$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: 09OW5qwb2i0dIWXjSCnZKkQiD7BsuRKUJVr4BRGj7ao= Subject key identifier: 6E:09:D4:B9:CC:D7:7D:45:6D:4D:44:F3:46:41:1F:B4:27:88:A3:CF Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0A2B Signing time: Fri 22 Nov 2024 19:32:54 +0000 Manifest this update: Fri 22 Nov 2024 19:32:54 +0000 Manifest next update: Fri 29 Nov 2024 19:32:54 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: Mi32wwXxl5nEChNIQLiYKhIsFt1uP0zqAhrSMZn7fZw=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: gY95BmOcOtho47UDl5vhygPX6FNIi08fdKRk+F4iMC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Nov 2024 19:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Nov 22 19:32:54 2024 GMT Not After : Nov 29 19:32:54 2024 GMT Subject: CN=6740dc66-5936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:b4:7c:63:2a:a2:89:5e:f2:fe:16:3d:e2: c7:59:0c:0f:d8:bc:ef:e9:89:46:cc:53:3f:fb:e8: 6f:7d:be:d7:76:19:9d:ab:96:e3:31:71:36:d6:43: b2:d7:0a:be:99:72:d9:5c:ea:43:ac:cf:f5:e4:c5: 18:6b:48:71:cf:c2:69:ae:f9:7c:de:2b:cd:5f:4c: d4:f8:cd:a8:30:4f:30:56:50:58:5b:7f:d4:05:85: 67:3a:96:53:f8:41:be:30:b3:09:6c:46:e3:6f:e3: dc:37:87:14:6d:c3:6b:36:1c:86:06:99:5d:70:98: 96:ba:25:91:1b:a2:6c:e8:cc:b0:d7:39:0d:dd:bc: a6:63:6b:18:fa:52:36:12:06:58:e3:e7:d9:58:67: cb:0a:a6:8b:c1:4d:a7:e5:fb:71:b9:5e:78:66:d0: 60:19:33:b8:3e:eb:f5:cf:2b:4c:3f:e9:3e:58:9e: 63:0e:83:50:79:6b:82:3c:84:20:5b:4f:78:ee:fe: ce:a0:f1:2a:22:26:36:bb:da:69:3c:f8:05:ce:48: dc:c5:10:74:59:0f:96:ac:83:22:2f:fb:3f:a1:d9: 56:a3:c6:5f:24:58:2c:53:ac:c5:c6:fa:b3:4b:cb: f4:7f:a6:82:f5:a2:14:57:60:a5:ee:bf:c6:9f:68: 88:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:09:D4:B9:CC:D7:7D:45:6D:4D:44:F3:46:41:1F:B4:27:88:A3:CF X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:93:85:ae:49:ab:73:f5:0d:45:0c:50:4d:20:35:d2:81:f5: 52:36:f0:34:ad:e1:09:0e:06:40:95:1d:2e:9a:61:97:92:84: 2d:30:6b:df:84:e9:f7:e9:6c:d8:2f:0e:0e:a8:bd:cf:16:5e: 32:44:3d:97:30:7b:58:70:c9:56:42:1a:26:97:16:e4:52:39: 26:21:1a:58:be:ea:0d:10:08:56:23:70:a3:b1:87:15:0d:07: 97:ba:f9:f9:fa:d1:a0:26:12:a3:01:c5:3c:ce:fc:d2:74:16: 32:1e:99:b0:31:9f:ff:51:63:ed:37:a1:cb:6c:21:21:b9:b5: 14:07:69:55:f3:0c:63:80:94:a1:18:1e:a3:49:24:72:93:f8: 5f:b9:68:cf:14:f2:e4:cc:d7:f8:4a:e2:9e:a7:7d:6c:7d:ef: f7:87:c7:69:de:5d:89:82:2d:ff:fb:dd:8e:b4:b0:70:37:fa: f8:d3:4f:4e:03:44:da:ae:44:1b:13:0f:70:2a:de:f4:1e:d1: 87:69:2d:f9:71:8b:bb:fb:ec:4e:06:e1:51:37:09:d8:b8:07: fa:0f:84:49:bf:38:83:e0:3c:b0:85:86:78:4b:d5:72:2d:73: 55:b9:cb:7a:f6:ba:ee:94:fe:5f:d0:4a:55:48:57:07:d7:05: d9:7a:af:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjQxMTIyMTkzMjU0WhcNMjQxMTI5MTkzMjU0WjAYMRYwFAYD VQQDEw02NzQwZGM2Ni01OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoq0fGMqoole8v4WPeLHWQwP2Lzv6YlGzFM/++hvfb7Xdhmdq5bjMXE21kOy 1wq+mXLZXOpDrM/15MUYa0hxz8Jprvl83ivNX0zU+M2oME8wVlBYW3/UBYVnOpZT +EG+MLMJbEbjb+PcN4cUbcNrNhyGBpldcJiWuiWRG6Js6Myw1zkN3bymY2sY+lI2 EgZY4+fZWGfLCqaLwU2n5ftxuV54ZtBgGTO4Puv1zytMP+k+WJ5jDoNQeWuCPIQg W0947v7OoPEqIiY2u9ppPPgFzkjcxRB0WQ+WrIMiL/s/odlWo8ZfJFgsU6zFxvqz S8v0f6aC9aIUV2Cl7r/Gn2iI9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4J1LnM 131FbU1E80ZBH7QniKPPMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClk4WuSatz9Q1FDFBNIDXSgfVSNvA0reEJDgZAlR0ummGXkoQtMGvf hOn36WzYLw4OqL3PFl4yRD2XMHtYcMlWQhomlxbkUjkmIRpYvuoNEAhWI3CjsYcV DQeXuvn5+tGgJhKjAcU8zvzSdBYyHpmwMZ//UWPtN6HLbCEhubUUB2lV8wxjgJSh GB6jSSRyk/hfuWjPFPLkzNf4SuKep31sfe/3h8dp3l2Jgi3/+92OtLBwN/r4009O A0TarkQbEw9wKt70HtGHaS35cYu7++xOBuFRNwnYuAf6D4RJvziD4DywhYZ4S9Vy LXNVuct69rrulP5f0EpVSFcH1wXZeq8J -----END CERTIFICATE-----Generated at Fri Nov 22 21:05:31 2024 by rpki-client on console-fra.rpki-client.org