$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: mgGVtPOgHgqHoLrDRXt0nhrDrAJBgsIHVCpYmShUj7I= Subject key identifier: 94:6B:A5:23:9C:FD:E1:76:3C:EF:3A:D4:D6:4D:99:FE:15:D9:55:51 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 080E Signing time: Thu 18 Sep 2025 21:09:46 +0000 Manifest this update: Thu 18 Sep 2025 21:09:46 +0000 Manifest next update: Thu 25 Sep 2025 21:09:46 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: mtZrQneb6TRtJhh5kIjnxp+/9AyzTmvCKe2Wj9iHywA=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 21:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2070 (0x816) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Sep 18 21:09:46 2025 GMT Not After : Sep 25 21:09:46 2025 GMT Subject: CN=68cc751a-c53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:03:2d:5d:7f:2e:4d:8b:4c:23:19:fa:d5: 66:19:3a:8c:91:4f:2a:f6:15:ba:37:8a:64:7c:92: c7:bf:30:21:15:ac:2a:bf:fb:ee:12:5c:cf:08:7d: 2f:dc:ca:d1:61:96:ce:dc:52:d2:c4:f2:4a:49:bc: c0:af:4c:9e:6c:a3:65:08:da:61:d5:5a:e7:b6:17: 1a:45:70:67:b6:69:25:f3:a8:f6:a7:43:a1:5e:39: 8b:37:14:32:c1:99:96:de:97:77:ba:2a:3f:4a:69: 7d:0f:64:97:e4:d7:7a:b5:dd:ba:39:8b:27:ce:d9: 6e:40:d5:a0:fb:4a:64:85:44:df:97:5e:22:c1:4e: 91:b5:54:fa:a1:ad:f2:38:a7:f4:dd:4f:d8:c7:2d: ce:ec:70:7c:00:7f:8b:ff:57:2a:51:ac:9b:9b:ca: 51:bc:1b:2a:de:46:6c:a5:fc:5d:c2:be:f2:e6:4a: ab:9c:27:0d:f3:70:03:24:73:54:78:ab:c6:7d:80: 91:95:36:39:63:b4:a1:c1:40:f8:51:13:e5:c7:d4: 70:4d:33:a9:09:26:e6:85:e4:8c:14:1a:bd:14:b8: e0:24:b8:18:3f:d6:ac:74:b7:8e:b6:81:8a:00:fb: f7:ee:bd:71:c7:f0:64:d7:31:7f:7c:f6:f1:d4:20: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6B:A5:23:9C:FD:E1:76:3C:EF:3A:D4:D6:4D:99:FE:15:D9:55:51 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:90:2f:de:b2:93:93:bc:ff:82:87:04:29:32:c4:07:4a:57: 28:c7:fa:11:b5:28:00:7f:a3:27:d1:e5:7c:c0:66:e0:77:82: 4a:07:9b:1d:7f:db:64:c9:51:1d:cf:76:ab:9c:7b:12:d1:75: ca:d0:8a:45:a9:2c:d3:63:0a:3a:25:45:fa:2d:0f:25:78:d4: f2:af:67:e3:bc:84:46:54:c3:e4:58:42:1d:69:8e:b3:1b:91: 2e:da:fc:a8:7f:61:4a:56:94:86:13:33:74:c1:fe:f0:24:08: 12:fd:39:84:47:a7:e2:82:c3:a2:78:73:e2:4e:c1:ab:aa:77: 37:7f:49:39:c5:9e:01:eb:7a:4e:4f:0e:0b:3b:fd:27:72:91: d7:38:27:fb:de:96:6e:61:4e:ca:71:fd:b8:cb:e9:b5:09:f3: 76:11:17:00:7c:e6:5e:de:49:3b:c2:bf:78:db:24:71:da:a7: 36:9d:79:fc:81:25:fc:30:0d:4a:5d:de:21:f3:c4:d2:e0:a8: 2a:ab:61:f4:85:84:cd:7d:ae:26:c6:81:4d:f9:b4:ad:bd:ab: cc:93:81:bf:05:11:8b:4f:9b:b4:a6:ab:35:73:c2:ef:54:36: 3f:5b:3a:e8:b7:26:b9:13:bc:4c:d6:fd:d5:e5:2a:62:e2:6e: 15:24:18:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwOTE4MjEwOTQ2WhcNMjUwOTI1MjEwOTQ2WjAYMRYwFAYD VQQDEw02OGNjNzUxYS1jNTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyQDLV1/Lk2LTCMZ+tVmGTqMkU8q9hW6N4pkfJLHvzAhFawqv/vuElzPCH0v 3MrRYZbO3FLSxPJKSbzAr0yebKNlCNph1VrnthcaRXBntmkl86j2p0OhXjmLNxQy wZmW3pd3uio/Sml9D2SX5Nd6td26OYsnztluQNWg+0pkhUTfl14iwU6RtVT6oa3y OKf03U/Yxy3O7HB8AH+L/1cqUaybm8pRvBsq3kZspfxdwr7y5kqrnCcN83ADJHNU eKvGfYCRlTY5Y7ShwUD4URPlx9RwTTOpCSbmheSMFBq9FLjgJLgYP9asdLeOtoGK APv37r1xx/Bk1zF/fPbx1CD5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRrpSOc /eF2PO861NZNmf4V2VVRMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAokC/espOTvP+ChwQpMsQHSlcox/oRtSgAf6Mn0eV8wGbgd4JKB5sd f9tkyVEdz3arnHsS0XXK0IpFqSzTYwo6JUX6LQ8leNTyr2fjvIRGVMPkWEIdaY6z G5Eu2vyof2FKVpSGEzN0wf7wJAgS/TmER6figsOieHPiTsGrqnc3f0k5xZ4B63pO Tw4LO/0ncpHXOCf73pZuYU7Kcf24y+m1CfN2ERcAfOZe3kk7wr942yRx2qc2nXn8 gSX8MA1KXd4h88TS4Kgqq2H0hYTNfa4mxoFN+bStvavMk4G/BRGLT5u0pqs1c8Lv VDY/Wzrotya5E7xM1v3V5Spi4m4VJBhF -----END CERTIFICATE-----Generated at Fri Sep 19 03:57:45 2025 by rpki-client