$ rpki-client -vvf rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft File: 2A-p-oQSVdW9py5S7AT9_tf-LVs.mft (raw, json) Hash identifier: nzHejbg9KOx4dzSYsuasCcGeiU/El8kcsP2l09EP3N4= Subject key identifier: 96:45:74:06:84:35:86:49:AC:E6:BC:D5:AA:0D:53:B9:E0:7F:3A:8A Authority key identifier: D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B Certificate issuer: /CN=A91427AF/serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Certificate serial: 14DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft Manifest number: 14B5 Signing time: Mon 30 Jun 2025 17:04:32 +0000 Manifest this update: Mon 30 Jun 2025 17:04:32 +0000 Manifest next update: Mon 07 Jul 2025 17:04:32 +0000 Files and hashes: 1: 2A-p-oQSVdW9py5S7AT9_tf-LVs.crl (hash: koCdfBGXAhHKT7EyKo5N2lYXM4p06kObz6yfpq3Cxnk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5342 (0x14de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427AF, serialNumber=D80FA9FA841255D5BDA72E52EC04FDFED7FE2D5B Validity Not Before: Jun 30 17:04:32 2025 GMT Not After : Jul 7 17:04:32 2025 GMT Subject: CN=6862c3a0-8faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:c9:d6:f3:dc:71:23:26:d9:87:40:4a:95: ad:d4:33:1e:1d:f5:f0:ad:52:fa:36:f4:34:4f:51: af:d2:2a:bf:18:d8:0c:29:e1:da:53:8e:34:5c:4d: 67:65:c8:c5:6c:54:ed:70:92:f1:b4:77:75:be:ac: 10:f3:68:4f:39:29:99:07:2b:cc:d8:78:5f:ec:bd: 1b:99:26:0e:00:c0:e5:01:13:ad:57:43:90:50:07: f8:fe:2f:f0:4d:58:b0:d1:c4:ee:73:d4:81:02:6b: 8b:d3:e9:2d:ce:94:1b:89:84:30:3d:35:c3:17:c1: c1:94:3e:bd:34:d6:80:b3:54:b1:b1:e5:cf:46:ad: 79:d5:1f:8a:da:17:37:e6:34:85:66:48:b3:87:6a: 64:ac:a7:93:fc:49:58:13:5d:f1:cb:7c:b2:6b:d7: 88:23:ad:01:98:8d:4e:98:20:39:a4:64:53:05:b1: a3:d1:f5:1c:fb:6a:a1:b9:e0:61:be:b3:bb:2c:69: b8:f4:4c:57:a4:01:eb:2c:08:10:e3:80:1d:f1:84: f9:9a:fc:03:3a:c7:30:8b:80:63:ba:de:50:85:9d: 06:90:cc:40:0f:6f:95:b0:e6:fa:15:87:26:8b:eb: b8:44:c1:6a:bb:29:22:1a:6c:30:7d:ee:2b:41:f5: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:45:74:06:84:35:86:49:AC:E6:BC:D5:AA:0D:53:B9:E0:7F:3A:8A X509v3 Authority Key Identifier: keyid:D8:0F:A9:FA:84:12:55:D5:BD:A7:2E:52:EC:04:FD:FE:D7:FE:2D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2A-p-oQSVdW9py5S7AT9_tf-LVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427AF/579A8BC0686011E8AAB1251FC4F9AE02/2A-p-oQSVdW9py5S7AT9_tf-LVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:af:4d:9e:7e:c5:9f:ca:e2:9e:1f:75:29:c4:b7:52:08: d4:88:94:55:a7:6a:72:61:23:b3:04:01:ad:81:e5:2c:37:14: 83:0d:e9:1a:c6:f6:40:47:69:78:b9:77:1b:43:72:ef:7a:ce: 8b:e5:f8:96:66:8c:a1:b2:91:d1:88:2b:df:45:55:a0:5f:2a: 63:e3:c7:df:a6:29:79:d9:60:b1:92:7d:d9:04:b0:98:93:dd: 28:13:f4:f3:72:59:ca:1a:36:3d:f6:19:4a:25:23:be:f8:c5: c6:3f:9c:06:6a:ff:04:05:5c:3d:1a:05:62:99:08:59:45:3b: 45:aa:2d:ee:14:18:8f:27:62:9b:07:c4:c1:5e:79:ac:55:d7: b8:82:a0:de:49:6f:5f:c7:b1:b8:ea:45:30:1a:1e:1d:83:77: f8:41:8d:81:55:5e:2a:5f:d8:f6:9c:ae:91:e8:05:9f:a2:cb: 2b:81:a9:34:50:a5:56:3c:14:db:b8:18:eb:f4:a4:34:0c:d3: 78:20:0e:1c:33:8d:75:9a:b9:7e:06:29:6b:64:8b:75:22:28: 81:4d:cc:54:65:bb:99:9e:b2:8a:49:fd:7a:81:68:3f:67:0b: ec:25:92:2f:e8:86:c2:01:25:1a:d5:44:45:23:61:d1:a7:b7: af:b9:7f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3QUYxMTAvBgNVBAUTKEQ4MEZBOUZBODQxMjU1RDVCREE3MkU1MkVDMDRGREZF RDdGRTJENUIwHhcNMjUwNjMwMTcwNDMyWhcNMjUwNzA3MTcwNDMyWjAYMRYwFAYD VQQDEw02ODYyYzNhMC04ZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYrJ1vPccSMm2YdASpWt1DMeHfXwrVL6NvQ0T1Gv0iq/GNgMKeHaU440XE1n ZcjFbFTtcJLxtHd1vqwQ82hPOSmZByvM2Hhf7L0bmSYOAMDlAROtV0OQUAf4/i/w TViw0cTuc9SBAmuL0+ktzpQbiYQwPTXDF8HBlD69NNaAs1SxseXPRq151R+K2hc3 5jSFZkizh2pkrKeT/ElYE13xy3yya9eII60BmI1OmCA5pGRTBbGj0fUc+2qhueBh vrO7LGm49ExXpAHrLAgQ44Ad8YT5mvwDOscwi4Bjut5QhZ0GkMxAD2+VsOb6FYcm i+u4RMFquykiGmwwfe4rQfVexwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZFdAaE NYZJrOa81aoNU7ngfzqKMB8GA1UdIwQYMBaAFNgPqfqEElXVvacuUuwE/f7X/i1b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdBRi81NzlBOEJDMDY4 NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1ZkVzlweTVTN0FUOV90Zi1M VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBLXAtb1FTVmRXOXB5NVM3QVQ5X3RmLUxWcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdBRi81NzlBOEJDMDY4NjAxMUU4QUFCMTI1MUZDNEY5QUUwMi8yQS1wLW9RU1Zk VzlweTVTN0FUOV90Zi1MVnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8ia9Nnn7Fn8rinh91KcS3UgjUiJRVp2pyYSOzBAGtgeUsNxSDDeka xvZAR2l4uXcbQ3Lves6L5fiWZoyhspHRiCvfRVWgXypj48ffpil52WCxkn3ZBLCY k90oE/TzclnKGjY99hlKJSO++MXGP5wGav8EBVw9GgVimQhZRTtFqi3uFBiPJ2Kb B8TBXnmsVde4gqDeSW9fx7G46kUwGh4dg3f4QY2BVV4qX9j2nK6R6AWfossrgak0 UKVWPBTbuBjr9KQ0DNN4IA4cM411mrl+BilrZIt1IiiBTcxUZbuZnrKKSf16gWg/ ZwvsJZIv6IbCASUa1URFI2HRp7evuX/O -----END CERTIFICATE-----Generated at Tue Jul 1 09:04:34 2025 by rpki-client