$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: 7DTmwIt3/PwsHHKB1EFHbSh6hiORjD7ssF0pY8Fmekg= Subject key identifier: 35:54:AE:47:C2:9F:DA:65:4A:79:8A:C0:88:C0:B2:05:B8:E5:0B:C1 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0A7B Signing time: Thu 24 Apr 2025 19:30:26 +0000 Manifest this update: Thu 24 Apr 2025 19:30:25 +0000 Manifest next update: Thu 01 May 2025 19:30:25 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: YByMK2ELIs0713JI2vRDBl+25qmtXCOaJk3wtmCRZVk=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Apr 24 19:30:25 2025 GMT Not After : May 1 19:30:25 2025 GMT Subject: CN=680a9152-cb5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:65:df:b0:3a:34:9a:f2:2e:dd:e7:d3:40: 7f:b5:a5:fe:d8:6f:89:52:2d:ea:05:79:6a:c9:f3: a9:4a:e3:72:0f:83:dd:a0:99:a6:20:72:0d:59:d4: 62:f2:82:6e:ce:f4:c4:a9:f6:d9:3d:23:cb:85:4b: c6:4c:2d:ab:7f:71:5a:db:aa:fe:9a:85:00:94:77: 23:5f:bd:e2:ac:37:66:e5:7f:07:37:0b:ea:2a:96: 1a:2e:5d:a2:f7:b1:0d:cb:38:ae:11:a3:0f:0a:04: d2:d0:55:b9:34:2a:83:da:ed:4a:de:ee:17:3b:91: 3a:e7:de:23:14:57:a9:82:3d:d2:92:fc:24:5f:0f: 41:b8:0a:b7:42:e1:ac:58:8f:62:5e:b3:47:60:94: 38:70:0f:13:d3:c2:a4:f4:07:87:0f:ad:17:8a:8a: ce:73:c1:66:b7:98:98:6f:9b:56:a3:18:51:75:b3: c9:d5:71:7f:6a:80:b7:99:86:dc:77:74:81:2d:4a: 1c:ae:b3:80:7b:2c:69:ab:0f:ca:40:44:1a:71:99: a6:13:08:fb:98:f1:1c:85:72:67:8f:da:85:50:ac: 85:19:b6:9b:75:53:b3:cc:1a:2f:9d:da:31:b1:e5: 34:5e:79:b5:4f:fa:f6:b8:79:9c:7a:0d:03:71:30: 57:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:54:AE:47:C2:9F:DA:65:4A:79:8A:C0:88:C0:B2:05:B8:E5:0B:C1 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:35:33:83:03:7f:db:1d:d2:48:1d:88:f0:f6:75:23:c0:9e: 68:5c:b0:74:d6:00:4c:22:12:98:78:26:e4:20:13:3e:9b:98: 37:84:32:43:83:17:31:46:7c:b6:68:41:e2:07:23:f4:bf:8e: 1b:6e:dc:e2:03:52:5b:cf:d4:c0:ea:87:a0:70:a2:b3:26:f7: 48:db:1f:7e:75:21:bc:63:4e:64:67:3f:96:72:a4:4c:97:58: e5:d5:ea:59:ee:95:02:a2:aa:a3:47:f6:be:73:8e:15:33:cc: 19:b5:d6:f6:2b:23:fc:8f:07:6c:db:96:ec:de:fc:c6:51:00: 4e:a7:af:39:cd:e4:c3:c7:77:6a:27:ab:6a:f2:33:88:e9:5c: b1:92:63:03:4c:e6:75:5f:e4:cb:05:cc:2e:47:ba:3e:52:48: 98:fd:f2:e3:39:c0:bb:b3:b6:8c:e8:00:19:41:b1:91:cc:cd: f6:78:1d:06:1c:8c:3e:9c:23:cd:96:34:d7:0b:db:f8:b3:18: 02:f2:45:1d:46:56:d9:bb:09:27:c9:21:96:68:b9:25:a8:71: 00:1f:9b:02:aa:d1:25:d5:17:cb:3d:e3:f2:53:98:b5:8a:b3: 9a:4a:6a:c1:27:fe:67:7f:cc:50:35:f0:2e:cb:44:ca:2f:c4: 2c:78:7e:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwNDI0MTkzMDI1WhcNMjUwNTAxMTkzMDI1WjAYMRYwFAYD VQQDEw02ODBhOTE1Mi1jYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssxl37A6NJryLt3n00B/taX+2G+JUi3qBXlqyfOpSuNyD4PdoJmmIHINWdRi 8oJuzvTEqfbZPSPLhUvGTC2rf3Fa26r+moUAlHcjX73irDdm5X8HNwvqKpYaLl2i 97ENyziuEaMPCgTS0FW5NCqD2u1K3u4XO5E6594jFFepgj3SkvwkXw9BuAq3QuGs WI9iXrNHYJQ4cA8T08Kk9AeHD60XiorOc8Fmt5iYb5tWoxhRdbPJ1XF/aoC3mYbc d3SBLUocrrOAeyxpqw/KQEQacZmmEwj7mPEchXJnj9qFUKyFGbabdVOzzBovndox seU0Xnm1T/r2uHmceg0DcTBXKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVUrkfC n9plSnmKwIjAsgW45QvBMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChNTODA3/bHdJIHYjw9nUjwJ5oXLB01gBMIhKYeCbkIBM+m5g3hDJD gxcxRny2aEHiByP0v44bbtziA1Jbz9TA6oegcKKzJvdI2x9+dSG8Y05kZz+WcqRM l1jl1epZ7pUCoqqjR/a+c44VM8wZtdb2KyP8jwds25bs3vzGUQBOp685zeTDx3dq J6tq8jOI6VyxkmMDTOZ1X+TLBcwuR7o+UkiY/fLjOcC7s7aM6AAZQbGRzM32eB0G HIw+nCPNljTXC9v4sxgC8kUdRlbZuwknySGWaLklqHEAH5sCqtEl1RfLPePyU5i1 irOaSmrBJ/5nf8xQNfAuy0TKL8QseH7r -----END CERTIFICATE-----Generated at Sat Apr 26 14:15:54 2025 by rpki-client