$ rpki-client -vvf rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft File: OtjA2kteE0OjhFRLZEARiFJg_wc.mft (raw, json) Hash identifier: xOUx6PJIuI/FUPe9F+HtL34GDOoVlSF1sPIeZzXh7Pw= Subject key identifier: EC:10:4E:56:30:52:CA:8A:8C:9B:32:5B:1F:56:A0:D3:04:A9:3E:E3 Authority key identifier: 3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 Certificate issuer: /CN=A916022F/serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Certificate serial: 1343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft Manifest number: 241D Signing time: Fri 08 Aug 2025 17:11:10 +0000 Manifest this update: Fri 08 Aug 2025 17:11:10 +0000 Manifest next update: Fri 15 Aug 2025 17:11:10 +0000 Files and hashes: 1: OtjA2kteE0OjhFRLZEARiFJg_wc.crl (hash: dyQKnCU8vlFPlN5WtN/RjcIc86zPFsHAuO2diGyAIgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4931 (0x1343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916022F, serialNumber=3AD8C0DA4B5E1343A384544B644011885260FF07 Validity Not Before: Aug 8 17:11:10 2025 GMT Not After : Aug 15 17:11:10 2025 GMT Subject: CN=68962fae-d249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:5a:28:c4:ad:17:45:93:b7:3b:80:16:f7: 47:2b:92:02:a8:be:31:59:b5:a1:55:5f:3c:f4:34: 46:6c:fa:61:77:85:fb:89:40:04:2c:82:aa:7d:85: 66:15:69:29:b6:21:fe:c0:90:89:eb:d5:39:6f:cc: 9b:54:14:38:ff:06:90:42:60:73:da:c9:df:6b:63: e2:2c:2e:67:ad:2d:54:1d:29:12:a1:9b:92:96:24: 7e:87:7b:15:5b:b8:d1:1d:dd:bb:cd:9d:58:00:b7: e1:26:cc:2b:85:5a:cb:5e:28:98:25:5c:af:21:34: 05:7b:b1:01:c8:62:7d:7f:1b:12:78:9c:79:5d:25: 50:8a:02:42:01:8d:88:16:e1:c2:09:37:21:a0:33: 0f:69:77:ca:48:fc:eb:28:c3:63:88:49:82:37:8c: 65:64:ce:3a:1d:0e:17:c0:30:b6:9c:9f:38:fe:05: 62:30:a2:01:ac:fd:f5:89:fa:8a:7e:ae:7e:74:e3: 4f:b1:70:70:97:42:10:c7:18:b7:75:49:37:9c:47: fc:d8:3e:10:d8:da:48:7a:fe:87:4f:3a:aa:28:26: 73:c1:7d:00:99:58:6c:82:d8:82:41:91:3d:e5:00: b0:ad:30:57:88:90:ad:ff:0d:19:8f:d8:e9:39:d4: 79:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:10:4E:56:30:52:CA:8A:8C:9B:32:5B:1F:56:A0:D3:04:A9:3E:E3 X509v3 Authority Key Identifier: keyid:3A:D8:C0:DA:4B:5E:13:43:A3:84:54:4B:64:40:11:88:52:60:FF:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OtjA2kteE0OjhFRLZEARiFJg_wc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916022F/9EC7AFB4AA7D11E886144524C4F9AE02/OtjA2kteE0OjhFRLZEARiFJg_wc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:48:f0:90:a8:8e:8e:a3:d5:75:49:29:39:fc:d8:e4:26:89: ea:78:d9:01:90:31:19:8f:b2:42:74:10:58:fe:c8:8a:a0:5d: 43:6e:eb:1c:3b:9b:ca:e7:36:b6:65:f0:ac:a0:37:e7:94:44: 0b:27:a2:a4:7d:07:64:60:9b:68:77:76:3f:e6:d3:04:44:10: 9b:b5:1f:5c:76:41:5a:d3:36:27:1f:27:c2:a3:81:01:cb:f0: 76:90:44:02:17:74:66:49:8c:c8:5b:7d:a2:bf:d5:9c:1b:33: 92:e9:6e:67:40:be:82:4f:c0:30:89:74:51:ac:97:69:ea:75: 41:c2:01:55:a0:5c:4b:69:29:ae:bd:8f:e5:95:e9:da:84:8c: 60:35:e3:d6:6b:4b:3b:67:71:f1:aa:c3:94:57:13:6e:18:91: 3a:d8:bb:a4:67:de:7c:5c:be:1a:b5:61:68:01:a5:ac:65:3d: 4d:3b:02:9e:ce:d9:78:52:c3:72:5e:0d:6f:cf:97:54:e1:ee: b3:73:84:07:49:e6:6d:80:0c:bf:e5:ec:19:06:6c:9e:3b:aa: 97:ed:51:d1:2f:18:66:91:fa:74:da:85:49:55:db:83:0c:8e: 18:62:55:3a:15:f0:24:c4:c6:2a:de:41:51:58:e0:02:c1:d6: 05:87:a2:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyMkYxMTAvBgNVBAUTKDNBRDhDMERBNEI1RTEzNDNBMzg0NTQ0QjY0NDAxMTg4 NTI2MEZGMDcwHhcNMjUwODA4MTcxMTEwWhcNMjUwODE1MTcxMTEwWjAYMRYwFAYD VQQDEw02ODk2MmZhZS1kMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz15aKMStF0WTtzuAFvdHK5ICqL4xWbWhVV889DRGbPphd4X7iUAELIKqfYVm FWkptiH+wJCJ69U5b8ybVBQ4/waQQmBz2snfa2PiLC5nrS1UHSkSoZuSliR+h3sV W7jRHd27zZ1YALfhJswrhVrLXiiYJVyvITQFe7EByGJ9fxsSeJx5XSVQigJCAY2I FuHCCTchoDMPaXfKSPzrKMNjiEmCN4xlZM46HQ4XwDC2nJ84/gViMKIBrP31ifqK fq5+dONPsXBwl0IQxxi3dUk3nEf82D4Q2NpIev6HTzqqKCZzwX0AmVhsgtiCQZE9 5QCwrTBXiJCt/w0Zj9jpOdR5UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwQTlYw UsqKjJsyWx9WoNMEqT7jMB8GA1UdIwQYMBaAFDrYwNpLXhNDo4RUS2RAEYhSYP8H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDIyRi85RUM3QUZCNEFB N0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUwT2poRlJMWkVBUmlGSmdf d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL090akEya3RlRTBPamhGUkxaRUFSaUZKZ193Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDIyRi85RUM3QUZCNEFBN0QxMUU4ODYxNDQ1MjRDNEY5QUUwMi9PdGpBMmt0ZUUw T2poRlJMWkVBUmlGSmdfd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdSPCQqI6Oo9V1SSk5/NjkJonqeNkBkDEZj7JCdBBY/siKoF1Dbusc O5vK5za2ZfCsoDfnlEQLJ6KkfQdkYJtod3Y/5tMERBCbtR9cdkFa0zYnHyfCo4EB y/B2kEQCF3RmSYzIW32iv9WcGzOS6W5nQL6CT8AwiXRRrJdp6nVBwgFVoFxLaSmu vY/llenahIxgNePWa0s7Z3HxqsOUVxNuGJE62LukZ958XL4atWFoAaWsZT1NOwKe ztl4UsNyXg1vz5dU4e6zc4QHSeZtgAy/5ewZBmyeO6qX7VHRLxhmkfp02oVJVduD DI4YYlU6FfAkxMYq3kFRWOACwdYFh6LC -----END CERTIFICATE-----Generated at Sat Aug 9 03:02:48 2025 by rpki-client