e:c8: 14:7e:6f:12:2c:44:0b:8e:4f:2e:2b:36:3d:8f:58:55:5c:ad: 15:6d:6f:36:23:9c:9e:6d:e4:a0:05:80:0a:2e:ec:3f:ce:c8: 93:05:82:ca:47:d6:ec:88:ca:da:9c:ac:12:8b:de:64:bf:31: 7e:5a:e1:69:5e:cb:63:92:54:be:c9:f2:31:4a:4c:04:f7:30: 19:93:f3:16:e3:41:57:b1:1f:69:7d:c3:1e:05:b8:cb:fb:8e: 88:f3:cb:aa:34:0e:48:5d:d0:75:c0:5f:f9:4c:37:dd:e3:18: 4b:f7:97:13:de:b9:30:22:1c:2a:ab:e6:e2:7b:02:02:a9:3b: ae:b8:57:fd:b0:48:bc:e5:80:80:82:d2:ad:e0:5f:d3:73:d8: 1f:a1:c5:ff:fe:8b:1b:d5:58:e5:1e:7f:c6:de:b5:a6:63:22: 21:4d:b5:1f:42:ff:17:30:08:a3:af:50:55:05:4e:c8:73:d8: 9b:66:d2:47:8c:8e:d5:2c:62:f5:b4:64:92:69:04:e5:bf:b3: c3:44:20:1b:16:e6:0e:fb:53:33:06:58:08:9e:8e:14:70:f1: 98:a1:09:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3QUYxMTAvBgNVBAUTKEQ4MEZBOUZBODQxMjU1RDVCREE3MkU1MkVDMDRGREZF RDdGRTJENUIwHhcNMjQwNTAyMTczMzUxWhcNMjQwNTA5MTczMzUxWjAYMRYwFAYD VQQDEw02NjMzY2U3Zi1jMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpZzcd7qgLrMflu8QBuOFD0IuZT4IHU8waypxAZULLfgKI5+9PW6+zqE/D7x +5M/nZw1lZqOdhbjzxh8qHtkoPFnp36j5PUgm53wei909awjHvm5CMUHL8cJYNhf +O4Q7DRvW12qjaYNzs4Qh6ts6fcYERX++rwattFQe0PHu9g4EjH6HJqe8aKK3TOj S46AXtkpghM6XNVVd+ymQtk318BO9/fYnwWnP/RJ8+vrf7lCyBfJtvP9LnAdm/7G QLnfOYsXYopjISH5ZZopuLKdSxJgOH3ZoAC458R3xKVvkRcXCb0HXHs9syFHi1A8 mPALApwg7NyKsDZ9x77HXcneXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFcmnT0D j7v4ZMiVkFUmrx0tvCBmMB8GA1UdIwQYMBaAFNgPqfqEElXVvacuUuwE/f7X/i1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdBRi81NzlBOEJDMDY4 NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1ZkVzlweTVTN0FUOV90Zi1M VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBLXAtb1FTVmRXOXB5NVM3QVQ5X3RmLUxWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdBRi81NzlBOEJDMDY4NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1Zk VzlweTVTN0FUOV90Zi1MVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHm2/tR2UhOB4aEHpnwbElKLThejgSimmE9RrqTgHYbGGBDsgUfm8S LEQLjk8uKzY9j1hVXK0VbW82I5yebeSgBYAKLuw/zsiTBYLKR9bsiMranKwSi95k vzF+WuFpXstjklS+yfIxSkwE9zAZk/MW40FXsR9pfcMeBbjL+46I88uqNA5IXdB1 wF/5TDfd4xhL95cT3rkwIhwqq+biewICqTuuuFf9sEi85YCAgtKt4F/Tc9gfocX/ /osb1VjlHn/G3rWmYyIhTbUfQv8XMAijr1BVBU7Ic9ibZtJHjI7VLGL1tGSSaQTl v7PDRCAbFuYO+1MzBlgIno4UcPGYoQlc -----END CERTIFICATE-----Generated at Thu May 2 20:50:23 2024 by rpki-client on console-fra.rpki-client.org