$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: DeX6gp+CYrb3L1U23vRRgOODXDzo7sShW+9ZS6oes3U= Subject key identifier: 7F:D1:9E:20:6D:1E:D6:D0:9C:17:13:8E:EF:6B:5A:42:0F:2C:AC:BC Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 01C9 Signing time: Mon 11 May 2026 03:53:40 +0000 Manifest this update: Mon 11 May 2026 03:53:40 +0000 Manifest next update: Mon 18 May 2026 03:53:40 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: Qu8p2WX6d0fNmxond8czFP/IlCVQDa4Cc06cys6WPcI=) 2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: X+dqp+Ah396uKCPwR9bMS10gj/YjMNXUMTYy7soM8Zc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 03:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: May 11 03:53:40 2026 GMT Not After : May 18 03:53:40 2026 GMT Subject: CN=6a0152c4-a06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:b3:95:b0:0d:19:78:ae:a3:94:ef:0d:fe: 9d:c4:4b:c8:9e:79:da:70:8e:36:a2:57:a8:24:2f: 8d:92:e7:cd:2e:f8:f4:1f:1b:14:57:a9:1e:3b:97: 41:a3:ab:80:ed:ac:9f:84:c2:b4:16:c9:f8:b6:18: 2b:27:10:68:02:6e:94:3f:b6:8b:ce:fc:83:c6:65: a6:5e:b1:12:58:50:01:1e:70:70:1e:48:6e:c7:e6: f4:d9:1a:11:0b:72:e9:78:d3:7c:b2:b4:1d:4e:d3: 60:1f:57:e0:d7:35:78:6c:c7:be:18:7d:f2:a5:c6: 3a:6f:8b:59:10:f2:5a:99:80:e8:7b:52:2c:89:54: 57:ac:5e:5a:82:52:43:1a:f9:73:65:7d:47:33:e8: ca:41:45:57:8a:a6:f2:b9:bb:b9:17:cc:10:69:94: 8f:bc:13:37:74:f9:74:e2:b4:b7:1d:c1:63:2e:79: 52:0e:26:7c:8e:12:ca:8c:05:61:6f:ae:79:74:1e: 77:45:4d:b3:40:00:e5:8a:a1:d2:cf:e1:39:b2:6e: cc:33:32:89:5b:7a:bf:d8:22:85:2c:8d:7f:c5:4c: fc:9e:6f:ca:9b:59:6a:ef:31:0b:f7:0f:1d:c8:d5: ea:24:cb:12:33:d5:30:d6:be:42:96:19:84:5e:a3: a5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:D1:9E:20:6D:1E:D6:D0:9C:17:13:8E:EF:6B:5A:42:0F:2C:AC:BC X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a8:d3:cd:5f:c6:a2:83:96:bb:12:53:27:b2:36:d1:8e:43: d0:88:a2:38:c3:ef:71:e8:cf:81:f9:42:a3:15:89:6a:cb:0e: 65:3d:7c:2b:4d:bc:1a:b2:e3:77:db:f1:1b:e0:54:cf:35:6a: f7:0d:0a:87:d8:96:40:5f:ce:7b:7c:4c:db:a4:7c:5d:71:86: 69:70:0d:cd:66:c1:3c:51:cd:9b:a5:ff:0d:f4:35:d2:9f:0c: d0:ed:12:73:d4:cb:86:fc:16:47:4c:c8:61:bd:d5:c3:56:14: 6f:6c:34:3e:c5:56:ea:06:83:9c:4d:9a:2d:c7:68:26:b4:67: c2:53:aa:6c:09:7d:a0:0f:a2:ea:b3:1d:f1:62:95:cd:2f:21: 8f:6d:6d:4a:ac:a5:88:87:1a:ca:72:36:d4:84:08:4c:37:69: 2d:5e:1a:03:8e:7f:a2:89:c4:bc:5b:2a:51:63:44:b1:2b:93: 47:61:55:d2:25:c9:f7:15:03:89:dc:c0:3a:5e:b2:22:04:fb: 4b:cd:17:93:39:4f:0d:8b:37:5e:a5:e4:88:40:27:c5:97:73: cc:b7:1a:74:6e:72:7e:b4:e7:1d:78:ab:fa:64:fe:90:43:9d: 40:a4:c8:9d:ad:2c:04:ac:bb:8b:2f:d8:0c:fa:c6:49:00:0e: 18:a6:0d:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjYwNTExMDM1MzQwWhcNMjYwNTE4MDM1MzQwWjAYMRYwFAYD VQQDEw02YTAxNTJjNC1hMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx+zlbANGXiuo5TvDf6dxEvInnnacI42oleoJC+NkufNLvj0HxsUV6keO5dB o6uA7ayfhMK0Fsn4thgrJxBoAm6UP7aLzvyDxmWmXrESWFABHnBwHkhux+b02RoR C3LpeNN8srQdTtNgH1fg1zV4bMe+GH3ypcY6b4tZEPJamYDoe1IsiVRXrF5aglJD GvlzZX1HM+jKQUVXiqbyubu5F8wQaZSPvBM3dPl04rS3HcFjLnlSDiZ8jhLKjAVh b655dB53RU2zQADliqHSz+E5sm7MMzKJW3q/2CKFLI1/xUz8nm/Km1lq7zEL9w8d yNXqJMsSM9Uw1r5ClhmEXqOl3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH/RniBt HtbQnBcTju9rWkIPLKy8MB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfKjTzV/GooOWuxJTJ7I20Y5D0IiiOMPvcejPgflCoxWJassOZT18K028GrLj d9vxG+BUzzVq9w0Kh9iWQF/Oe3xM26R8XXGGaXANzWbBPFHNm6X/DfQ10p8M0O0S c9TLhvwWR0zIYb3Vw1YUb2w0PsVW6gaDnE2aLcdoJrRnwlOqbAl9oA+i6rMd8WKV zS8hj21tSqyliIcaynI21IQITDdpLV4aA45/oonEvFsqUWNEsSuTR2FV0iXJ9xUD idzAOl6yIgT7S80XkzlPDYs3XqXkiEAnxZdzzLcadG5yfrTnHXir+mT+kEOdQKTI na0sBKy7iy/YDPrGSQAOGKYNFQ== -----END CERTIFICATE-----Generated at Wed May 13 04:33:01 2026 by rpki-client