$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: tk7T6OKqbqz2mLqIVoBz2Zi6iA4EfX7IarJ+gynIszw= Subject key identifier: 3B:E2:7D:C9:8A:5C:24:FE:40:CD:17:66:C0:80:9C:6B:50:6F:D2:14 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 08A1 Signing time: Mon 22 Jun 2026 20:35:40 +0000 Manifest this update: Mon 22 Jun 2026 20:35:40 +0000 Manifest next update: Mon 29 Jun 2026 20:35:40 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: pDG3G2rs5WuaMQmZWqJPZXRHExPJ9MIl70r9UR986tI=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 1DVHRpQJfmxPJ8yM+PnKlpzMQFp7Otto9UkCLg4Zu5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Jun 2026 20:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Jun 22 20:35:40 2026 GMT Not After : Jun 29 20:35:40 2026 GMT Subject: CN=6a399c9c-1343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:a8:9b:23:56:b9:ab:e4:fa:4f:5f:80:02: a4:50:13:4d:5a:d2:46:b0:84:25:14:bb:2d:81:04: c5:27:3e:a7:a4:9d:23:7d:0a:e4:b9:db:1d:26:df: e5:01:3c:e0:00:eb:70:da:46:e9:7b:41:9e:3c:11: 02:54:4e:cb:75:b3:18:9d:6f:a8:5a:53:41:8c:dd: 61:f2:87:18:c0:0e:c1:2a:11:65:ca:a5:6a:d6:ff: 8c:4c:01:c5:b2:8d:13:75:2d:d4:fe:4b:7c:53:00: 89:22:a7:d9:e9:23:ec:ab:13:7d:0c:a1:3e:f0:ec: 44:2c:da:99:45:01:f2:81:44:2d:df:a3:2d:3b:ed: df:bd:18:b0:6d:91:88:c2:50:5a:ee:4d:60:21:a6: a1:5c:a0:74:1d:bc:13:0b:36:9b:79:c6:3b:bd:c1: 82:73:99:15:41:7a:03:ce:57:aa:65:7f:7e:17:37: 08:bc:91:b1:e1:b0:a3:77:02:ad:14:3d:13:69:d4: 48:0c:68:57:a8:70:b7:d0:49:02:ad:2f:62:b1:98: 7c:14:c3:ee:84:c1:a0:46:31:ef:5c:bc:7b:f0:7e: 47:1c:78:6f:96:cf:c1:de:bf:85:97:f4:7f:a1:39: 63:e8:b6:fa:c0:2e:cf:3f:b7:d2:fb:59:a9:d4:3d: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E2:7D:C9:8A:5C:24:FE:40:CD:17:66:C0:80:9C:6B:50:6F:D2:14 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:54:87:6d:2d:c3:14:02:10:c2:f1:b1:81:05:09:65:60:07: d0:22:e5:9a:bf:77:49:c4:8e:10:dd:ef:69:2f:4c:e2:b6:37: b6:f8:d4:66:04:b5:ae:09:9a:40:5e:1f:38:25:fa:06:20:50: 90:b6:d0:f0:77:58:af:ee:91:29:be:6d:d0:d9:e3:62:ce:6a: b9:9d:3f:f7:a9:d2:5d:b7:1b:e8:83:4c:38:01:07:dd:82:9d: 45:68:6a:ab:43:f3:98:22:87:59:84:01:8f:92:6f:1a:e9:13: b3:cc:18:2a:64:36:3b:82:5b:ea:7f:3c:16:6f:a8:fa:de:e4: d4:9d:bc:73:d8:1e:b1:eb:b1:6c:17:e6:b6:e2:10:1d:ad:13: ea:2b:eb:af:92:08:49:33:e4:7a:1f:8f:90:7f:11:06:c9:48: cc:a5:06:a0:d4:06:a3:0c:c4:ac:a1:e6:a6:79:4d:bf:44:f6: fe:60:43:8d:4c:dd:ab:43:7d:1e:38:4e:68:f0:28:04:e4:94: 21:55:a2:f3:ea:24:d3:ca:b8:ca:57:d7:9e:93:2c:8e:24:b1: e5:da:30:dd:d8:7d:dd:49:3a:25:4d:e2:23:81:57:c6:46:83: a8:6a:79:28:b6:bd:e7:1b:b4:d7:66:18:71:2e:78:52:df:8b: 74:e3:84:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjYwNjIyMjAzNTQwWhcNMjYwNjI5MjAzNTQwWjAYMRYwFAYD VQQDEw02YTM5OWM5Yy0xMzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBaomyNWuavk+k9fgAKkUBNNWtJGsIQlFLstgQTFJz6npJ0jfQrkudsdJt/l ATzgAOtw2kbpe0GePBECVE7LdbMYnW+oWlNBjN1h8ocYwA7BKhFlyqVq1v+MTAHF so0TdS3U/kt8UwCJIqfZ6SPsqxN9DKE+8OxELNqZRQHygUQt36MtO+3fvRiwbZGI wlBa7k1gIaahXKB0HbwTCzabecY7vcGCc5kVQXoDzleqZX9+FzcIvJGx4bCjdwKt FD0TadRIDGhXqHC30EkCrS9isZh8FMPuhMGgRjHvXLx78H5HHHhvls/B3r+Fl/R/ oTlj6Lb6wC7PP7fS+1mp1D23mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDvifcmK XCT+QM0XZsCAnGtQb9IUMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMlSHbS3DFAIQwvGxgQUJZWAH0CLlmr93ScSOEN3vaS9M4rY3tvjUZgS1rgma QF4fOCX6BiBQkLbQ8HdYr+6RKb5t0NnjYs5quZ0/96nSXbcb6INMOAEH3YKdRWhq q0PzmCKHWYQBj5JvGukTs8wYKmQ2O4Jb6n88Fm+o+t7k1J28c9geseuxbBfmtuIQ Ha0T6ivrr5IISTPkeh+PkH8RBslIzKUGoNQGowzErKHmpnlNv0T2/mBDjUzdq0N9 HjhOaPAoBOSUIVWi8+ok08q4ylfXnpMsjiSx5dow3dh93Uk6JU3iI4FXxkaDqGp5 KLa95xu012YYcS54Ut+LdOOEhQ== -----END CERTIFICATE-----Generated at Wed Jun 24 11:20:29 2026 by rpki-client