$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: rYJcbaZT4Qg942NEshjBbKzBeSwFGDuvlBuSXa/0TD0= Subject key identifier: 92:79:C4:D7:5D:EA:24:48:E9:00:85:6D:D1:64:69:2C:E5:E5:D4:60 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0AAE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0AA5 Signing time: Fri 18 Jul 2025 19:46:11 +0000 Manifest this update: Fri 18 Jul 2025 19:46:10 +0000 Manifest next update: Fri 25 Jul 2025 19:46:10 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: EWDZl88A+JDvajCU4JTpY+InTuvwFfXUgCBJucYrfQA=) 2: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (hash: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2734 (0xaae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Jul 18 19:46:10 2025 GMT Not After : Jul 25 19:46:10 2025 GMT Subject: CN=687aa482-8796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:75:13:d9:d7:c2:34:47:ce:d0:61:00:2e:2e: 39:f1:45:55:1f:1f:f8:1a:85:b1:cc:fb:88:9d:e7: dc:97:6c:74:eb:ec:3e:6e:3b:53:6f:ba:18:74:f7: 80:a8:fc:99:b5:21:38:3c:e1:4e:db:c4:64:bc:4e: 75:a1:a9:50:21:33:f6:35:33:b4:82:ab:99:17:11: a0:43:06:b7:86:32:ee:6d:e9:71:d8:1b:72:b5:27: 34:b1:0b:ad:b5:f7:c2:2c:5a:12:52:8a:d2:de:7e: 16:89:bd:b0:51:14:33:9d:2e:0a:40:f2:b7:45:d8: 8d:13:5d:5a:7b:a4:68:90:b2:47:fc:e1:50:67:a4: 38:93:a9:9a:93:8d:db:b0:d5:47:86:7b:dc:0f:34: ad:df:ab:a6:7d:f0:a9:4f:9a:02:73:42:76:06:7c: 7a:31:99:e7:fb:42:9f:1b:74:3b:e7:ff:51:44:32: b0:6d:d8:19:81:b9:b6:71:df:04:ab:d1:32:a6:5a: fd:8a:9a:bc:0a:72:91:b5:ca:30:71:42:d9:d9:8a: a8:9b:a6:b1:af:f8:22:7f:18:6c:65:c2:f6:45:48: 54:8b:e0:97:e4:9f:7e:03:d6:7a:9c:21:c0:32:1e: ee:a0:23:25:36:95:dc:a9:db:2a:d9:b7:1d:b3:7c: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:79:C4:D7:5D:EA:24:48:E9:00:85:6D:D1:64:69:2C:E5:E5:D4:60 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8c:da:8e:c3:c7:33:26:66:bb:b1:7d:a0:32:20:76:af:81: 9c:cf:6b:1f:f3:c7:09:78:e2:cf:76:b7:b7:17:14:50:af:5e: c2:c8:0e:12:bc:0e:cc:22:d7:11:fe:28:47:6f:04:43:d8:90: 89:6d:04:82:4a:9e:4f:93:37:d2:d5:29:5b:a0:03:07:dc:d1: de:12:27:95:1f:22:aa:b0:8d:71:37:26:21:e2:f0:ff:df:22: 66:cf:c4:de:61:70:77:b3:4b:4c:43:4f:db:6d:3c:8d:dd:63: 1c:26:d1:30:60:e1:e3:93:0e:bd:be:a7:53:46:12:99:8a:07: 76:d3:c1:47:12:54:61:74:fa:6b:ca:b3:88:8c:ef:c1:1d:18: a8:e4:bf:d0:91:ae:fa:28:bc:21:32:67:8d:e7:d6:55:d0:42: bd:d5:ac:af:b7:ce:04:3f:84:12:99:97:4d:2d:d9:8a:85:f2: 21:3e:00:22:7f:72:c8:d1:b7:b3:95:0b:e8:e1:c8:c7:39:43: 57:d1:ca:cf:37:21:e5:38:5c:9a:c4:1b:73:fa:11:3a:88:e4: f1:23:3c:ac:3f:d8:68:e1:84:3b:13:96:6d:fc:95:38:9f:85: bc:e8:f9:5c:b6:fd:4a:70:14:f1:c9:7e:f8:fc:bb:90:7a:a5: 54:1e:13:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwNzE4MTk0NjEwWhcNMjUwNzI1MTk0NjEwWjAYMRYwFAYD VQQDEw02ODdhYTQ4Mi04Nzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nUT2dfCNEfO0GEALi458UVVHx/4GoWxzPuInefcl2x06+w+bjtTb7oYdPeA qPyZtSE4POFO28RkvE51oalQITP2NTO0gquZFxGgQwa3hjLubelx2BtytSc0sQut tffCLFoSUorS3n4Wib2wURQznS4KQPK3RdiNE11ae6RokLJH/OFQZ6Q4k6mak43b sNVHhnvcDzSt36umffCpT5oCc0J2Bnx6MZnn+0KfG3Q75/9RRDKwbdgZgbm2cd8E q9Eyplr9ipq8CnKRtcowcULZ2Yqom6axr/gifxhsZcL2RUhUi+CX5J9+A9Z6nCHA Mh7uoCMlNpXcqdsq2bcds3zaRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJ5xNdd 6iRI6QCFbdFkaSzl5dRgMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEjNqOw8czJma7sX2gMiB2r4Gcz2sf88cJeOLPdre3FxRQr17CyA4S vA7MItcR/ihHbwRD2JCJbQSCSp5PkzfS1SlboAMH3NHeEieVHyKqsI1xNyYh4vD/ 3yJmz8TeYXB3s0tMQ0/bbTyN3WMcJtEwYOHjkw69vqdTRhKZigd208FHElRhdPpr yrOIjO/BHRio5L/Qka76KLwhMmeN59ZV0EK91ayvt84EP4QSmZdNLdmKhfIhPgAi f3LI0bezlQvo4cjHOUNX0crPNyHlOFyaxBtz+hE6iOTxIzysP9ho4YQ7E5Zt/JU4 n4W86Plctv1KcBTxyX74/LuQeqVUHhNC -----END CERTIFICATE-----Generated at Sun Jul 20 18:56:42 2025 by rpki-client