$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: whhF0S/nKc/K1RIfgXIQzd/eBkAbEsbjCV4wPW9zVR8= Subject key identifier: 10:84:97:7E:CE:BB:9E:A8:FA:1B:7B:0E:B6:23:4F:F1:BC:BC:D2:CC Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 01AF Signing time: Wed 25 Mar 2026 03:26:08 +0000 Manifest this update: Wed 25 Mar 2026 03:26:08 +0000 Manifest next update: Wed 01 Apr 2026 03:26:08 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: 8mTMIOkzzIAt/lbhdJynGCnUHEW5wnFbZbyq1Sv1aKQ=) 2: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: rSVG57dS9icctqN3//vfn2ezLCSeHMuQO9kLf2c0Ess=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Mar 25 03:26:08 2026 GMT Not After : Apr 1 03:26:08 2026 GMT Subject: CN=69c355d0-03cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:f9:5c:e1:d9:ef:61:85:3c:a5:7d:d3:4c: 5c:5f:b5:23:e6:ae:3f:35:c0:47:4f:ec:c8:e7:8f: 43:36:b4:77:fa:18:d0:d8:6f:9a:bd:c3:47:56:3a: de:ff:44:2c:0c:f4:a4:4e:26:38:90:80:49:7c:fe: c7:9a:12:0d:9b:7a:ff:97:4f:f0:0b:a3:44:0b:d7: c3:ea:b9:3e:27:38:2f:39:9d:c1:74:74:e3:2e:96: be:85:a9:dd:bd:02:d0:9c:ea:e4:76:bd:58:d6:08: 7a:00:8d:31:b5:4e:25:a6:a2:0e:05:72:9d:fd:b7: 00:86:c8:e8:80:97:94:97:e9:b6:1c:09:46:62:12: bc:d7:32:9f:a3:a1:7c:ab:5e:02:6d:a4:a0:70:8c: 24:70:99:22:f7:99:25:72:2b:cb:1c:01:e6:c2:a6: 0e:26:bf:3f:ab:30:79:ee:d9:9d:68:bf:db:27:88: ac:25:dc:0f:ce:ec:91:f9:74:e6:50:63:83:49:49: 6f:7a:ac:7b:d4:e8:e1:b4:b7:61:df:a1:13:c6:70: eb:c6:64:a1:d1:c1:a3:de:24:62:15:8b:9c:b6:d7: 08:6f:ad:81:1a:a3:88:30:e7:df:99:d7:81:7c:67: e9:44:63:1a:e0:bc:a7:9b:f5:24:fd:f7:08:7c:69: 0c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:84:97:7E:CE:BB:9E:A8:FA:1B:7B:0E:B6:23:4F:F1:BC:BC:D2:CC X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:bb:1f:e7:9b:ad:1e:d7:6a:b3:59:33:36:d4:15:25:65:6a: ae:ad:e9:df:d8:ef:98:8e:cf:89:b3:ba:20:fd:66:2c:ae:1c: d3:23:bd:2f:3f:a6:6e:41:67:f5:66:ed:f4:40:97:8a:ef:56: d5:14:74:1b:66:0d:c8:87:25:c6:c1:6d:bf:64:99:7d:21:60: c9:c2:08:bc:a5:21:f6:ab:e9:b8:d2:ec:ff:d2:e8:a4:ae:78: 18:c0:5d:1f:6c:d7:49:a0:b5:24:36:36:6f:d6:41:0d:a9:74: bc:78:7b:15:71:bf:73:95:e4:99:f9:e6:0e:4b:80:09:15:df: 79:ad:62:85:23:58:a2:53:eb:f6:3d:69:41:a9:73:ec:50:6d: 26:e3:af:e3:68:b9:6d:9b:08:8a:20:a8:89:b6:72:81:83:f8: 44:77:1c:5f:bc:48:23:b9:92:fe:33:cb:1c:ac:ca:e8:d9:da: b1:7c:da:dd:bf:e7:47:69:9f:4e:8c:96:da:e4:f9:63:f0:89: c2:da:a2:2f:18:c0:ad:53:3b:b2:17:85:86:67:66:ea:6d:23: 94:6f:c1:c6:87:de:f2:d1:b5:c4:4c:a5:b1:00:54:29:5f:84: 22:3c:c7:b7:c7:95:ec:79:85:18:00:af:78:f8:3d:d6:32:36: 4f:a0:a0:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjYwMzI1MDMyNjA4WhcNMjYwNDAxMDMyNjA4WjAYMRYwFAYD VQQDEw02OWMzNTVkMC0wM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvm/5XOHZ72GFPKV900xcX7Uj5q4/NcBHT+zI549DNrR3+hjQ2G+avcNHVjre /0QsDPSkTiY4kIBJfP7HmhINm3r/l0/wC6NEC9fD6rk+JzgvOZ3BdHTjLpa+hand vQLQnOrkdr1Y1gh6AI0xtU4lpqIOBXKd/bcAhsjogJeUl+m2HAlGYhK81zKfo6F8 q14CbaSgcIwkcJki95klcivLHAHmwqYOJr8/qzB57tmdaL/bJ4isJdwPzuyR+XTm UGODSUlveqx71OjhtLdh36ETxnDrxmSh0cGj3iRiFYucttcIb62BGqOIMOffmdeB fGfpRGMa4Lynm/Uk/fcIfGkMvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCEl37O u56o+ht7DrYjT/G8vNLMMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkLsf55utHtdqs1kzNtQVJWVqrq3p39jvmI7PibO6IP1mLK4c0yO9Lz+mbkFn 9Wbt9ECXiu9W1RR0G2YNyIclxsFtv2SZfSFgycIIvKUh9qvpuNLs/9LopK54GMBd H2zXSaC1JDY2b9ZBDal0vHh7FXG/c5XkmfnmDkuACRXfea1ihSNYolPr9j1pQalz 7FBtJuOv42i5bZsIiiCoibZygYP4RHccX7xII7mS/jPLHKzK6NnasXza3b/nR2mf ToyW2uT5Y/CJwtqiLxjArVM7sheFhmdm6m0jlG/Bxofe8tG1xEylsQBUKV+EIjzH t8eV7HmFGACvePg91jI2T6CgCw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:11 2026 by rpki-client