$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: KFYcE3p3QJ9NUbJe5iPGfuSs9fVdtzjPwbDR2unmpBs= Subject key identifier: ED:4A:9C:BD:7B:F9:14:6B:51:E6:74:22:8F:2D:D1:BD:19:2C:3C:F2 Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: FD Signing time: Thu 17 Apr 2025 04:07:08 +0000 Manifest this update: Thu 17 Apr 2025 04:07:07 +0000 Manifest next update: Thu 24 Apr 2025 04:07:07 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: 3cMRhbbqh5aBwlgMVlq/ZC9NHBTFmtQWtlADvsgUfn8=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Apr 17 04:07:07 2025 GMT Not After : Apr 24 04:07:07 2025 GMT Subject: CN=68007e6c-8faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:77:3e:b4:1b:66:21:0f:d4:36:06:dd:23: 5f:e4:11:cb:1e:e7:2d:7b:67:ad:4d:05:23:d3:92: 78:dd:57:97:3b:84:c3:4d:dd:49:e9:87:52:17:36: a3:5d:0e:73:dd:73:a5:42:31:53:33:72:bd:70:58: 6f:7d:4d:53:e0:be:66:a5:1c:b7:29:c7:f6:c1:6a: 35:81:36:32:ae:87:7f:5e:91:30:72:71:7d:81:25: 2f:2d:5f:05:31:4f:25:be:21:53:6f:3e:77:37:9c: 80:73:3e:85:9d:1b:fc:20:23:0b:d4:d0:3d:fc:96: 69:c5:d6:e6:ca:06:bb:34:cd:96:8a:ce:78:d6:5b: a3:6a:a9:d3:95:d1:fe:b6:4a:a5:8b:01:21:5e:91: 2d:01:6b:e6:48:2a:4a:8f:11:80:ab:05:56:ff:79: 0b:7b:4e:b9:6a:44:22:02:b4:fc:28:61:5e:5b:88: c4:37:07:cf:da:bd:7b:cb:75:74:c4:2c:f0:0c:e6: b3:97:b4:22:9a:e6:3b:eb:34:df:55:d8:11:93:53: 5a:dc:49:91:a8:f3:d4:06:9d:58:31:75:84:44:99: a9:43:2f:75:2e:e1:b6:2e:40:22:69:8f:1d:c7:ae: 4b:b1:69:11:1a:43:89:08:f6:34:a4:04:36:a7:8e: 3e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4A:9C:BD:7B:F9:14:6B:51:E6:74:22:8F:2D:D1:BD:19:2C:3C:F2 X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:27:bd:ca:a1:59:a6:cc:f8:bc:0c:0e:95:08:f7:de:11:22: 4c:2e:25:ae:f6:dc:ed:41:9c:3e:26:5c:d3:f4:d4:e5:bb:4c: 81:6d:09:42:47:16:0d:33:94:b2:c4:94:90:ff:77:eb:eb:3d: e0:29:e8:72:8c:c6:98:9c:38:66:3a:9e:bf:a9:24:55:e2:bf: c8:a0:e7:d5:e8:e4:83:d6:72:82:df:2b:05:a5:dd:54:30:9e: 89:09:70:ba:84:71:3a:d0:ac:84:f1:f3:60:ec:65:ed:e6:32: a5:0b:f8:92:ff:b9:6e:77:f8:94:32:19:6c:8d:78:41:a5:3c: 44:75:5d:3d:63:3b:f4:2b:43:61:17:80:f3:5f:c0:e4:6b:63: 4b:cb:f2:58:18:e9:51:10:52:e6:4c:5c:7e:a4:28:86:08:5e: b8:67:8f:0d:0d:f5:75:94:cb:4c:cf:ff:7c:61:bb:cd:bf:4f: 89:13:d5:d4:22:b6:1d:04:d9:4d:63:60:3c:7b:1d:9f:56:96: 91:8d:c3:9a:44:5a:f6:53:9a:03:e2:d5:4e:41:7f:60:8c:0c: 81:11:a6:c2:30:1d:f6:b6:4f:c0:2a:f2:b5:7c:89:a1:28:81: e7:a4:c3:2c:c5:d4:40:12:d6:a5:12:aa:fe:93:70:51:9b:38: 54:4b:ef:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwNDE3MDQwNzA3WhcNMjUwNDI0MDQwNzA3WjAYMRYwFAYD VQQDEw02ODAwN2U2Yy04ZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3xd3PrQbZiEP1DYG3SNf5BHLHucte2etTQUj05J43VeXO4TDTd1J6YdSFzaj XQ5z3XOlQjFTM3K9cFhvfU1T4L5mpRy3Kcf2wWo1gTYyrod/XpEwcnF9gSUvLV8F MU8lviFTbz53N5yAcz6FnRv8ICML1NA9/JZpxdbmyga7NM2Wis541lujaqnTldH+ tkqliwEhXpEtAWvmSCpKjxGAqwVW/3kLe065akQiArT8KGFeW4jENwfP2r17y3V0 xCzwDOazl7QimuY76zTfVdgRk1Na3EmRqPPUBp1YMXWERJmpQy91LuG2LkAiaY8d x65LsWkRGkOJCPY0pAQ2p44+RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1KnL17 +RRrUeZ0Io8t0b0ZLDzyMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdJ73KoVmmzPi8DA6VCPfeESJMLiWu9tztQZw+JlzT9NTlu0yBbQlC RxYNM5SyxJSQ/3fr6z3gKehyjMaYnDhmOp6/qSRV4r/IoOfV6OSD1nKC3ysFpd1U MJ6JCXC6hHE60KyE8fNg7GXt5jKlC/iS/7lud/iUMhlsjXhBpTxEdV09Yzv0K0Nh F4DzX8Dka2NLy/JYGOlREFLmTFx+pCiGCF64Z48NDfV1lMtMz/98YbvNv0+JE9XU IrYdBNlNY2A8ex2fVpaRjcOaRFr2U5oD4tVOQX9gjAyBEabCMB32tk/AKvK1fImh KIHnpMMsxdRAEtalEqr+k3BRmzhUS+/1 -----END CERTIFICATE-----Generated at Sat Apr 19 00:51:25 2025 by rpki-client