$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json) Hash identifier: OtFlXpRZCsDjMYSi0OQgFw190jUxmYLOQWTht2vsOUg= Subject key identifier: 30:37:B4:F1:19:B8:A0:6A:55:B8:AA:0A:87:F9:C7:63:D3:1D:BC:35 Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft Manifest number: 05AD Signing time: Mon 12 May 2025 22:56:09 +0000 Manifest this update: Mon 12 May 2025 22:56:08 +0000 Manifest next update: Mon 19 May 2025 22:56:08 +0000 Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: OkMCDitahy3osbQIAWLEBboSFK4hHSGAoAiOnn5d2OY=) 2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:56:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: May 12 22:56:08 2025 GMT Not After : May 19 22:56:08 2025 GMT Subject: CN=68227c88-b276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:be:20:da:0a:ee:7e:c8:c4:fc:f2:15:1e:30: a1:82:ea:33:df:52:5f:13:cd:ca:ca:5e:00:c2:7b: a7:9b:44:44:13:35:2c:82:79:52:4f:2f:9b:1e:b7: 56:3a:21:03:e4:d9:6f:bc:34:01:5f:cf:28:2e:35: b6:cb:d9:fd:57:7e:93:86:50:7c:13:35:f0:fd:61: 96:f2:2d:48:8a:48:82:96:ee:2a:3b:bf:bd:8e:57: 04:f1:07:dc:ed:be:1f:c4:ef:16:db:bd:d2:cd:c0: c1:8f:fe:1c:1a:44:89:b7:b5:25:9b:9c:18:78:5d: 17:6b:e9:e9:69:9d:f0:d5:c0:4a:3f:4b:d9:8a:a1: e5:0f:6d:be:4f:8a:59:8d:2e:dd:c0:f7:b0:b0:45: c5:57:36:35:af:6b:36:b0:c3:2c:6d:09:71:7d:d7: ca:2a:72:72:92:bb:b0:e8:60:c5:7b:01:cf:da:ea: 20:9a:78:e0:29:91:91:50:05:26:65:1f:4f:2b:e3: 82:18:61:ed:4f:3a:17:9e:d1:9a:02:b2:22:aa:bc: ad:71:17:79:20:51:5e:2b:a1:a3:76:19:ff:c1:86: 40:a9:2e:c3:2c:f3:83:29:26:9a:a2:b6:6b:ea:b6: cc:d7:c2:de:7e:a0:3d:23:16:d9:c0:07:95:4a:c7: 67:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:37:B4:F1:19:B8:A0:6A:55:B8:AA:0A:87:F9:C7:63:D3:1D:BC:35 X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:6b:ab:ba:bc:78:06:22:1d:d1:a8:45:f9:ff:c3:47:d6:8f: 0c:aa:75:eb:8b:6a:30:33:c7:fa:93:a7:51:74:0c:25:dd:1b: f3:c5:09:01:02:e8:f6:3d:76:a6:0c:ba:89:a5:f8:06:46:df: e0:4a:6f:2f:30:d5:cb:62:65:8f:c6:ed:6f:5b:35:2f:40:01: 0b:b3:6c:2a:05:ae:af:23:07:70:4d:9b:79:94:fd:f7:b3:3a: c1:89:dd:3b:0c:58:d8:cc:a5:fa:93:e5:78:d4:c3:45:e5:0d: 16:83:c5:ba:f3:55:42:fd:bd:e6:bc:7e:31:ce:b0:26:e9:a3: 69:21:29:53:ad:5c:e0:bd:de:9c:a9:7d:b4:d8:fa:3a:2f:93: 2e:97:c8:91:87:b1:81:e3:c2:22:01:12:3c:54:99:c8:17:d2: b2:5d:3e:88:b6:c1:15:47:53:e7:14:01:d8:02:0e:be:58:84: 37:66:42:e5:b8:44:db:64:16:73:20:38:3a:a8:4d:23:2b:c0: 84:ba:c4:ce:03:aa:8c:27:f9:fb:7d:bb:94:8e:2a:24:a6:28: 1c:2c:8b:b8:61:61:ae:f9:de:50:5a:5b:73:8f:65:6e:23:12: a8:51:9c:6b:ba:28:ad:c2:e7:21:3c:2d:f7:3b:7f:eb:00:ab: 7b:53:05:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjUwNTEyMjI1NjA4WhcNMjUwNTE5MjI1NjA4WjAYMRYwFAYD VQQDEw02ODIyN2M4OC1iMjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo74g2grufsjE/PIVHjChguoz31JfE83Kyl4Awnunm0REEzUsgnlSTy+bHrdW OiED5NlvvDQBX88oLjW2y9n9V36ThlB8EzXw/WGW8i1IikiClu4qO7+9jlcE8Qfc 7b4fxO8W273SzcDBj/4cGkSJt7Ulm5wYeF0Xa+npaZ3w1cBKP0vZiqHlD22+T4pZ jS7dwPewsEXFVzY1r2s2sMMsbQlxfdfKKnJykruw6GDFewHP2uogmnjgKZGRUAUm ZR9PK+OCGGHtTzoXntGaArIiqrytcRd5IFFeK6Gjdhn/wYZAqS7DLPODKSaaorZr 6rbM18LefqA9IxbZwAeVSsdnfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDA3tPEZ uKBqVbiqCof5x2PTHbw1MB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCja6u6vHgGIh3RqEX5/8NH1o8MqnXri2owM8f6k6dRdAwl3RvzxQkB Auj2PXamDLqJpfgGRt/gSm8vMNXLYmWPxu1vWzUvQAELs2wqBa6vIwdwTZt5lP33 szrBid07DFjYzKX6k+V41MNF5Q0Wg8W681VC/b3mvH4xzrAm6aNpISlTrVzgvd6c qX202Po6L5Mul8iRh7GB48IiARI8VJnIF9KyXT6ItsEVR1PnFAHYAg6+WIQ3ZkLl uETbZBZzIDg6qE0jK8CEusTOA6qMJ/n7fbuUjiokpigcLIu4YWGu+d5QWltzj2Vu IxKoUZxruiitwuchPC33O3/rAKt7UwU3 -----END CERTIFICATE-----Generated at Tue May 13 19:03:28 2025 by rpki-client