$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: 2dG6hJJLxqAzI40gw5FFEf/VbCV8sl/QkinquG0a79U= Subject key identifier: 87:E9:B2:52:2D:EB:D1:72:8F:25:61:0A:04:8B:16:C9:67:63:D9:F1 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0AD4 Signing time: Sat 18 Oct 2025 20:23:23 +0000 Manifest this update: Sat 18 Oct 2025 20:23:22 +0000 Manifest next update: Sat 25 Oct 2025 20:23:22 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: mfQNSiPnkOXRq7rffCG+3u+yKRZf6eggwNjJC6ie8To=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Oct 18 20:23:22 2025 GMT Not After : Oct 25 20:23:22 2025 GMT Subject: CN=68f3f73a-65be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:db:71:86:c6:2f:c7:bd:f0:90:7b:95:32: 49:59:e4:6d:02:b6:54:22:7d:25:a1:87:13:13:96: 7c:80:f4:5b:e7:4d:38:78:b7:8d:b9:49:52:74:88: dc:91:43:ce:82:ca:0c:c3:30:17:2d:c5:48:2b:3a: 6a:30:97:af:5b:f3:66:d8:80:35:e9:76:fd:0b:49: d4:41:3a:a7:9f:e9:43:48:9a:07:ac:57:52:06:36: 4b:49:73:17:10:bd:3e:92:09:cb:5a:1d:24:59:5a: 65:50:13:f7:8c:ec:ab:51:64:d8:40:29:f8:c3:12: 44:9c:ff:d5:2c:d9:33:2e:56:b6:b2:be:17:38:16: 28:85:ea:e5:a1:3c:5a:6a:19:cd:51:f0:23:18:1e: e3:80:a8:74:50:f2:45:ad:53:43:9c:cf:27:42:e5: 79:31:94:f8:7c:d6:38:2c:55:7f:f7:f0:ef:3a:a1: 78:36:9c:63:38:f3:3f:3b:d2:a9:f8:02:08:de:a0: 39:af:2a:49:07:ef:55:9a:95:6f:5d:f0:3f:f2:6c: 24:6f:81:0c:ac:03:96:07:e7:ed:5b:c1:8f:40:e9: cb:fb:47:05:7b:b6:3e:1f:31:20:7e:3a:5e:87:24: aa:d9:47:77:96:c7:12:57:a9:c8:6a:32:b1:eb:c3: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E9:B2:52:2D:EB:D1:72:8F:25:61:0A:04:8B:16:C9:67:63:D9:F1 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:4b:5b:b6:43:48:1a:8a:08:a4:1f:e8:12:76:bc:d6:b7:94: f3:e8:5e:b0:c5:8f:a0:1a:f4:3c:1a:34:52:76:97:25:a7:01: 30:6a:98:8f:cb:7c:1a:cc:e9:a9:8c:e5:83:8a:c8:50:ec:20: 64:aa:ce:c4:b3:e0:b3:d8:5f:13:67:df:bf:b6:29:7f:8c:eb: 55:40:82:38:03:87:f4:e6:d8:49:7b:d3:5a:9f:73:73:00:91: 44:cb:8f:f7:1b:e0:83:45:c7:39:26:e6:f4:78:fc:6f:23:0c: 17:82:77:ad:6b:0b:b6:b5:09:cd:d4:23:2e:c1:91:b8:30:86: 7c:ff:46:cb:08:6d:a6:2e:85:04:f8:89:36:ac:36:82:7e:ba: 67:83:29:da:97:87:d1:40:da:ec:78:15:cb:97:48:6d:c8:ab: 83:b1:22:22:ca:0d:74:ed:30:0f:16:bb:13:3a:c0:b5:9b:19: 43:b9:a4:83:16:fb:a1:99:77:0b:08:e7:d1:8f:01:01:b4:c7: 81:64:b8:b5:8a:58:b4:5a:16:33:c4:25:42:8a:cc:fc:72:86: 76:30:6a:79:c9:80:d3:af:a2:b8:71:8d:51:a7:52:90:78:f8: 50:4b:ed:98:3d:63:86:a3:05:13:a0:22:38:cb:42:03:78:a3: 1a:77:aa:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUxMDE4MjAyMzIyWhcNMjUxMDI1MjAyMzIyWjAYMRYwFAYD VQQDEw02OGYzZjczYS02NWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshfbcYbGL8e98JB7lTJJWeRtArZUIn0loYcTE5Z8gPRb5004eLeNuUlSdIjc kUPOgsoMwzAXLcVIKzpqMJevW/Nm2IA16Xb9C0nUQTqnn+lDSJoHrFdSBjZLSXMX EL0+kgnLWh0kWVplUBP3jOyrUWTYQCn4wxJEnP/VLNkzLla2sr4XOBYoherloTxa ahnNUfAjGB7jgKh0UPJFrVNDnM8nQuV5MZT4fNY4LFV/9/DvOqF4NpxjOPM/O9Kp +AII3qA5rypJB+9VmpVvXfA/8mwkb4EMrAOWB+ftW8GPQOnL+0cFe7Y+HzEgfjpe hySq2Ud3lscSV6nIajKx68OWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfpslIt 69FyjyVhCgSLFslnY9nxMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2S1u2Q0gaigikH+gSdrzWt5Tz6F6wxY+gGvQ8GjRSdpclpwEwapiP y3wazOmpjOWDishQ7CBkqs7Es+Cz2F8TZ9+/til/jOtVQII4A4f05thJe9Nan3Nz AJFEy4/3G+CDRcc5Jub0ePxvIwwXgnetawu2tQnN1CMuwZG4MIZ8/0bLCG2mLoUE +Ik2rDaCfrpngynal4fRQNrseBXLl0htyKuDsSIiyg107TAPFrsTOsC1mxlDuaSD FvuhmXcLCOfRjwEBtMeBZLi1ili0WhYzxCVCisz8coZ2MGp5yYDTr6K4cY1Rp1KQ ePhQS+2YPWOGowUToCI4y0IDeKMad6pb -----END CERTIFICATE-----Generated at Mon Oct 20 05:39:54 2025 by rpki-client