$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: arysonAJ564MQDUsvZ8fhC7VAGLc8k7GCC9495oleHo= Subject key identifier: 04:3E:A7:AA:C0:53:12:EA:B2:0C:00:EC:2C:B4:2E:47:2C:BC:3E:88 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0A89 Signing time: Thu 30 May 2024 20:38:57 +0000 Manifest this update: Thu 30 May 2024 20:38:56 +0000 Manifest next update: Thu 06 Jun 2024 20:38:56 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: WYNemkcAGXvXl2ZnFQLzghqctsa07i1mpQig32g1Zp8=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: 3F/TejTZYAuiF6kSX5sGBk6FgiPZU1gx1/Gn0XMbkqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Jun 2024 20:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: May 30 20:38:56 2024 GMT Not After : Jun 6 20:38:56 2024 GMT Subject: CN=6658e3e0-4a15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:31:35:4d:b1:07:b4:ea:33:da:c5:91:b1: 6c:18:53:89:0d:6d:40:25:d5:2c:e8:41:e1:76:8b: 40:15:55:71:1b:a4:87:01:77:ff:5c:58:ad:a1:a4: db:e8:8b:c4:38:eb:c2:85:9c:e5:bc:bb:0e:eb:15: 16:1e:71:e4:d9:8e:a9:1f:a1:53:b4:0a:28:44:88: a2:14:72:94:9d:92:b2:b4:1a:f5:8b:a6:96:20:48: ae:6c:ba:32:1f:40:2b:da:0b:27:ad:82:51:ed:e8: 21:44:0a:cc:89:da:55:7b:6c:81:f0:51:b0:b9:5b: 9c:17:15:6b:ee:b7:f5:5a:bb:15:1d:25:0f:fe:3b: fb:32:82:b4:01:fa:12:64:3f:96:7c:64:a9:65:ff: 51:c8:c5:19:71:5b:ad:c8:e4:21:d9:f4:d0:cf:5a: c4:8a:37:d4:0d:42:4c:23:54:5f:bc:cd:81:e7:ab: 1d:76:27:c5:f0:62:f6:ad:ff:c8:85:67:9b:93:4f: 0c:6c:b8:ea:38:e3:65:ad:b5:8c:e0:fa:63:ad:f5: 10:4d:63:cf:60:54:59:77:df:2f:33:70:e3:e5:a8: 61:e2:6c:ab:9d:b0:dc:46:49:6b:6d:84:08:40:9e: 50:20:04:3a:44:9f:12:50:92:da:0a:20:b0:3f:81: 33:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:A7:AA:C0:53:12:EA:B2:0C:00:EC:2C:B4:2E:47:2C:BC:3E:88 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9c:56:ac:2a:63:e2:ac:6f:b1:12:b7:d3:98:ec:39:78:10: 91:73:fa:e7:83:f9:eb:7d:f9:7f:b8:07:20:76:f2:0c:27:a9: 4d:1b:e4:f2:36:14:91:09:5c:4e:90:67:a8:98:00:9b:31:0e: 22:1c:fb:38:6c:6e:a6:8c:86:b6:f1:ed:e1:0f:ce:3a:98:98: f9:e8:41:9b:2f:71:de:9e:d0:f8:6a:1b:0e:f7:b3:4b:a6:45: 50:87:50:b3:c4:01:45:9e:27:5c:d1:15:28:6a:c2:b0:0f:62: bd:09:b4:4f:de:4f:76:ca:66:0c:88:a2:43:a0:0d:f0:87:d0: 6c:3d:0b:f6:5d:50:bb:e1:bd:7a:82:8f:bc:c2:55:e2:88:2b: 81:15:9c:53:e9:4c:23:8a:07:da:30:87:24:ad:61:38:e8:48: ab:a0:74:5c:d1:22:c2:53:3a:60:82:dd:24:5b:e1:4d:9b:ae: 8c:c6:f8:bb:77:8b:d1:16:70:8a:d4:a0:cd:e8:55:ea:4a:3c: 0e:28:da:92:d8:d6:fc:71:1a:83:66:db:da:45:d7:ca:bb:9a: 20:f0:1f:0c:e4:f1:a9:01:ab:6e:36:29:75:71:74:03:d3:dc: c2:e3:0e:36:d1:d3:7b:5b:c4:a2:84:50:a0:0c:ee:05:a4:34: 77:cb:d3:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjQwNTMwMjAzODU2WhcNMjQwNjA2MjAzODU2WjAYMRYwFAYD VQQDEw02NjU4ZTNlMC00YTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVIxNU2xB7TqM9rFkbFsGFOJDW1AJdUs6EHhdotAFVVxG6SHAXf/XFitoaTb 6IvEOOvChZzlvLsO6xUWHnHk2Y6pH6FTtAooRIiiFHKUnZKytBr1i6aWIEiubLoy H0Ar2gsnrYJR7eghRArMidpVe2yB8FGwuVucFxVr7rf1WrsVHSUP/jv7MoK0AfoS ZD+WfGSpZf9RyMUZcVutyOQh2fTQz1rEijfUDUJMI1RfvM2B56sddifF8GL2rf/I hWebk08MbLjqOONlrbWM4PpjrfUQTWPPYFRZd98vM3Dj5ahh4myrnbDcRklrbYQI QJ5QIAQ6RJ8SUJLaCiCwP4EzYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQ+p6rA UxLqsgwA7Cy0LkcsvD6IMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNnFasKmPirG+xErfTmOw5eBCRc/rng/nrffl/uAcgdvIMJ6lNG+Ty NhSRCVxOkGeomACbMQ4iHPs4bG6mjIa28e3hD846mJj56EGbL3HentD4ahsO97NL pkVQh1CzxAFFnidc0RUoasKwD2K9CbRP3k92ymYMiKJDoA3wh9BsPQv2XVC74b16 go+8wlXiiCuBFZxT6UwjigfaMIckrWE46EiroHRc0SLCUzpggt0kW+FNm66Mxvi7 d4vRFnCK1KDN6FXqSjwOKNqS2Nb8cRqDZtvaRdfKu5og8B8M5PGpAatuNil1cXQD 09zC4w420dN7W8SihFCgDO4FpDR3y9NB -----END CERTIFICATE-----Generated at Thu May 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org