$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: 4y+tCMcwjCssbLBdu3YQMh4W2eiYUn2lKbyamAEKXC8= Subject key identifier: D2:8A:3E:DA:44:E1:B4:80:6A:07:FE:9A:4F:02:C8:CE:7C:91:34:81 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 09CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 09C5 Signing time: Sat 04 May 2024 20:59:08 +0000 Manifest this update: Sat 04 May 2024 20:59:08 +0000 Manifest next update: Sat 11 May 2024 20:59:08 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: z5JEPCirpXtUZA8tTZ6Ck9ympuevDtB0AHKVV/p9Cf4=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: gY95BmOcOtho47UDl5vhygPX6FNIi08fdKRk+F4iMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 20:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2509 (0x9cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: May 4 20:59:08 2024 GMT Not After : May 11 20:59:08 2024 GMT Subject: CN=6636a19c-0670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:94:7c:2f:8d:17:f7:60:0d:9f:c7:70:1b:fc: 23:9a:26:50:82:c2:e3:3d:68:b2:0a:ab:c7:9b:92: 20:19:0d:c0:c2:a2:e5:d9:f8:0a:63:dd:b8:04:c8: 9e:52:70:45:35:0e:91:c2:30:3d:79:64:1f:b6:23: e8:88:73:8c:87:66:c1:20:b2:c1:81:4a:a0:da:86: 4f:c0:4b:cf:3b:f5:d6:00:91:ed:00:7d:77:77:e1: fd:43:da:ed:8e:6e:dc:3d:54:f6:d6:f7:c5:07:61: b7:b9:e4:70:ca:5c:bc:86:98:74:39:fb:72:72:cb: 42:6b:b2:8b:ee:99:6e:89:c2:26:12:3c:39:88:ec: 9d:49:07:47:48:ae:5e:65:fb:9f:9b:d8:44:4d:e9: ea:f5:aa:22:f6:14:e7:0d:97:aa:d5:91:58:d9:b8: d5:fe:73:de:77:7f:ab:98:7c:06:b8:e7:07:92:bf: 7d:44:e9:f6:9a:c4:56:27:8b:36:ad:d5:ca:f2:51: 38:e5:5b:30:60:fa:a2:e5:de:b7:02:22:90:bb:3c: f4:b8:14:cd:c8:5b:78:98:20:66:75:44:16:95:92: 5a:5f:06:b3:a1:ae:f6:ef:92:74:06:94:2b:90:92: 4c:b6:62:3e:e9:4e:74:1b:53:40:39:ed:a8:71:b3: 7e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8A:3E:DA:44:E1:B4:80:6A:07:FE:9A:4F:02:C8:CE:7C:91:34:81 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:fd:26:23:89:dd:43:91:e1:8d:88:6e:2c:d7:68:94:c6:6d: d3:ad:29:88:e1:28:38:16:e9:e2:0a:d4:95:f6:69:cc:26:f2: 74:0c:1a:a2:f4:7d:89:e7:3d:d3:71:8e:ed:83:7d:30:51:c3: ee:f6:2d:f5:16:3e:c7:a7:23:1b:40:d8:4f:73:68:80:f6:c1: 3c:e2:4d:25:97:7a:31:49:8f:2e:42:6f:76:fc:24:8f:29:43: 7f:7a:2f:7e:15:46:4a:0f:be:1b:8d:7a:7c:0a:ab:69:43:40: 8f:6d:64:51:be:b2:5f:51:8b:e2:6f:f6:51:8b:e4:02:b2:32: 6e:43:47:53:55:f7:f5:03:12:96:5c:92:5b:1e:7e:79:2c:06: bd:e7:70:7b:a9:00:12:40:25:3b:af:ea:cb:e4:df:90:be:f7: 0e:d9:9a:73:5a:64:3b:7d:46:d3:52:16:62:17:10:72:70:f9: 18:a5:c4:3b:d9:c5:5f:c8:28:54:19:25:d2:24:64:d6:9a:91: 5d:6d:56:b4:88:9e:18:83:e4:95:34:b1:5f:b9:00:a8:65:ac: c7:2c:f6:be:32:86:00:3f:7f:53:bf:6c:f9:7a:fd:dc:59:8f: a9:89:11:5f:11:54:96:2f:f5:8e:73:d8:c7:02:44:a6:c3:42: 88:9b:f5:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjQwNTA0MjA1OTA4WhcNMjQwNTExMjA1OTA4WjAYMRYwFAYD VQQDEw02NjM2YTE5Yy0wNjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZR8L40X92ANn8dwG/wjmiZQgsLjPWiyCqvHm5IgGQ3AwqLl2fgKY924BMie UnBFNQ6RwjA9eWQftiPoiHOMh2bBILLBgUqg2oZPwEvPO/XWAJHtAH13d+H9Q9rt jm7cPVT21vfFB2G3ueRwyly8hph0OftycstCa7KL7pluicImEjw5iOydSQdHSK5e Zfufm9hETenq9aoi9hTnDZeq1ZFY2bjV/nPed3+rmHwGuOcHkr99ROn2msRWJ4s2 rdXK8lE45VswYPqi5d63AiKQuzz0uBTNyFt4mCBmdUQWlZJaXwazoa7275J0BpQr kJJMtmI+6U50G1NAOe2ocbN+ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKKPtpE 4bSAagf+mk8CyM58kTSBMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs/SYjid1DkeGNiG4s12iUxm3TrSmI4Sg4FuniCtSV9mnMJvJ0DBqi 9H2J5z3TcY7tg30wUcPu9i31Fj7HpyMbQNhPc2iA9sE84k0ll3oxSY8uQm92/CSP KUN/ei9+FUZKD74bjXp8CqtpQ0CPbWRRvrJfUYvib/ZRi+QCsjJuQ0dTVff1AxKW XJJbHn55LAa953B7qQASQCU7r+rL5N+QvvcO2ZpzWmQ7fUbTUhZiFxBycPkYpcQ7 2cVfyChUGSXSJGTWmpFdbVa0iJ4Yg+SVNLFfuQCoZazHLPa+MoYAP39Tv2z5ev3c WY+piRFfEVSWL/WOc9jHAkSmw0KIm/Xs -----END CERTIFICATE-----Generated at Sat May 4 22:06:53 2024 by rpki-client on console-ams.rpki-client.org