$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: RBEgidSxGMN9mJZZ8JDGKX68NWUNfhCHNaBwzuWANq4= Subject key identifier: F8:AD:3B:DC:A9:C7:24:60:47:1F:51:4E:94:44:3A:8F:F5:2E:4C:31 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 07D5 Signing time: Fri 30 May 2025 21:17:17 +0000 Manifest this update: Fri 30 May 2025 21:17:17 +0000 Manifest next update: Fri 06 Jun 2025 21:17:17 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: Z/R/4I1VCz4tW6IxGiBOlkFD7kfIraVTgs9lvOKTows=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: May 30 21:17:17 2025 GMT Not After : Jun 6 21:17:17 2025 GMT Subject: CN=683a205d-8a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c0:db:bd:35:e5:7e:6f:52:86:b7:d7:ce:6c: d9:cf:de:2d:f5:69:cc:45:90:39:90:7e:cf:2a:89: 04:23:a8:da:6f:cc:b0:8f:0b:f3:a2:06:c7:77:d5: a3:76:90:d7:27:b6:78:84:73:c7:d2:b8:3c:a0:d6: c8:91:bb:7e:0a:2b:8c:1f:89:66:f1:4a:8c:ac:e5: 0f:cf:e8:aa:5c:3a:00:83:6d:fa:98:5d:f8:68:b9: 56:09:d7:3b:8c:72:91:e7:9c:cc:8e:fa:46:f1:2e: 9e:3b:31:f8:c4:22:96:d2:9e:1e:fd:90:b7:c7:1d: 05:d6:0a:e1:f3:f1:03:07:f4:23:bf:54:ee:32:0f: 94:63:f5:87:24:66:f4:98:b5:4a:de:ad:a3:fe:f5: d5:be:5e:b7:0f:66:9c:b6:2c:00:f8:19:86:0f:96: 41:9e:8d:64:1e:8b:a9:e1:12:86:59:00:98:7d:c8: 32:ff:bf:a0:71:23:3c:4e:d6:73:06:6d:86:1b:f5: e5:62:cc:f9:50:09:42:2d:3b:71:30:c7:30:50:d3: f3:07:77:f2:7d:5d:32:77:09:95:f4:ac:9d:e0:3a: 32:cf:35:d2:6c:95:91:46:f1:c6:35:ca:d1:63:49: 45:fb:23:6d:ad:61:f8:2c:36:d5:bc:ce:21:9f:f9: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AD:3B:DC:A9:C7:24:60:47:1F:51:4E:94:44:3A:8F:F5:2E:4C:31 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:b6:9b:01:fa:9f:4e:89:8d:7f:e2:5d:af:f4:95:21:6e:82: a1:4f:a6:63:22:8f:e2:24:d1:4d:04:25:36:42:5f:79:a6:72: 6c:34:69:22:52:97:3d:e6:45:53:9e:a6:6d:6d:0b:26:db:1f: 7a:10:9d:aa:00:e5:fa:01:49:26:12:e5:e3:ae:94:96:0d:a9: 69:5d:cb:59:c5:ce:11:df:24:3d:32:a2:70:1c:33:ba:bc:97: fc:d6:3c:95:2d:e4:f3:a4:bf:8a:ef:b3:84:57:4a:d0:c9:70: 1d:3f:d7:c5:15:d7:c9:76:00:a2:b4:8c:e6:b7:fe:9d:3e:9b: de:9e:57:8c:bd:9b:81:a2:49:be:3f:5d:ea:28:3d:75:7d:e2: 9c:83:e4:3d:3e:7a:25:3b:ad:03:c5:14:11:3a:a7:07:c9:ab: 9d:42:76:3e:8c:9e:65:9d:b3:fe:b0:87:ec:c6:cc:d4:aa:c4: ee:28:47:2b:ff:ac:53:5c:92:79:46:48:91:af:ea:55:f1:e3: 0e:87:ad:a7:79:40:58:3a:b9:e3:58:fa:5e:81:51:10:e0:a7: b8:d4:10:7d:72:8d:a6:0d:3a:30:d3:e1:91:1f:cb:35:1f:08: 89:fe:ec:f8:1b:c4:19:1a:db:8f:50:a3:0d:cb:29:04:b7:b0: 62:ae:86:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwNTMwMjExNzE3WhcNMjUwNjA2MjExNzE3WjAYMRYwFAYD VQQDEw02ODNhMjA1ZC04YTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8DbvTXlfm9ShrfXzmzZz94t9WnMRZA5kH7PKokEI6jab8ywjwvzogbHd9Wj dpDXJ7Z4hHPH0rg8oNbIkbt+CiuMH4lm8UqMrOUPz+iqXDoAg236mF34aLlWCdc7 jHKR55zMjvpG8S6eOzH4xCKW0p4e/ZC3xx0F1grh8/EDB/Qjv1TuMg+UY/WHJGb0 mLVK3q2j/vXVvl63D2actiwA+BmGD5ZBno1kHoup4RKGWQCYfcgy/7+gcSM8TtZz Bm2GG/XlYsz5UAlCLTtxMMcwUNPzB3fyfV0ydwmV9Kyd4DoyzzXSbJWRRvHGNcrR Y0lF+yNtrWH4LDbVvM4hn/nBxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPitO9yp xyRgRx9RTpREOo/1LkwxMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQButpsB+p9OiY1/4l2v9JUhboKhT6ZjIo/iJNFNBCU2Ql95pnJsNGki Upc95kVTnqZtbQsm2x96EJ2qAOX6AUkmEuXjrpSWDalpXctZxc4R3yQ9MqJwHDO6 vJf81jyVLeTzpL+K77OEV0rQyXAdP9fFFdfJdgCitIzmt/6dPpvenleMvZuBokm+ P13qKD11feKcg+Q9PnolO60DxRQROqcHyaudQnY+jJ5lnbP+sIfsxszUqsTuKEcr /6xTXJJ5RkiRr+pV8eMOh62neUBYOrnjWPpegVEQ4Ke41BB9co2mDTow0+GRH8s1 HwiJ/uz4G8QZGtuPUKMNyykEt7BiroZn -----END CERTIFICATE-----Generated at Sat May 31 16:49:04 2025 by rpki-client