$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: sMJucwIYXJ9aafVCwp0xIVbTfjSf+YzWRw9O3+We38w= Subject key identifier: DE:EF:C6:9D:45:2E:8C:A9:8F:52:9C:8B:03:67:F0:B8:8D:6A:E8:36 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 081D Signing time: Sat 18 Oct 2025 22:03:41 +0000 Manifest this update: Sat 18 Oct 2025 22:03:41 +0000 Manifest next update: Sat 25 Oct 2025 22:03:41 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: gRlxZSpDxapM4ZllfffXeAOrlszFtx7HzhT22PgeAJc=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Oct 18 22:03:41 2025 GMT Not After : Oct 25 22:03:41 2025 GMT Subject: CN=68f40ebd-7dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:2e:55:05:d4:3a:b4:6e:13:09:eb:c2:5e: f9:e8:91:55:35:d5:a6:54:72:0d:b1:86:98:86:35: b4:5a:45:c8:9e:0b:8e:3e:44:83:0b:3f:fb:6a:71: 9b:38:f8:63:56:59:ea:06:58:af:cf:6c:17:a6:ad: b8:2d:8c:ef:4f:23:74:53:91:82:e5:9b:3b:b2:93: 2c:31:11:ff:f9:72:94:56:97:96:0d:61:c9:3e:06: 83:2a:fb:57:8b:27:95:ca:8c:75:b2:ed:e3:e9:8f: 68:fd:00:71:0c:9f:3a:c6:55:b6:b4:a4:70:19:5c: 70:e5:79:2b:30:19:ec:6d:aa:82:2d:6e:2d:e8:08: 57:ce:a7:2c:f7:5d:c8:e1:e3:9a:80:3e:12:6e:1d: 36:6b:8f:6b:3e:a1:8d:57:f3:e2:7e:4a:84:a8:c6: 71:05:46:63:ad:1a:cf:3e:54:cb:80:65:7d:e5:dc: 72:22:98:3c:c3:c9:2e:5f:c5:00:5b:d7:79:ef:44: 42:d1:82:c0:29:c8:23:f6:4d:a9:41:18:18:e9:48: 6b:ce:d0:1d:86:28:ca:68:e7:f2:a9:31:83:48:b2: 40:34:6e:a9:7e:45:9b:07:aa:5c:2f:1d:93:af:46: 56:a2:b6:c6:3b:23:27:98:65:3e:74:86:ca:6a:47: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:C6:9D:45:2E:8C:A9:8F:52:9C:8B:03:67:F0:B8:8D:6A:E8:36 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6d:49:6c:b1:b3:5a:cf:96:69:ec:e8:22:f8:f0:13:cc:92: d3:df:c5:06:9b:5a:a8:b7:76:f6:b2:98:2a:7f:83:61:34:07: 13:a9:95:37:8c:c4:7e:b7:35:94:6c:bb:a8:4c:b4:48:38:9b: 93:e9:e0:7d:4d:23:a1:6e:4b:b6:7d:9f:65:f2:c5:3c:83:61: 5b:86:5e:3d:c2:34:c0:8a:26:34:f3:fc:70:db:c9:c2:8d:98: ae:ce:11:8d:27:1a:44:d8:89:8f:bd:a0:f3:db:87:96:5c:1e: 15:e2:3e:60:f1:d8:16:13:ab:33:99:30:d4:a5:b5:7b:5b:4f: 2a:a4:84:03:68:81:d0:c0:7b:99:6c:98:0f:ae:35:cd:34:4b: ca:af:57:3f:d9:cb:c3:89:f0:74:c0:d3:cf:39:74:20:5a:04: ca:4f:8e:58:d1:22:e6:81:eb:d1:31:66:49:c9:9d:f3:a5:74: 7d:6e:13:83:66:31:ed:ba:3f:cd:d8:32:c5:f0:4d:02:41:c0: f7:99:7e:74:9c:f7:19:c2:5e:ed:fd:2f:cb:97:33:2c:1a:01: 2a:f0:ae:9c:3b:c2:40:af:2f:31:6a:1b:07:09:7b:a4:44:ac: 44:01:3c:20:d1:d6:c4:61:28:13:18:b9:db:b1:0d:ee:66:47: fa:ba:4d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUxMDE4MjIwMzQxWhcNMjUxMDI1MjIwMzQxWjAYMRYwFAYD VQQDEw02OGY0MGViZC03ZGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm8kuVQXUOrRuEwnrwl756JFVNdWmVHINsYaYhjW0WkXInguOPkSDCz/7anGb OPhjVlnqBlivz2wXpq24LYzvTyN0U5GC5Zs7spMsMRH/+XKUVpeWDWHJPgaDKvtX iyeVyox1su3j6Y9o/QBxDJ86xlW2tKRwGVxw5XkrMBnsbaqCLW4t6AhXzqcs913I 4eOagD4Sbh02a49rPqGNV/PifkqEqMZxBUZjrRrPPlTLgGV95dxyIpg8w8kuX8UA W9d570RC0YLAKcgj9k2pQRgY6UhrztAdhijKaOfyqTGDSLJANG6pfkWbB6pcLx2T r0ZWorbGOyMnmGU+dIbKakejHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7vxp1F Loypj1KciwNn8LiNaug2MB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3bUlssbNaz5Zp7Ogi+PATzJLT38UGm1qot3b2spgqf4NhNAcTqZU3 jMR+tzWUbLuoTLRIOJuT6eB9TSOhbku2fZ9l8sU8g2Fbhl49wjTAiiY08/xw28nC jZiuzhGNJxpE2ImPvaDz24eWXB4V4j5g8dgWE6szmTDUpbV7W08qpIQDaIHQwHuZ bJgPrjXNNEvKr1c/2cvDifB0wNPPOXQgWgTKT45Y0SLmgevRMWZJyZ3zpXR9bhOD ZjHtuj/N2DLF8E0CQcD3mX50nPcZwl7t/S/LlzMsGgEq8K6cO8JAry8xahsHCXuk RKxEATwg0dbEYSgTGLnbsQ3uZkf6uk17 -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:46 2025 by rpki-client