$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: J3IJbnvK0DFgoGyhRTI8ouDX6XmW0yZFCir8Agh1Brk= Subject key identifier: D2:7E:74:32:A2:B4:2E:61:89:C1:D6:E9:54:A0:1F:05:3D:A9:03:BD Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: DE Signing time: Sat 15 Feb 2025 06:41:52 +0000 Manifest this update: Sat 15 Feb 2025 06:41:51 +0000 Manifest next update: Sat 22 Feb 2025 06:41:51 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: YRjVqGsrLb+F9/0mZDBV0HwECKkBUNlsA3Z1RcRSAhs=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002 Validity Not Before: Feb 15 06:41:51 2025 GMT Not After : Feb 22 06:41:51 2025 GMT Subject: CN=67b03730-d9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f6:f0:c0:a2:61:00:75:5f:d3:63:5a:17:2f: b6:f2:28:81:5b:68:5a:f4:2d:39:f0:a5:a9:3a:49: 4b:fb:23:29:59:c8:5e:87:f8:2b:15:eb:f2:c8:db: 97:99:75:8c:c0:5d:b1:66:45:c3:a6:3c:e5:f9:9f: 80:76:d4:0a:65:23:a9:f6:5c:85:df:8d:3a:31:b8: 5d:6d:0f:f5:44:18:ad:7b:be:73:51:2c:bd:dc:49: 41:04:9f:ef:50:33:b9:21:23:b9:e3:06:ab:25:df: 36:52:fe:db:ac:32:17:be:ab:15:5d:24:90:69:9a: ca:14:8b:75:85:2a:c9:1e:c0:54:aa:15:2b:3b:13: d4:a3:31:96:92:d0:d3:4a:75:a2:99:fc:9d:a2:93: 8a:20:68:01:5e:04:2b:0d:27:84:82:80:d0:c6:eb: a5:83:3d:4d:ce:f3:43:e7:e2:18:1a:2b:d9:3e:a4: 1a:32:3c:f7:df:e9:cc:2c:99:91:b4:6b:54:33:8e: d6:ed:46:20:59:09:0e:76:8b:ac:9a:06:b4:e8:55: 95:e9:d1:c4:a3:b2:44:09:98:cf:b7:2e:d2:e4:25: c1:40:4a:61:7e:1b:73:88:58:53:0a:ac:bc:a1:80: ec:54:37:44:22:37:3b:62:f1:55:fa:10:1e:33:aa: 1d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7E:74:32:A2:B4:2E:61:89:C1:D6:E9:54:A0:1F:05:3D:A9:03:BD X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b9:bd:3e:4b:94:7a:21:45:5f:f1:b3:7e:9e:e7:3f:5b:c6: fc:ac:66:ec:23:f4:c5:c9:8e:8d:7d:eb:e6:a6:b8:39:e9:ce: 86:9c:96:b6:a2:09:00:cd:b8:6a:9d:a0:ca:a9:a5:fe:d1:45: d3:a3:52:2b:49:d8:20:37:4b:c9:6e:13:6f:46:2d:15:6a:58: ff:8b:0e:cd:41:92:d4:c4:d8:6e:2f:a4:2f:77:12:dc:65:09: 1c:cb:73:d9:98:a8:0a:15:35:8b:59:73:b4:77:52:1f:c8:4b: ac:f8:46:5f:a6:34:28:eb:03:d7:38:e7:ab:cf:5a:96:90:9d: 81:ca:fb:3c:b9:9a:8a:97:ee:37:2d:a1:25:6a:85:59:e0:d1: 64:c4:ff:e0:af:9d:1b:be:b0:20:4b:d5:89:95:cd:79:37:db: 06:69:b2:6b:c9:6b:89:a7:ac:6f:ae:07:45:e7:bb:50:51:eb: 2a:b0:e2:22:6f:56:11:f7:57:da:76:78:01:18:ff:66:4d:4b: f3:2e:d4:be:6a:82:76:1c:e5:6b:14:e0:23:c8:9f:fb:b4:38: ab:4b:0a:59:dc:8b:68:90:19:7c:7f:28:7c:af:62:db:af:ce: 52:20:b8:dc:ec:72:8c:67:9a:36:24:f7:fd:1e:31:2f:98:ba: fa:75:1d:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwMjE1MDY0MTUxWhcNMjUwMjIyMDY0MTUxWjAYMRYwFAYD VQQDEw02N2IwMzczMC1kOWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq/bwwKJhAHVf02NaFy+28iiBW2ha9C058KWpOklL+yMpWcheh/grFevyyNuX mXWMwF2xZkXDpjzl+Z+AdtQKZSOp9lyF3406MbhdbQ/1RBite75zUSy93ElBBJ/v UDO5ISO54warJd82Uv7brDIXvqsVXSSQaZrKFIt1hSrJHsBUqhUrOxPUozGWktDT SnWimfydopOKIGgBXgQrDSeEgoDQxuulgz1NzvND5+IYGivZPqQaMjz33+nMLJmR tGtUM47W7UYgWQkOdousmga06FWV6dHEo7JECZjPty7S5CXBQEphfhtziFhTCqy8 oYDsVDdEIjc7YvFV+hAeM6odAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJ+dDKi tC5hicHW6VSgHwU9qQO9MB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACub0+S5R6IUVf8bN+nuc/W8b8rGbsI/TFyY6Nfevmprg56c6GnJa2 ogkAzbhqnaDKqaX+0UXTo1IrSdggN0vJbhNvRi0Valj/iw7NQZLUxNhuL6QvdxLc ZQkcy3PZmKgKFTWLWXO0d1IfyEus+EZfpjQo6wPXOOerz1qWkJ2Byvs8uZqKl+43 LaElaoVZ4NFkxP/gr50bvrAgS9WJlc15N9sGabJryWuJp6xvrgdF57tQUesqsOIi b1YR91fadngBGP9mTUvzLtS+aoJ2HOVrFOAjyJ/7tDirSwpZ3ItokBl8fyh8r2Lb r85SILjc7HKMZ5o2JPf9HjEvmLr6dR0P -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:45 2025 by rpki-client