$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: Yl6aoPat1ARVXn6Aj1F9uOQ+qNlOjXTjbpQqPjTjFsY= Subject key identifier: A4:E2:9C:33:D7:C0:60:E4:B8:A4:D3:38:43:A2:79:B7:D4:AD:89:11 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0AC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0AB7 Signing time: Fri 22 Aug 2025 19:38:25 +0000 Manifest this update: Fri 22 Aug 2025 19:38:25 +0000 Manifest next update: Fri 29 Aug 2025 19:38:25 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: Rgs+PC6alJa1svB8ePGXUqCwjZk38/lYCo9AMEScopg=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2752 (0xac0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Aug 22 19:38:25 2025 GMT Not After : Aug 29 19:38:25 2025 GMT Subject: CN=68a8c731-1fb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cf:6f:c4:a9:01:1d:b7:82:ce:dd:ed:a9:c2: db:c6:52:1d:27:c3:c4:cf:e6:10:08:52:64:4a:26: b0:f1:80:67:b4:0e:dc:53:56:a1:20:e1:56:f4:de: 65:c5:38:6f:e2:b5:0d:b0:24:f5:f3:60:6d:9b:db: e4:56:a2:31:85:bd:a2:27:45:7a:39:99:5f:67:f8: aa:16:62:9c:11:1a:4d:d5:08:d6:b9:ef:cb:85:f5: 7d:bf:a7:65:d4:c5:d0:a8:98:62:0a:ad:91:43:a5: 4d:03:4b:47:0e:c7:fd:e7:02:19:eb:3f:89:91:ba: 85:c6:0f:7c:d0:be:1a:ef:c6:8c:18:56:27:c8:3a: 83:20:28:07:9a:08:5b:2a:fd:5b:74:98:ca:fe:f8: 8e:ae:ae:04:2d:80:12:b9:e5:1b:c2:48:9c:aa:80: cf:18:b2:68:77:fe:5b:59:20:b0:fa:57:80:f6:18: 14:ef:e3:40:09:ac:f9:06:fc:93:9e:c4:b5:00:5a: 2c:e4:e8:2c:29:e3:f2:13:53:41:74:b8:4d:20:60: 43:da:d3:23:86:c4:a1:a0:ab:17:18:27:be:78:93: 09:e5:a6:1c:dd:1f:94:6e:31:41:0c:08:5e:e8:df: ff:06:22:bc:26:51:ff:59:53:2f:51:e7:88:56:92: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E2:9C:33:D7:C0:60:E4:B8:A4:D3:38:43:A2:79:B7:D4:AD:89:11 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:66:a3:45:3e:9d:50:33:bb:12:1e:b9:7b:5b:8a:76:16:9f: 98:48:dd:9e:8c:e3:49:85:28:e8:f2:c0:bd:0c:f2:93:e2:ad: 59:d6:28:d0:00:e1:ae:d5:c3:64:ee:9a:9b:e6:2c:38:6e:7f: 45:35:c3:ca:1f:1f:53:a7:4e:ea:41:96:c9:d3:f0:0d:d0:80: b7:7e:92:05:48:d3:0e:38:08:cc:90:ca:75:0e:66:37:73:2c: 68:95:80:1e:99:06:db:24:17:da:58:2f:61:c4:a2:35:2f:4f: 4c:be:11:b4:0d:b7:c7:2c:f2:5d:77:4e:2d:db:e4:67:a5:8b: 1f:37:60:76:25:d2:95:cb:f3:e7:c6:70:05:d1:3a:32:c3:09: a1:58:09:a8:ea:b6:60:c9:c7:05:03:4a:ef:91:dc:67:0b:bd: 02:da:9b:dd:30:d3:a6:7e:28:9c:80:06:44:3f:35:60:bf:0b: 1f:63:7b:1a:49:73:ce:ab:bd:77:9d:35:1a:d2:9b:08:17:2e: dd:cd:f7:2c:45:49:d7:3a:8a:7e:b0:dc:3b:01:ac:52:81:c9: d0:c1:3f:45:66:8c:72:f9:3e:bb:62:10:bd:54:c9:1a:49:ab: 67:7e:26:06:a0:0e:e6:10:89:d3:bc:27:bc:35:75:9f:5d:7d: 47:97:59:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwODIyMTkzODI1WhcNMjUwODI5MTkzODI1WjAYMRYwFAYD VQQDEw02OGE4YzczMS0xZmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus9vxKkBHbeCzt3tqcLbxlIdJ8PEz+YQCFJkSiaw8YBntA7cU1ahIOFW9N5l xThv4rUNsCT182Btm9vkVqIxhb2iJ0V6OZlfZ/iqFmKcERpN1QjWue/LhfV9v6dl 1MXQqJhiCq2RQ6VNA0tHDsf95wIZ6z+JkbqFxg980L4a78aMGFYnyDqDICgHmghb Kv1bdJjK/viOrq4ELYASueUbwkicqoDPGLJod/5bWSCw+leA9hgU7+NACaz5BvyT nsS1AFos5OgsKePyE1NBdLhNIGBD2tMjhsShoKsXGCe+eJMJ5aYc3R+UbjFBDAhe 6N//BiK8JlH/WVMvUeeIVpK5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTinDPX wGDkuKTTOEOiebfUrYkRMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjZqNFPp1QM7sSHrl7W4p2Fp+YSN2ejONJhSjo8sC9DPKT4q1Z1ijQ AOGu1cNk7pqb5iw4bn9FNcPKHx9Tp07qQZbJ0/AN0IC3fpIFSNMOOAjMkMp1DmY3 cyxolYAemQbbJBfaWC9hxKI1L09MvhG0DbfHLPJdd04t2+RnpYsfN2B2JdKVy/Pn xnAF0ToywwmhWAmo6rZgyccFA0rvkdxnC70C2pvdMNOmfiicgAZEPzVgvwsfY3sa SXPOq713nTUa0psIFy7dzfcsRUnXOop+sNw7AaxSgcnQwT9FZoxy+T67YhC9VMka SatnfiYGoA7mEInTvCe8NXWfXX1Hl1lB -----END CERTIFICATE-----Generated at Sun Aug 24 06:34:55 2025 by rpki-client