$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: 0QKo0dLwL3AtobifUuO0fLSn3bIS4hiEQbF9nUjeP1s= Subject key identifier: 09:65:FC:81:25:D1:9F:20:4F:0E:60:BE:E2:F2:27:76:A0:BE:B4:18 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 3549 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 34E5 Signing time: Sat 14 Jun 2025 14:25:22 +0000 Manifest this update: Sat 14 Jun 2025 14:25:22 +0000 Manifest next update: Sat 21 Jun 2025 14:25:22 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: Y7ziJKUJ/4nqPYTaokY5niqbOD4Y0QXJrdbB8ZQawNY=) 2: 92BBD4741F2F11F082D2AB82C4F9AE02.roa (hash: YV/B6jqKt8I2g2TebPLm9+0AgyH5G6psFP7Pfncdwmw=) 3: 8A7456C47CBE11EFB9BF7074C4F9AE02.roa (hash: HcKEOonzAu+z0GPSseUC7go/+PDERZEFfa5gQQU6r04=) 4: 203B2B7A1C9811EE995E057EC4F9AE02.roa (hash: 4zPuCRb6jQp/WONx/+B920AnQZg5YD/rNNquB0manEQ=) 5: E52789DCE39E11EAAAE0622CC4F9AE02.roa (hash: QHmNlvHkZ1UVpicdTwIncttCEG27hNKbZKwKjK3XZ7Y=) 6: 53594CBC1F2F11F09C3D4582C4F9AE02.roa (hash: 11c0RSip9HmRdb+yAiVYr0mJn+7VBpqYNBSW86dakQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:25:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13641 (0x3549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Jun 14 14:25:22 2025 GMT Not After : Jun 21 14:25:22 2025 GMT Subject: CN=684d8652-6d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:f9:09:5b:9d:dc:03:63:10:02:64:8d:13: 33:03:43:df:ca:08:de:f4:b3:cf:a9:2b:c2:79:7f: 70:9e:01:b1:ae:1d:71:cb:ea:4e:29:7e:4c:ce:0c: 35:30:8d:f3:91:cb:f3:e0:12:c5:e8:52:dc:be:56: 46:90:af:2e:9d:0a:ed:b3:56:20:8c:33:1b:00:4b: 22:82:71:32:f4:39:71:9a:a7:8e:4b:5d:d0:44:ae: 6b:96:68:ee:35:2c:08:d4:3a:b7:cc:d0:86:38:6f: 1c:29:0c:2f:13:ae:2a:96:ca:16:f4:3a:64:08:f5: e1:9d:0a:d9:49:7e:7f:1b:08:9e:d6:ee:62:c8:42: b9:27:ce:ce:62:e5:d0:f6:37:63:99:8c:76:f7:73: 7d:82:2c:9c:87:1c:17:3f:c7:47:c5:27:1c:b8:b8: 05:a6:e9:d7:83:1c:68:62:82:36:5a:3e:e9:e8:6d: d8:32:3a:f6:40:ec:ca:c5:f5:b2:3b:e2:8c:15:c2: 01:5e:84:52:b2:89:49:29:2a:48:5f:2f:d5:87:2b: 46:c1:52:b9:33:da:31:08:26:f6:e1:7b:17:d3:4b: 35:cd:92:8c:41:45:ee:78:8d:d4:27:59:f3:9e:10: 47:3e:99:fc:81:5c:11:20:c2:e2:68:b8:09:9e:1d: c6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:65:FC:81:25:D1:9F:20:4F:0E:60:BE:E2:F2:27:76:A0:BE:B4:18 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d1:f7:1e:3d:27:33:9b:5d:0e:b0:fd:c4:ac:e9:88:47:41: 5e:f1:2d:2a:e6:cb:97:10:71:16:bd:21:1e:5f:1d:9f:b4:cf: 36:75:4b:49:17:41:19:de:2e:39:ac:b3:20:f9:b9:64:1b:8f: b8:cc:e5:eb:ff:67:b7:a7:a4:c4:ee:1c:e9:7a:8c:00:f4:a6: 26:bb:b0:c2:06:a3:7d:0f:99:eb:e0:79:8d:71:28:7b:51:93: 8a:4b:4b:c4:77:bb:75:58:99:19:a2:39:77:4e:26:6c:68:07: a1:2a:df:23:3f:43:f2:19:02:f7:5f:92:16:dd:a1:57:04:97: b0:b0:ce:7f:be:3b:81:b1:2e:4b:9f:8d:a6:43:5a:a1:58:f9: 5a:09:02:a8:e7:39:1c:48:bf:f0:16:bd:dd:4e:d2:71:5a:a8: 37:6c:81:1b:81:89:86:bb:36:cc:a2:75:ef:59:85:2d:db:32: 2c:65:c3:3f:45:09:6d:84:bf:ed:7f:03:0c:b4:7d:dc:37:50: d7:4c:38:38:17:96:7d:1d:4f:86:1b:56:86:e6:54:34:03:b1: cc:5d:e0:f0:d5:b6:b5:c4:ec:5c:91:de:82:cd:18:72:1f:6c: 09:65:be:88:1a:ed:25:3e:ba:b6:c9:10:fb:5a:9d:0a:8f:ef: 04:a0:a2:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUwNjE0MTQyNTIyWhcNMjUwNjIxMTQyNTIyWjAYMRYwFAYD VQQDEw02ODRkODY1Mi02ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kL5CVud3ANjEAJkjRMzA0Pfygje9LPPqSvCeX9wngGxrh1xy+pOKX5Mzgw1 MI3zkcvz4BLF6FLcvlZGkK8unQrts1YgjDMbAEsignEy9DlxmqeOS13QRK5rlmju NSwI1Dq3zNCGOG8cKQwvE64qlsoW9DpkCPXhnQrZSX5/Gwie1u5iyEK5J87OYuXQ 9jdjmYx293N9giychxwXP8dHxSccuLgFpunXgxxoYoI2Wj7p6G3YMjr2QOzKxfWy O+KMFcIBXoRSsolJKSpIXy/VhytGwVK5M9oxCCb24XsX00s1zZKMQUXueI3UJ1nz nhBHPpn8gVwRIMLiaLgJnh3GkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAll/IEl 0Z8gTw5gvuLyJ3agvrQYMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl0fcePSczm10OsP3ErOmIR0Fe8S0q5suXEHEWvSEeXx2ftM82dUtJ F0EZ3i45rLMg+blkG4+4zOXr/2e3p6TE7hzpeowA9KYmu7DCBqN9D5nr4HmNcSh7 UZOKS0vEd7t1WJkZojl3TiZsaAehKt8jP0PyGQL3X5IW3aFXBJewsM5/vjuBsS5L n42mQ1qhWPlaCQKo5zkcSL/wFr3dTtJxWqg3bIEbgYmGuzbMonXvWYUt2zIsZcM/ RQlthL/tfwMMtH3cN1DXTDg4F5Z9HU+GG1aG5lQ0A7HMXeDw1ba1xOxckd6CzRhy H2wJZb6IGu0lPrq2yRD7Wp0Kj+8EoKIo -----END CERTIFICATE-----Generated at Sun Jun 15 06:01:49 2025 by rpki-client