$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: SvmrT+KQPFnvrzu9k7n/RroLFPG3PrpYMsW2ryR3G3c= Subject key identifier: 0C:49:B1:8C:85:D5:9C:C8:8E:E8:83:3E:E5:C5:63:09:41:FA:1C:EB Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 013D Signing time: Sat 23 Aug 2025 04:38:18 +0000 Manifest this update: Sat 23 Aug 2025 04:38:17 +0000 Manifest next update: Sat 30 Aug 2025 04:38:17 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: QicRMLU+KrXbDGslNIx3zCwC8rACgI9cVlNZ/oXpmto=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Aug 23 04:38:17 2025 GMT Not After : Aug 30 04:38:17 2025 GMT Subject: CN=68a945b9-1e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e7:d8:9b:13:5a:7e:cb:54:bf:12:bd:90:4d: 2a:3d:78:06:cd:31:34:20:31:68:d4:84:b5:06:c2: d6:5f:96:c1:1f:35:5a:aa:1f:06:71:72:de:7b:c1: cb:e3:53:a7:6c:a2:bb:44:2b:e2:b0:dc:96:df:6c: 17:be:18:98:a1:3f:be:21:24:b7:c8:f9:7b:0b:5a: 01:e5:9d:2b:d8:f7:7e:06:92:4d:cb:62:fd:0c:e8: 17:eb:cd:b2:7b:13:7c:fd:e2:2d:1f:88:1d:0c:cb: 54:b1:eb:93:6b:03:8b:70:3c:af:88:e0:17:5d:20: 65:97:3d:bb:c3:88:f3:61:da:09:b2:4d:8f:46:a9: 88:c1:8a:73:19:e2:dd:3b:c8:fc:89:fd:d6:8f:a4: 62:fb:3d:d5:3e:54:54:8d:b2:0f:93:c2:42:02:36: f0:64:d7:22:59:9f:b1:fd:27:6d:31:4f:25:fd:83: 4a:1a:f6:68:f5:a8:dc:4c:8c:0a:d4:27:b8:5b:dc: cf:e0:02:6d:6c:79:7d:da:d3:4c:4b:50:1f:d7:fd: 4a:57:94:ec:08:8c:8c:fc:be:d9:64:73:66:c2:ee: 59:d7:aa:85:25:43:2c:ce:20:1d:f1:2f:c9:45:d3: 13:6b:e5:3b:b1:51:17:20:09:54:3c:21:3f:49:0f: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:B1:8C:85:D5:9C:C8:8E:E8:83:3E:E5:C5:63:09:41:FA:1C:EB X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:01:80:3d:96:de:95:6c:d9:c5:a6:5a:0f:b2:61:28:c3:9c: 92:49:9b:03:d8:6a:e8:a5:bc:de:f7:11:99:f5:40:10:23:89: ac:90:6f:41:51:30:cb:33:23:22:0b:ed:ac:7b:e6:9b:2e:3c: 0b:6f:90:95:d7:09:03:5b:f0:11:87:93:b7:ef:03:10:d6:bf: 2d:e6:5c:31:09:9b:9d:43:b2:5b:8d:72:bd:6b:8c:fa:b1:1b: 98:f5:f4:73:2f:f6:00:97:44:3e:b0:a6:cf:fc:8b:8b:7f:71: 26:49:42:29:ba:3a:9f:70:7b:b0:dd:d6:32:e8:0c:37:b0:1e: 01:27:67:18:5e:7a:cf:a7:30:fb:11:1b:e4:e3:b9:9c:c8:27: fc:c4:16:7a:6e:53:03:64:e4:36:8e:a6:83:3a:3a:28:6b:ca: ff:23:1c:8c:66:69:d8:24:6e:df:85:7d:98:bf:35:08:fe:10: bd:2f:5c:31:66:cf:34:6a:96:42:cd:cf:56:a0:1f:df:b2:cf: 24:fe:87:df:d2:d1:25:99:26:69:10:7c:ac:ed:11:00:57:c1: 5c:03:3f:0f:4c:9f:d0:d0:f3:93:4c:07:0b:95:1f:7c:9c:79: 72:ec:b1:7e:86:8d:f4:8b:85:59:96:c0:6a:75:30:e0:93:7f: b6:35:4b:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwODIzMDQzODE3WhcNMjUwODMwMDQzODE3WjAYMRYwFAYD VQQDEw02OGE5NDViOS0xZTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ufYmxNafstUvxK9kE0qPXgGzTE0IDFo1IS1BsLWX5bBHzVaqh8GcXLee8HL 41OnbKK7RCvisNyW32wXvhiYoT++ISS3yPl7C1oB5Z0r2Pd+BpJNy2L9DOgX682y exN8/eItH4gdDMtUseuTawOLcDyviOAXXSBllz27w4jzYdoJsk2PRqmIwYpzGeLd O8j8if3Wj6Ri+z3VPlRUjbIPk8JCAjbwZNciWZ+x/SdtMU8l/YNKGvZo9ajcTIwK 1Ce4W9zP4AJtbHl92tNMS1Af1/1KV5TsCIyM/L7ZZHNmwu5Z16qFJUMsziAd8S/J RdMTa+U7sVEXIAlUPCE/SQ9a2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxJsYyF 1ZzIjuiDPuXFYwlB+hzrMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVAYA9lt6VbNnFploPsmEow5ySSZsD2Gropbze9xGZ9UAQI4mskG9B UTDLMyMiC+2se+abLjwLb5CV1wkDW/ARh5O37wMQ1r8t5lwxCZudQ7JbjXK9a4z6 sRuY9fRzL/YAl0Q+sKbP/IuLf3EmSUIpujqfcHuw3dYy6Aw3sB4BJ2cYXnrPpzD7 ERvk47mcyCf8xBZ6blMDZOQ2jqaDOjooa8r/IxyMZmnYJG7fhX2YvzUI/hC9L1wx Zs80apZCzc9WoB/fss8k/off0tElmSZpEHys7REAV8FcAz8PTJ/Q0POTTAcLlR98 nHly7LF+ho30i4VZlsBqdTDgk3+2NUue -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:21 2025 by rpki-client