$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: QWFoxSw0AhRiiFTYcg3MrOkAety4uC3H9bdul799Hf4= Subject key identifier: 96:EC:9D:35:A5:BF:5D:FF:BA:A2:95:80:50:A4:DD:C6:98:3A:4D:89 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0B3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0B2E Signing time: Tue 24 Mar 2026 19:05:55 +0000 Manifest this update: Tue 24 Mar 2026 19:05:54 +0000 Manifest next update: Tue 31 Mar 2026 19:05:54 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: 9Ii2vhDFTNNv00AoD8E19UJZfajXajVRiaJm3oNxM9I=) 2: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (hash: Jy+t2iiW6q1TvRtUSKswIvEzK+LCkTTNdcYYtc+zbi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2876 (0xb3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Mar 24 19:05:54 2026 GMT Not After : Mar 31 19:05:54 2026 GMT Subject: CN=69c2e093-62ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f3:e1:5f:aa:27:c6:45:b0:ab:19:dc:df:0f: 45:e0:5e:8d:ed:85:62:6d:60:8e:d3:96:8c:1c:ae: 3c:4c:77:e1:d1:a9:81:8b:eb:5f:33:f5:8b:ba:f8: d0:6d:1f:0b:29:ab:a6:b0:07:ec:90:2b:06:38:3d: bc:5f:3c:db:f8:d5:6e:5c:b8:a4:f1:7d:79:9c:33: 55:8f:72:de:b5:55:34:86:d4:ce:b7:5c:80:a0:7d: 2e:ad:60:cb:a1:22:f9:b8:27:85:96:73:ff:55:39: ac:7e:81:c8:f9:94:52:73:ad:f5:95:27:9d:48:59: 02:3a:a2:40:78:94:a1:e7:69:7e:ff:d1:56:6a:8f: fe:51:f5:d0:9a:b7:11:a6:a6:34:49:2b:c3:06:79: 07:62:69:e1:ba:41:05:9a:37:54:24:e4:bf:0a:8f: c1:55:60:35:dc:9e:8f:92:e2:d4:24:2e:99:93:16: ea:27:ab:19:09:bc:53:ae:55:ef:37:8d:2b:b1:10: a0:b4:9f:58:24:ad:20:ef:9a:92:03:6d:f4:89:74: 8d:aa:07:6f:5d:d6:d9:e1:33:4d:2f:5a:f7:5f:a7: e5:3a:4e:0b:c7:54:79:50:6b:2a:66:3d:c1:e2:cb: 47:ec:93:65:9c:27:f7:28:d0:63:69:4f:77:40:d2: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EC:9D:35:A5:BF:5D:FF:BA:A2:95:80:50:A4:DD:C6:98:3A:4D:89 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:85:5a:21:64:a4:9c:0d:7a:a3:04:5d:f2:c6:9f:c4:4e:b8: e0:75:f0:47:f0:f2:c5:fd:8c:dd:10:cc:81:64:4e:0d:e2:bd: 30:55:1f:69:3a:09:f5:62:5d:d2:70:fa:98:5e:b9:7d:6b:6c: e7:13:60:4a:f3:40:b0:29:ba:a8:54:e3:88:38:89:dc:b4:6a: 43:91:99:61:a1:c5:ae:ee:d2:d2:a7:bd:71:25:80:ce:16:a1: 47:5a:c8:21:ea:15:f5:c6:e3:58:99:27:2f:66:8f:53:82:98: 91:6c:c2:23:a0:62:62:70:b6:51:1d:93:3a:ee:23:a1:16:be: 46:0f:3f:cb:bc:4a:ef:05:82:a1:13:0e:ab:28:94:10:1f:33: b6:ff:71:0f:81:56:ed:28:4b:b6:fe:ed:33:c6:cc:80:94:6e: 66:57:c7:51:ac:36:35:73:15:55:e2:51:31:9d:47:81:3e:ae: 69:9c:7a:92:fe:22:40:6b:c4:70:5e:c2:54:df:a1:91:74:b9: 17:58:73:e2:a2:ed:20:0f:1f:52:a4:42:49:5a:ea:ce:ce:f5: 91:84:8b:c4:ba:f8:c3:d8:5c:72:7e:32:9d:50:cf:16:ac:da: 56:2e:63:3b:ec:dd:7f:a4:32:e4:d7:3e:5b:46:48:71:83:b1: 3c:d8:33:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjYwMzI0MTkwNTU0WhcNMjYwMzMxMTkwNTU0WjAYMRYwFAYD VQQDEw02OWMyZTA5My02MmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfPhX6onxkWwqxnc3w9F4F6N7YVibWCO05aMHK48THfh0amBi+tfM/WLuvjQ bR8LKaumsAfskCsGOD28Xzzb+NVuXLik8X15nDNVj3LetVU0htTOt1yAoH0urWDL oSL5uCeFlnP/VTmsfoHI+ZRSc631lSedSFkCOqJAeJSh52l+/9FWao/+UfXQmrcR pqY0SSvDBnkHYmnhukEFmjdUJOS/Co/BVWA13J6PkuLUJC6ZkxbqJ6sZCbxTrlXv N40rsRCgtJ9YJK0g75qSA230iXSNqgdvXdbZ4TNNL1r3X6flOk4Lx1R5UGsqZj3B 4stH7JNlnCf3KNBjaU93QNJ3/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbsnTWl v13/uqKVgFCk3caYOk2JMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXoVaIWSknA16owRd8safxE644HXwR/Dyxf2M3RDMgWRODeK9MFUfaToJ9WJd 0nD6mF65fWts5xNgSvNAsCm6qFTjiDiJ3LRqQ5GZYaHFru7S0qe9cSWAzhahR1rI IeoV9cbjWJknL2aPU4KYkWzCI6BiYnC2UR2TOu4joRa+Rg8/y7xK7wWCoRMOqyiU EB8ztv9xD4FW7ShLtv7tM8bMgJRuZlfHUaw2NXMVVeJRMZ1HgT6uaZx6kv4iQGvE cF7CVN+hkXS5F1hz4qLtIA8fUqRCSVrqzs71kYSLxLr4w9hccn4ynVDPFqzaVi5j O+zdf6Qy5Nc+W0ZIcYOxPNgzuQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:16 2026 by rpki-client