$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: AB6l2xwpqUFazHx/CqlY6qV/nsYiniBtL0OuvWnAGZk= Subject key identifier: 48:2D:5E:25:35:53:A2:E3:D5:70:10:E5:F9:ED:7E:73:1D:0E:E9:10 Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: A2 Signing time: Sun 19 May 2024 06:43:44 +0000 Manifest this update: Sun 19 May 2024 06:43:44 +0000 Manifest next update: Sun 26 May 2024 06:43:44 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: XTlspdjBs7uQfc2CXEwGdZWK07iui5xtkd6xjE3FZnI=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 78b3Ox2Xx3CD/Hz4W1Z45WhrSg1MDAIxmRSWcrg3XGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 02:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: May 19 06:43:44 2024 GMT Not After : May 26 06:43:44 2024 GMT Subject: CN=66499fa0-f0d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:d7:25:26:04:da:52:e2:3d:f0:25:f1:71: c8:be:23:60:bb:89:ac:7e:78:3a:ba:c8:9c:24:2a: 5a:20:67:f2:c7:1c:4b:43:a5:95:fc:9b:44:c3:8e: 5e:02:9c:85:85:56:ec:13:43:bf:aa:af:5f:ec:5e: c2:71:0f:83:58:1f:3b:31:e4:fb:06:51:a3:e4:1d: 34:95:83:2d:69:17:79:9c:03:10:d7:2d:96:47:1e: 14:9c:ee:f1:9e:61:77:86:ce:04:72:52:11:25:29: f4:63:f9:3a:e9:a8:4a:65:46:b2:2b:6d:bf:e1:65: cd:1d:b5:65:85:9d:40:d5:8d:00:c7:cc:e4:42:52: e9:d6:d9:53:db:1d:35:9c:f6:63:08:b6:a9:a3:9e: 8c:b2:0f:77:2d:f5:de:96:18:a6:4f:e8:af:80:c9: ec:74:59:f4:d2:9b:38:d0:b5:69:cf:7f:f6:48:58: c6:43:ef:07:72:28:f7:fe:b8:05:cc:9f:4a:7f:7e: 2a:f1:7c:33:96:90:38:b0:9b:38:94:d5:c8:b8:d5: 4d:fd:51:5a:a7:70:8b:a2:55:07:2b:93:e9:69:86: fc:37:df:9a:b1:26:3a:df:d6:8c:da:fc:0a:d0:78: b7:10:a3:73:7d:55:7f:b1:e6:0d:00:44:5f:62:8c: 25:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2D:5E:25:35:53:A2:E3:D5:70:10:E5:F9:ED:7E:73:1D:0E:E9:10 X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:33:ea:b6:bc:fd:0f:99:51:8b:fe:55:0d:1a:8a:07:d8:53: 0e:ca:61:4f:32:0b:f0:09:3d:9f:fd:93:bc:1e:34:9a:39:98: 92:04:22:29:0c:bf:a8:4b:9e:32:e6:b3:9b:16:a0:90:83:ac: 99:44:4c:1e:23:93:57:34:b7:6f:22:52:87:2b:55:84:3d:12: 38:04:72:40:ef:59:cd:15:74:0e:b2:8a:47:f5:68:2c:55:68: 01:be:39:d8:26:b3:f9:c9:91:e9:dd:e9:8b:66:e2:89:c2:b0: c3:8c:f8:23:6b:30:c2:20:fb:25:b1:f6:4e:cc:a6:30:38:84: 9f:6a:16:f5:1b:14:a5:44:5e:9f:de:44:56:c6:9a:7a:8d:dd: 86:69:2a:bf:4a:53:ec:4a:b6:bf:55:33:d7:78:52:a5:9b:d6: 21:bb:89:7e:8b:6c:ee:87:53:2d:6d:07:eb:bc:13:86:43:a4: ae:2d:2d:d8:4d:a4:d3:a8:fb:4d:e5:94:9d:25:6c:79:30:3c: a6:55:4f:25:4e:49:62:b9:ff:62:f7:ed:ef:28:8a:96:ee:fe: 67:0e:a8:7c:cf:0e:ab:12:be:5e:b5:ee:9d:83:1e:7a:61:ae: b4:59:56:e6:fa:dc:54:ad:8d:c6:3e:53:74:f0:6d:43:19:91: c7:83:a1:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjQwNTE5MDY0MzQ0WhcNMjQwNTI2MDY0MzQ0WjAYMRYwFAYD VQQDEw02NjQ5OWZhMC1mMGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3bXJSYE2lLiPfAl8XHIviNgu4msfng6usicJCpaIGfyxxxLQ6WV/JtEw45e ApyFhVbsE0O/qq9f7F7CcQ+DWB87MeT7BlGj5B00lYMtaRd5nAMQ1y2WRx4UnO7x nmF3hs4EclIRJSn0Y/k66ahKZUayK22/4WXNHbVlhZ1A1Y0Ax8zkQlLp1tlT2x01 nPZjCLapo56Msg93LfXelhimT+ivgMnsdFn00ps40LVpz3/2SFjGQ+8Hcij3/rgF zJ9Kf34q8XwzlpA4sJs4lNXIuNVN/VFap3CLolUHK5PpaYb8N9+asSY639aM2vwK 0Hi3EKNzfVV/seYNAERfYowlRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgtXiU1 U6Lj1XAQ5fntfnMdDukQMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiM+q2vP0PmVGL/lUNGooH2FMOymFPMgvwCT2f/ZO8HjSaOZiSBCIp DL+oS54y5rObFqCQg6yZREweI5NXNLdvIlKHK1WEPRI4BHJA71nNFXQOsopH9Wgs VWgBvjnYJrP5yZHp3emLZuKJwrDDjPgjazDCIPslsfZOzKYwOISfahb1GxSlRF6f 3kRWxpp6jd2GaSq/SlPsSra/VTPXeFKlm9Yhu4l+i2zuh1MtbQfrvBOGQ6SuLS3Y TaTTqPtN5ZSdJWx5MDymVU8lTkliuf9i9+3vKIqW7v5nDqh8zw6rEr5ete6dgx56 Ya60WVbm+txUrY3GPlN08G1DGZHHg6GH -----END CERTIFICATE-----Generated at Sun May 19 07:40:37 2024 by rpki-client on console-fra.rpki-client.org