$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: vWfEDF9qtos0xW/orifmOpjjPRSw2EaUcoZ/XEvHPmA= Subject key identifier: B0:4A:20:34:F6:E0:EA:54:26:B4:18:9C:55:4C:CA:88:52:5C:B1:6C Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 07EF Signing time: Sun 20 Jul 2025 21:05:55 +0000 Manifest this update: Sun 20 Jul 2025 21:05:55 +0000 Manifest next update: Sun 27 Jul 2025 21:05:55 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: FXaG+mix5yC0/jYZ8oOOi77/lHNzMQKYP6dsOuMmWKs=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Jul 20 21:05:55 2025 GMT Not After : Jul 27 21:05:55 2025 GMT Subject: CN=687d5a33-9a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:d6:2b:87:af:fb:fe:9c:f9:76:ad:f7:ba: 8d:c2:f3:61:fe:23:30:fa:14:2b:c7:c7:26:28:a8: cc:17:1a:71:e3:e1:b0:cf:7f:0e:c4:e0:45:48:cd: 8f:3d:c9:4b:0b:8b:8d:98:a5:95:c8:62:3e:2f:19: 09:9a:73:cd:82:bb:db:c2:91:86:5b:7a:77:17:a6: 63:d0:ef:53:75:84:51:0c:22:e0:0e:ff:b4:df:5d: 1b:fd:43:0b:4d:8e:ab:da:2b:78:d2:d7:af:bf:8d: 31:82:25:c3:de:c6:f8:87:6c:38:e0:76:bc:7c:1e: 3f:8e:02:c0:3e:e2:3c:e0:be:29:4e:49:51:93:e6: c3:6c:92:54:c5:fe:02:1c:cf:04:b3:db:2c:c5:91: 26:a6:40:b3:08:ee:e7:37:24:6e:8e:2f:05:1e:a8: 38:c6:85:da:af:82:07:55:cb:48:cd:d9:3c:f9:7a: f2:69:52:84:0d:00:d4:f9:4a:b1:21:98:57:80:1c: 8d:08:16:4a:ea:a8:c6:d2:49:eb:39:dc:7c:37:27: 44:be:33:04:06:c0:da:71:35:ad:4d:06:90:3a:d9: d2:6a:a2:85:57:84:8d:d0:21:a7:6c:8d:6d:b8:df: db:e3:15:9c:84:4d:58:03:4b:4f:35:0d:94:2c:ba: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:20:34:F6:E0:EA:54:26:B4:18:9C:55:4C:CA:88:52:5C:B1:6C X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:1c:75:32:fc:c2:38:19:48:74:08:f6:2b:b2:86:4b:1a:5b: 6f:23:4d:b8:68:f4:04:2c:b1:55:91:66:ef:42:38:1b:46:2d: dc:76:32:6e:9d:6f:e4:d7:21:94:0e:99:ee:2c:b0:a2:c3:d3: aa:fa:89:84:5e:ef:2d:c9:f7:0a:d8:4d:64:f5:e3:c9:8b:cd: 66:17:dc:62:18:b4:51:09:31:17:6e:0c:78:dc:ec:57:2c:43: 30:2a:6d:eb:60:6f:27:76:f4:7d:b4:45:66:7e:4b:8a:47:44: cc:e4:76:a8:ef:5a:27:36:76:23:59:e5:2a:c2:61:c1:22:66: fd:a5:19:49:75:c9:44:c3:53:07:38:b9:c8:af:7a:54:be:c4: b0:dc:33:7c:2d:28:61:79:74:39:c2:fd:cf:1d:3b:0f:f5:26: 72:71:5b:fa:a0:85:90:3c:4f:b9:23:e5:8f:b6:02:e4:4a:11: 69:4b:9d:ee:8a:49:31:22:59:59:c9:a9:e7:64:92:e1:53:b4: 2d:45:0b:d9:1e:cc:16:2e:cc:b4:4b:e6:05:f7:62:c3:20:f3: f6:c9:07:fd:b9:e6:8a:d0:6a:c0:5f:6e:ff:f7:ac:90:9a:b8: ce:e3:99:e1:c2:bf:a5:ff:3c:df:ae:fe:b7:e6:f9:e6:61:67: 3d:a2:bd:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwNzIwMjEwNTU1WhcNMjUwNzI3MjEwNTU1WjAYMRYwFAYD VQQDEw02ODdkNWEzMy05YTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRPWK4ev+/6c+Xat97qNwvNh/iMw+hQrx8cmKKjMFxpx4+Gwz38OxOBFSM2P PclLC4uNmKWVyGI+LxkJmnPNgrvbwpGGW3p3F6Zj0O9TdYRRDCLgDv+0310b/UML TY6r2it40tevv40xgiXD3sb4h2w44Ha8fB4/jgLAPuI84L4pTklRk+bDbJJUxf4C HM8Es9ssxZEmpkCzCO7nNyRuji8FHqg4xoXar4IHVctIzdk8+XryaVKEDQDU+Uqx IZhXgByNCBZK6qjG0knrOdx8NydEvjMEBsDacTWtTQaQOtnSaqKFV4SN0CGnbI1t uN/b4xWchE1YA0tPNQ2ULLqP/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBKIDT2 4OpUJrQYnFVMyohSXLFsMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4HHUy/MI4GUh0CPYrsoZLGltvI024aPQELLFVkWbvQjgbRi3cdjJu nW/k1yGUDpnuLLCiw9Oq+omEXu8tyfcK2E1k9ePJi81mF9xiGLRRCTEXbgx43OxX LEMwKm3rYG8ndvR9tEVmfkuKR0TM5Hao71onNnYjWeUqwmHBImb9pRlJdclEw1MH OLnIr3pUvsSw3DN8LShheXQ5wv3PHTsP9SZycVv6oIWQPE+5I+WPtgLkShFpS53u ikkxIllZyannZJLhU7QtRQvZHswWLsy0S+YF92LDIPP2yQf9ueaK0GrAX27/96yQ mrjO45nhwr+l/zzfrv635vnmYWc9or0l -----END CERTIFICATE-----Generated at Mon Jul 21 12:39:15 2025 by rpki-client