$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: xo2K36qzElXOFAWCmhNnNNufFwzynEO5tziWjdsuFVU= Subject key identifier: 40:51:A5:40:CD:5A:A8:4C:86:66:67:8C:5D:47:42:70:61:A9:F1:8D Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 012B Signing time: Sat 19 Jul 2025 04:54:32 +0000 Manifest this update: Sat 19 Jul 2025 04:54:32 +0000 Manifest next update: Sat 26 Jul 2025 04:54:32 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: Abme4pa2NmBeS8kgjjyeLVZp9TzLPm9tn4Z4MQ7unpU=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:54:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Jul 19 04:54:32 2025 GMT Not After : Jul 26 04:54:32 2025 GMT Subject: CN=687b2508-8768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:77:4d:48:6c:f2:9c:b4:87:76:02:d4:e1: d7:0d:95:9b:3f:1f:3c:06:d2:1d:e1:12:6a:53:df: 35:40:a7:47:40:8f:e2:a2:7c:58:ba:b0:96:ee:0a: cb:7d:c9:13:d2:01:6d:96:7b:cb:bd:58:c2:61:b4: b2:36:a4:66:c6:dc:96:a8:ca:21:0a:0f:5b:5c:06: bc:6e:21:34:a1:58:bb:72:bd:c3:27:d3:73:89:65: c1:d5:e4:d9:8d:78:90:92:3e:20:95:2c:7e:dd:dc: b1:09:8e:93:c5:da:03:a7:b9:75:4f:b2:d1:bb:7a: b2:3b:65:13:72:7f:c5:59:fa:65:07:e7:97:72:e6: 6a:e6:a4:99:49:c3:59:97:ac:28:3c:ae:c7:e8:df: 18:5a:34:04:28:3f:30:8b:2b:51:e1:cf:fe:5a:bc: 4d:ca:4f:ee:fa:5a:52:42:88:4b:af:c6:1a:41:36: 47:1f:37:c1:00:6f:b9:67:a2:c4:d9:79:67:ac:80: 04:22:ec:d7:e1:ba:97:85:25:a6:3e:7f:97:d1:bf: 19:0a:73:fa:d7:7d:0c:66:f0:b5:60:32:2f:ed:89: 49:65:a8:90:86:89:b4:40:ea:ea:d0:5b:ed:03:00: ef:8d:7d:20:30:80:e5:88:d2:36:61:64:86:2e:fd: 2f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:51:A5:40:CD:5A:A8:4C:86:66:67:8C:5D:47:42:70:61:A9:F1:8D X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:43:bb:d0:27:3f:03:08:10:87:5d:32:cf:80:5e:2c:67:43: b9:15:f8:ae:07:4a:8a:28:bc:de:10:f0:71:a2:90:d7:54:27: d5:5e:59:5a:d4:a9:73:c0:88:de:22:2e:fb:77:62:0d:cb:fc: 5d:d1:20:5a:46:c9:d5:98:b5:83:8e:f7:6a:5e:de:20:85:09: 5e:66:12:4e:3d:69:d7:a4:05:c2:fc:a9:ed:61:27:9a:c4:8b: f8:b9:cf:e4:42:f8:7d:5f:e2:27:ea:0b:87:c6:52:0c:8b:b1: 69:e6:48:24:03:5b:c6:87:d4:38:de:c7:fd:9f:51:ce:0d:90: d6:18:eb:0d:42:46:81:f3:9a:06:98:83:ba:be:cf:a5:5f:0d: fd:cd:db:1a:e2:72:75:e7:f0:ac:25:d1:f0:bd:65:e6:a6:52: c4:88:b5:8d:f3:00:63:0e:a9:58:67:f3:b8:87:dc:7a:0b:71: 5f:93:93:d2:01:bd:dc:00:f4:1d:43:40:af:3f:8e:ce:1a:8e: ff:06:59:32:aa:db:05:5a:06:10:b1:df:54:90:5d:73:a0:35: 19:aa:73:81:b2:5e:d4:dc:3b:63:f6:1a:aa:6d:39:06:43:06: 76:0f:5d:9b:a8:17:e6:ce:e3:07:12:c6:3f:41:a4:cd:cf:62: 98:d2:eb:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwNzE5MDQ1NDMyWhcNMjUwNzI2MDQ1NDMyWjAYMRYwFAYD VQQDEw02ODdiMjUwOC04NzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArv13TUhs8py0h3YC1OHXDZWbPx88BtId4RJqU981QKdHQI/ionxYurCW7grL fckT0gFtlnvLvVjCYbSyNqRmxtyWqMohCg9bXAa8biE0oVi7cr3DJ9NziWXB1eTZ jXiQkj4glSx+3dyxCY6TxdoDp7l1T7LRu3qyO2UTcn/FWfplB+eXcuZq5qSZScNZ l6woPK7H6N8YWjQEKD8wiytR4c/+WrxNyk/u+lpSQohLr8YaQTZHHzfBAG+5Z6LE 2XlnrIAEIuzX4bqXhSWmPn+X0b8ZCnP6130MZvC1YDIv7YlJZaiQhom0QOrq0Fvt AwDvjX0gMIDliNI2YWSGLv0v5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBRpUDN WqhMhmZnjF1HQnBhqfGNMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtQ7vQJz8DCBCHXTLPgF4sZ0O5FfiuB0qKKLzeEPBxopDXVCfVXlla 1KlzwIjeIi77d2INy/xd0SBaRsnVmLWDjvdqXt4ghQleZhJOPWnXpAXC/KntYSea xIv4uc/kQvh9X+In6guHxlIMi7Fp5kgkA1vGh9Q43sf9n1HODZDWGOsNQkaB85oG mIO6vs+lXw39zdsa4nJ15/CsJdHwvWXmplLEiLWN8wBjDqlYZ/O4h9x6C3Ffk5PS Ab3cAPQdQ0CvP47OGo7/BlkyqtsFWgYQsd9UkF1zoDUZqnOBsl7U3Dtj9hqqbTkG QwZ2D12bqBfmzuMHEsY/QaTNz2KY0usB -----END CERTIFICATE-----Generated at Sun Jul 20 18:40:03 2025 by rpki-client