$ rpki-client -vvf rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft File: LEUCOU_ZzE2HemU5c1CklTBhNsE.mft (raw, json) Hash identifier: 8cftAjx2E0vxj4AjDsusHQ6v0UQSmcsUfXjZbYarL+s= Subject key identifier: 5C:63:05:6D:F7:A5:FD:06:7F:44:6D:CE:94:E2:CA:D0:6C:66:4E:A0 Authority key identifier: 2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 Certificate issuer: /CN=A912D8C3/serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft Manifest number: 05A4 Signing time: Thu 24 Apr 2025 22:57:58 +0000 Manifest this update: Thu 24 Apr 2025 22:57:57 +0000 Manifest next update: Thu 01 May 2025 22:57:57 +0000 Files and hashes: 1: LEUCOU_ZzE2HemU5c1CklTBhNsE.crl (hash: sH1OhXnznE7hX1oWFIWmqU9gPgtgs8qn/IVyvLUOS+Y=) 2: B69382D2CCC911EBB3A3513CC4F9AE02.roa (hash: D8iOeMM09bmAAiYt4BbyTyvEUrQlP8eN6kbCvVZAb2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D8C3, serialNumber=2C4502394FD9CC4D877A65397350A495306136C1 Validity Not Before: Apr 24 22:57:57 2025 GMT Not After : May 1 22:57:57 2025 GMT Subject: CN=680ac1f5-0740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:05:71:c7:e7:ab:7a:a1:f0:55:09:00:b2:cc: 03:5e:ea:d5:e5:c3:0e:4f:bc:5c:0f:fa:16:09:f6: 69:1e:5a:42:68:31:b5:65:5c:8f:e2:9d:6b:fe:09: 86:46:b7:70:f9:ae:15:0c:f6:dd:ef:12:46:33:60: 05:0c:7b:ab:a9:49:0a:24:d7:6d:c5:3e:c9:6a:37: 8a:71:3d:16:cd:ea:e0:41:4c:1e:f1:af:8a:15:42: d7:54:4d:83:fd:e2:c0:a8:e1:53:17:ae:71:e7:4f: 90:96:51:fd:60:4b:92:79:a7:67:df:44:75:49:7e: 9c:68:26:ac:8e:42:d6:c0:2c:99:c7:63:95:cb:5b: 29:38:06:89:c2:9f:94:af:7c:da:e8:05:fe:e2:cd: a7:c0:a8:01:09:b2:0d:0e:cc:f2:dd:1e:73:f4:b9: cd:74:09:82:a4:77:73:fd:2a:71:50:0a:70:ef:fb: e7:22:89:87:ff:67:5c:50:84:5e:d9:44:d5:fc:3d: 3e:c5:19:3d:06:a0:6d:f0:e9:e5:e6:ec:74:56:e0: 76:23:89:46:8a:e1:b4:3d:00:47:f9:0f:6f:43:23: 72:f9:37:5b:82:b9:ee:22:63:cc:8b:2f:f3:0a:6c: c4:ad:61:c8:f6:83:de:e6:4e:51:76:20:46:f2:69: d9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:63:05:6D:F7:A5:FD:06:7F:44:6D:CE:94:E2:CA:D0:6C:66:4E:A0 X509v3 Authority Key Identifier: keyid:2C:45:02:39:4F:D9:CC:4D:87:7A:65:39:73:50:A4:95:30:61:36:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LEUCOU_ZzE2HemU5c1CklTBhNsE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D8C3/D7414D54C72211EBA4714F40C4F9AE02/LEUCOU_ZzE2HemU5c1CklTBhNsE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:61:bb:84:95:b8:b6:9b:e6:cf:65:96:05:53:b7:f5:6e:a8: f5:af:99:ff:33:10:20:0b:19:01:71:0b:73:a0:f8:18:2a:bc: f8:80:4b:f7:27:d6:25:be:54:64:7b:ee:bc:96:7d:0e:9e:1b: 0d:76:96:e3:24:39:8a:31:15:50:30:20:64:5b:98:0e:4b:15: 65:28:35:ec:21:e8:de:02:8f:19:a9:da:39:ea:82:22:0e:dc: c1:ec:83:56:02:b9:ac:db:24:d0:69:e5:0d:6c:a1:51:ef:d8: a9:aa:b6:67:15:1b:7a:d3:d3:89:2c:07:93:ea:17:1b:05:29: 2b:f0:b6:3d:f5:f0:36:cf:ca:55:e1:48:66:7f:60:fe:21:c5: fd:e7:d7:3c:d9:56:04:c4:4e:e5:a2:19:87:33:65:65:87:3b: 4f:c9:c0:e8:24:59:7a:ad:4a:88:79:6c:a6:4f:94:28:08:ef: 27:16:12:cb:8e:9d:de:84:90:a0:a0:ec:f6:90:5c:a6:88:23: 2c:0c:38:8b:af:3b:de:f4:ab:b4:4e:92:f2:50:47:4b:cc:ff: 27:f4:0b:bd:d6:59:d5:4e:4a:2a:af:7c:92:5a:22:40:85:4c: 2a:e8:e2:4f:7d:95:a8:1d:65:b0:3e:97:66:82:c6:98:23:17: 3d:a9:5d:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4QzMxMTAvBgNVBAUTKDJDNDUwMjM5NEZEOUNDNEQ4NzdBNjUzOTczNTBBNDk1 MzA2MTM2QzEwHhcNMjUwNDI0MjI1NzU3WhcNMjUwNTAxMjI1NzU3WjAYMRYwFAYD VQQDEw02ODBhYzFmNS0wNzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6QVxx+ereqHwVQkAsswDXurV5cMOT7xcD/oWCfZpHlpCaDG1ZVyP4p1r/gmG Rrdw+a4VDPbd7xJGM2AFDHurqUkKJNdtxT7JajeKcT0WzergQUwe8a+KFULXVE2D /eLAqOFTF65x50+QllH9YEuSeadn30R1SX6caCasjkLWwCyZx2OVy1spOAaJwp+U r3za6AX+4s2nwKgBCbINDszy3R5z9LnNdAmCpHdz/SpxUApw7/vnIomH/2dcUIRe 2UTV/D0+xRk9BqBt8Onl5ux0VuB2I4lGiuG0PQBH+Q9vQyNy+TdbgrnuImPMiy/z CmzErWHI9oPe5k5RdiBG8mnZXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxjBW33 pf0Gf0RtzpTiytBsZk6gMB8GA1UdIwQYMBaAFCxFAjlP2cxNh3plOXNQpJUwYTbB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDhDMy9ENzQxNEQ1NEM3 MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpFMkhlbVU1YzFDa2xUQmhO c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFVUNPVV9aekUySGVtVTVjMUNrbFRCaE5zRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDhDMy9ENzQxNEQ1NEM3MjIxMUVCQTQ3MTRGNDBDNEY5QUUwMi9MRVVDT1VfWnpF MkhlbVU1YzFDa2xUQmhOc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVYbuElbi2m+bPZZYFU7f1bqj1r5n/MxAgCxkBcQtzoPgYKrz4gEv3 J9YlvlRke+68ln0OnhsNdpbjJDmKMRVQMCBkW5gOSxVlKDXsIejeAo8Zqdo56oIi DtzB7INWArms2yTQaeUNbKFR79ipqrZnFRt609OJLAeT6hcbBSkr8LY99fA2z8pV 4Uhmf2D+IcX959c82VYExE7lohmHM2VlhztPycDoJFl6rUqIeWymT5QoCO8nFhLL jp3ehJCgoOz2kFymiCMsDDiLrzve9Ku0TpLyUEdLzP8n9Au91lnVTkoqr3ySWiJA hUwq6OJPfZWoHWWwPpdmgsaYIxc9qV0m -----END CERTIFICATE-----Generated at Sat Apr 26 13:54:22 2025 by rpki-client