$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: P6Va3DQAowe9U60XOCzMc16o5uBOLiPDZumsybhyQX0= Subject key identifier: 57:8C:9C:69:25:86:4C:09:ED:D6:0E:7A:D2:92:43:5C:1E:6F:49:23 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0A84 Signing time: Mon 12 May 2025 19:26:50 +0000 Manifest this update: Mon 12 May 2025 19:26:50 +0000 Manifest next update: Mon 19 May 2025 19:26:50 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: y10CcxnRXG+K7Hm9I5q8jowlcvZA5q5IFDsSxiNq5hk=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 19:26:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: May 12 19:26:50 2025 GMT Not After : May 19 19:26:50 2025 GMT Subject: CN=68224b7a-d54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:09:61:75:74:97:84:cc:38:ef:93:0b:27: a6:d8:0c:f6:fa:c7:40:35:25:cb:e6:da:e9:f4:59: 9a:be:d9:eb:8d:f2:7e:2b:c0:fc:ad:f1:1d:7a:8a: 0c:61:bd:7b:35:31:e3:22:de:21:a3:10:06:83:87: da:a0:e1:0f:f1:52:50:8c:c8:12:56:72:51:14:81: 2d:b7:4f:2a:91:cb:d7:e2:e0:e0:96:3a:71:f2:b3: 61:69:ce:fb:0a:d9:32:a0:db:c5:32:5c:c1:ca:4c: d8:3f:0a:9a:f9:90:08:c3:a4:99:5a:a4:83:d4:7a: 5f:81:bc:6f:47:93:96:8c:f1:4a:25:56:da:71:e1: 6b:f4:d5:6e:11:cb:c2:71:9d:57:1a:ec:d5:4a:7c: 65:54:ea:9e:80:f1:d9:13:d5:41:4d:5b:9b:de:c6: 4d:a1:e3:d6:d5:78:bf:5e:3c:6f:e7:63:24:d1:89: 6f:ec:82:0e:91:62:af:18:9c:a3:13:ee:d4:fc:17: b9:35:6f:73:80:b8:aa:88:50:24:e7:b5:2f:8a:e2: 40:b7:99:95:6f:6f:69:d9:17:93:51:9b:11:b1:6c: dd:8c:84:33:20:e4:d3:39:a7:9a:49:ba:b3:03:ae: 66:5d:49:06:f8:81:87:08:8e:c2:ee:1c:d3:2b:bf: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:9C:69:25:86:4C:09:ED:D6:0E:7A:D2:92:43:5C:1E:6F:49:23 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b8:48:0e:9a:91:f1:ef:46:86:04:52:08:15:36:eb:57:f2: 51:50:bd:3c:ba:6f:a6:5d:41:45:23:18:c3:d9:f3:bf:67:f5: 32:8d:73:88:f9:98:48:8a:27:fa:fc:f0:48:69:07:6e:58:1b: ef:6a:db:bf:a8:68:2c:1c:f5:e6:19:1c:de:02:ad:c0:8a:df: 0c:00:f2:a5:5c:3d:aa:e1:56:8b:06:93:70:2d:36:a4:7a:f8: 8a:13:12:72:a8:75:55:e1:bc:08:36:81:19:01:20:52:a5:3e: 79:93:09:b3:b5:9f:18:34:41:4b:25:f5:e8:f2:a2:cf:71:4d: bf:00:af:8f:17:3e:30:30:ff:6f:5d:7e:f8:f8:35:46:8e:32: 51:ac:23:87:f5:8c:11:57:b3:2d:d2:2b:29:94:62:18:4f:37: c7:c2:45:ef:75:f7:05:ea:24:37:28:d0:63:56:7a:41:78:cf: 8f:e2:d7:95:f0:c1:24:c0:c6:df:ec:8b:18:90:8a:f3:d9:64: 63:1c:52:1e:9c:1e:42:9a:53:39:f7:bf:94:71:b3:ca:c7:b5: 00:f2:26:d5:8e:c7:7e:aa:01:6a:ef:77:94:db:a2:5a:79:f3: 0a:92:0d:29:41:fa:5c:d9:ad:5c:e4:f9:9a:11:d6:c1:36:e5: 42:ef:8a:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwNTEyMTkyNjUwWhcNMjUwNTE5MTkyNjUwWjAYMRYwFAYD VQQDEw02ODIyNGI3YS1kNTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIcJYXV0l4TMOO+TCyem2Az2+sdANSXL5trp9FmavtnrjfJ+K8D8rfEdeooM Yb17NTHjIt4hoxAGg4faoOEP8VJQjMgSVnJRFIEtt08qkcvX4uDgljpx8rNhac77 CtkyoNvFMlzBykzYPwqa+ZAIw6SZWqSD1HpfgbxvR5OWjPFKJVbaceFr9NVuEcvC cZ1XGuzVSnxlVOqegPHZE9VBTVub3sZNoePW1Xi/Xjxv52Mk0Ylv7IIOkWKvGJyj E+7U/Be5NW9zgLiqiFAk57UviuJAt5mVb29p2ReTUZsRsWzdjIQzIOTTOaeaSbqz A65mXUkG+IGHCI7C7hzTK7+YlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeMnGkl hkwJ7dYOetKSQ1web0kjMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKuEgOmpHx70aGBFIIFTbrV/JRUL08um+mXUFFIxjD2fO/Z/UyjXOI +ZhIiif6/PBIaQduWBvvatu/qGgsHPXmGRzeAq3Ait8MAPKlXD2q4VaLBpNwLTak eviKExJyqHVV4bwINoEZASBSpT55kwmztZ8YNEFLJfXo8qLPcU2/AK+PFz4wMP9v XX74+DVGjjJRrCOH9YwRV7Mt0isplGIYTzfHwkXvdfcF6iQ3KNBjVnpBeM+P4teV 8MEkwMbf7IsYkIrz2WRjHFIenB5CmlM597+UcbPKx7UA8ibVjsd+qgFq73eU26Ja efMKkg0pQfpc2a1c5PmaEdbBNuVC74qw -----END CERTIFICATE-----Generated at Wed May 14 10:26:05 2025 by rpki-client