$ rpki-client -vvf rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft File: LE66ORmVzLAcUT5PjmHtkUKW5sE.mft (raw, json) Hash identifier: Rppnm1mBa7+YHJi/kvVnvBxsWKKhiWcr69Dlwq+jKUA= Subject key identifier: DE:87:19:9A:C6:01:A4:4A:08:2B:7A:48:8A:32:42:BA:66:CE:D2:CD Authority key identifier: 2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 Certificate issuer: /CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft Manifest number: A0 Signing time: Wed 15 May 2024 06:50:41 +0000 Manifest this update: Wed 15 May 2024 06:50:40 +0000 Manifest next update: Wed 22 May 2024 06:50:40 +0000 Files and hashes: 1: LE66ORmVzLAcUT5PjmHtkUKW5sE.crl (hash: GYV30nEl0EjFZ86kYlgMxx3aMjD/EXw6+KaVELuCrm8=) 2: 7CBC92D21C7811EEA8F76D7FC4F9AE02.roa (hash: 78b3Ox2Xx3CD/Hz4W1Z45WhrSg1MDAIxmRSWcrg3XGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 06:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129209/serialNumber=2C4EBA391995CCB01C513E4F8E61ED914296E6C1 Validity Not Before: May 15 06:50:40 2024 GMT Not After : May 22 06:50:40 2024 GMT Subject: CN=66445b41-0a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:89:85:3e:2c:77:ed:02:45:31:3b:b2:31: e5:80:0f:a2:71:a1:90:91:4f:ea:12:c6:70:37:4d: 8d:d9:f0:88:35:ac:11:67:fa:3b:2e:24:78:62:60: 1e:5a:ea:7c:dd:4f:de:ac:7d:41:43:ff:11:1f:c5: 5b:a8:cc:ce:8c:70:1c:e2:4a:69:71:2b:28:cf:c4: 84:5c:39:d9:bd:e9:50:b2:dc:c9:9d:2c:a3:b9:66: 7b:3b:28:86:dc:d1:18:ac:bf:87:30:68:94:10:8e: 1c:32:ae:92:8c:6a:2a:3d:8f:de:96:f6:4f:79:40: 2b:48:b4:31:a0:ff:41:38:95:31:1a:a1:35:1d:7d: 75:99:6e:40:f2:55:54:f5:e7:b7:44:e6:b6:52:b1: 97:63:b8:43:b3:97:ad:c4:03:01:f3:19:eb:a2:64: 28:e3:b6:64:19:21:88:50:8e:44:f1:2c:a7:df:fd: a3:75:95:34:ab:d2:6d:8f:55:a3:c2:10:0e:56:f0: f6:a6:09:52:74:88:29:76:a5:41:e2:95:e9:3d:d1: 25:2f:74:39:89:9a:87:83:32:da:b6:53:cd:fa:45: cf:62:78:fe:7e:34:8f:5e:82:61:ea:0b:9b:60:4f: 9f:2d:fe:9f:16:aa:82:38:c4:a8:d1:c8:5f:1d:c3: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:87:19:9A:C6:01:A4:4A:08:2B:7A:48:8A:32:42:BA:66:CE:D2:CD X509v3 Authority Key Identifier: keyid:2C:4E:BA:39:19:95:CC:B0:1C:51:3E:4F:8E:61:ED:91:42:96:E6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE66ORmVzLAcUT5PjmHtkUKW5sE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129209/B81E318A1C7511EEACBEF07CC4F9AE02/LE66ORmVzLAcUT5PjmHtkUKW5sE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:f9:19:56:60:fd:2a:94:7e:51:3a:cc:4d:a5:be:40:3d:e3: 2f:e6:67:ce:93:5e:8a:41:3d:41:2a:05:1a:99:73:e4:50:94: f8:71:55:bc:75:29:6d:9f:54:c1:48:76:03:fd:60:d3:e9:55: d4:e0:8b:b1:b0:39:dc:88:fe:5b:f8:9b:fb:dd:9e:36:c5:b3: bc:e6:a6:03:d8:51:e6:b9:ec:07:18:6b:a1:78:1e:bb:d3:39: 16:94:46:af:43:05:30:6c:38:6d:b4:b3:cf:cd:e6:91:69:42: c9:16:24:2e:29:79:88:2c:ed:85:8c:4e:34:c8:00:9e:ac:39: 8d:6f:63:33:59:77:c5:ef:63:31:83:ae:78:f6:6c:77:3f:60: e8:04:0c:d3:49:40:59:35:e9:f0:64:26:26:b9:52:64:70:0a: 7d:30:60:29:f6:34:6a:cf:84:63:e5:cd:a9:20:15:bc:8d:60: 29:05:51:eb:8c:b1:2b:83:cc:fc:f3:1d:47:92:bd:30:28:50: d5:cb:f2:c3:53:ce:65:45:f0:39:be:59:f2:65:b1:67:21:3d: a0:93:02:e9:9e:4c:2a:87:40:45:f9:b9:53:7b:35:c9:c5:01: df:09:a9:04:2a:ca:cc:72:71:a6:d4:f7:fb:b4:0b:e3:f1:b5: 54:02:a2:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkyMDkxMTAvBgNVBAUTKDJDNEVCQTM5MTk5NUNDQjAxQzUxM0U0RjhFNjFFRDkx NDI5NkU2QzEwHhcNMjQwNTE1MDY1MDQwWhcNMjQwNTIyMDY1MDQwWjAYMRYwFAYD VQQDEw02NjQ0NWI0MS0wYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoluJhT4sd+0CRTE7sjHlgA+icaGQkU/qEsZwN02N2fCINawRZ/o7LiR4YmAe Wup83U/erH1BQ/8RH8VbqMzOjHAc4kppcSsoz8SEXDnZvelQstzJnSyjuWZ7OyiG 3NEYrL+HMGiUEI4cMq6SjGoqPY/elvZPeUArSLQxoP9BOJUxGqE1HX11mW5A8lVU 9ee3ROa2UrGXY7hDs5etxAMB8xnromQo47ZkGSGIUI5E8Syn3/2jdZU0q9Jtj1Wj whAOVvD2pglSdIgpdqVB4pXpPdElL3Q5iZqHgzLatlPN+kXPYnj+fjSPXoJh6gub YE+fLf6fFqqCOMSo0chfHcO/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6HGZrG AaRKCCt6SIoyQrpmztLNMB8GA1UdIwQYMBaAFCxOujkZlcywHFE+T45h7ZFClubB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTIwOS9CODFFMzE4QTFD NzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpMQWNVVDVQam1IdGtVS1c1 c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNjZPUm1WekxBY1VUNVBqbUh0a1VLVzVzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTIwOS9CODFFMzE4QTFDNzUxMUVFQUNCRUYwN0NDNEY5QUUwMi9MRTY2T1JtVnpM QWNVVDVQam1IdGtVS1c1c0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9+RlWYP0qlH5ROsxNpb5APeMv5mfOk16KQT1BKgUamXPkUJT4cVW8 dSltn1TBSHYD/WDT6VXU4IuxsDnciP5b+Jv73Z42xbO85qYD2FHmuewHGGuheB67 0zkWlEavQwUwbDhttLPPzeaRaULJFiQuKXmILO2FjE40yACerDmNb2MzWXfF72Mx g6549mx3P2DoBAzTSUBZNenwZCYmuVJkcAp9MGAp9jRqz4Rj5c2pIBW8jWApBVHr jLErg8z88x1Hkr0wKFDVy/LDU85lRfA5vlnyZbFnIT2gkwLpnkwqh0BF+blTezXJ xQHfCakEKsrMcnGm1Pf7tAvj8bVUAqLC -----END CERTIFICATE-----Generated at Wed May 15 09:04:07 2024 by rpki-client on console-ams.rpki-client.org