$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: dgupBGmiZPm5Li7UKIvjhlFlc0+UwaYg8yoQKhDp7Vg= Subject key identifier: 94:AE:B9:DA:C8:1E:E6:E2:D6:D5:33:85:A4:49:99:D6:9C:F5:ED:80 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0A0B Signing time: Fri 31 May 2024 21:25:55 +0000 Manifest this update: Fri 31 May 2024 21:25:54 +0000 Manifest next update: Fri 07 Jun 2024 21:25:54 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: GucPu9Xj0NqBwhFMdayo+WeFFHVHQszoAPJ+48fngsQ=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: sG5z5F60bRkwe2ogLmkA/1wwRb6ZeVikHH1++i6WLMU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: MWul020TY2EQJzghpFUw+RZp3fjWB6k4CzwH1CloCq8=) 4: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: 2P/JeHiTW086kTL1ZKLZUoTkrgXMZFa/u0jtZlf7/Bo=) 5: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 1/waXuRUn1IGSXVfPONWMa3UyJu0JHRxsD7xIflOWMg=) 6: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: x1+smML+yzOczakB5oyzij+JFVA8SbZpm/q9Gzr67+c=) 7: 262C092A2E2D11EBAC0EFC81C4F9AE02.roa (hash: 3IIecQKzLxW7T8UsqO6hMoSdvHGtr5lECygMGwguvfw=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: s9ompX+CCM1BRWG5qcbuq6MfN+m/cuQTViMjb9Qf0GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Jun 2024 21:25:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: May 31 21:25:54 2024 GMT Not After : Jun 7 21:25:54 2024 GMT Subject: CN=665a4062-d020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:b8:75:28:6c:a9:03:f2:15:b0:2e:40:7c: df:4d:73:22:9b:39:e0:ae:52:a3:32:ec:c2:27:36: 04:eb:22:80:94:2f:81:5e:2b:d8:45:a6:42:c7:1b: 94:32:81:18:fc:a2:ea:cb:07:1d:aa:de:97:f9:59: f2:8d:35:96:23:bb:31:38:80:a9:76:d3:16:09:ff: 02:16:56:b3:df:3a:09:d6:db:f4:2f:6b:ed:b0:7f: 4e:4e:e1:f4:b9:bc:19:59:80:69:d2:6a:02:ec:6b: 1f:89:d6:24:3d:b0:89:32:24:5a:8c:13:1f:53:5f: 00:d4:0c:9e:0d:8c:69:08:65:fd:6b:c3:d3:d6:4d: 38:24:1a:64:71:47:65:0d:8f:94:15:7b:f5:76:2f: 41:2a:da:fa:10:a2:aa:fd:fd:e0:c3:d2:5d:6c:25: 6b:9a:20:b9:72:54:51:72:9e:3c:50:c0:3b:05:c9: 8b:70:29:0b:eb:e1:5e:3d:5f:53:76:e4:64:21:35: a4:b2:56:ef:43:94:01:b2:f8:89:96:ed:3f:a6:71: 10:4e:a3:ea:e0:7e:f3:25:c0:cc:7a:40:5b:e8:93: a1:e8:dc:9e:a7:dd:6f:32:4a:1f:22:66:be:a0:3f: d3:54:0f:07:0c:bf:20:9c:c7:84:8a:eb:3f:0e:d4: c2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AE:B9:DA:C8:1E:E6:E2:D6:D5:33:85:A4:49:99:D6:9C:F5:ED:80 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a7:8f:90:ef:53:6c:e2:83:69:ae:fd:f5:86:f6:03:94:e8: 9a:da:cc:19:a4:5e:aa:cf:21:04:e1:96:82:57:2e:3a:d8:95: da:80:18:16:23:b0:68:41:ce:33:60:9f:03:57:b8:b5:2a:64: dc:65:28:93:69:a6:13:a5:c2:a9:c0:f0:b8:1c:21:3a:25:b0: a5:c3:a0:83:0d:a6:df:94:c0:bd:4b:1e:ef:9f:c1:86:5c:d0: db:2d:e6:2c:68:30:27:bf:2f:15:4f:69:1c:29:80:94:3f:ad: f9:7f:66:d6:cc:8f:77:8e:1f:51:81:35:46:c0:3c:da:49:25: 5a:8c:4f:fd:6d:ab:d2:cd:31:13:f6:f5:1c:4c:b7:eb:80:27: f6:d4:4e:5c:27:ff:56:8a:b1:16:46:31:f0:37:4d:80:bf:0f: 6d:85:c7:24:18:18:58:e3:74:4c:17:bd:c0:03:f2:c0:85:f8: 9d:8c:83:30:28:f2:82:ef:cd:21:7e:08:02:43:da:f3:f8:81: 09:42:02:5d:04:83:c1:5a:a0:0d:bb:80:da:70:93:c3:19:07: 91:37:19:93:e9:6d:b4:aa:d6:bc:ce:f7:c8:87:24:d5:52:cd: 29:b3:b0:2f:cd:d8:2f:a3:c4:2b:b6:2d:81:b3:5b:8b:ad:1e: 4b:51:a2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjQwNTMxMjEyNTU0WhcNMjQwNjA3MjEyNTU0WjAYMRYwFAYD VQQDEw02NjVhNDA2Mi1kMDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMK4dShsqQPyFbAuQHzfTXMimzngrlKjMuzCJzYE6yKAlC+BXivYRaZCxxuU MoEY/KLqywcdqt6X+VnyjTWWI7sxOICpdtMWCf8CFlaz3zoJ1tv0L2vtsH9OTuH0 ubwZWYBp0moC7GsfidYkPbCJMiRajBMfU18A1AyeDYxpCGX9a8PT1k04JBpkcUdl DY+UFXv1di9BKtr6EKKq/f3gw9JdbCVrmiC5clRRcp48UMA7BcmLcCkL6+FePV9T duRkITWkslbvQ5QBsviJlu0/pnEQTqPq4H7zJcDMekBb6JOh6Nyep91vMkofIma+ oD/TVA8HDL8gnMeEius/DtTC1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSuudrI Hubi1tUzhaRJmdac9e2AMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwp4+Q71Ns4oNprv31hvYDlOia2swZpF6qzyEE4ZaCVy462JXagBgW I7BoQc4zYJ8DV7i1KmTcZSiTaaYTpcKpwPC4HCE6JbClw6CDDabflMC9Sx7vn8GG XNDbLeYsaDAnvy8VT2kcKYCUP635f2bWzI93jh9RgTVGwDzaSSVajE/9bavSzTET 9vUcTLfrgCf21E5cJ/9WirEWRjHwN02Avw9thcckGBhY43RMF73AA/LAhfidjIMw KPKC780hfggCQ9rz+IEJQgJdBIPBWqANu4DacJPDGQeRNxmT6W20qta8zvfIhyTV Us0ps7Avzdgvo8Qrti2Bs1uLrR5LUaLx -----END CERTIFICATE-----Generated at Fri May 31 22:13:07 2024 by rpki-client on console-fra.rpki-client.org