$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft File: Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft (raw, json) Hash identifier: 7swYEF9dsDghjpH2aUWpwLwhXITe85tIZgWFGDdt2ak= Subject key identifier: BA:F7:A4:C5:3D:99:C6:4B:31:F6:A0:22:48:8E:25:77:31:74:8C:8C Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0AF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft Manifest number: 0AE4 Signing time: Tue 04 Nov 2025 19:31:51 +0000 Manifest this update: Tue 04 Nov 2025 19:31:51 +0000 Manifest next update: Tue 11 Nov 2025 19:31:51 +0000 Files and hashes: 1: Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl (hash: DR5+9UxNO1ACCZqLD9QOk8Azhz7gfu8MRaGzOe2NR4s=) 2: 08FFFEEAB4A811F0B6628E78C4F9AE02.roa (hash: JbWNNhA20d+dAoRyypjRFzGhqwrye4eeN4qT6OW5LWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2801 (0xaf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6, serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Validity Not Before: Nov 4 19:31:51 2025 GMT Not After : Nov 11 19:31:51 2025 GMT Subject: CN=690a54a7-0560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0f:ac:23:89:36:a8:74:50:6e:e9:31:1e:cc: 3e:95:8a:5e:d5:5d:b9:8c:16:e4:fc:39:77:01:4d: 64:07:9d:eb:1b:2e:f2:c4:41:63:7a:95:f8:9e:f1: 95:cd:77:1b:8a:ba:11:b0:67:51:84:f1:96:c3:9c: a1:c9:91:0b:47:9f:d4:67:88:02:85:42:86:c1:3f: fd:bc:6a:ea:8a:54:f8:f1:56:d9:9a:c8:f4:de:74: e9:a5:b9:ee:1d:a0:65:64:19:71:5c:b8:67:22:d1: 0d:b4:80:96:4f:f7:e9:0c:fc:a4:c4:23:e2:8a:2f: 33:1e:aa:e3:36:1b:61:7c:fa:f9:03:10:a6:9f:5c: 2a:40:eb:23:c9:bb:52:35:41:05:78:d5:5c:7f:76: 20:55:6c:ca:b5:13:fc:0d:f9:22:03:bf:cb:69:02: c0:8c:61:cc:68:23:dc:ac:bb:01:78:69:b7:d5:e7: e9:b0:3f:ba:e6:99:c6:f3:e3:5c:f4:5c:05:6b:77: 13:41:de:9c:eb:d0:85:a3:ff:a8:d3:5f:1b:14:74: 8e:ac:17:1d:2a:da:f4:b8:b4:8b:d1:d6:f3:b3:2e: fc:a1:44:e4:5f:f3:33:d8:1e:3a:ec:c2:35:db:c8: 34:0b:e7:9d:3e:19:7e:9c:d3:36:51:1b:dd:9f:c8: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F7:A4:C5:3D:99:C6:4B:31:F6:A0:22:48:8E:25:77:31:74:8C:8C X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:af:ed:eb:ef:6a:0e:81:56:36:46:d6:4b:5b:fb:4b:7b:42: 9b:e8:bb:19:30:a2:27:71:9a:5d:ad:df:c7:08:99:a7:68:ab: 2a:c6:bb:9c:32:ba:02:18:0f:67:95:c7:74:7e:1a:c6:13:9d: ff:44:b5:e5:82:03:87:e4:cc:75:58:06:67:b7:5e:5f:35:ee: 60:15:6b:97:59:7b:2d:5c:fa:fc:8e:a0:5e:d2:73:b5:c4:76: 55:bd:ab:30:74:cb:31:f0:2f:3f:ab:ef:ec:15:46:81:e0:4b: 74:6c:f7:b2:a9:9d:84:1f:f4:9d:ff:1f:48:6f:1e:2b:83:f7: 2e:6b:2f:71:81:e1:ca:8b:e6:21:49:d5:0f:c9:f8:3b:d3:3d: a2:ec:30:8d:da:94:2b:2c:b0:e2:42:7a:09:4e:be:5c:b0:9d: f0:20:6b:8d:c9:a2:d5:4a:ce:3e:d4:56:ca:48:d9:1c:36:87: 69:cc:de:e6:2f:a7:3b:a4:bb:23:72:15:f1:78:d4:71:57:7a: 8a:45:fa:48:8a:fe:09:d5:27:7a:81:f6:76:a2:b4:ec:5d:61: a6:0f:81:36:7b:ba:63:a7:ca:17:48:13:e5:e4:b2:27:a0:7d: 9b:a1:36:24:6c:36:5e:e5:a2:2a:3d:85:8c:90:71:98:e2:23: c3:eb:50:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUxMTA0MTkzMTUxWhcNMjUxMTExMTkzMTUxWjAYMRYwFAYD VQQDEw02OTBhNTRhNy0wNTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqw+sI4k2qHRQbukxHsw+lYpe1V25jBbk/Dl3AU1kB53rGy7yxEFjepX4nvGV zXcbiroRsGdRhPGWw5yhyZELR5/UZ4gChUKGwT/9vGrqilT48VbZmsj03nTppbnu HaBlZBlxXLhnItENtICWT/fpDPykxCPiii8zHqrjNhthfPr5AxCmn1wqQOsjybtS NUEFeNVcf3YgVWzKtRP8DfkiA7/LaQLAjGHMaCPcrLsBeGm31efpsD+65pnG8+Nc 9FwFa3cTQd6c69CFo/+o018bFHSOrBcdKtr0uLSL0dbzsy78oUTkX/Mz2B467MI1 28g0C+edPhl+nNM2URvdn8iMVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLr3pMU9 mcZLMfagIkiOJXcxdIyMMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCNi81NkE0QTY0MDVBRTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlp QTV2OHc0X25BMWo3dlNlMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8r+3r72oOgVY2RtZLW/tLe0Kb6LsZMKIncZpdrd/HCJmnaKsqxruc MroCGA9nlcd0fhrGE53/RLXlggOH5Mx1WAZnt15fNe5gFWuXWXstXPr8jqBe0nO1 xHZVvaswdMsx8C8/q+/sFUaB4Et0bPeyqZ2EH/Sd/x9Ibx4rg/cuay9xgeHKi+Yh SdUPyfg70z2i7DCN2pQrLLDiQnoJTr5csJ3wIGuNyaLVSs4+1FbKSNkcNodpzN7m L6c7pLsjchXxeNRxV3qKRfpIiv4J1Sd6gfZ2orTsXWGmD4E2e7pjp8oXSBPl5LIn oH2boTYkbDZe5aIqPYWMkHGY4iPD61AY -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:35 2025 by rpki-client