$ rpki-client -vvf rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft File: kkogF1ZK2vsiNqIPv3Otoblr_zM.mft (raw, json) Hash identifier: cZfkGGxlkQLgMAtPcTbVj2RBpBL76A7p1SgVlXR5Rxk= Subject key identifier: 09:7C:3F:4C:72:C6:F2:0A:35:CB:1F:53:F4:3C:1B:E2:9F:F4:2C:A8 Authority key identifier: 92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 Certificate issuer: /CN=A914C002/serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft Manifest number: 0101 Signing time: Fri 25 Apr 2025 04:15:21 +0000 Manifest this update: Fri 25 Apr 2025 04:15:20 +0000 Manifest next update: Fri 02 May 2025 04:15:20 +0000 Files and hashes: 1: kkogF1ZK2vsiNqIPv3Otoblr_zM.crl (hash: f+QY4wCd1DD0QwEvs4kzFfyE3vu27QyCd3jazm7/Uf4=) 2: 6AA56694CFE311EFBFBFBD4EC4F9AE02.roa (hash: ZYnpWtFc5GmEGP0oZLW3Cph9iucd5VjZwl7K3jSPiKs=) 3: 51CC36BAC91811EF9DBC1A87C4F9AE02.roa (hash: WkTewr/cvgKrRlRAZtUZxcpYcDyS2cvO3ZWEnp3vqOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C002, serialNumber=924A2017564ADAFB2236A20FBF73ADA1B96BFF33 Validity Not Before: Apr 25 04:15:20 2025 GMT Not After : May 2 04:15:20 2025 GMT Subject: CN=680b0c59-eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:52:91:2b:fc:de:30:83:00:eb:ae:b7:dc: 4d:2e:e4:45:90:b2:9d:cb:1e:69:3d:cc:da:bb:51: 9e:2a:85:8d:66:30:3e:cd:08:3f:9a:b7:b4:96:42: 1c:52:61:e8:e3:d7:d3:2f:cf:dd:79:43:62:04:f8: fc:de:2c:19:ea:ec:2e:35:1a:5c:3e:fc:02:b7:4c: 30:ab:e0:7e:94:4f:90:f6:e2:ff:86:11:83:fb:7e: ff:2e:2f:e8:c7:6e:97:da:05:a8:b5:e2:1f:85:ff: de:7d:17:89:f4:08:1e:b8:d5:53:90:10:a3:92:88: 44:b5:4b:29:7f:2c:df:b5:64:cb:df:0d:54:ba:d8: 89:52:fe:ee:fe:dc:21:76:33:6a:58:18:68:2b:5a: e4:9a:35:2b:94:76:89:bd:79:95:40:a2:a1:a5:eb: 30:77:04:14:80:96:57:59:85:04:fc:f7:24:86:0c: b7:b5:9c:21:6c:9a:af:60:06:be:35:db:8d:51:3d: 95:e5:75:99:70:88:52:2a:82:52:57:86:d1:8a:fb: 6a:1a:54:75:3e:83:bf:a2:a2:bb:b8:c8:da:6f:4f: 80:e5:aa:e8:96:6f:86:f0:f4:05:11:2b:96:5c:7a: 17:1b:eb:33:19:f4:2b:24:8c:68:66:8b:26:7c:1c: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:3F:4C:72:C6:F2:0A:35:CB:1F:53:F4:3C:1B:E2:9F:F4:2C:A8 X509v3 Authority Key Identifier: keyid:92:4A:20:17:56:4A:DA:FB:22:36:A2:0F:BF:73:AD:A1:B9:6B:FF:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkogF1ZK2vsiNqIPv3Otoblr_zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C002/C01D0C0CA92511EEAC4BDB57C4F9AE02/kkogF1ZK2vsiNqIPv3Otoblr_zM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:eb:fa:97:b9:a3:cc:33:79:ad:a5:25:e0:ab:b2:ec:04:3b: e9:e6:bb:92:c5:cf:58:83:91:7e:96:8d:8c:2c:bd:a5:5f:fd: 64:56:c7:88:d6:46:36:6a:79:48:37:6f:ed:c3:ba:fc:dd:31: 30:54:77:65:e8:a8:ee:17:5e:00:c1:f0:2f:cc:7e:55:c9:e3: 71:9c:64:88:63:f5:d0:2a:12:9f:4f:d6:6a:4e:a1:58:ad:62: 85:11:fe:81:7d:ca:4f:d9:86:28:a0:29:1d:35:44:f6:91:91: 2f:25:a1:12:91:ca:17:7e:93:e0:96:a5:09:6d:75:8d:96:7b: 7b:45:d7:01:a9:1c:23:20:f5:2f:74:e1:f4:df:ea:68:80:aa: ef:4f:f5:b2:0e:f1:13:9a:aa:43:30:33:49:02:1c:67:5d:ab: 37:25:2b:65:f2:90:c9:11:94:e8:1c:07:e1:54:64:6f:3e:db: b5:5d:6f:86:08:fb:51:e0:68:2d:1b:bf:2f:17:d6:4a:0e:e5: ef:34:34:cf:06:66:c9:97:70:eb:97:a7:41:74:95:ab:d5:9d: fc:b3:b3:e4:e1:7b:3d:2a:dd:55:21:1d:c3:c0:c3:78:c7:d2: 6b:61:be:86:bd:3d:11:4e:ef:9f:02:35:0f:9c:1f:f9:c9:06: 32:0c:3b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwMDIxMTAvBgNVBAUTKDkyNEEyMDE3NTY0QURBRkIyMjM2QTIwRkJGNzNBREEx Qjk2QkZGMzMwHhcNMjUwNDI1MDQxNTIwWhcNMjUwNTAyMDQxNTIwWjAYMRYwFAYD VQQDEw02ODBiMGM1OS1lYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20pSkSv83jCDAOuut9xNLuRFkLKdyx5pPczau1GeKoWNZjA+zQg/mre0lkIc UmHo49fTL8/deUNiBPj83iwZ6uwuNRpcPvwCt0wwq+B+lE+Q9uL/hhGD+37/Li/o x26X2gWoteIfhf/efReJ9AgeuNVTkBCjkohEtUspfyzftWTL3w1UutiJUv7u/twh djNqWBhoK1rkmjUrlHaJvXmVQKKhpeswdwQUgJZXWYUE/Pckhgy3tZwhbJqvYAa+ NduNUT2V5XWZcIhSKoJSV4bRivtqGlR1PoO/oqK7uMjab0+A5arolm+G8PQFESuW XHoXG+szGfQrJIxoZosmfBwCkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl8P0xy xvIKNcsfU/Q8G+Kf9CyoMB8GA1UdIwQYMBaAFJJKIBdWStr7IjaiD79zraG5a/8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzAwMi9DMDFEMEMwQ0E5 MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2c2lOcUlQdjNPdG9ibHJf ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2trb2dGMVpLMnZzaU5xSVB2M090b2Jscl96TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzAwMi9DMDFEMEMwQ0E5MjUxMUVFQUM0QkRCNTdDNEY5QUUwMi9ra29nRjFaSzJ2 c2lOcUlQdjNPdG9ibHJfek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe6/qXuaPMM3mtpSXgq7LsBDvp5ruSxc9Yg5F+lo2MLL2lX/1kVseI 1kY2anlIN2/tw7r83TEwVHdl6KjuF14AwfAvzH5VyeNxnGSIY/XQKhKfT9ZqTqFY rWKFEf6BfcpP2YYooCkdNUT2kZEvJaESkcoXfpPglqUJbXWNlnt7RdcBqRwjIPUv dOH03+pogKrvT/WyDvETmqpDMDNJAhxnXas3JStl8pDJEZToHAfhVGRvPtu1XW+G CPtR4GgtG78vF9ZKDuXvNDTPBmbJl3Drl6dBdJWr1Z38s7Pk4Xs9Kt1VIR3DwMN4 x9JrYb6GvT0RTu+fAjUPnB/5yQYyDDvv -----END CERTIFICATE-----Generated at Fri Apr 25 08:23:47 2025 by rpki-client on console.sobornost.net