$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: TZ1fhr1PUWS/9+LUDQjGOOgWI4Fy9O2KYB+T1xkBopg= Subject key identifier: 09:DE:55:A3:A8:42:0F:F0:58:92:CB:18:FF:8F:4A:B1:CB:B1:14:36 Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 082D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 0825 Signing time: Tue 04 Nov 2025 20:54:53 +0000 Manifest this update: Tue 04 Nov 2025 20:54:53 +0000 Manifest next update: Tue 11 Nov 2025 20:54:53 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: x2mrM7fwPU1AFpVvsruCKJL7HKNTBsbpqVH6SX7Ax9Q=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:54:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2093 (0x82d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Nov 4 20:54:53 2025 GMT Not After : Nov 11 20:54:53 2025 GMT Subject: CN=690a681d-f6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:18:9b:f0:21:02:34:65:5e:8a:b0:92:52:43: e2:cf:84:c2:e1:0c:58:61:2f:80:42:ca:af:e1:0c: ba:b2:a9:ae:62:45:89:54:07:49:97:81:2f:2d:40: 0d:5e:c4:48:ef:ed:43:8e:a1:ec:56:8a:65:d8:5a: 95:a1:94:ce:7b:ba:3f:6e:65:39:dd:4f:a9:11:43: 69:99:c7:fb:e7:a6:87:2d:5c:9e:33:2f:20:dd:09: 63:3d:ea:4b:cd:d1:5f:87:76:7c:8f:4a:0b:47:14: 7a:fb:8a:80:d9:6e:c2:8c:f4:3c:77:cc:21:19:c2: 85:7e:3b:07:b2:4e:6e:45:87:f5:ad:43:08:1a:20: 5a:a8:46:4a:19:dd:64:c4:33:1d:10:5b:0b:26:b5: 98:60:1b:ae:c9:2c:70:ff:5e:0a:b1:7a:20:81:5f: c9:7e:63:d1:8c:2a:35:fb:74:71:dc:8a:15:ed:93: 6b:85:87:da:fe:ba:b5:68:ab:14:64:7f:7e:80:6b: 38:5f:3f:46:e9:6e:47:a5:d4:17:3b:92:17:7d:8e: 24:27:cc:18:94:e6:c6:e7:73:9d:a9:c6:7f:c2:3c: f2:24:a6:ac:2c:3e:98:a1:cb:1e:15:be:4a:f3:a8: 32:a8:dc:fc:89:20:75:5c:37:de:74:19:fd:50:13: 8f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DE:55:A3:A8:42:0F:F0:58:92:CB:18:FF:8F:4A:B1:CB:B1:14:36 X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:7b:00:de:88:1d:55:7c:a3:fd:4f:14:75:88:fc:63:90:b1: 44:03:15:a8:7e:88:cc:49:79:ba:5d:28:34:4c:89:3a:08:9d: 1c:9a:eb:af:fe:19:b8:5e:6c:eb:85:95:db:bd:cb:e9:45:37: e1:40:1b:d6:2f:e0:6a:ed:cd:bd:1e:0e:ed:5e:b0:f1:86:0c: 82:a2:30:28:88:7c:a8:7b:08:ca:f4:20:ad:68:0f:12:5b:6c: cf:74:f2:f3:64:f4:e1:cc:2a:02:1d:af:a2:a7:6b:6d:17:99: 8d:d3:e9:a2:63:40:95:09:40:45:28:79:51:aa:55:39:21:9f: f5:d6:22:b8:1d:64:5a:83:33:e8:d3:b5:9d:fc:72:6d:02:f2: 1c:99:76:e2:94:12:c6:6d:ee:95:1e:5f:bc:7f:9a:05:b8:53: 2b:52:ee:b8:40:f2:cd:38:97:aa:80:fa:06:fb:08:8a:12:b5: 6b:89:d4:ed:08:23:ce:5a:92:a5:0c:c1:22:7f:7b:57:22:6f: e0:d7:d9:d8:63:ff:fa:c3:c5:5f:21:11:4f:f6:9f:e2:5f:2d: 96:45:7f:3d:ae:d7:2e:cc:30:0d:2c:96:dc:ab:70:88:e3:cc: 96:37:73:06:5b:cc:19:d7:bd:1a:d0:5a:83:0e:86:71:be:7c: 0b:df:03:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUxMTA0MjA1NDUzWhcNMjUxMTExMjA1NDUzWjAYMRYwFAYD VQQDEw02OTBhNjgxZC1mNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhib8CECNGVeirCSUkPiz4TC4QxYYS+AQsqv4Qy6sqmuYkWJVAdJl4EvLUAN XsRI7+1DjqHsVopl2FqVoZTOe7o/bmU53U+pEUNpmcf756aHLVyeMy8g3QljPepL zdFfh3Z8j0oLRxR6+4qA2W7CjPQ8d8whGcKFfjsHsk5uRYf1rUMIGiBaqEZKGd1k xDMdEFsLJrWYYBuuySxw/14KsXoggV/JfmPRjCo1+3Rx3IoV7ZNrhYfa/rq1aKsU ZH9+gGs4Xz9G6W5HpdQXO5IXfY4kJ8wYlObG53OdqcZ/wjzyJKasLD6YocseFb5K 86gyqNz8iSB1XDfedBn9UBOPfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAneVaOo Qg/wWJLLGP+PSrHLsRQ2MB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChewDeiB1VfKP9TxR1iPxjkLFEAxWofojMSXm6XSg0TIk6CJ0cmuuv /hm4XmzrhZXbvcvpRTfhQBvWL+Bq7c29Hg7tXrDxhgyCojAoiHyoewjK9CCtaA8S W2zPdPLzZPThzCoCHa+ip2ttF5mN0+miY0CVCUBFKHlRqlU5IZ/11iK4HWRagzPo 07Wd/HJtAvIcmXbilBLGbe6VHl+8f5oFuFMrUu64QPLNOJeqgPoG+wiKErVridTt CCPOWpKlDMEif3tXIm/g19nYY//6w8VfIRFP9p/iXy2WRX89rtcuzDANLJbcq3CI 48yWN3MGW8wZ170a0FqDDoZxvnwL3wOQ -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:37 2025 by rpki-client