$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: jNoclcrdBK014918x3gGnWjfwhaToLvmJFZPjtN2stY= Subject key identifier: 9D:4A:98:CF:A7:5C:5B:36:65:1E:B1:DA:66:F5:DE:BD:90:43:B3:97 Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0AFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 0A98 Signing time: Fri 22 Nov 2024 19:32:45 +0000 Manifest this update: Fri 22 Nov 2024 19:32:45 +0000 Manifest next update: Fri 29 Nov 2024 19:32:45 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: U38UC+etscGzWLeQrVTPE5PhFVBnKoDqP25WgvCQA3c=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: sG5z5F60bRkwe2ogLmkA/1wwRb6ZeVikHH1++i6WLMU=) 3: 7978E3F6602811EFB5954527C4F9AE02.roa (hash: OiCqL64kCp2J/PyzoY9CSchJTuWtMok6+NnOGYQZCrA=) 4: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: MWul020TY2EQJzghpFUw+RZp3fjWB6k4CzwH1CloCq8=) 5: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: 2P/JeHiTW086kTL1ZKLZUoTkrgXMZFa/u0jtZlf7/Bo=) 6: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 1/waXuRUn1IGSXVfPONWMa3UyJu0JHRxsD7xIflOWMg=) 7: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: x1+smML+yzOczakB5oyzij+JFVA8SbZpm/q9Gzr67+c=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: s9ompX+CCM1BRWG5qcbuq6MfN+m/cuQTViMjb9Qf0GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2813 (0xafd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Nov 22 19:32:45 2024 GMT Not After : Nov 29 19:32:45 2024 GMT Subject: CN=6740dc5d-e049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:ba:09:45:89:43:c1:52:17:0e:0d:fd:c2: cb:e9:65:4a:07:02:63:5b:db:bb:bb:9b:cf:39:74: 24:c0:ff:12:43:27:18:d0:63:4d:60:48:83:2a:7f: 9b:05:9d:a2:c9:87:e4:c7:b2:8d:9f:01:10:5c:4a: 75:42:34:89:34:cb:0e:06:47:40:f8:dd:7b:60:48: a6:43:e1:59:35:1c:7b:21:af:cb:1b:2f:7b:9f:64: 3d:63:e6:4d:b0:88:39:56:24:ee:ce:10:50:ea:ad: 4f:2e:cc:13:dd:10:d4:ff:63:82:f8:9a:da:a0:c5: 51:90:66:45:dc:c7:cb:8c:39:d8:11:05:4f:c2:e2: 2a:6e:d1:3f:37:cb:c5:b0:66:65:3a:3d:ad:3e:34: 6a:ee:4d:37:9c:04:2f:e2:13:ae:60:64:00:12:cf: 83:be:6c:64:50:43:9c:97:a5:2a:19:6a:20:78:c9: bd:74:44:b9:06:23:c8:a8:d8:87:16:63:60:be:44: 85:e2:50:1b:d4:f4:36:a5:53:bb:da:cd:00:4a:ad: 04:85:5c:88:c4:12:45:de:b7:c5:7f:b7:6e:ca:7e: db:e2:f6:82:32:81:02:47:70:ae:47:58:4c:c4:76: a9:35:50:bb:f3:c6:66:04:dc:e8:56:d8:c3:b8:46: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4A:98:CF:A7:5C:5B:36:65:1E:B1:DA:66:F5:DE:BD:90:43:B3:97 X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:a2:71:45:8b:51:a2:ed:4c:2e:44:de:13:63:5b:d5:4c:04: 2b:c2:3d:95:a1:13:b5:c4:60:7b:46:47:15:e6:1f:0c:e6:0e: 6c:97:15:91:1e:83:af:27:ea:c0:48:a1:3f:0d:4b:16:14:47: 58:d1:cc:be:6a:db:ac:26:d3:11:9f:64:4f:72:74:60:c4:c4: 18:f5:b9:3c:6e:54:77:dd:61:cf:96:f2:9b:a9:5c:98:df:6d: c9:8d:a3:f8:43:c7:b8:66:ab:62:72:59:01:c8:38:5b:47:79: 57:76:f3:6d:89:a0:94:55:d0:77:7d:94:74:db:66:18:d8:00: 40:3c:c5:bc:7a:2b:a7:9c:df:03:21:74:c1:36:8a:7e:0d:c1: b2:8b:7a:e0:30:80:f8:0d:0d:1b:82:98:b9:5f:03:08:41:52: f0:7a:36:b3:e8:d5:08:bc:0e:c0:31:ce:ea:86:34:c1:78:53: a6:62:79:92:96:e1:ce:52:b9:fe:cc:79:c5:10:d5:98:f6:18: b8:5f:57:9e:c2:da:45:9d:90:26:a7:c2:b0:92:d1:e4:7b:a9: 3e:1c:06:cb:fc:27:be:f8:d4:d6:e9:c9:ac:ad:8b:0c:58:69: 32:5f:6e:15:02:8e:7f:eb:a3:0c:23:16:c7:46:d8:c3:be:f5: ac:b1:6e:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjQxMTIyMTkzMjQ1WhcNMjQxMTI5MTkzMjQ1WjAYMRYwFAYD VQQDEw02NzQwZGM1ZC1lMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2S6CUWJQ8FSFw4N/cLL6WVKBwJjW9u7u5vPOXQkwP8SQycY0GNNYEiDKn+b BZ2iyYfkx7KNnwEQXEp1QjSJNMsOBkdA+N17YEimQ+FZNRx7Ia/LGy97n2Q9Y+ZN sIg5ViTuzhBQ6q1PLswT3RDU/2OC+JraoMVRkGZF3MfLjDnYEQVPwuIqbtE/N8vF sGZlOj2tPjRq7k03nAQv4hOuYGQAEs+DvmxkUEOcl6UqGWogeMm9dES5BiPIqNiH FmNgvkSF4lAb1PQ2pVO72s0ASq0EhVyIxBJF3rfFf7duyn7b4vaCMoECR3CuR1hM xHapNVC788ZmBNzoVtjDuEabLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1KmM+n XFs2ZR6x2mb13r2QQ7OXMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCionFFi1Gi7UwuRN4TY1vVTAQrwj2VoRO1xGB7RkcV5h8M5g5slxWR HoOvJ+rASKE/DUsWFEdY0cy+atusJtMRn2RPcnRgxMQY9bk8blR33WHPlvKbqVyY 323JjaP4Q8e4ZqticlkByDhbR3lXdvNtiaCUVdB3fZR022YY2ABAPMW8eiunnN8D IXTBNop+DcGyi3rgMID4DQ0bgpi5XwMIQVLwejaz6NUIvA7AMc7qhjTBeFOmYnmS luHOUrn+zHnFENWY9hi4X1eewtpFnZAmp8KwktHke6k+HAbL/Ce++NTW6cmsrYsM WGkyX24VAo5/66MMIxbHRtjDvvWssW4C -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:30 2024 by rpki-client on console-fra.rpki-client.org