$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: 0NSX1PaJbTo01+ognkJo4unrfSnseeUCNKiAGgst5uI= Subject key identifier: 41:A9:11:8B:BA:A4:84:02:0C:16:3E:DA:2F:51:0D:B0:36:E4:BE:F0 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0AE3 Signing time: Sun 02 Nov 2025 19:24:11 +0000 Manifest this update: Sun 02 Nov 2025 19:24:10 +0000 Manifest next update: Sun 09 Nov 2025 19:24:10 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: q7k1Nr1TQUGr881aBiUXmkXGVlNkhKaJnRzwxT9XmKY=) 2: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (hash: JbWNNhA20d+dAoRyypjRFzGhqwrye4eeN4qT6OW5LWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Nov 2 19:24:10 2025 GMT Not After : Nov 9 19:24:10 2025 GMT Subject: CN=6907afda-6cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b7:bc:68:47:32:13:12:9d:6f:54:20:dd:56: 2a:89:2f:53:d1:88:76:11:33:e2:88:0d:f2:78:21: cf:4e:73:8b:b6:40:c3:f4:15:8d:fe:c7:f7:8c:04: ed:3d:97:89:20:dd:d9:98:6a:48:71:2a:68:0e:c9: b4:ed:34:ec:02:fc:f8:88:a3:25:54:81:c9:a2:28: 89:0a:60:09:d5:49:a0:ed:ac:c5:7a:33:22:58:f5: 88:66:23:48:e8:fe:30:7b:d4:15:18:8d:1d:dd:a8: a0:a0:6f:24:a1:f3:82:66:60:c4:82:20:fc:c3:0f: 17:95:34:64:8a:18:cb:4d:1e:02:33:6f:c2:8e:24: 86:60:c3:8a:e1:7d:23:41:7a:f3:6e:df:d7:29:a3: 62:77:ea:86:c1:fc:fe:e9:d4:e7:82:52:5e:ca:3c: 69:97:0f:7f:8a:2a:bd:24:16:a6:d9:88:92:46:bb: 24:8d:e8:64:bf:83:be:6e:d7:73:81:86:49:e5:d5: 7f:02:ed:45:84:59:ea:77:da:8c:a7:84:ca:8b:de: 3b:0e:4d:4d:16:25:c9:ef:f8:5a:07:3f:13:ce:b2: 93:e3:6c:ce:96:74:48:0c:6d:b9:64:d9:ab:03:5a: 57:f8:0a:e3:80:19:b3:f6:a8:9f:e3:42:9e:88:1c: 16:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:11:8B:BA:A4:84:02:0C:16:3E:DA:2F:51:0D:B0:36:E4:BE:F0 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:2f:22:e3:d1:67:40:23:f5:a3:80:49:fc:24:c6:04:a9:af: 35:02:83:91:d2:f6:37:db:a7:b6:c4:56:c9:ad:e3:92:5c:cf: 51:54:1d:de:15:d9:dc:ab:63:0f:a6:5b:96:1e:2a:ad:1e:3d: 91:14:8c:8b:40:73:c7:40:f9:15:32:77:ce:f8:cc:28:02:0f: 6b:e5:57:db:90:9d:bd:0e:09:26:e4:b6:ae:a8:b4:f7:55:0e: a9:9f:be:98:42:68:1d:a7:bc:1f:a4:36:e5:03:07:84:c1:1f: 49:04:f1:1b:90:1a:71:3f:8a:c9:54:00:79:d4:ca:29:98:38: 89:77:78:bd:5c:0f:2d:42:7a:e4:f8:12:2c:b6:e1:f3:69:0b: 5a:56:b6:61:72:61:50:7a:2c:5f:41:4f:8e:94:b2:13:12:e4: 3d:e8:d0:5f:02:e5:7d:34:25:d3:24:02:f6:e0:d6:de:4b:ae: e1:f0:cf:d3:37:15:54:67:fa:09:ea:e7:ea:0f:74:d3:87:d1: ad:b7:d9:ca:39:17:30:1e:94:d4:8e:38:0e:09:5d:67:bf:05: fa:24:41:9c:db:19:0b:6c:5c:a6:2e:5d:46:85:b4:5a:5d:d8: 09:db:67:a4:f6:34:3d:03:b5:7f:4d:dd:81:d9:ec:fc:92:00: c1:6b:dc:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUxMTAyMTkyNDEwWhcNMjUxMTA5MTkyNDEwWjAYMRYwFAYD VQQDEw02OTA3YWZkYS02Y2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7e8aEcyExKdb1Qg3VYqiS9T0Yh2ETPiiA3yeCHPTnOLtkDD9BWN/sf3jATt PZeJIN3ZmGpIcSpoDsm07TTsAvz4iKMlVIHJoiiJCmAJ1Umg7azFejMiWPWIZiNI 6P4we9QVGI0d3aigoG8kofOCZmDEgiD8ww8XlTRkihjLTR4CM2/CjiSGYMOK4X0j QXrzbt/XKaNid+qGwfz+6dTnglJeyjxplw9/iiq9JBam2YiSRrskjehkv4O+btdz gYZJ5dV/Au1FhFnqd9qMp4TKi947Dk1NFiXJ7/haBz8TzrKT42zOlnRIDG25ZNmr A1pX+ArjgBmz9qif40KeiBwWGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEGpEYu6 pIQCDBY+2i9RDbA25L7wMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAALyLj0WdAI/WjgEn8JMYEqa81AoOR0vY326e2xFbJreOSXM9RVB3e Fdncq2MPpluWHiqtHj2RFIyLQHPHQPkVMnfO+MwoAg9r5VfbkJ29Dgkm5LauqLT3 VQ6pn76YQmgdp7wfpDblAweEwR9JBPEbkBpxP4rJVAB51MopmDiJd3i9XA8tQnrk +BIstuHzaQtaVrZhcmFQeixfQU+OlLITEuQ96NBfAuV9NCXTJAL24NbeS67h8M/T NxVUZ/oJ6ufqD3TTh9Gtt9nKORcwHpTUjjgOCV1nvwX6JEGc2xkLbFymLl1GhbRa XdgJ22ek9jQ9A7V/Td2B2ez8kgDBa9zJ -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:13 2025 by rpki-client