$ rpki-client -vvf rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft File: otjk5HbFVpzALfPNpfODKJlvU_4.mft (raw, json) Hash identifier: PdTp9hljKZ1fm6ei6fkjbVMiaFTICk2itzmYUdpup+g= Subject key identifier: 43:2B:CC:1D:5F:8D:8A:F6:53:52:2E:E3:D7:29:73:06:E3:7E:25:EC Authority key identifier: A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE Certificate issuer: /CN=A911020B/serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Certificate serial: 0800 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft Manifest number: 07F8 Signing time: Wed 06 Aug 2025 21:16:23 +0000 Manifest this update: Wed 06 Aug 2025 21:16:23 +0000 Manifest next update: Wed 13 Aug 2025 21:16:23 +0000 Files and hashes: 1: otjk5HbFVpzALfPNpfODKJlvU_4.crl (hash: c25+vRtgZ1sd0qqFhc664Dssd0NwBsI6tQJLuMpCHTw=) 2: 6CD78FE8B69B11EFAECD660BC4F9AE02.roa (hash: 3eF84NwDm1hxHfiSauyjl30VricBa/nnIfcP0c1DicI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2048 (0x800) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911020B, serialNumber=A2D8E4E476C5569CC02DF3CDA5F38328996F53FE Validity Not Before: Aug 6 21:16:23 2025 GMT Not After : Aug 13 21:16:23 2025 GMT Subject: CN=6893c627-fb6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:19:51:c4:d6:a9:b5:5b:21:4c:53:87:1e:20: f1:dd:41:80:5f:89:90:a7:c6:6a:18:5b:00:fd:5a: e0:8a:5b:52:9f:20:eb:bd:ae:65:3a:76:01:85:e7: 62:08:1d:85:0b:2b:56:c6:fd:05:1a:23:a0:0f:21: 37:f0:eb:5d:f5:e9:6c:ae:42:ca:7e:00:22:f9:9d: e6:94:34:96:75:9a:10:0c:33:4d:82:bc:59:b0:1f: ad:78:04:b1:85:e8:5a:8a:a8:ee:40:50:17:c0:12: 6e:92:ac:7c:e2:93:07:6d:74:2e:69:0d:55:78:83: 21:e2:e5:63:55:19:28:9e:8a:88:b8:15:f5:43:7a: 60:01:2d:cb:59:e9:33:36:7f:30:83:07:64:42:0d: 54:0c:9d:79:8a:52:9b:d3:ef:a2:2b:b3:39:e5:30: 5c:c3:d3:85:49:0d:4b:30:c6:8d:86:9d:a6:72:4d: b9:78:7a:06:d4:d0:0f:6f:06:65:c2:c5:32:59:29: ab:0d:44:44:86:d4:67:d9:dc:26:ef:7f:fc:a6:e7: 89:d3:56:c6:f7:73:f1:b5:88:6c:b9:6d:9c:05:39: 50:b0:ed:9b:37:a9:fd:3b:9a:3d:fe:73:b4:52:f1: a0:7e:fd:19:f8:c1:de:40:90:04:12:5c:ae:d0:2c: bd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2B:CC:1D:5F:8D:8A:F6:53:52:2E:E3:D7:29:73:06:E3:7E:25:EC X509v3 Authority Key Identifier: keyid:A2:D8:E4:E4:76:C5:56:9C:C0:2D:F3:CD:A5:F3:83:28:99:6F:53:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/otjk5HbFVpzALfPNpfODKJlvU_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911020B/30DE430AF18E11EAB4AB1E47C4F9AE02/otjk5HbFVpzALfPNpfODKJlvU_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:a6:e3:47:92:97:2c:f0:12:ff:17:1c:ee:9e:50:7c:6b:2d: 7c:18:0d:34:36:4c:c4:a9:2b:13:e4:92:54:bc:cd:5b:66:39: 9b:ce:18:b7:34:c4:f3:be:89:28:74:b6:bc:f8:20:93:13:6e: fa:d9:b5:24:9f:b9:82:67:c6:b4:60:62:64:6f:98:99:5e:0e: f8:01:07:b1:40:09:5b:b9:f4:48:ed:ae:08:d2:ee:c6:9a:3d: 34:c6:3f:3d:57:62:d5:f6:1a:d6:68:17:54:da:35:62:1b:97: fa:84:a1:70:18:ac:67:35:8a:c1:78:fd:70:e3:a1:8a:c8:f7: 19:06:a0:47:23:5e:e9:76:38:68:8e:c1:ae:f0:8f:e8:a6:2c: b8:19:e4:61:d7:fb:32:7d:b9:37:41:33:cc:18:b8:aa:8a:48: 84:9c:ff:23:e9:0d:63:1e:07:1f:01:28:48:75:b4:2b:5d:c3: f1:47:4a:b0:89:49:87:87:3d:00:ef:e7:3a:59:4d:db:4a:6a: 9d:0e:b1:1e:54:13:54:a4:96:0c:7a:24:4c:5d:70:07:26:ee: 1d:5f:75:24:07:03:7d:64:ef:11:df:58:0a:77:bb:6b:79:8f: e9:57:33:6e:9f:0a:bd:9e:56:b8:c0:c1:34:c0:28:a2:dc:45: 7c:b4:5b:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAyMEIxMTAvBgNVBAUTKEEyRDhFNEU0NzZDNTU2OUNDMDJERjNDREE1RjM4MzI4 OTk2RjUzRkUwHhcNMjUwODA2MjExNjIzWhcNMjUwODEzMjExNjIzWjAYMRYwFAYD VQQDEw02ODkzYzYyNy1mYjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RlRxNaptVshTFOHHiDx3UGAX4mQp8ZqGFsA/VrgiltSnyDrva5lOnYBhedi CB2FCytWxv0FGiOgDyE38Otd9elsrkLKfgAi+Z3mlDSWdZoQDDNNgrxZsB+teASx hehaiqjuQFAXwBJukqx84pMHbXQuaQ1VeIMh4uVjVRkonoqIuBX1Q3pgAS3LWekz Nn8wgwdkQg1UDJ15ilKb0++iK7M55TBcw9OFSQ1LMMaNhp2mck25eHoG1NAPbwZl wsUyWSmrDUREhtRn2dwm73/8pueJ01bG93PxtYhsuW2cBTlQsO2bN6n9O5o9/nO0 UvGgfv0Z+MHeQJAEElyu0Cy9/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMrzB1f jYr2U1Iu49cpcwbjfiXsMB8GA1UdIwQYMBaAFKLY5OR2xVacwC3zzaXzgyiZb1P+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDIwQi8zMERFNDMwQUYx OEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZwekFMZlBOcGZPREtKbHZV XzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL290ams1SGJGVnB6QUxmUE5wZk9ES0psdlVfNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDIwQi8zMERFNDMwQUYxOEUxMUVBQjRBQjFFNDdDNEY5QUUwMi9vdGprNUhiRlZw ekFMZlBOcGZPREtKbHZVXzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBppuNHkpcs8BL/FxzunlB8ay18GA00NkzEqSsT5JJUvM1bZjmbzhi3 NMTzvokodLa8+CCTE2762bUkn7mCZ8a0YGJkb5iZXg74AQexQAlbufRI7a4I0u7G mj00xj89V2LV9hrWaBdU2jViG5f6hKFwGKxnNYrBeP1w46GKyPcZBqBHI17pdjho jsGu8I/opiy4GeRh1/syfbk3QTPMGLiqikiEnP8j6Q1jHgcfAShIdbQrXcPxR0qw iUmHhz0A7+c6WU3bSmqdDrEeVBNUpJYMeiRMXXAHJu4dX3UkBwN9ZO8R31gKd7tr eY/pVzNunwq9nla4wME0wCii3EV8tFuS -----END CERTIFICATE-----Generated at Fri Aug 8 21:01:36 2025 by rpki-client