$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: H58EkNRe6kfp7/S2/3vSVjx/cFoSggmoOPNFGtg/rwg= Subject key identifier: D4:19:D1:A2:30:AC:1A:1C:D1:B4:64:EE:97:88:72:38:B4:23:5F:9C Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0ABA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0AB1 Signing time: Sun 10 Aug 2025 19:32:37 +0000 Manifest this update: Sun 10 Aug 2025 19:32:36 +0000 Manifest next update: Sun 17 Aug 2025 19:32:36 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: pBcIm8O5efEJrsm5NlcGhYjn5T34xXF7nh69vwKLTHI=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2746 (0xaba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Aug 10 19:32:36 2025 GMT Not After : Aug 17 19:32:36 2025 GMT Subject: CN=6898f3d5-f5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:15:e4:63:5a:f5:32:92:51:99:df:3c:3e:87: ff:ea:ea:e9:2d:9f:4f:43:82:36:3a:47:d2:4b:ee: 35:a1:68:4e:88:4d:3a:d4:42:c1:29:02:ce:11:5c: 3e:0d:d7:e2:ff:c3:04:30:7e:b8:c7:86:02:5b:14: 4f:5b:34:dd:ef:2d:1a:0d:3c:2f:cf:c9:89:48:43: a0:57:ee:92:a5:a4:86:a8:e1:23:32:f7:d6:02:f6: 79:63:8d:00:79:af:ca:d3:05:79:7b:56:8c:c6:43: 80:29:3e:7a:0a:69:da:74:cf:40:24:74:d3:c7:30: 36:f2:cc:d5:dd:5c:c5:fe:b2:94:e3:ab:91:00:a5: fa:4c:3a:46:2f:62:84:e1:d8:f9:56:4f:8f:f7:cf: df:73:6a:5d:ef:ef:6f:16:56:e5:7f:d3:ce:7d:0d: 10:23:6f:86:e7:d2:4a:83:b0:04:de:0b:8d:8f:15: 09:7d:d3:01:38:10:7d:cc:2f:dd:cd:1f:c0:fb:46: 98:67:b3:4b:12:29:89:c3:8b:f4:2e:7b:f9:4a:cb: d8:ee:18:eb:d3:8e:d6:ce:e9:51:95:a3:06:16:9d: 3c:c6:0f:59:29:e6:b6:eb:e9:88:f5:37:5d:c3:19: 19:a2:72:a3:da:ab:37:15:e5:63:37:5a:f6:a4:28: cc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:D1:A2:30:AC:1A:1C:D1:B4:64:EE:97:88:72:38:B4:23:5F:9C X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:26:af:fc:62:1c:f1:c2:ba:3c:c9:a2:fd:46:b2:37:86:d1: 4e:c0:1a:d9:9e:e7:80:2c:18:83:80:88:cc:9e:ee:8d:bd:2f: 23:b0:de:12:da:10:ac:1f:72:a7:4f:d7:ea:13:e4:60:81:06: 87:29:f8:19:17:8d:62:45:b6:5e:b6:91:7d:ad:02:7a:db:a1: 94:87:38:fb:6b:de:df:9f:cb:63:c3:b4:51:5c:9d:71:fa:5b: 75:6d:5f:27:e1:81:a7:c1:bd:97:88:c9:4e:eb:c2:15:a4:87: 6d:d5:1a:07:61:d8:c6:70:26:22:4c:90:92:16:1d:1b:35:ea: d6:a1:c7:2f:1b:77:ab:30:0f:30:07:a8:cd:31:38:9b:b5:c5: 7e:76:34:c6:53:79:4f:af:d5:c0:72:06:4a:98:14:62:95:83: fa:b8:37:63:92:26:72:aa:5d:23:fc:9a:58:d1:f7:17:b1:65: 13:27:8c:06:40:9d:3b:88:ed:72:09:8f:f8:91:d2:28:c8:22: 1a:84:0a:cc:9e:a3:ff:13:31:0d:9c:3f:a9:38:98:96:49:d0: 23:c2:61:da:be:39:f8:2f:54:f6:c1:99:56:c6:a2:01:5a:3f: 5e:c1:39:89:a2:7a:da:1e:37:33:0d:5e:35:bd:38:98:e2:32: b4:9b:b7:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwODEwMTkzMjM2WhcNMjUwODE3MTkzMjM2WjAYMRYwFAYD VQQDEw02ODk4ZjNkNS1mNWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhXkY1r1MpJRmd88Pof/6urpLZ9PQ4I2OkfSS+41oWhOiE061ELBKQLOEVw+ Ddfi/8MEMH64x4YCWxRPWzTd7y0aDTwvz8mJSEOgV+6SpaSGqOEjMvfWAvZ5Y40A ea/K0wV5e1aMxkOAKT56CmnadM9AJHTTxzA28szV3VzF/rKU46uRAKX6TDpGL2KE 4dj5Vk+P98/fc2pd7+9vFlblf9POfQ0QI2+G59JKg7AE3guNjxUJfdMBOBB9zC/d zR/A+0aYZ7NLEimJw4v0Lnv5SsvY7hjr047WzulRlaMGFp08xg9ZKea26+mI9Tdd wxkZonKj2qs3FeVjN1r2pCjM3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQZ0aIw rBoc0bRk7peIcji0I1+cMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzJq/8Yhzxwro8yaL9RrI3htFOwBrZnueALBiDgIjMnu6NvS8jsN4S 2hCsH3KnT9fqE+RggQaHKfgZF41iRbZetpF9rQJ626GUhzj7a97fn8tjw7RRXJ1x +lt1bV8n4YGnwb2XiMlO68IVpIdt1RoHYdjGcCYiTJCSFh0bNerWoccvG3erMA8w B6jNMTibtcV+djTGU3lPr9XAcgZKmBRilYP6uDdjkiZyql0j/JpY0fcXsWUTJ4wG QJ07iO1yCY/4kdIoyCIahArMnqP/EzENnD+pOJiWSdAjwmHavjn4L1T2wZlWxqIB Wj9ewTmJonraHjczDV41vTiY4jK0m7ey -----END CERTIFICATE-----Generated at Mon Aug 11 12:52:27 2025 by rpki-client