$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json) Hash identifier: MAk0pXrfehg3B5++YKO35ihGq8T74ohFhamggRZGdyg= Subject key identifier: C7:7B:A6:44:4C:71:60:B4:55:1D:FB:B7:B1:DF:2F:85:3F:77:49:5F Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 04FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft Manifest number: 04F4 Signing time: Sun 19 May 2024 01:13:37 +0000 Manifest this update: Sun 19 May 2024 01:13:36 +0000 Manifest next update: Sun 26 May 2024 01:13:36 +0000 Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: 5O+ZO40qHc7stIpr4YereCyxx5tNbmap88Amk0NK3pI=) 2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: 7OSX/z4+SFCvrwmsRlu2wVw0hZhIRblsXA/ENUFE8eI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 May 2024 01:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1274 (0x4fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: May 19 01:13:36 2024 GMT Not After : May 26 01:13:36 2024 GMT Subject: CN=66495240-a77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ac:f1:ab:43:fe:b2:56:fe:d2:aa:8b:e6:f7: 3e:13:6d:dd:c0:23:dd:e9:9f:72:21:c7:82:25:47: 80:4a:38:c7:b2:6f:4a:5a:94:55:ff:a5:27:b5:f1: ed:1f:50:90:80:5f:2c:8e:10:ca:09:82:c0:fe:08: 97:fe:03:43:b1:91:8d:a0:9d:5b:5b:9a:bd:40:e6: 3a:a3:ae:73:6c:1a:a0:57:8e:43:57:ad:bf:d8:3b: 73:fc:ab:27:fd:08:9d:44:5c:e4:1e:17:4c:81:26: 9f:9b:ab:09:5f:85:86:e2:c1:96:01:a4:ff:fb:c0: c2:26:f0:2e:ac:7f:cf:41:bd:76:b4:2c:2b:cd:29: 96:12:05:82:ff:c7:b0:46:94:fd:2a:8b:b4:8c:3e: 0a:df:eb:68:aa:89:1d:a6:9e:34:55:c1:ca:7a:90: 99:0b:d8:b2:88:ff:b0:84:0a:03:29:12:a2:36:0c: 95:f8:f6:3a:9e:63:18:e3:81:d3:c6:24:53:63:62: d6:96:49:6f:c2:a9:3c:c1:a1:e2:23:85:aa:2f:ef: f3:dd:89:45:88:e6:a9:dd:85:a3:8c:1d:44:a1:fc: 69:98:57:e2:b8:c4:f2:59:d5:37:33:f1:f1:66:a6: c4:54:28:0f:88:31:b7:91:9f:10:d3:b1:e9:f6:9a: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7B:A6:44:4C:71:60:B4:55:1D:FB:B7:B1:DF:2F:85:3F:77:49:5F X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:60:8e:b3:46:14:91:c2:26:8e:42:4c:e1:c5:81:22:a0:3a: 92:fd:0f:88:6d:ef:d0:5c:97:8e:00:0c:ed:f2:64:63:af:7e: 6f:4e:fa:c5:f8:e3:94:b4:af:64:1b:02:44:7a:ce:60:8d:ab: cd:eb:9b:9f:80:72:6a:d9:16:ba:ef:5f:e7:c0:c2:26:9d:44: d8:80:1d:9d:53:f0:ec:dc:25:27:2d:10:2b:64:75:60:e0:d6: 29:63:90:93:31:31:bf:7b:c2:58:5f:8f:07:7a:d3:31:93:d8: d8:3f:e4:6b:e5:5b:2c:a4:3a:50:d9:31:87:4c:2e:15:bd:6a: 6a:f8:6d:62:ec:3d:ae:58:30:a4:5a:bf:4b:f5:3e:fb:e4:3d: b0:d2:0a:db:41:86:91:32:c7:cc:f8:f9:15:8d:9e:5b:b9:b6: 74:8a:ff:5c:c3:64:bd:1f:f8:52:4d:88:2f:64:39:51:ac:b4: ee:b6:ae:3b:af:73:20:66:c8:12:4d:fd:90:e7:c6:01:05:81: 89:2d:f5:42:97:4c:a5:dd:d4:6a:c8:00:2e:be:ea:98:57:2b: 45:db:f9:21:af:88:0f:11:ca:08:c8:cc:4d:8c:70:fd:df:5b: 83:36:19:d2:10:4f:cc:42:8b:e4:fe:4b:9e:68:2d:2f:04:f6: 35:de:93:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjQwNTE5MDExMzM2WhcNMjQwNTI2MDExMzM2WjAYMRYwFAYD VQQDEw02NjQ5NTI0MC1hNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66zxq0P+slb+0qqL5vc+E23dwCPd6Z9yIceCJUeASjjHsm9KWpRV/6UntfHt H1CQgF8sjhDKCYLA/giX/gNDsZGNoJ1bW5q9QOY6o65zbBqgV45DV62/2Dtz/Ksn /QidRFzkHhdMgSafm6sJX4WG4sGWAaT/+8DCJvAurH/PQb12tCwrzSmWEgWC/8ew RpT9Kou0jD4K3+toqokdpp40VcHKepCZC9iyiP+whAoDKRKiNgyV+PY6nmMY44HT xiRTY2LWlklvwqk8waHiI4WqL+/z3YlFiOap3YWjjB1EofxpmFfiuMTyWdU3M/Hx ZqbEVCgPiDG3kZ8Q07Hp9ppzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd7pkRM cWC0VR37t7HfL4U/d0lfMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxYI6zRhSRwiaOQkzhxYEioDqS/Q+Ibe/QXJeOAAzt8mRjr35vTvrF +OOUtK9kGwJEes5gjavN65ufgHJq2Ra671/nwMImnUTYgB2dU/Ds3CUnLRArZHVg 4NYpY5CTMTG/e8JYX48HetMxk9jYP+Rr5VsspDpQ2TGHTC4VvWpq+G1i7D2uWDCk Wr9L9T775D2w0grbQYaRMsfM+PkVjZ5bubZ0iv9cw2S9H/hSTYgvZDlRrLTutq47 r3MgZsgSTf2Q58YBBYGJLfVCl0yl3dRqyAAuvuqYVytF2/khr4gPEcoIyMxNjHD9 31uDNhnSEE/MQovk/kueaC0vBPY13pMR -----END CERTIFICATE-----Generated at Sun May 19 02:59:05 2024 by rpki-client on console-ams.rpki-client.org