$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft File: len3la_fIgULvTA6j619nI1G_Eg.mft (raw, json) Hash identifier: Ln/avyJkmAg4bdKOg4XtTF0z4aXLUZr1NQpqNFyp1Mg= Subject key identifier: 42:2F:4A:54:98:D1:BB:C9:77:EF:B9:62:2B:4E:93:64:03:74:3F:2D Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48 Certificate issuer: /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48 Certificate serial: 0550 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft Manifest number: 054C Signing time: Tue 07 May 2024 00:55:22 +0000 Manifest this update: Tue 07 May 2024 00:55:22 +0000 Manifest next update: Tue 14 May 2024 00:55:22 +0000 Files and hashes: 1: len3la_fIgULvTA6j619nI1G_Eg.crl (hash: KGSJtKTCLK4R7oi0Uf7eyalbiVxYHB2O8W1pV5WfyjU=) 2: FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (hash: 1Yx6OPE7IjJZNQrXxMJMBR13NdGO1+U2Nx1orLYZVUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 May 2024 00:55:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1360 (0x550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48 Validity Not Before: May 7 00:55:22 2024 GMT Not After : May 14 00:55:22 2024 GMT Subject: CN=66397bfa-6804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:73:45:97:3f:ff:29:74:0f:22:a1:18:78: 37:6c:46:39:c1:f4:45:20:60:08:9a:8f:9c:59:c7: 32:08:3f:2a:c5:28:65:56:08:ea:50:0a:f0:da:6c: e4:c3:71:64:27:66:eb:95:6a:38:f6:d7:b1:87:e5: 67:a8:a8:0a:4a:fd:1a:f1:a4:ca:88:10:18:cc:84: aa:70:fa:64:45:2d:54:b0:52:16:0f:9f:25:be:46: 7d:e8:4a:1e:bd:54:7d:43:a6:a4:51:14:c5:96:a5: cf:7b:47:66:3e:29:75:f5:98:9c:e9:a5:bb:78:ae: 5d:e7:c4:db:e9:8b:79:36:f4:8b:ca:73:ca:c0:5b: 1f:d0:d0:43:d3:b7:b8:96:66:53:dc:e3:5e:0d:ae: 8f:e3:3e:78:f3:72:8e:5e:14:20:5b:f2:92:e1:b9: a5:05:38:57:0a:2c:e2:c1:4e:63:1d:68:56:05:05: 09:ee:f6:cb:59:32:ea:92:df:c6:3f:48:76:0c:ca: 64:a2:dd:25:a4:0c:52:d7:d5:b5:6a:cc:86:bf:3a: 1b:27:aa:05:81:61:d8:8d:a6:b3:d1:4e:b6:d9:3b: 84:3a:38:74:1a:da:70:08:0f:97:5b:00:89:1b:17: 1c:7c:c3:5c:91:41:81:d9:af:8e:9f:b2:73:bc:21: 66:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2F:4A:54:98:D1:BB:C9:77:EF:B9:62:2B:4E:93:64:03:74:3F:2D X509v3 Authority Key Identifier: keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:d2:69:89:cd:bd:3a:2a:11:20:12:9d:45:9c:85:27:17:8b: c0:db:e0:95:3a:39:f5:51:f1:59:41:34:4e:9a:09:29:5f:10: a3:b4:a3:11:ab:ab:9b:d1:72:bf:50:b1:0b:c4:94:42:a7:66: 7b:b8:4c:9f:4c:2a:21:5b:d4:aa:8c:cd:bb:49:e6:b7:b8:ba: f8:c5:0d:95:66:19:81:80:09:d1:3c:1e:97:44:fa:a2:3e:5c: 02:80:78:62:e1:95:87:d1:b2:8a:2b:1f:32:99:76:ee:a3:3a: 53:e4:01:68:ba:e7:44:84:d2:ff:14:65:d0:05:2b:7f:1d:0b: 6a:29:5a:18:f2:c1:67:5f:c6:59:75:9c:b5:26:7a:57:7f:b6: ad:41:07:b1:6f:d9:2e:dd:cd:a9:b4:bd:84:e0:52:aa:e7:dd: 51:19:fd:39:f7:14:cb:7a:7e:30:15:9d:6a:1b:6d:af:25:43: 8b:e3:eb:80:a4:34:6f:75:e4:d3:5e:94:64:2b:71:94:c2:ae: 5c:ee:7f:6c:96:cf:85:7f:ab:ad:9a:55:61:a1:00:33:b5:20: 06:7d:5e:50:5e:22:59:64:d0:ba:4e:87:fb:4e:5c:95:ef:5d: ec:cf:fa:38:fc:c6:2e:ba:58:95:d6:43:6f:d1:b9:96:f3:3f: 8e:9a:ec:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGNzkxMTAvBgNVBAUTKDk1RTlGNzk1QUZERjIyMDUwQkJEMzAzQThGQUQ3RDlD OEQ0NkZDNDgwHhcNMjQwNTA3MDA1NTIyWhcNMjQwNTE0MDA1NTIyWjAYMRYwFAYD VQQDEw02NjM5N2JmYS02ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8JzRZc//yl0DyKhGHg3bEY5wfRFIGAImo+cWccyCD8qxShlVgjqUArw2mzk w3FkJ2brlWo49texh+VnqKgKSv0a8aTKiBAYzISqcPpkRS1UsFIWD58lvkZ96Eoe vVR9Q6akURTFlqXPe0dmPil19Zic6aW7eK5d58Tb6Yt5NvSLynPKwFsf0NBD07e4 lmZT3ONeDa6P4z5483KOXhQgW/KS4bmlBThXCiziwU5jHWhWBQUJ7vbLWTLqkt/G P0h2DMpkot0lpAxS19W1asyGvzobJ6oFgWHYjaaz0U622TuEOjh0GtpwCA+XWwCJ GxccfMNckUGB2a+On7JzvCFmFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIvSlSY 0bvJd++5YitOk2QDdD8tMB8GA1UdIwQYMBaAFJXp95Wv3yIFC70wOo+tfZyNRvxI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUY3OS9DRDlDQkY5QUEx QTcxMUVCQkM5NzI1NzJDNEY5QUUwMi9sZW4zbGFfZklnVUx2VEE2ajYxOW5JMUdf RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xlbjNsYV9mSWdVTHZUQTZqNjE5bkkxR19FZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUY3OS9DRDlDQkY5QUExQTcxMUVCQkM5NzI1NzJDNEY5QUUwMi9sZW4zbGFfZkln VUx2VEE2ajYxOW5JMUdfRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+0mmJzb06KhEgEp1FnIUnF4vA2+CVOjn1UfFZQTROmgkpXxCjtKMR q6ub0XK/ULELxJRCp2Z7uEyfTCohW9SqjM27Sea3uLr4xQ2VZhmBgAnRPB6XRPqi PlwCgHhi4ZWH0bKKKx8ymXbuozpT5AFouudEhNL/FGXQBSt/HQtqKVoY8sFnX8ZZ dZy1JnpXf7atQQexb9ku3c2ptL2E4FKq591RGf059xTLen4wFZ1qG22vJUOL4+uA pDRvdeTTXpRkK3GUwq5c7n9sls+Ff6utmlVhoQAztSAGfV5QXiJZZNC6Tof7TlyV 713sz/o4/MYuuliV1kNv0bmW8z+Omuy4 -----END CERTIFICATE-----Generated at Tue May 7 02:00:58 2024 by rpki-client on console-ams.rpki-client.org