$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: wYdAmlMtEr65hp9aLfkZRp9scOCE9Ow2ak+YP2iiIjw= Subject key identifier: 17:78:94:D0:0B:F6:7F:6D:2B:BE:2B:AE:04:CA:2E:C8:C9:A2:3A:35 Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 0159 Signing time: Fri 17 Oct 2025 07:05:55 +0000 Manifest this update: Fri 17 Oct 2025 07:05:54 +0000 Manifest next update: Fri 24 Oct 2025 07:05:54 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: szUgxjWPo8HtHGNR2RV+qOKLr3KybJ5jsYKN9vQCTKU=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 07:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Oct 17 07:05:54 2025 GMT Not After : Oct 24 07:05:54 2025 GMT Subject: CN=68f1ead3-0acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:39:74:60:ef:5b:5b:57:9a:c8:8d:dd:4c:a4: a2:bd:65:3b:44:51:6d:99:64:c4:ed:43:52:97:5d: 03:a6:78:6c:6d:72:98:21:15:7b:ed:50:8f:85:75: 58:ed:94:43:67:1a:29:3e:28:01:40:40:f8:c6:33: ed:2c:3c:cc:d3:f3:21:0d:03:fb:8c:8d:49:6c:28: 48:ee:d3:15:9b:55:da:37:f8:e3:07:0d:0a:b9:3e: 2d:3b:63:f7:2e:df:70:8a:fd:a0:96:5b:73:73:f8: 97:0d:e9:1e:1e:06:b1:b4:d8:bf:05:f5:df:07:a8: 8a:fe:0c:d6:73:dd:7d:aa:0e:9d:71:c0:b3:d1:6b: 29:f9:ab:68:1c:e2:86:d0:50:23:68:b8:b8:23:31: c8:2b:f5:e4:55:1a:7e:2e:ce:ac:f9:ee:8c:88:a2: 12:c1:e1:f2:13:c1:cd:f9:24:c0:28:27:16:98:05: 11:31:4c:ce:2f:19:88:4a:ce:3c:f6:4f:a9:b4:cc: af:94:12:a5:c5:42:be:c6:7e:f0:2a:86:73:55:0b: be:31:8a:84:8d:47:e2:3a:02:69:cc:d8:c0:e5:ee: 83:e0:19:9b:0d:11:6f:6b:2a:72:73:60:28:84:31: 3d:b8:f0:f1:e8:fc:e7:94:45:4f:88:93:4e:32:75: 1a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:78:94:D0:0B:F6:7F:6D:2B:BE:2B:AE:04:CA:2E:C8:C9:A2:3A:35 X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:6d:a8:b7:b4:12:53:3c:36:a2:9c:64:47:68:12:02:e0:50: e7:2d:74:fc:fd:90:0c:72:5f:36:4b:66:00:f0:cb:62:93:af: 43:c3:e2:e0:8d:22:6b:df:04:86:41:7f:78:3d:85:d8:17:f0: f2:79:57:0c:b3:d6:42:74:8c:43:ae:9c:ba:e8:82:79:d6:9a: 95:a1:e2:a4:7b:3c:88:e3:f7:8a:6a:11:fb:57:4b:3e:4f:bb: d5:7c:08:f0:95:9b:b3:0f:2b:59:59:ee:ca:38:11:87:75:40: 17:3b:b3:49:e4:2b:a5:ad:25:3b:45:7d:36:6f:25:a4:ed:6a: 87:14:bb:bf:e2:fa:59:d0:43:64:b1:bd:5f:c4:d3:c7:de:3d: 8b:27:dd:9f:b1:92:01:c9:8d:a0:1f:65:04:e0:6a:b8:2a:3b: 17:35:f8:78:8d:af:c4:8a:6e:c0:77:41:80:d5:6d:bf:40:d2: 68:3b:e1:1c:f4:5a:3a:34:41:dc:27:84:72:25:38:ce:e3:63: 0e:dc:f2:01:7f:41:1e:65:17:c4:40:c4:11:8f:45:88:c9:49: 9b:c6:3c:fc:fc:90:c8:70:c4:06:83:94:62:87:0e:48:e8:e0: f2:5e:17:c8:7f:47:62:b4:19:4e:de:d5:d0:9a:2d:93:e4:99: d9:7b:fa:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUxMDE3MDcwNTU0WhcNMjUxMDI0MDcwNTU0WjAYMRYwFAYD VQQDEw02OGYxZWFkMy0wYWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzl0YO9bW1eayI3dTKSivWU7RFFtmWTE7UNSl10DpnhsbXKYIRV77VCPhXVY 7ZRDZxopPigBQED4xjPtLDzM0/MhDQP7jI1JbChI7tMVm1XaN/jjBw0KuT4tO2P3 Lt9wiv2glltzc/iXDekeHgaxtNi/BfXfB6iK/gzWc919qg6dccCz0Wsp+atoHOKG 0FAjaLi4IzHIK/XkVRp+Ls6s+e6MiKISweHyE8HN+STAKCcWmAURMUzOLxmISs48 9k+ptMyvlBKlxUK+xn7wKoZzVQu+MYqEjUfiOgJpzNjA5e6D4BmbDRFvaypyc2Ao hDE9uPDx6PznlEVPiJNOMnUaFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBd4lNAL 9n9tK74rrgTKLsjJojo1MB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWbai3tBJTPDainGRHaBIC4FDnLXT8/ZAMcl82S2YA8Mtik69Dw+Lg jSJr3wSGQX94PYXYF/DyeVcMs9ZCdIxDrpy66IJ51pqVoeKkezyI4/eKahH7V0s+ T7vVfAjwlZuzDytZWe7KOBGHdUAXO7NJ5CulrSU7RX02byWk7WqHFLu/4vpZ0ENk sb1fxNPH3j2LJ92fsZIByY2gH2UE4Gq4KjsXNfh4ja/Eim7Ad0GA1W2/QNJoO+Ec 9Fo6NEHcJ4RyJTjO42MO3PIBf0EeZRfEQMQRj0WIyUmbxjz8/JDIcMQGg5Rihw5I 6ODyXhfIf0ditBlO3tXQmi2T5JnZe/rl -----END CERTIFICATE-----Generated at Sat Oct 18 23:36:32 2025 by rpki-client