$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: OpQDIrxghu4Rg+VrjEv2AQOCFM72N89rkqNdSvAux50= Subject key identifier: 67:AE:EA:A4:98:85:C9:C0:96:7B:B5:20:AC:01:C6:8B:B3:95:82:91 Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 0123 Signing time: Thu 03 Jul 2025 04:58:01 +0000 Manifest this update: Thu 03 Jul 2025 04:58:00 +0000 Manifest next update: Thu 10 Jul 2025 04:58:00 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: dd+cEkQi7zCJUqhyu2k04YjKyvZU6QC4XZaWnmmZoek=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Jul 3 04:58:00 2025 GMT Not After : Jul 10 04:58:00 2025 GMT Subject: CN=68660dd8-1765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b6:fd:02:a5:1c:a6:5a:f5:61:d6:df:fb:e9: 84:ec:85:19:c7:5d:ff:ac:94:a9:c9:18:ec:cc:31: 15:02:c2:3a:e4:a4:8e:62:03:f7:7d:12:c0:f4:79: 45:b8:7d:5d:da:e3:d8:45:b6:85:02:e3:23:62:24: b1:12:6d:c8:a7:e5:14:8a:35:98:19:4b:2b:42:f1: a7:c6:47:aa:b5:67:c6:a6:49:b4:74:44:f2:5f:d0: fe:da:25:f9:0a:a3:f7:61:8a:a9:c4:df:ef:84:18: 94:eb:69:32:a5:5c:db:51:76:7f:31:d8:39:7f:a6: 8e:f0:87:be:6e:cd:0c:33:d1:64:b0:b0:9f:64:60: 9e:10:c7:fa:b6:5d:7d:4b:3e:b2:9e:5f:75:88:b1: bd:27:cd:73:13:26:ba:2b:6c:be:c3:6d:9c:e1:39: 02:3e:d3:a9:b9:67:d1:c1:07:da:65:59:dc:a8:aa: a7:6e:d7:ba:3e:d9:56:6b:51:8e:30:08:ac:71:e7: f0:b1:db:8f:3c:07:8b:d5:5b:78:69:67:1c:c8:bb: 24:a6:bd:23:25:03:27:ec:a3:18:cf:1d:a4:2f:9c: a9:eb:eb:2b:3c:12:58:5b:81:87:83:ba:c9:1b:db: 0c:9a:95:c8:91:e8:f6:8d:a7:f7:e9:b2:92:4e:6a: 3f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AE:EA:A4:98:85:C9:C0:96:7B:B5:20:AC:01:C6:8B:B3:95:82:91 X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b5:ba:2b:51:02:63:ac:ae:c7:31:46:79:f6:3c:96:3f:df: 2c:5f:5b:c4:1e:88:13:51:26:40:32:c1:2c:75:02:41:20:e1: ea:42:c9:8d:fc:0e:fd:aa:f0:b7:f2:fd:b7:ab:47:d5:9f:72: 81:ab:d0:93:ed:77:75:15:a1:a4:7b:57:42:1f:73:10:1e:8b: 8f:ac:b4:65:9a:f1:0d:2d:da:38:9f:08:ec:e9:93:62:04:b7: a4:8d:81:61:36:96:71:bb:8f:3b:8b:3e:ce:63:6c:29:d2:4b: 6a:4c:be:8a:5b:b9:7b:7d:c2:f7:bd:cc:99:1d:89:ad:18:b2: 64:5e:9e:08:47:4e:4e:88:16:18:44:f3:df:33:73:b1:17:b6: 51:7e:42:b8:fe:2a:01:7b:23:6b:39:46:5a:45:6c:09:07:0a: 27:d0:d7:22:ad:76:89:ca:2b:e8:4a:0d:0f:7c:81:e2:a9:55: e4:58:86:ce:66:c6:66:58:be:17:10:0d:18:2c:59:b2:64:de: 6d:68:8d:64:52:b0:3a:ee:54:fa:4a:df:20:ef:e3:28:24:06: 6c:e4:95:d0:99:0d:f3:97:33:db:b0:45:f3:e4:4c:36:ec:9b: 2b:d3:11:06:a6:fc:4f:df:eb:36:9a:0c:82:3b:57:95:e3:19: f4:87:d4:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwNzAzMDQ1ODAwWhcNMjUwNzEwMDQ1ODAwWjAYMRYwFAYD VQQDEw02ODY2MGRkOC0xNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rb9AqUcplr1Ydbf++mE7IUZx13/rJSpyRjszDEVAsI65KSOYgP3fRLA9HlF uH1d2uPYRbaFAuMjYiSxEm3Ip+UUijWYGUsrQvGnxkeqtWfGpkm0dETyX9D+2iX5 CqP3YYqpxN/vhBiU62kypVzbUXZ/Mdg5f6aO8Ie+bs0MM9FksLCfZGCeEMf6tl19 Sz6ynl91iLG9J81zEya6K2y+w22c4TkCPtOpuWfRwQfaZVncqKqnbte6PtlWa1GO MAiscefwsduPPAeL1Vt4aWccyLskpr0jJQMn7KMYzx2kL5yp6+srPBJYW4GHg7rJ G9sMmpXIkej2jaf36bKSTmo/uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeu6qSY hcnAlnu1IKwBxouzlYKRMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUtborUQJjrK7HMUZ59jyWP98sX1vEHogTUSZAMsEsdQJBIOHqQsmN /A79qvC38v23q0fVn3KBq9CT7Xd1FaGke1dCH3MQHouPrLRlmvENLdo4nwjs6ZNi BLekjYFhNpZxu487iz7OY2wp0ktqTL6KW7l7fcL3vcyZHYmtGLJkXp4IR05OiBYY RPPfM3OxF7ZRfkK4/ioBeyNrOUZaRWwJBwon0NcirXaJyivoSg0PfIHiqVXkWIbO ZsZmWL4XEA0YLFmyZN5taI1kUrA67lT6St8g7+MoJAZs5JXQmQ3zlzPbsEXz5Ew2 7Jsr0xEGpvxP3+s2mgyCO1eV4xn0h9QM -----END CERTIFICATE-----Generated at Thu Jul 3 23:01:42 2025 by rpki-client