$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft File: 2A-p-oQSVdW9py5S7AT9_tf-LVs.mft (raw, json) Hash identifier: DbnfpHpnxIq97bvtA2aFTCkqmEhJFITZtP8eN1o4YSU= Subject key identifier: 9E:34:5A:D9:B3:5B:9C:7C:87:8E:BE:7A:7D:2B:10:1F:1F:90:0C:01 Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Certificate serial: 14CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft Manifest number: 14A4 Signing time: Fri 30 May 2025 17:04:38 +0000 Manifest this update: Fri 30 May 2025 17:04:37 +0000 Manifest next update: Fri 06 Jun 2025 17:04:37 +0000 Files and hashes: 1: 2A-p-oQSVdW9py5S7AT9_tf-LVs.crl (hash: +0p4eCnFkMT/w5b+Z5areu4/JcEBQPC7ce+5tL5Eimg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5325 (0x14cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427AF, serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Validity Not Before: May 30 17:04:37 2025 GMT Not After : Jun 6 17:04:37 2025 GMT Subject: CN=6839e525-9a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f8:e3:83:60:86:92:52:44:06:1f:18:87:55: c7:30:f1:2e:6e:51:c2:2a:e0:18:5e:79:ff:b6:e4: f0:c4:53:56:c3:66:3a:e6:d9:f2:c6:d0:29:bb:2e: 1d:73:e1:e9:58:b4:a4:8a:b2:59:a8:29:21:8a:83: 83:f4:b3:b4:2b:b9:b8:77:1d:97:79:d0:76:f1:fd: d1:78:d5:0d:fd:3f:49:9a:26:5e:50:6a:46:e5:22: 09:45:c8:55:b6:5e:f5:a0:5c:f4:80:fd:7e:9f:45: 6c:e6:83:ad:74:70:fa:e4:a4:20:10:84:fc:16:d9: 3c:ff:08:ea:80:df:cb:39:7f:3b:be:76:ae:e8:81: 9b:4d:68:da:fc:6f:d1:fd:83:11:72:5a:10:16:1e: de:23:52:dc:1d:85:9e:22:09:9f:7d:20:9b:f8:9a: 1c:eb:5a:4f:4b:32:84:62:db:c2:cc:a9:88:fa:d5: 09:f1:79:39:4b:bf:68:06:4f:67:e8:6b:94:4c:ba: e4:ab:ca:40:9f:93:d2:d4:05:cb:ab:f9:44:d3:bd: d8:77:ce:f0:39:6f:7e:c1:f1:6b:da:61:f4:a6:1b: 74:09:4c:dd:20:fe:62:ec:c2:f1:fb:2f:1b:ed:02: a3:49:00:69:11:4a:e9:df:1a:dd:90:50:ff:6d:b4: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:34:5A:D9:B3:5B:9C:7C:87:8E:BE:7A:7D:2B:10:1F:1F:90:0C:01 X509v3 Authority Key Identifier: keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6f:98:c3:34:79:f6:30:04:83:ad:c6:9c:b6:5f:23:9b:5f: 16:a8:98:91:68:76:cd:2d:91:d0:cb:90:26:ea:24:99:7f:e5: 76:a1:c5:70:3a:6c:88:8e:bc:f9:0d:17:a9:47:6a:d2:f2:f3: 06:61:f9:18:8f:5b:70:a9:a7:c0:82:f8:36:24:a2:2e:0e:a5: 01:59:82:31:54:62:68:34:21:99:cf:73:68:5a:45:85:69:7c: 46:ac:0e:b4:b1:6c:cd:e0:49:28:fd:9a:db:07:5e:c7:ae:b5: 03:e6:fe:6c:a3:fa:37:2d:37:cc:1c:de:09:52:3e:08:00:72: 77:c3:44:49:da:b8:65:43:c9:f3:72:cb:ea:13:69:a6:d2:d8: f4:1e:33:2d:95:95:d0:1b:11:7d:34:4a:27:a8:bf:89:3e:38: b8:86:f7:f8:6a:38:f2:c9:a8:c4:53:2e:8e:42:10:8b:30:9e: 50:c3:14:b7:67:d7:ff:8b:2a:1d:c6:51:a6:70:6c:0c:0e:04: 3a:f5:0b:ec:51:60:bb:38:50:b8:a4:c8:06:93:87:e6:fa:84: 17:21:89:f7:e1:99:bf:02:af:13:2e:d9:80:16:52:76:94:d4: 23:11:59:0c:54:56:34:bf:82:5f:af:a9:35:50:36:33:a3:12: 4c:e1:ac:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3QUYxMTAvBgNVBAUTKEQ4MEZBOUZBODQxMjU1RDVCREE3MkU1MkVDMDRGREZF RDdGRTJENUIwHhcNMjUwNTMwMTcwNDM3WhcNMjUwNjA2MTcwNDM3WjAYMRYwFAYD VQQDEw02ODM5ZTUyNS05YTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vjjg2CGklJEBh8Yh1XHMPEublHCKuAYXnn/tuTwxFNWw2Y65tnyxtApuy4d c+HpWLSkirJZqCkhioOD9LO0K7m4dx2XedB28f3ReNUN/T9JmiZeUGpG5SIJRchV tl71oFz0gP1+n0Vs5oOtdHD65KQgEIT8Ftk8/wjqgN/LOX87vnau6IGbTWja/G/R /YMRcloQFh7eI1LcHYWeIgmffSCb+Joc61pPSzKEYtvCzKmI+tUJ8Xk5S79oBk9n 6GuUTLrkq8pAn5PS1AXLq/lE073Yd87wOW9+wfFr2mH0pht0CUzdIP5i7MLx+y8b 7QKjSQBpEUrp3xrdkFD/bbQ4BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ40Wtmz W5x8h46+en0rEB8fkAwBMB8GA1UdIwQYMBaAFNgPqfqEElXVvacuUuwE/f7X/i1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdBRi81NzlBOEJDMDY4 NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1ZkVzlweTVTN0FUOV90Zi1M VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBLXAtb1FTVmRXOXB5NVM3QVQ5X3RmLUxWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdBRi81NzlBOEJDMDY4NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1Zk VzlweTVTN0FUOV90Zi1MVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXb5jDNHn2MASDrcactl8jm18WqJiRaHbNLZHQy5Am6iSZf+V2ocVw OmyIjrz5DRepR2rS8vMGYfkYj1twqafAgvg2JKIuDqUBWYIxVGJoNCGZz3NoWkWF aXxGrA60sWzN4Eko/ZrbB17HrrUD5v5so/o3LTfMHN4JUj4IAHJ3w0RJ2rhlQ8nz csvqE2mm0tj0HjMtlZXQGxF9NEonqL+JPji4hvf4ajjyyajEUy6OQhCLMJ5QwxS3 Z9f/iyodxlGmcGwMDgQ69QvsUWC7OFC4pMgGk4fm+oQXIYn34Zm/Aq8TLtmAFlJ2 lNQjEVkMVFY0v4Jfr6k1UDYzoxJM4azp -----END CERTIFICATE-----Generated at Sat May 31 16:33:07 2025 by rpki-client