$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: LlpFIJmIInUU0xmgYGIjrvk3V5eds2fpRh6/47jwBi8= Subject key identifier: 09:E8:02:C8:B5:D5:09:3A:44:DB:D8:0B:14:50:1B:1C:E1:DA:83:3F Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 07CC Signing time: Sat 10 May 2025 20:44:46 +0000 Manifest this update: Sat 10 May 2025 20:44:46 +0000 Manifest next update: Sat 17 May 2025 20:44:46 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: dJdmf6Sm6dYL8sVXE3jbxO7ngP6rTSaasSuOfL06mkY=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: May 10 20:44:46 2025 GMT Not After : May 17 20:44:46 2025 GMT Subject: CN=681fbabe-dc8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:c1:ec:66:d3:7d:db:4d:8d:11:75:14:84: b8:75:26:09:9d:69:3b:15:76:8a:df:72:2e:3c:dd: f3:d7:82:3d:84:b4:f8:e7:01:4c:6a:ab:fd:79:76: 1d:aa:d5:eb:df:c7:8d:4d:0d:f0:02:a3:51:bb:2a: c8:01:36:3f:8e:71:60:a8:45:68:5d:b2:2f:97:30: 8f:88:42:9c:e2:f3:e9:77:12:5a:f9:0f:ee:9f:6c: 58:f3:2b:4a:43:1a:68:cc:a5:73:8f:5d:a3:1b:06: 3d:a0:39:1c:d5:eb:3d:cd:48:53:f4:71:63:1c:4f: 6f:50:3d:5d:7d:ac:5c:2d:6f:26:e2:2c:1c:63:38: 77:44:c1:c3:ba:37:65:ca:a7:70:2d:e0:b5:0b:f3: 87:99:fd:f0:1a:31:15:c4:ac:e7:9e:e0:1e:cd:05: ad:77:0f:ec:6a:65:c6:d0:fa:87:c4:2d:5a:d5:11: cb:a6:92:82:d4:8d:6d:11:a0:98:ce:92:4e:c1:b8: 8f:51:f3:13:ac:26:52:cf:6b:04:d6:c0:bf:7a:d1: 9c:5f:0c:fa:05:58:7c:4d:23:d4:f2:dc:4f:1e:5f: 46:26:64:15:c3:cf:dc:68:b3:09:12:e6:d5:9c:12: 17:53:f8:dc:4c:62:57:d5:e3:5c:0d:f7:74:d4:cc: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E8:02:C8:B5:D5:09:3A:44:DB:D8:0B:14:50:1B:1C:E1:DA:83:3F X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:fe:55:db:b0:f5:31:ff:16:c6:e4:1d:aa:88:cc:51:5f:60: 5f:48:e5:6b:5e:3c:3d:1e:b6:ec:13:fd:e1:cd:82:82:54:13: 76:19:2e:97:24:b9:48:52:1c:d1:b8:dc:dd:2a:df:61:58:0d: 39:dc:f1:a0:d9:af:2e:74:13:65:0d:03:bf:70:a7:fc:d0:05: 7f:35:63:fd:36:dc:e0:8e:50:52:d7:d5:85:e5:c0:aa:cd:c9: 2b:a0:85:f9:c9:f1:d9:96:50:ad:2e:8f:6a:bd:7a:8c:01:5a: f4:26:bc:63:bb:14:d3:65:01:7a:7d:fc:3c:d4:2a:97:0a:7b: 19:3e:f6:5c:b4:73:77:70:47:f8:14:cc:2e:b8:0a:9d:05:b2: 02:b8:fa:18:0d:bb:9f:f9:34:72:48:1d:0c:0c:32:de:f6:33: f2:dc:e9:5b:db:5b:59:25:49:87:44:60:96:be:17:89:0a:98: ab:ba:44:fb:0f:81:dd:28:c2:41:c4:f0:9f:5e:c5:d3:22:73: ae:69:46:f5:0e:ca:47:2f:a1:03:2c:6c:d8:e3:ad:a4:ff:7d: 54:65:dd:dd:46:9c:3a:16:e6:38:9a:51:cd:31:69:a1:5f:e2: 4a:a7:c7:eb:c5:3e:cd:59:f1:23:c7:1d:a3:4d:7a:11:aa:64: 21:97:d8:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwNTEwMjA0NDQ2WhcNMjUwNTE3MjA0NDQ2WjAYMRYwFAYD VQQDEw02ODFmYmFiZS1kYzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywXB7GbTfdtNjRF1FIS4dSYJnWk7FXaK33IuPN3z14I9hLT45wFMaqv9eXYd qtXr38eNTQ3wAqNRuyrIATY/jnFgqEVoXbIvlzCPiEKc4vPpdxJa+Q/un2xY8ytK QxpozKVzj12jGwY9oDkc1es9zUhT9HFjHE9vUD1dfaxcLW8m4iwcYzh3RMHDujdl yqdwLeC1C/OHmf3wGjEVxKznnuAezQWtdw/samXG0PqHxC1a1RHLppKC1I1tEaCY zpJOwbiPUfMTrCZSz2sE1sC/etGcXwz6BVh8TSPU8txPHl9GJmQVw8/caLMJEubV nBIXU/jcTGJX1eNcDfd01MwQxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnoAsi1 1Qk6RNvYCxRQGxzh2oM/MB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ/lXbsPUx/xbG5B2qiMxRX2BfSOVrXjw9HrbsE/3hzYKCVBN2GS6X JLlIUhzRuNzdKt9hWA053PGg2a8udBNlDQO/cKf80AV/NWP9NtzgjlBS19WF5cCq zckroIX5yfHZllCtLo9qvXqMAVr0JrxjuxTTZQF6ffw81CqXCnsZPvZctHN3cEf4 FMwuuAqdBbICuPoYDbuf+TRySB0MDDLe9jPy3Olb21tZJUmHRGCWvheJCpirukT7 D4HdKMJBxPCfXsXTInOuaUb1DspHL6EDLGzY462k/31UZd3dRpw6FuY4mlHNMWmh X+JKp8frxT7NWfEjxx2jTXoRqmQhl9j1 -----END CERTIFICATE-----Generated at Sun May 11 23:00:26 2025 by rpki-client