$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: +0K1dTcBP74/rkNmeMOiwj96CC6CTewTsvrtj05kE2w= Subject key identifier: A5:D3:0A:CD:46:28:11:BB:3D:97:58:93:7F:59:EB:A6:42:10:E4:3B Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: EB Signing time: Thu 13 Mar 2025 03:38:20 +0000 Manifest this update: Thu 13 Mar 2025 03:38:20 +0000 Manifest next update: Thu 20 Mar 2025 03:38:20 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: PYVYVEdav94MAmeIWZnNJgV9jh7kEl9dgneVZxes9P4=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Mar 2025 03:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002 Validity Not Before: Mar 13 03:38:20 2025 GMT Not After : Mar 20 03:38:20 2025 GMT Subject: CN=67d2532c-136f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:25:a8:5d:1f:bb:83:48:4d:d6:d3:60:0b: 61:e7:43:ef:57:cd:cb:74:27:48:d0:d2:84:ad:f2: 8c:80:b0:41:61:44:7c:f3:97:c3:8b:a2:b0:73:05: fe:e7:3d:26:51:95:3b:5b:b2:da:1a:7d:3b:3a:13: 91:56:94:a9:bb:bf:ba:58:a4:43:4c:66:42:59:34: 29:41:45:35:42:bd:23:5a:85:f3:cc:66:6c:40:85: f9:f9:98:fa:b3:1f:c6:c5:1c:ff:11:08:3b:00:b4: 1b:b8:f9:02:50:ae:54:18:e0:63:f6:6f:60:eb:0d: 84:5f:d6:c6:6e:9c:23:7d:18:2a:13:12:a1:8a:7f: 5b:59:cc:e6:19:9f:d3:11:23:81:33:cf:1f:5e:4a: 4f:ff:3e:27:e9:79:a8:af:b1:87:88:2f:83:c2:5c: 36:58:b4:cb:c2:d1:d6:40:1f:68:69:69:8b:f4:16: bd:e9:f6:f7:f9:05:04:c8:8b:d3:80:1d:d3:7f:f9: 3d:09:99:c7:7e:49:f0:2a:ad:cc:6f:fa:e2:bc:e2: b8:de:a3:82:3f:d7:f4:46:5f:7a:5c:34:06:3d:dc: e8:9b:66:fc:cc:1b:15:45:fc:b4:0b:7d:1a:d3:a4: 1a:ef:c8:ef:cd:b9:15:ea:1b:76:1c:9d:b6:65:fa: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D3:0A:CD:46:28:11:BB:3D:97:58:93:7F:59:EB:A6:42:10:E4:3B X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f6:fb:37:4b:26:99:37:5d:0a:73:03:58:da:db:bd:dc:9b: 93:bd:4f:ee:84:70:33:92:dc:de:b8:42:a6:22:79:52:a6:02: 3b:34:b9:78:ba:11:95:d2:13:24:cf:bd:90:06:74:4f:95:f9: b5:a8:b0:cd:12:a8:99:ec:ec:cf:af:7c:3a:7a:15:75:2e:c5: b6:b7:96:e9:82:44:bf:ef:1a:1a:28:19:e9:86:68:9a:a5:f4: 43:d5:c3:34:fb:8b:42:09:1c:eb:ec:a6:06:20:05:66:94:76: 8d:d9:fe:a8:5c:c4:fb:c3:7f:cc:e8:49:fe:04:86:6c:55:97: fe:85:a2:17:b8:7b:71:6f:3c:61:db:70:f0:49:cd:c8:b5:12: 03:fc:20:8f:78:6f:2e:c6:7e:23:ad:7f:f3:4f:d1:8f:a4:ce: f4:57:eb:d9:6b:eb:a2:36:4c:82:4a:97:f4:15:12:8d:32:85: fb:e1:a9:e5:79:58:46:88:22:b9:2e:05:84:64:96:f8:cf:16: 9e:a7:29:46:e6:ee:9a:19:a5:10:a5:dd:58:b4:b2:5b:b5:dd: 01:dd:f0:33:38:a8:de:cd:c3:8b:85:e0:84:9f:62:4c:2a:47: 33:64:02:39:77:60:33:44:18:ff:4c:d5:95:2e:7b:ab:b6:07: 84:44:8e:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwMzEzMDMzODIwWhcNMjUwMzIwMDMzODIwWjAYMRYwFAYD VQQDEw02N2QyNTMyYy0xMzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5wlqF0fu4NITdbTYAth50PvV83LdCdI0NKErfKMgLBBYUR885fDi6KwcwX+ 5z0mUZU7W7LaGn07OhORVpSpu7+6WKRDTGZCWTQpQUU1Qr0jWoXzzGZsQIX5+Zj6 sx/GxRz/EQg7ALQbuPkCUK5UGOBj9m9g6w2EX9bGbpwjfRgqExKhin9bWczmGZ/T ESOBM88fXkpP/z4n6Xmor7GHiC+Dwlw2WLTLwtHWQB9oaWmL9Ba96fb3+QUEyIvT gB3Tf/k9CZnHfknwKq3Mb/rivOK43qOCP9f0Rl96XDQGPdzom2b8zBsVRfy0C30a 06Qa78jvzbkV6ht2HJ22ZfrJQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKXTCs1G KBG7PZdYk39Z66ZCEOQ7MB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI9vs3SyaZN10KcwNY2tu93JuTvU/uhHAzktzeuEKmInlSpgI7NLl4 uhGV0hMkz72QBnRPlfm1qLDNEqiZ7OzPr3w6ehV1LsW2t5bpgkS/7xoaKBnphmia pfRD1cM0+4tCCRzr7KYGIAVmlHaN2f6oXMT7w3/M6En+BIZsVZf+haIXuHtxbzxh 23DwSc3ItRID/CCPeG8uxn4jrX/zT9GPpM70V+vZa+uiNkyCSpf0FRKNMoX74anl eVhGiCK5LgWEZJb4zxaepylG5u6aGaUQpd1YtLJbtd0B3fAzOKjezcOLheCEn2JM KkczZAI5d2AzRBj/TNWVLnurtgeERI6Y -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:04 2025 by rpki-client