$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: WX0OIDjBgqBolxVaWDKEv5C5q3GZTVOfLTrkJ3Pv7j8= Subject key identifier: D4:1A:F8:04:83:7F:FA:E6:B3:17:6A:60:3D:FA:E2:87:B6:8F:39:86 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0A9D Signing time: Wed 02 Jul 2025 19:46:59 +0000 Manifest this update: Wed 02 Jul 2025 19:46:59 +0000 Manifest next update: Wed 09 Jul 2025 19:46:59 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: WLIBQvWvrz9TVXFSvALrB+1pUy6pyWS3tp9XSEsSK2Y=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2726 (0xaa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Jul 2 19:46:59 2025 GMT Not After : Jul 9 19:46:59 2025 GMT Subject: CN=68658cb3-5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:51:d9:9f:e7:56:cc:69:aa:aa:cb:0e:91: 8f:3e:47:a6:26:d7:3d:b7:37:6a:16:32:d6:67:a4: 50:28:ac:1f:2f:21:63:3c:21:98:5f:0d:e1:41:8b: f5:3e:2c:97:93:48:da:a0:97:c1:29:16:e6:61:c6: dc:29:8f:82:d4:86:71:db:64:84:79:30:af:57:e4: 8f:46:f3:29:e0:ff:15:95:af:6d:a3:62:0f:31:f4: b0:1a:e4:50:7c:ff:ba:70:60:f1:bf:70:39:ce:24: 09:98:29:57:a7:23:42:89:f6:ff:8c:96:fd:a7:6b: 1c:ed:7d:6e:98:15:ec:6c:a5:1a:15:4d:2f:0e:77: 5a:16:06:f4:82:77:4a:9f:1a:29:84:8e:91:94:43: b6:35:06:d8:d4:f6:b5:cd:41:6a:94:86:b1:0d:77: f0:94:6c:66:ec:68:d0:4c:d2:a8:54:db:7c:ff:67: 26:3d:d9:20:43:77:f3:86:47:bf:43:bf:c9:85:7c: c8:c3:50:24:9c:75:e1:76:aa:8e:04:11:ea:bf:7a: 77:c8:1d:54:b1:11:5a:ca:dd:3f:2c:a6:26:01:7f: a6:89:cf:76:96:d3:47:4d:42:4e:01:8d:03:89:ff: 13:86:23:d1:68:cf:5d:85:1f:29:f2:6c:c5:fe:5b: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1A:F8:04:83:7F:FA:E6:B3:17:6A:60:3D:FA:E2:87:B6:8F:39:86 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:96:2f:c1:27:37:db:85:bf:88:29:cc:40:77:72:37:de:55: 9a:b7:ea:94:b5:56:51:8a:19:9f:56:39:d2:43:f1:c6:4f:c9: f9:0b:e9:cf:03:71:8a:66:04:35:ca:9d:8a:03:5c:dd:a8:e8: 6b:cb:7c:db:85:cc:f3:e4:2d:b6:db:5a:11:5a:ef:19:93:d8: 28:5c:d0:39:6d:eb:cc:b7:d2:2f:40:86:77:81:8a:b1:20:0d: c3:cc:f4:67:33:52:93:fd:9e:cd:b5:6f:e3:ad:4d:04:4b:75: 64:86:bf:51:96:09:31:17:88:6c:66:a7:71:8f:10:c5:54:55: b7:fa:b7:85:44:41:ad:fd:a0:7e:d6:53:95:4c:93:3d:e8:68: 3f:70:e3:c8:60:6c:09:05:3c:38:d7:25:4d:72:19:9b:9b:0a: 91:81:03:fa:db:35:eb:64:67:41:b0:66:e8:e7:b8:b6:e3:aa: 7a:9d:fd:e9:35:75:f0:0c:db:43:97:57:e3:ef:08:74:49:7d: ed:58:56:c3:bf:73:4e:1a:d9:d6:53:dd:62:36:4a:a4:1c:35: bf:c0:73:09:0f:0f:66:4e:ab:44:c1:f6:74:ca:86:a8:8d:4c: ff:3b:3a:20:29:f9:8c:70:87:17:a8:9c:14:41:2b:5d:69:0a: 0a:ea:96:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwNzAyMTk0NjU5WhcNMjUwNzA5MTk0NjU5WjAYMRYwFAYD VQQDEw02ODY1OGNiMy01MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IJR2Z/nVsxpqqrLDpGPPkemJtc9tzdqFjLWZ6RQKKwfLyFjPCGYXw3hQYv1 PiyXk0jaoJfBKRbmYcbcKY+C1IZx22SEeTCvV+SPRvMp4P8Vla9to2IPMfSwGuRQ fP+6cGDxv3A5ziQJmClXpyNCifb/jJb9p2sc7X1umBXsbKUaFU0vDndaFgb0gndK nxophI6RlEO2NQbY1Pa1zUFqlIaxDXfwlGxm7GjQTNKoVNt8/2cmPdkgQ3fzhke/ Q7/JhXzIw1AknHXhdqqOBBHqv3p3yB1UsRFayt0/LKYmAX+mic92ltNHTUJOAY0D if8ThiPRaM9dhR8p8mzF/lvGRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQa+ASD f/rmsxdqYD364oe2jzmGMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCali/BJzfbhb+IKcxAd3I33lWat+qUtVZRihmfVjnSQ/HGT8n5C+nP A3GKZgQ1yp2KA1zdqOhry3zbhczz5C2221oRWu8Zk9goXNA5bevMt9IvQIZ3gYqx IA3DzPRnM1KT/Z7NtW/jrU0ES3Vkhr9RlgkxF4hsZqdxjxDFVFW3+reFREGt/aB+ 1lOVTJM96Gg/cOPIYGwJBTw41yVNchmbmwqRgQP62zXrZGdBsGbo57i246p6nf3p NXXwDNtDl1fj7wh0SX3tWFbDv3NOGtnWU91iNkqkHDW/wHMJDw9mTqtEwfZ0yoao jUz/OzogKfmMcIcXqJwUQStdaQoK6paw -----END CERTIFICATE-----Generated at Thu Jul 3 10:47:32 2025 by rpki-client