$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: ceQc93rK/7ZbKzgTc0TFDyDd+h/6JhpqSyk7j4y6dow= Subject key identifier: E4:9C:A7:3D:6B:C3:D1:11:30:09:95:97:95:7F:25:D7:B7:82:01:E4 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 0872 Signing time: Thu 26 Mar 2026 20:32:17 +0000 Manifest this update: Thu 26 Mar 2026 20:32:16 +0000 Manifest next update: Thu 02 Apr 2026 20:32:16 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: uYoQMeQTdycATua2BYhHq45Po2Wwhmf8mPkDhUJ6lJw=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: YlLKPrLBFRAZGSSI/PrP1aG6kr00THkq/rtie7tyqFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Mar 26 20:32:16 2026 GMT Not After : Apr 2 20:32:16 2026 GMT Subject: CN=69c597d1-bcf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:43:41:d8:f5:2b:cd:51:0f:73:3e:1b:52:22: f7:e2:53:e5:4b:aa:c3:6d:f0:24:51:7c:86:f2:f6: 32:7e:15:ca:57:91:83:a4:d2:30:b3:9d:85:b8:40: a0:e8:d7:d0:1f:77:a9:82:bd:0a:c0:47:c6:d0:c1: 2f:b3:c6:19:09:30:13:3c:a1:4c:e9:bd:37:fb:ba: ca:4d:ea:2e:03:2d:c3:6e:0f:b8:28:03:2a:07:e1: fc:af:7c:0a:8b:8e:9c:eb:7f:c7:37:ad:79:ae:86: 72:aa:5e:6c:be:88:74:5e:f5:ae:64:c8:e1:c1:0e: fa:0b:1a:5a:85:13:89:25:30:83:52:5e:5d:96:c3: 99:68:f9:7d:43:3d:1e:c1:fb:6e:e8:f9:ef:1f:ae: 09:49:c5:b7:13:f4:a1:38:d3:ee:db:16:ae:a2:79: 70:ec:5f:6f:79:a8:e9:4f:82:ab:36:db:e4:fc:14: 8a:53:9b:d4:73:92:96:19:84:8a:87:90:98:97:33: e9:7b:6e:0a:86:03:00:66:0e:65:77:64:85:99:c4: e6:18:d1:ac:51:5e:9b:40:2a:78:42:91:5f:62:9b: 3e:7c:9e:05:ec:fc:d0:14:5c:8b:54:6e:1b:bb:df: 94:db:99:4d:e3:af:5a:80:3b:4a:55:e1:ee:31:ed: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9C:A7:3D:6B:C3:D1:11:30:09:95:97:95:7F:25:D7:B7:82:01:E4 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:9a:50:a3:82:d2:fc:ca:7e:7b:b9:a8:88:f2:e6:f7:0c:7b: 30:13:9f:ff:b6:8e:9f:58:51:d0:fa:28:b9:ed:f7:5e:81:dc: 20:ad:be:bf:e2:31:11:67:0e:99:a7:ef:12:16:e6:1b:2e:c2: b9:8a:eb:f4:80:71:04:a6:8f:14:2f:30:4c:3c:16:7a:4d:8b: e6:78:09:e3:ed:72:fb:eb:3a:16:4a:21:59:ff:8b:aa:bc:d6: 0a:c2:62:e5:1c:c6:83:be:48:1c:5f:5b:e1:6a:c2:1a:1e:91: d6:e0:f2:96:cb:48:6b:b3:dc:33:7b:88:3f:b5:81:74:10:6b: a2:a9:5b:f3:14:48:6d:6a:c0:27:c8:ff:7a:2e:a7:c4:22:78: 54:a1:cd:ba:3a:3a:e7:d3:5c:87:db:b2:e0:71:3b:9a:cd:d6: 35:f5:a4:00:20:02:58:33:18:bb:f5:9f:d3:d2:45:66:50:82: f2:bc:d5:87:53:b1:6d:08:6a:8d:fd:da:91:9c:6a:69:5f:e2: 0e:c9:40:0a:46:5e:70:9f:17:d4:f5:a5:63:12:b1:6a:0b:d1: 0e:31:55:1f:fe:25:33:9f:bb:e0:07:64:ad:48:49:a7:63:f8: 3f:a3:24:78:e3:c7:86:d2:47:9f:cc:e9:02:c9:1d:ea:2c:e2: 16:0c:b2:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjYwMzI2MjAzMjE2WhcNMjYwNDAyMjAzMjE2WjAYMRYwFAYD VQQDEw02OWM1OTdkMS1iY2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnENB2PUrzVEPcz4bUiL34lPlS6rDbfAkUXyG8vYyfhXKV5GDpNIws52FuECg 6NfQH3epgr0KwEfG0MEvs8YZCTATPKFM6b03+7rKTeouAy3Dbg+4KAMqB+H8r3wK i46c63/HN615roZyql5svoh0XvWuZMjhwQ76CxpahROJJTCDUl5dlsOZaPl9Qz0e wftu6PnvH64JScW3E/ShONPu2xauonlw7F9veajpT4KrNtvk/BSKU5vUc5KWGYSK h5CYlzPpe24KhgMAZg5ld2SFmcTmGNGsUV6bQCp4QpFfYps+fJ4F7PzQFFyLVG4b u9+U25lN469agDtKVeHuMe2r2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOScpz1r w9ERMAmVl5V/Jde3ggHkMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFJpQo4LS/Mp+e7moiPLm9wx7MBOf/7aOn1hR0Pooue33XoHcIK2+v+IxEWcO mafvEhbmGy7CuYrr9IBxBKaPFC8wTDwWek2L5ngJ4+1y++s6FkohWf+LqrzWCsJi 5RzGg75IHF9b4WrCGh6R1uDylstIa7PcM3uIP7WBdBBroqlb8xRIbWrAJ8j/ei6n xCJ4VKHNujo659Nch9uy4HE7ms3WNfWkACACWDMYu/Wf09JFZlCC8rzVh1OxbQhq jf3akZxqaV/iDslACkZecJ8X1PWlYxKxagvRDjFVH/4lM5+74AdkrUhJp2P4P6Mk eOPHhtJHn8zpAskd6iziFgyyeA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:19:32 2026 by rpki-client