$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: a7RycJksP2Uslm51GTHbnaM1rizGeHoEWGEtNJzK0NY= Subject key identifier: A8:AC:23:DD:AB:A8:5D:A3:39:60:16:A0:28:32:65:E3:42:B3:D9:42 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 088A Signing time: Tue 12 May 2026 20:40:10 +0000 Manifest this update: Tue 12 May 2026 20:40:09 +0000 Manifest next update: Tue 19 May 2026 20:40:09 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: og0udP3AZYc7X9QO6aEz0M8gxzRdGaPOWJJO4NfoLIA=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: YlLKPrLBFRAZGSSI/PrP1aG6kr00THkq/rtie7tyqFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 20:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: May 12 20:40:09 2026 GMT Not After : May 19 20:40:09 2026 GMT Subject: CN=6a03902a-3ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:ec:b1:68:6a:05:3a:e4:c4:6f:a9:48:fd: 77:91:53:d6:9f:11:29:81:a6:7f:73:29:22:0a:aa: cb:9b:db:98:f1:f9:5d:65:7c:66:a0:01:07:69:2b: 25:f2:54:e8:c6:78:29:8c:68:65:ae:b7:5b:56:dd: cb:10:da:dc:a8:ab:03:0a:1c:13:fc:4b:7f:fe:50: b1:c9:19:e4:90:ff:17:68:ae:c6:ee:c6:fd:91:fb: 99:b8:26:f9:80:87:d3:c3:60:0e:2d:05:b2:3b:5f: b4:5d:b1:81:13:de:ec:1e:16:3c:af:b6:a3:b4:f9: 9c:5e:07:a1:ce:64:a5:64:6b:7f:82:c7:be:a2:5a: b8:e6:58:19:f0:57:61:9c:01:49:e3:76:83:7d:14: 26:1b:d2:9c:aa:dc:fd:02:4d:5e:d0:40:07:d6:ff: bd:f3:6d:27:08:3a:a3:ae:0a:b4:41:e1:aa:80:4b: c2:27:a7:18:80:c1:19:d3:17:74:dd:75:d1:8b:a6: 12:45:ee:dc:d6:90:24:c9:e2:bf:df:55:2a:06:ac: 3f:c4:84:e3:f9:27:f9:7b:c9:fe:43:d8:ba:6b:0e: 4d:2e:b1:70:4b:5d:71:47:e7:7a:4b:fc:2f:68:02: 90:97:9b:a9:51:b2:9c:13:a9:3a:11:fb:95:ee:9c: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AC:23:DD:AB:A8:5D:A3:39:60:16:A0:28:32:65:E3:42:B3:D9:42 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b8:18:44:b4:ca:cc:bc:8f:7f:2f:75:f3:75:d2:25:c4:fc: 16:9a:25:44:dd:e6:bf:5f:f9:41:e8:cc:89:7d:a9:d8:39:60: de:2b:b5:6c:6c:00:b5:8c:a7:8f:e5:bd:5d:15:11:25:4d:0d: ea:30:ce:c1:31:2a:2a:ba:0d:fa:b3:83:57:60:96:cb:04:dc: fd:4d:06:c0:5c:3e:2b:82:f7:0e:38:a0:d5:d8:ba:ba:6c:59: 0b:51:3c:4a:6e:5d:b9:6a:84:5a:f4:f4:e0:44:76:5b:6a:8a: b6:68:11:74:bc:f5:5a:42:03:53:6c:8a:1a:7b:25:8f:4c:22: 7f:3c:9c:f5:14:6c:83:64:31:b3:31:43:63:f6:9e:3b:14:27: 42:5c:b8:fa:c3:3b:f0:28:0d:4f:6a:fa:ac:ae:56:b3:69:70: bd:33:b5:fb:35:35:c3:21:48:49:5a:bd:fb:45:30:ae:c4:8e: 1f:b3:f2:19:e7:db:7b:c8:ce:77:12:9d:ae:e2:23:56:48:1a: ac:79:d1:eb:5b:1e:d1:ed:d9:af:46:d2:bb:b6:ce:78:b9:c8: 31:c8:01:87:af:bf:af:aa:e7:a8:4d:99:f1:55:0c:a6:cd:77: 35:fa:8a:b8:a0:fd:0d:dd:9a:67:6c:1a:08:ed:a1:da:32:47: 84:23:85:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjYwNTEyMjA0MDA5WhcNMjYwNTE5MjA0MDA5WjAYMRYwFAYD VQQDEw02YTAzOTAyYS0zYWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdfssWhqBTrkxG+pSP13kVPWnxEpgaZ/cykiCqrLm9uY8fldZXxmoAEHaSsl 8lToxngpjGhlrrdbVt3LENrcqKsDChwT/Et//lCxyRnkkP8XaK7G7sb9kfuZuCb5 gIfTw2AOLQWyO1+0XbGBE97sHhY8r7ajtPmcXgehzmSlZGt/gse+olq45lgZ8Fdh nAFJ43aDfRQmG9Kcqtz9Ak1e0EAH1v+9820nCDqjrgq0QeGqgEvCJ6cYgMEZ0xd0 3XXRi6YSRe7c1pAkyeK/31UqBqw/xITj+Sf5e8n+Q9i6aw5NLrFwS11xR+d6S/wv aAKQl5upUbKcE6k6EfuV7pzSAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKisI92r qF2jOWAWoCgyZeNCs9lCMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANbgYRLTKzLyPfy9183XSJcT8FpolRN3mv1/5QejMiX2p2Dlg3iu1bGwAtYyn j+W9XRURJU0N6jDOwTEqKroN+rODV2CWywTc/U0GwFw+K4L3Djig1di6umxZC1E8 Sm5duWqEWvT04ER2W2qKtmgRdLz1WkIDU2yKGnslj0wifzyc9RRsg2QxszFDY/ae OxQnQly4+sM78CgNT2r6rK5Ws2lwvTO1+zU1wyFISVq9+0UwrsSOH7PyGefbe8jO dxKdruIjVkgarHnR61se0e3Zr0bSu7bOeLnIMcgBh6+/r6rnqE2Z8VUMps13NfqK uKD9Dd2aZ2waCO2h2jJHhCOF5A== -----END CERTIFICATE-----Generated at Wed May 13 08:05:42 2026 by rpki-client