$ rpki-client -vvvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: 8Em+9F1LLWqsm6uhS5wcVvG1wC06Y0EgQ4kowfxflWc= Subject key identifier: 81:7B:6E:EE:06:E1:74:E0:9F:AB:2D:87:AF:0C:75:0C:ED:2A:72:B9 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 08DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 08D1 Signing time: Thu 24 Sep 2026 20:22:58 +0000 Manifest this update: Thu 24 Sep 2026 20:22:57 +0000 Manifest next update: Thu 01 Oct 2026 20:22:57 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: GgeDLL7AmNsvGCH5mOhqCBkMai5HBFZAVqkWALN/tq0=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 1DVHRpQJfmxPJ8yM+PnKlpzMQFp7Otto9UkCLg4Zu5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 20:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2269 (0x8dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Sep 24 20:22:57 2026 GMT Not After : Oct 1 20:22:57 2026 GMT Subject: CN=6ab586a2-07be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:b8:70:71:bd:33:bf:17:ff:ee:a2:5e:81: 09:02:32:66:f2:d0:30:64:37:80:71:54:29:50:e6: a3:37:75:d5:71:3e:52:4a:1b:9c:c8:6d:00:2c:8e: 22:19:32:b3:20:c3:ce:e1:94:c8:84:49:d2:1b:62: 22:ed:70:17:82:1c:8e:32:39:60:9a:0a:57:99:9c: 4a:46:4c:77:45:91:13:40:9b:ed:3d:a1:b6:61:fe: c8:41:18:65:56:98:ac:98:1d:09:15:72:b6:02:a0: 4b:ab:73:8c:c6:30:ff:22:2c:59:2a:eb:c1:d3:1f: 69:65:e1:f8:12:98:e5:ec:f6:fb:ca:9c:4c:f0:1f: 58:7b:85:7c:95:74:19:32:9e:0b:f6:3f:17:14:fa: be:7b:3f:55:7d:d9:42:8c:34:ca:33:40:d2:2b:6c: 87:74:2a:55:a1:f0:01:83:99:52:dd:7a:49:24:01: f6:43:35:19:3b:dd:dd:74:30:92:a8:19:e7:10:c2: 3a:1a:7f:08:32:69:a5:fc:b1:ad:3c:27:7f:21:81: 49:d7:74:80:b3:bd:fc:b5:27:58:cc:c0:15:41:37: 1b:a3:8c:e0:05:88:02:9e:e8:62:8c:41:34:d2:06: f6:82:f9:44:2f:6f:11:a8:7c:55:90:a7:fe:3f:d4: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7B:6E:EE:06:E1:74:E0:9F:AB:2D:87:AF:0C:75:0C:ED:2A:72:B9 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:27:bd:9d:63:15:ca:7f:38:ce:0c:40:65:cf:56:f3:0e:8a: ba:d1:72:bc:e6:00:30:16:b9:3f:7d:5a:bf:6d:7f:b4:52:44: 5b:0c:6e:97:5f:34:02:0b:1f:60:52:b4:31:a6:2c:9d:d9:0d: be:f4:96:01:27:ca:0c:76:df:0c:a9:87:98:1c:38:5d:d6:eb: 5b:f6:7e:34:6a:65:86:04:1e:cd:d7:17:73:ad:d6:95:16:42: 6a:6c:8f:a6:31:da:b0:5f:7c:0d:bb:3d:7f:b3:ea:c9:c0:36: b6:b1:01:20:90:ec:fc:70:0f:40:a9:7c:ea:e6:5c:52:92:c7: 64:e6:1f:f7:e4:6b:12:83:0a:49:b7:6f:61:52:57:b4:6b:a6: af:32:08:d7:ad:3a:3c:30:38:df:12:66:61:45:3e:ca:f9:25: 50:fd:10:4a:fa:22:a0:79:0a:ab:0b:19:13:c2:7c:a6:ef:3b: 74:fd:1a:26:33:0b:d5:2b:aa:d3:cb:1a:79:25:78:0a:74:50: 50:c3:c9:07:c0:c4:97:4e:8e:0d:9c:25:04:2f:68:9e:e0:86: 84:e4:d1:58:fc:24:36:fa:f2:80:05:fe:42:d5:41:02:ba:f9: 7d:a4:14:2e:a9:49:8e:f6:95:6c:55:77:90:70:a6:19:f9:a5: ea:7d:cf:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjYwOTI0MjAyMjU3WhcNMjYxMDAxMjAyMjU3WjAYMRYwFAYD VQQDEw02YWI1ODZhMi0wN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAplW4cHG9M78X/+6iXoEJAjJm8tAwZDeAcVQpUOajN3XVcT5SShucyG0ALI4i GTKzIMPO4ZTIhEnSG2Ii7XAXghyOMjlgmgpXmZxKRkx3RZETQJvtPaG2Yf7IQRhl VpismB0JFXK2AqBLq3OMxjD/IixZKuvB0x9pZeH4Epjl7Pb7ypxM8B9Ye4V8lXQZ Mp4L9j8XFPq+ez9VfdlCjDTKM0DSK2yHdCpVofABg5lS3XpJJAH2QzUZO93ddDCS qBnnEMI6Gn8IMmml/LGtPCd/IYFJ13SAs738tSdYzMAVQTcbo4zgBYgCnuhijEE0 0gb2gvlEL28RqHxVkKf+P9RxQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIF7bu4G 4XTgn6sth68MdQztKnK5MB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlCe9nWMVyn84zgxAZc9W8w6KutFyvOYAMBa5P31av21/tFJEWwxul180Agsf YFK0MaYsndkNvvSWASfKDHbfDKmHmBw4XdbrW/Z+NGplhgQezdcXc63WlRZCamyP pjHasF98Dbs9f7PqycA2trEBIJDs/HAPQKl86uZcUpLHZOYf9+RrEoMKSbdvYVJX tGumrzII1606PDA43xJmYUU+yvklUP0QSvoioHkKqwsZE8J8pu87dP0aJjML1Suq 08saeSV4CnRQUMPJB8DEl06ODZwlBC9onuCGhOTRWPwkNvrygAX+QtVBArr5faQU LqlJjvaVbFV3kHCmGfml6n3PGg== -----END CERTIFICATE-----Generated at Sat Sep 26 07:12:19 2026 by rpki-client