$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft File: leqvwkta9LFytYuwGnAc_hltoZk.mft (raw, json) Hash identifier: l7WH0GT9vUhEwViX19FkAbQ719OguLxRWACndFmAznw= Subject key identifier: 82:90:D9:5C:5D:CC:9A:B5:84:2D:B2:C0:0D:C1:53:02:31:EF:D5:8D Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99 Certificate issuer: /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199 Certificate serial: 104C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft Manifest number: 1043 Signing time: Tue 30 Apr 2024 18:12:20 +0000 Manifest this update: Tue 30 Apr 2024 18:12:20 +0000 Manifest next update: Tue 07 May 2024 18:12:20 +0000 Files and hashes: 1: leqvwkta9LFytYuwGnAc_hltoZk.crl (hash: rCuIghtnNDmk7UFEGkE5Kjng3Z/woIRllfgurnezmII=) 2: 2837843AA3E811EAB397F675C4F9AE02.roa (hash: /tJVaaLCTzYClGpQvcdtUybXo1hn6XUyjqkTeY+7mos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 17:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4172 (0x104c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199 Validity Not Before: Apr 30 18:12:20 2024 GMT Not After : May 7 18:12:20 2024 GMT Subject: CN=66313484-49a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:a4:66:ac:40:eb:38:a0:d7:fe:f3:5c:af: 98:33:69:4d:d0:b2:3e:60:5f:0e:56:33:d6:93:39: 3f:b6:6d:2c:c4:94:c7:33:13:d5:59:25:fe:5f:69: 79:27:2b:91:cd:2c:a1:7e:5b:b0:60:46:82:1c:3c: 1c:f5:34:65:e3:18:02:e1:63:e9:d4:cb:6c:4c:87: 87:f1:8c:11:2f:b8:50:d6:4e:8d:f3:f7:7f:7c:2a: dc:ed:cc:98:63:af:03:f2:2f:1b:d1:18:8c:ce:38: e0:a8:cb:19:49:f1:b6:c5:27:02:43:cb:76:04:8e: 0e:5b:b4:54:d2:4f:14:1a:ae:0d:62:96:69:c5:dd: 4e:40:f3:2c:3f:28:09:d3:9a:dc:34:95:92:3b:c1: 9d:40:01:21:26:53:2d:23:10:83:db:2b:f7:52:97: 8b:78:f0:e6:b5:4c:f8:a8:69:54:78:a3:57:56:f7: db:60:7b:49:7f:9e:5c:b8:29:ff:27:1b:22:56:d2: 64:04:18:f8:3a:19:36:4b:f5:81:d4:91:42:c7:ee: b7:16:0f:99:22:87:63:77:bd:2b:37:14:66:b2:28: 9f:ac:c4:8c:ef:d8:15:a2:53:84:af:1b:4b:f4:cd: 13:93:96:88:c8:c8:7c:fa:60:43:28:8d:c8:5e:3d: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:90:D9:5C:5D:CC:9A:B5:84:2D:B2:C0:0D:C1:53:02:31:EF:D5:8D X509v3 Authority Key Identifier: keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:bf:b4:3d:b0:4c:a6:c5:43:7c:dd:e8:d1:e0:4b:05:e4:f0: 24:96:62:c0:61:fb:bf:a1:c7:ed:61:98:80:38:a7:83:81:9f: 1d:26:9d:1a:cd:7f:40:78:6d:e2:12:48:b8:9c:42:5f:19:3c: 2c:06:ee:aa:ea:5d:ff:c9:37:3f:03:68:92:c3:42:4e:43:f3: 0e:bb:3a:0d:ec:a2:3f:37:d1:04:1c:b2:41:55:10:d7:84:dc: a2:17:bc:bd:bf:b7:fa:63:ac:ef:76:45:d4:17:fa:a4:1a:3e: 8a:ca:0e:6a:2a:1b:eb:42:7c:f2:de:21:24:1c:e1:36:d7:0d: 3f:bd:16:81:b9:8e:71:7b:72:4b:8f:7a:a4:77:44:3a:0c:69: 00:cf:88:6b:90:02:6f:37:7d:6a:67:43:3c:78:00:8e:84:01: 90:9d:c3:e7:14:b1:88:97:74:f4:79:dc:29:2b:d9:86:d5:5f: b8:8a:ef:16:b6:34:ae:43:ce:7a:50:67:ad:d5:58:22:c2:53: 33:d5:b9:9e:a7:f1:28:fc:30:4c:2d:86:67:3f:64:fc:19:73: 94:eb:31:a5:b1:13:6b:b7:58:0d:79:17:8d:92:72:c2:ef:d8: ca:16:e5:c5:68:05:9a:dd:dc:03:c5:ad:a6:c9:68:4e:52:e9: ff:74:30:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyQjYxMTAvBgNVBAUTKDk1RUFBRkMyNEI1QUY0QjE3MkI1OEJCMDFBNzAxQ0ZF MTk2REExOTkwHhcNMjQwNDMwMTgxMjIwWhcNMjQwNTA3MTgxMjIwWjAYMRYwFAYD VQQDEw02NjMxMzQ4NC00OWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvykZqxA6zig1/7zXK+YM2lN0LI+YF8OVjPWkzk/tm0sxJTHMxPVWSX+X2l5 JyuRzSyhfluwYEaCHDwc9TRl4xgC4WPp1MtsTIeH8YwRL7hQ1k6N8/d/fCrc7cyY Y68D8i8b0RiMzjjgqMsZSfG2xScCQ8t2BI4OW7RU0k8UGq4NYpZpxd1OQPMsPygJ 05rcNJWSO8GdQAEhJlMtIxCD2yv3UpeLePDmtUz4qGlUeKNXVvfbYHtJf55cuCn/ JxsiVtJkBBj4Ohk2S/WB1JFCx+63Fg+ZIodjd70rNxRmsiifrMSM79gVolOErxtL 9M0Tk5aIyMh8+mBDKI3IXj3VWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKQ2Vxd zJq1hC2ywA3BUwIx79WNMB8GA1UdIwQYMBaAFJXqr8JLWvSxcrWLsBpwHP4ZbaGZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJCNi8wODI0M0M4QzEz MkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlMRnl0WXV3R25BY19obHRv WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xlcXZ3a3RhOUxGeXRZdXdHbkFjX2hsdG9aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzJCNi8wODI0M0M4QzEzMkIxMUU5QUU3N0FEN0JDNEY5QUUwMi9sZXF2d2t0YTlM Rnl0WXV3R25BY19obHRvWmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPv7Q9sEymxUN83ejR4EsF5PAklmLAYfu/ocftYZiAOKeDgZ8dJp0a zX9AeG3iEki4nEJfGTwsBu6q6l3/yTc/A2iSw0JOQ/MOuzoN7KI/N9EEHLJBVRDX hNyiF7y9v7f6Y6zvdkXUF/qkGj6Kyg5qKhvrQnzy3iEkHOE21w0/vRaBuY5xe3JL j3qkd0Q6DGkAz4hrkAJvN31qZ0M8eACOhAGQncPnFLGIl3T0edwpK9mG1V+4iu8W tjSuQ856UGet1VgiwlMz1bmep/Eo/DBMLYZnP2T8GXOU6zGlsRNrt1gNeReNknLC 79jKFuXFaAWa3dwDxa2myWhOUun/dDAm -----END CERTIFICATE-----Generated at Tue Apr 30 19:22:14 2024 by rpki-client on console-ams.rpki-client.org