$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: NcB98pDvhCzh5Fcn9CIuLhzL9IP+84PiR77y/OLFChQ= Subject key identifier: 76:2F:24:DD:41:35:E5:E5:5F:83:35:11:9E:6C:C3:B8:98:CA:7D:1E Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0808 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 0800 Signing time: Fri 22 Aug 2025 21:03:54 +0000 Manifest this update: Fri 22 Aug 2025 21:03:54 +0000 Manifest next update: Fri 29 Aug 2025 21:03:54 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: 49oUWuxrGLjd1vc8kv/c9GVmgnrvR9oPOKFOGvmKrSA=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2056 (0x808) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Aug 22 21:03:54 2025 GMT Not After : Aug 29 21:03:54 2025 GMT Subject: CN=68a8db3a-2fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b9:9d:af:35:a8:d8:68:02:c5:ac:fd:d0:f1: 3a:7a:85:c9:39:e8:9d:4e:90:6a:39:08:61:f8:4c: 36:19:c6:88:dc:86:ac:c2:bc:88:33:4a:0d:0c:58: 4b:36:99:69:2c:ea:ff:ff:18:eb:bd:ba:1d:a3:1c: ef:dc:09:ad:49:91:9c:23:b5:62:58:cc:0a:95:d1: 9d:41:28:60:e1:82:55:b3:20:15:f7:8a:b9:dc:c1: 92:8e:ed:75:b9:35:5b:63:55:7b:6c:2d:f6:f6:2c: 12:75:12:e9:c2:26:f8:f1:a9:e1:2c:3d:de:24:c9: 98:70:ca:66:5a:ad:76:d4:fb:4a:97:5d:db:c1:73: dd:eb:44:7c:ef:78:f5:1e:04:cb:ec:79:90:99:b5: 28:73:14:b1:38:3d:16:2b:13:99:23:08:fc:bc:f5: b3:49:f5:c0:eb:d7:3f:d1:1e:6a:cf:91:a4:0d:b3: 05:2b:25:4b:49:34:cd:80:ff:62:e0:8c:cf:27:89: 30:1c:d9:6f:54:01:3c:bb:88:a7:bd:1e:71:db:af: 65:47:10:c9:87:a1:c8:b9:56:e9:ae:50:c9:50:48: 86:c8:78:74:a9:1e:2c:9a:24:ef:0a:2a:9e:d3:66: 64:f7:57:62:04:75:6f:b5:3b:b8:47:68:af:78:8d: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2F:24:DD:41:35:E5:E5:5F:83:35:11:9E:6C:C3:B8:98:CA:7D:1E X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7f:40:24:96:1d:2f:5d:1d:cd:09:87:d1:fa:e8:a2:c9:a5: 53:55:3a:35:b8:1d:47:18:4e:3c:0a:e6:84:61:e7:73:6c:01: d4:7a:cb:6d:e8:c5:53:54:e8:d0:d5:a1:47:fc:08:99:f0:50: 86:71:2b:3f:48:57:91:7f:46:fd:4e:93:aa:b6:7f:c5:b3:c4: 2f:4f:72:fd:42:74:f7:0c:a2:25:ed:72:d7:b4:59:34:44:9e: 6c:74:e7:7d:9c:58:ec:a6:9c:53:ac:6d:a2:92:da:ef:eb:d1: bb:3a:1e:b1:fe:2f:92:c3:6f:a6:39:d1:ca:b2:80:ce:fc:8d: d0:f9:ee:e6:f7:51:67:5e:48:35:6b:3b:d1:cb:cf:90:f6:77: e6:63:b8:59:66:57:8f:6f:4e:6f:11:5f:57:70:44:9b:c8:51: e5:ca:03:ac:c9:51:b6:57:b8:84:43:da:c0:fb:7a:2d:fc:76: d6:bc:ff:b9:56:be:04:b1:2b:39:e7:ee:53:7b:2e:80:20:e4: fc:e1:e4:a8:ef:d1:49:cf:fb:a2:91:eb:52:76:5c:9a:9f:2b: 33:ae:28:5e:d8:6f:5c:01:62:7d:6a:aa:1a:0d:85:4b:62:d2: 0f:d7:78:c3:3d:9c:11:0e:68:ac:60:2c:e9:32:24:f5:06:4e: c1:4e:52:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwODIyMjEwMzU0WhcNMjUwODI5MjEwMzU0WjAYMRYwFAYD VQQDEw02OGE4ZGIzYS0yZmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrmdrzWo2GgCxaz90PE6eoXJOeidTpBqOQhh+Ew2GcaI3IaswryIM0oNDFhL NplpLOr//xjrvbodoxzv3AmtSZGcI7ViWMwKldGdQShg4YJVsyAV94q53MGSju11 uTVbY1V7bC329iwSdRLpwib48anhLD3eJMmYcMpmWq121PtKl13bwXPd60R873j1 HgTL7HmQmbUocxSxOD0WKxOZIwj8vPWzSfXA69c/0R5qz5GkDbMFKyVLSTTNgP9i 4IzPJ4kwHNlvVAE8u4invR5x269lRxDJh6HIuVbprlDJUEiGyHh0qR4smiTvCiqe 02Zk91diBHVvtTu4R2iveI0fFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHYvJN1B NeXlX4M1EZ5sw7iYyn0eMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChf0Aklh0vXR3NCYfR+uiiyaVTVTo1uB1HGE48CuaEYedzbAHUestt 6MVTVOjQ1aFH/AiZ8FCGcSs/SFeRf0b9TpOqtn/Fs8QvT3L9QnT3DKIl7XLXtFk0 RJ5sdOd9nFjsppxTrG2iktrv69G7Oh6x/i+Sw2+mOdHKsoDO/I3Q+e7m91FnXkg1 azvRy8+Q9nfmY7hZZlePb05vEV9XcESbyFHlygOsyVG2V7iEQ9rA+3ot/HbWvP+5 Vr4EsSs55+5Tey6AIOT84eSo79FJz/uiketSdlyanyszrihe2G9cAWJ9aqoaDYVL YtIP13jDPZwRDmisYCzpMiT1Bk7BTlKl -----END CERTIFICATE-----Generated at Sun Aug 24 00:36:09 2025 by rpki-client