$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft File: kof26C-PO6JOCdnGMXilwLLaAd4.mft (raw, json) Hash identifier: t7YMM7GXAcv2GoocV0EUWtun5axkvBi8x2AfozEzJ0E= Subject key identifier: 8E:1E:68:FF:D7:8C:18:5A:88:4D:04:6E:7B:A0:0A:29:FC:D3:96:7A Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Certificate serial: 0A3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft Manifest number: 09FC Signing time: Tue 30 Apr 2024 21:09:06 +0000 Manifest this update: Tue 30 Apr 2024 21:09:06 +0000 Manifest next update: Tue 07 May 2024 21:09:06 +0000 Files and hashes: 1: kof26C-PO6JOCdnGMXilwLLaAd4.crl (hash: jhkm5Wk4GsnpFIoqxMohN1tVNK4t4dQBzGvo0NuzG4Q=) 2: 449FE2BE594411EA962D7646C4F9AE02.roa (hash: sG5z5F60bRkwe2ogLmkA/1wwRb6ZeVikHH1++i6WLMU=) 3: 71AD02DC194F11ED818A3C66C4F9AE02.roa (hash: MWul020TY2EQJzghpFUw+RZp3fjWB6k4CzwH1CloCq8=) 4: 72E17FF2194F11ED818A3C66C4F9AE02.roa (hash: 2P/JeHiTW086kTL1ZKLZUoTkrgXMZFa/u0jtZlf7/Bo=) 5: AB988312177211EBAC79CC7EC4F9AE02.roa (hash: 1/waXuRUn1IGSXVfPONWMa3UyJu0JHRxsD7xIflOWMg=) 6: B1986BCE2E2411EB8AF6BB67C4F9AE02.roa (hash: x1+smML+yzOczakB5oyzij+JFVA8SbZpm/q9Gzr67+c=) 7: 262C092A2E2D11EBAC0EFC81C4F9AE02.roa (hash: 3IIecQKzLxW7T8UsqO6hMoSdvHGtr5lECygMGwguvfw=) 8: 4B82FA441A8611ECB908E939C4F9AE02.roa (hash: s9ompX+CCM1BRWG5qcbuq6MfN+m/cuQTViMjb9Qf0GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 May 2024 21:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622 (0xa3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE Validity Not Before: Apr 30 21:09:06 2024 GMT Not After : May 7 21:09:06 2024 GMT Subject: CN=66315df2-9023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3e:b9:3b:0c:29:1a:dc:b0:2e:50:71:3e:78: a1:08:6e:08:4e:04:27:df:46:6d:b3:1a:3d:d7:d1: 7f:6a:a7:57:65:d3:69:7f:ef:7b:9f:69:a9:17:86: 72:99:da:d7:8b:5c:b6:bf:57:63:b2:bd:30:28:94: 91:1e:93:30:56:fe:d6:a5:c3:e3:e4:8f:49:81:22: 77:d6:ff:eb:4a:3d:d9:c3:2b:39:f9:69:a9:31:52: 90:b1:9f:e0:24:0f:75:69:4d:d5:af:b4:bd:cb:16: 92:42:2d:d8:30:de:71:26:75:3c:95:23:e1:10:6b: 9e:d9:59:b9:9f:ca:37:a5:de:8b:08:62:7f:a6:2a: 1d:78:12:9e:36:35:23:b7:1d:f8:75:ec:17:7d:2c: f3:00:24:8a:3c:39:fa:61:da:be:2f:5b:97:ef:1f: 90:0d:ba:1c:f5:8f:54:af:67:2c:7e:53:7d:fd:7c: ff:84:ca:b5:2a:70:15:0a:7e:ac:f2:67:b8:ad:84: 89:46:b1:7b:bc:bc:49:82:cb:b6:28:68:11:ef:75: a4:6a:06:21:99:61:10:8d:28:67:3b:ab:11:73:b9: 9b:29:9b:9a:14:e1:23:cc:fd:3c:be:e0:54:fb:dd: 9b:bd:68:50:b6:b9:29:33:b7:65:e6:fb:d1:fb:df: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:68:FF:D7:8C:18:5A:88:4D:04:6E:7B:A0:0A:29:FC:D3:96:7A X509v3 Authority Key Identifier: keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a3:9e:71:5b:84:12:46:e4:21:9b:0d:ab:49:70:99:f2:20: 7b:68:28:22:a2:ac:f8:09:a8:e5:af:29:b2:a5:6a:c1:47:bb: 3f:48:6b:93:5c:24:e4:02:f8:d5:66:72:49:1d:51:e0:e5:c5: b3:67:02:27:c1:f4:27:07:7e:6b:e1:a7:de:77:3b:d9:00:4f: 41:15:cc:a8:9a:a8:a4:1f:37:c1:9a:d8:56:2e:88:76:b4:19: b1:26:f9:0c:10:31:60:ff:0f:fe:65:98:0d:da:67:7b:ee:73: 8f:be:04:7a:59:aa:c5:27:cf:74:21:75:ab:61:60:6a:75:c8: b8:74:04:5d:04:18:89:f6:b8:dc:c2:43:44:8f:cc:bf:8e:35: 6f:da:09:fe:85:c4:d0:6a:6e:47:b8:02:57:a5:0d:b2:57:e9: 91:fb:49:c8:d2:35:23:08:16:ca:d2:96:82:18:59:18:75:c3: cf:e1:4d:96:a5:5a:cd:2a:60:27:46:65:ad:c6:9a:ff:7b:99: ce:2b:7d:9e:38:1a:50:15:bd:74:c9:28:1b:77:af:8c:72:2c: e3:e3:19:e2:d7:ae:eb:fe:79:87:f8:88:81:76:5b:16:af:fe: 3a:e5:5c:10:2d:99:a3:94:dc:6f:92:66:e2:ef:72:ec:59:27: 43:20:42:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw QjJEQTAxREUwHhcNMjQwNDMwMjEwOTA2WhcNMjQwNTA3MjEwOTA2WjAYMRYwFAYD VQQDEw02NjMxNWRmMi05MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtz65OwwpGtywLlBxPnihCG4ITgQn30Ztsxo919F/aqdXZdNpf+97n2mpF4Zy mdrXi1y2v1djsr0wKJSRHpMwVv7WpcPj5I9JgSJ31v/rSj3Zwys5+WmpMVKQsZ/g JA91aU3Vr7S9yxaSQi3YMN5xJnU8lSPhEGue2Vm5n8o3pd6LCGJ/piodeBKeNjUj tx34dewXfSzzACSKPDn6Ydq+L1uX7x+QDboc9Y9Ur2csflN9/Xz/hMq1KnAVCn6s 8me4rYSJRrF7vLxJgsu2KGgR73WkagYhmWEQjShnO6sRc7mbKZuaFOEjzP08vuBU +92bvWhQtrkpM7dl5vvR+9/hrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4eaP/X jBhaiE0EbnugCin805Z6MB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5 NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDdBMi9CNTc3M0FBQzU5NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82 Sk9DZG5HTVhpbHdMTGFBZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAro55xW4QSRuQhmw2rSXCZ8iB7aCgioqz4CajlrymypWrBR7s/SGuT XCTkAvjVZnJJHVHg5cWzZwInwfQnB35r4afedzvZAE9BFcyomqikHzfBmthWLoh2 tBmxJvkMEDFg/w/+ZZgN2md77nOPvgR6WarFJ890IXWrYWBqdci4dARdBBiJ9rjc wkNEj8y/jjVv2gn+hcTQam5HuAJXpQ2yV+mR+0nI0jUjCBbK0paCGFkYdcPP4U2W pVrNKmAnRmWtxpr/e5nOK32eOBpQFb10ySgbd6+Mcizj4xni167r/nmH+IiBdlsW r/465VwQLZmjlNxvkmbi73LsWSdDIEIq -----END CERTIFICATE-----Generated at Tue Apr 30 22:56:16 2024 by rpki-client on console-fra.rpki-client.org