$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json) Hash identifier: Cmck+50BVQSIPQ1mBTwN4BY8oClLkHW8BNKi3pAOIdo= Subject key identifier: 0D:F8:02:DD:D8:8D:61:6F:FF:58:BA:7D:87:3B:A2:64:F0:EC:7D:36 Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft Manifest number: 05B5 Signing time: Fri 30 May 2025 23:19:55 +0000 Manifest this update: Fri 30 May 2025 23:19:55 +0000 Manifest next update: Fri 06 Jun 2025 23:19:55 +0000 Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: zB3tTEEoJA2Sd9JlszjaVlZ+JZ8AdJctPn+Efv9ZKQk=) 2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: May 30 23:19:55 2025 GMT Not After : Jun 6 23:19:55 2025 GMT Subject: CN=683a3d1b-799c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:c8:ca:29:e1:78:e8:f8:f1:1c:bc:76:a8: a0:db:b2:a3:47:b2:18:27:aa:0d:c7:ad:37:a9:f0: ce:2b:1c:82:5f:c9:5d:75:eb:fb:5c:a4:ee:5b:46: 36:aa:aa:d0:3e:9d:de:70:7a:4e:7b:27:8e:b2:3d: 8a:93:19:11:09:d2:4a:05:d4:de:2c:e2:7c:d0:e9: b6:e0:be:72:f6:59:a9:eb:ca:51:56:b9:aa:de:a1: e6:e0:5b:33:e5:47:39:57:f8:48:7a:22:08:5c:e8: 38:d5:af:19:d9:ab:d2:f8:ae:1f:11:91:ff:5e:70: 23:ea:8b:51:c3:3f:ef:80:3a:1b:f7:bf:62:21:22: 1d:90:db:3a:3f:23:f2:b8:a8:8c:a5:4b:df:0a:3a: 50:a1:27:8d:c9:4e:09:b9:fc:23:dd:87:65:52:6b: b9:07:d8:44:97:50:99:84:6b:4f:16:f8:91:72:ef: a1:7b:94:2c:aa:e7:fe:71:3a:73:de:93:6c:77:50: 0a:ed:84:46:c1:49:41:ef:d9:45:67:77:c9:4e:80: a4:23:3e:5a:84:ae:51:26:ec:01:46:b5:6d:25:26: ef:6f:a1:96:66:8e:4c:3c:bc:bf:71:12:97:f6:b6: ec:6e:48:fb:0a:5c:20:34:bd:4c:00:c3:e0:90:f6: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F8:02:DD:D8:8D:61:6F:FF:58:BA:7D:87:3B:A2:64:F0:EC:7D:36 X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:7b:c8:0f:3a:ad:a2:db:1e:40:64:de:52:16:73:67:5c:38: f9:15:e9:33:4c:34:c9:11:7c:eb:06:42:c4:7e:6b:e0:a5:06: 29:dc:68:78:fa:bd:28:c8:91:dc:b0:87:24:ee:db:7a:d6:16: 3d:7c:8f:83:a2:9c:4e:77:df:3e:75:f1:43:2a:33:96:69:48: 79:5b:06:6d:74:14:80:be:5a:00:e6:d5:f8:f8:3b:7c:44:e5: 8f:b0:e7:48:c5:8f:21:cf:12:2e:14:76:a1:38:53:ce:af:9b: bf:49:cd:bf:ef:69:58:51:ef:fd:a9:bd:2b:78:65:6a:ae:04: 6f:5e:68:3c:40:33:94:9c:fb:c4:cb:c1:b4:cc:68:dd:8d:9c: 31:e9:34:9c:0b:4e:ba:c1:10:54:61:db:22:13:b4:9a:48:61: da:f9:d8:f7:42:a3:4a:7d:af:61:83:cc:5b:6f:07:c1:1b:2c: ee:b4:66:ed:be:d5:1c:b4:9c:60:f6:9d:e0:60:81:84:3d:4a: ae:ea:a5:63:a3:38:05:2a:fe:aa:55:0c:36:27:27:35:e0:8f: 67:c0:39:80:6d:07:12:53:23:d5:2f:67:f5:ac:78:33:0e:74: b1:33:c4:8e:8b:b2:e3:68:ed:0c:2b:e9:85:67:d4:cb:14:1b: 0d:c2:db:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjUwNTMwMjMxOTU1WhcNMjUwNjA2MjMxOTU1WjAYMRYwFAYD VQQDEw02ODNhM2QxYi03OTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzXIyinheOj48Ry8dqig27KjR7IYJ6oNx603qfDOKxyCX8lddev7XKTuW0Y2 qqrQPp3ecHpOeyeOsj2KkxkRCdJKBdTeLOJ80Om24L5y9lmp68pRVrmq3qHm4Fsz 5Uc5V/hIeiIIXOg41a8Z2avS+K4fEZH/XnAj6otRwz/vgDob979iISIdkNs6PyPy uKiMpUvfCjpQoSeNyU4Jufwj3YdlUmu5B9hEl1CZhGtPFviRcu+he5Qsquf+cTpz 3pNsd1AK7YRGwUlB79lFZ3fJToCkIz5ahK5RJuwBRrVtJSbvb6GWZo5MPLy/cRKX 9rbsbkj7ClwgNL1MAMPgkPahhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA34At3Y jWFv/1i6fYc7omTw7H02MB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfe8gPOq2i2x5AZN5SFnNnXDj5FekzTDTJEXzrBkLEfmvgpQYp3Gh4 +r0oyJHcsIck7tt61hY9fI+DopxOd98+dfFDKjOWaUh5WwZtdBSAvloA5tX4+Dt8 ROWPsOdIxY8hzxIuFHahOFPOr5u/Sc2/72lYUe/9qb0reGVqrgRvXmg8QDOUnPvE y8G0zGjdjZwx6TScC066wRBUYdsiE7SaSGHa+dj3QqNKfa9hg8xbbwfBGyzutGbt vtUctJxg9p3gYIGEPUqu6qVjozgFKv6qVQw2Jyc14I9nwDmAbQcSUyPVL2f1rHgz DnSxM8SOi7LjaO0MK+mFZ9TLFBsNwtus -----END CERTIFICATE-----Generated at Sat May 31 17:06:33 2025 by rpki-client