$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: MJhRZouvnjLuAGDlXDf1c0J/K4LeJSz+mmsht9y49sM= Subject key identifier: 88:15:5D:AF:0C:84:A6:4C:8B:C7:92:C1:25:A1:7D:83:F4:B8:EB:AE Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 08BE Signing time: Tue 18 Aug 2026 20:49:27 +0000 Manifest this update: Tue 18 Aug 2026 20:49:26 +0000 Manifest next update: Tue 25 Aug 2026 20:49:26 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: VL6lnBvuMxizdSugJC5gUGpUqmkSBPGrBVDsNXsdbL4=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 1DVHRpQJfmxPJ8yM+PnKlpzMQFp7Otto9UkCLg4Zu5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 20:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Aug 18 20:49:26 2026 GMT Not After : Aug 25 20:49:26 2026 GMT Subject: CN=6a84c557-bd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:14:23:44:fe:37:61:6d:f4:fa:46:f5:da: 62:1c:22:1c:9c:be:b6:0b:2b:cb:27:b2:bc:ae:36: 4d:27:7d:5c:19:9c:9b:83:a5:95:d1:45:a7:4d:20: 19:6d:81:01:9a:e2:0e:ce:fa:b6:5c:73:f1:68:a6: 18:74:31:35:7d:b3:45:88:c6:a6:cd:79:ee:4a:81: 05:f4:9e:44:c2:b5:7e:cf:c6:bd:83:05:a5:d6:c4: 8f:78:ec:c5:23:0b:f8:eb:27:6d:75:42:45:06:3c: 6c:89:e3:8b:55:96:99:96:f8:4a:24:9b:83:3f:53: 13:e6:6a:47:dd:c5:f5:98:65:0a:56:82:3f:8f:32: b4:5e:72:ed:90:be:36:9b:dd:a3:a1:61:93:7d:e1: 65:c7:4c:92:f9:af:fc:8e:d9:b6:17:5b:8b:71:8d: 9a:9c:b0:69:51:0f:b5:2a:4c:5a:e1:06:44:59:b5: ec:1c:e6:eb:7c:4d:6c:f8:15:09:fd:09:8c:ba:f3: 0f:9a:2d:e4:86:6a:80:41:27:aa:cd:63:04:bc:43: 3e:7d:5a:6e:3f:ea:46:e9:e6:a9:37:71:48:e5:56: 57:fc:17:6f:ea:95:82:ba:64:2b:3b:86:70:e1:8d: b5:af:de:18:2e:cf:78:a5:07:97:bb:c5:11:0b:85: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:15:5D:AF:0C:84:A6:4C:8B:C7:92:C1:25:A1:7D:83:F4:B8:EB:AE X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:3a:b2:91:0c:44:f2:d6:9d:1f:47:f0:04:ab:3c:2d:16:ca: 0f:73:da:c2:bf:8d:40:bd:12:24:ab:e9:56:f5:b4:f4:ec:42: 3e:83:6b:9b:36:31:6f:d4:fa:08:79:74:ad:12:8e:de:b5:4c: 08:c4:98:68:7f:86:23:3d:75:c3:74:3b:45:79:a2:7a:2e:9b: d9:24:27:0a:65:7f:c5:cb:ce:60:05:b5:ec:83:05:ba:ef:b3: b0:e7:bb:f7:88:4e:4a:9c:49:8b:28:19:87:76:28:17:58:d7: fb:54:cf:a6:b7:8e:49:ff:97:2b:53:b3:2d:4a:88:45:de:8d: 57:9f:5a:a7:82:cd:fd:ae:fa:aa:51:c0:49:77:5c:bd:03:cd: f9:81:0f:42:68:74:ee:b1:1c:8b:12:c9:6c:52:77:5f:41:ae: cf:49:da:af:78:e9:82:a1:7f:99:15:d2:5c:02:f5:a7:2b:13: e7:b4:e8:67:78:0a:a2:72:7c:de:24:03:9e:24:f7:95:f1:82: 1b:78:3a:ac:09:7f:3c:9b:ff:b4:85:0f:ba:7e:e7:2f:1e:7f: 4d:1d:6e:e4:cf:67:28:d7:c3:13:7b:3d:f3:eb:98:aa:83:7a: bc:91:b6:46:1f:69:ad:a3:e3:6a:88:bc:12:c9:f7:7b:16:5f: cc:89:3a:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjYwODE4MjA0OTI2WhcNMjYwODI1MjA0OTI2WjAYMRYwFAYD VQQDEw02YTg0YzU1Ny1iZDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhsUI0T+N2Ft9PpG9dpiHCIcnL62CyvLJ7K8rjZNJ31cGZybg6WV0UWnTSAZ bYEBmuIOzvq2XHPxaKYYdDE1fbNFiMamzXnuSoEF9J5EwrV+z8a9gwWl1sSPeOzF Iwv46ydtdUJFBjxsieOLVZaZlvhKJJuDP1MT5mpH3cX1mGUKVoI/jzK0XnLtkL42 m92joWGTfeFlx0yS+a/8jtm2F1uLcY2anLBpUQ+1Kkxa4QZEWbXsHObrfE1s+BUJ /QmMuvMPmi3khmqAQSeqzWMEvEM+fVpuP+pG6eapN3FI5VZX/Bdv6pWCumQrO4Zw 4Y21r94YLs94pQeXu8URC4XqtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIgVXa8M hKZMi8eSwSWhfYP0uOuuMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqzqykQxE8tadH0fwBKs8LRbKD3Pawr+NQL0SJKvpVvW09OxCPoNrmzYxb9T6 CHl0rRKO3rVMCMSYaH+GIz11w3Q7RXmiei6b2SQnCmV/xcvOYAW17IMFuu+zsOe7 94hOSpxJiygZh3YoF1jX+1TPpreOSf+XK1OzLUqIRd6NV59ap4LN/a76qlHASXdc vQPN+YEPQmh07rEcixLJbFJ3X0Guz0nar3jpgqF/mRXSXAL1pysT57ToZ3gKonJ8 3iQDniT3lfGCG3g6rAl/PJv/tIUPun7nLx5/TR1u5M9nKNfDE3s98+uYqoN6vJG2 Rh9praPjaoi8Esn3exZfzIk6Ng== -----END CERTIFICATE-----Generated at Wed Aug 19 11:45:53 2026 by rpki-client