$ rpki-client -vvf rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft File: LauCoKm45ElqnaDd7e9-kxYlF2g.mft (raw, json) Hash identifier: ubsQgrX666WzpEAhtY/HdB0Ehk2PveY0U2NsUegjf9Y= Subject key identifier: 84:AE:9C:40:C4:89:17:3C:AF:C8:CB:83:B5:DE:75:24:55:14:71:12 Authority key identifier: 2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 Certificate issuer: /CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Certificate serial: 0A7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft Manifest number: 0A79 Signing time: Fri 26 Apr 2024 20:14:59 +0000 Manifest this update: Fri 26 Apr 2024 20:14:59 +0000 Manifest next update: Fri 03 May 2024 20:14:59 +0000 Files and hashes: 1: LauCoKm45ElqnaDd7e9-kxYlF2g.crl (hash: jNOvyiY4+si3Ay91BoKJDwERrTYkXua7uAon/VScKik=) 2: 5A2DDDF2368F11EAB3D4CE7FC4F9AE02.roa (hash: 3F/TejTZYAuiF6kSX5sGBk6FgiPZU1gx1/Gn0XMbkqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 20:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2687 (0xa7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F22D/serialNumber=2DAB82A0A9B8E4496A9DA0DDEDEF7E9316251768 Validity Not Before: Apr 26 20:14:59 2024 GMT Not After : May 3 20:14:59 2024 GMT Subject: CN=662c0b43-4834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:cc:d0:4d:70:99:9a:f4:0a:fb:e3:02:d4: 5a:8e:d4:af:be:3a:71:ca:d4:88:5d:ac:ff:2c:bc: 5e:17:53:2d:1a:1a:a3:ea:84:ce:11:42:85:19:b3: 98:be:0e:e9:83:2b:48:75:e5:ed:c4:13:fa:04:f9: 12:65:11:7e:2c:00:97:d5:58:32:d6:43:0f:ea:dd: 64:89:09:bd:d0:c5:28:12:c3:3f:ff:14:50:f1:62: d8:7b:59:87:16:43:a0:a4:07:b3:93:5c:0e:a9:58: 6c:0d:d2:16:f9:8d:b7:7b:6c:4e:a3:54:a8:92:21: 99:e0:ae:69:f5:56:1b:85:13:74:87:da:30:93:eb: 35:b6:28:c7:94:86:a0:87:6e:d7:0d:95:08:59:d5: c1:f9:2d:e2:da:62:88:d4:bd:47:51:84:0e:20:8f: fa:d1:ef:36:63:87:a4:e5:a2:57:1a:03:f6:ac:79: a3:2c:01:7d:7d:e6:a3:7c:9c:49:43:ff:ce:eb:f6: 44:de:a1:64:15:ca:94:49:55:4d:5e:50:29:a9:ec: fd:c9:4c:b9:49:f0:4e:af:cf:fe:b0:04:57:7e:b3: 20:9a:19:34:4d:c6:e9:06:0c:55:44:9c:b4:e4:1d: 25:8c:fd:47:b7:de:c4:e5:89:a2:01:9b:d0:31:e9: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AE:9C:40:C4:89:17:3C:AF:C8:CB:83:B5:DE:75:24:55:14:71:12 X509v3 Authority Key Identifier: keyid:2D:AB:82:A0:A9:B8:E4:49:6A:9D:A0:DD:ED:EF:7E:93:16:25:17:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LauCoKm45ElqnaDd7e9-kxYlF2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F22D/2AAFCCEE368E11EA92A49E7DC4F9AE02/LauCoKm45ElqnaDd7e9-kxYlF2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:47:72:b7:2e:22:68:75:72:3c:3c:ea:31:73:74:c1:aa:89: 5a:ac:c6:68:2d:b7:a4:44:14:c0:7f:22:64:b7:78:a7:8b:e0: c4:9a:54:10:be:21:2c:c7:f0:0f:53:a8:cf:e0:f7:32:d0:43: 89:e2:64:72:74:3c:e6:69:73:08:65:5c:d8:7a:c0:f9:eb:a8: fb:80:0e:50:66:f6:9f:81:3a:21:99:ba:44:27:e4:55:9c:20: 06:53:fd:57:1b:4a:e6:f0:3b:c7:27:a8:3b:b0:f5:fe:1c:8e: bd:02:5a:37:18:d1:f9:b3:68:29:50:d2:9d:ca:3d:67:bb:b7: 23:4e:0a:2e:5b:bb:65:ed:ee:b4:13:0e:8c:99:de:7f:24:ba: 7e:80:df:94:c4:c2:c6:0d:3d:3f:7f:0f:34:ce:a5:b8:9f:2e: 6f:6d:0d:9b:91:69:21:a9:94:75:2e:ae:d8:68:47:6e:df:50: 58:a9:3b:e4:63:1c:fa:60:ad:d0:40:d5:48:9b:44:85:72:0a: 06:0b:86:9d:5f:48:60:01:34:00:58:60:b2:11:b1:c9:e5:95: a2:a6:0a:c3:72:21:f6:b7:c0:44:27:4b:54:d7:d2:07:80:e2: ae:33:95:02:21:93:64:9b:8b:10:fe:56:5c:46:4d:e2:67:e6: 55:fa:90:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYyMkQxMTAvBgNVBAUTKDJEQUI4MkEwQTlCOEU0NDk2QTlEQTBEREVERUY3RTkz MTYyNTE3NjgwHhcNMjQwNDI2MjAxNDU5WhcNMjQwNTAzMjAxNDU5WjAYMRYwFAYD VQQDEw02NjJjMGI0My00ODM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpXM0E1wmZr0CvvjAtRajtSvvjpxytSIXaz/LLxeF1MtGhqj6oTOEUKFGbOY vg7pgytIdeXtxBP6BPkSZRF+LACX1Vgy1kMP6t1kiQm90MUoEsM//xRQ8WLYe1mH FkOgpAezk1wOqVhsDdIW+Y23e2xOo1SokiGZ4K5p9VYbhRN0h9owk+s1tijHlIag h27XDZUIWdXB+S3i2mKI1L1HUYQOII/60e82Y4ek5aJXGgP2rHmjLAF9feajfJxJ Q//O6/ZE3qFkFcqUSVVNXlApqez9yUy5SfBOr8/+sARXfrMgmhk0TcbpBgxVRJy0 5B0ljP1Ht97E5YmiAZvQMemBvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISunEDE iRc8r8jLg7XedSRVFHESMB8GA1UdIwQYMBaAFC2rgqCpuORJap2g3e3vfpMWJRdo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjIyRC8yQUFGQ0NFRTM2 OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVFbHFuYURkN2U5LWt4WWxG MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xhdUNvS200NUVscW5hRGQ3ZTkta3hZbEYyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjIyRC8yQUFGQ0NFRTM2OEUxMUVBOTJBNDlFN0RDNEY5QUUwMi9MYXVDb0ttNDVF bHFuYURkN2U5LWt4WWxGMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOR3K3LiJodXI8POoxc3TBqolarMZoLbekRBTAfyJkt3ini+DEmlQQ viEsx/APU6jP4Pcy0EOJ4mRydDzmaXMIZVzYesD566j7gA5QZvafgTohmbpEJ+RV nCAGU/1XG0rm8DvHJ6g7sPX+HI69Alo3GNH5s2gpUNKdyj1nu7cjTgouW7tl7e60 Ew6Mmd5/JLp+gN+UxMLGDT0/fw80zqW4ny5vbQ2bkWkhqZR1Lq7YaEdu31BYqTvk Yxz6YK3QQNVIm0SFcgoGC4adX0hgATQAWGCyEbHJ5ZWipgrDciH2t8BEJ0tU19IH gOKuM5UCIZNkm4sQ/lZcRk3iZ+ZV+pDy -----END CERTIFICATE-----Generated at Sun Apr 28 15:50:20 2024 by rpki-client on console-fra.rpki-client.org