$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: uBCpjh8WxaYaoAG/QCaCHo+agQnR8KghtQ6GW0CyMgU= Subject key identifier: 4D:44:43:F6:1C:17:2F:81:CD:69:EA:BA:B6:0E:C1:25:D4:F7:09:BB Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 35C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 3546 Signing time: Tue 04 Nov 2025 14:27:11 +0000 Manifest this update: Tue 04 Nov 2025 14:27:10 +0000 Manifest next update: Tue 11 Nov 2025 14:27:10 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: ewk13MIhlgyBRvlFYHAOUErp9+dMs5874n0wcdM/8ow=) 2: 8A7456C47CBE11EFB9BF7074C4F9AE02.roa (hash: LJfUuUVRgUX70ra1tO0sOwws9DELyOzPbOL09Rc8QEE=) 3: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: Uy1brxvBZUOgYCz25E+l8hAge6tUCO1Wj1Oolb03hHo=) 4: D169AD50985511F09A18185EC4F9AE02.roa (hash: gqjEr96Yck7DcthvfK2CSUidOZKPUY9JGM9VjopIO6s=) 5: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: Wb0omWMGDcuIWJtZzO5aYUeXeBS3PzZ1jDUa5EAiIV0=) 6: 02C97520985011F083EA2077C4F9AE02.roa (hash: iDndSBoFAc9uhUgvXQuDJ/5b7tXkUPKhNkfuD+XgWIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13765 (0x35c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Nov 4 14:27:10 2025 GMT Not After : Nov 11 14:27:10 2025 GMT Subject: CN=690a0d3e-e9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:b4:7e:e5:a9:cd:0c:e1:d8:90:20:99:1c: 9b:fa:bf:0d:25:13:33:bb:57:b3:01:5a:09:d2:17: f4:6f:d4:fb:fd:ce:1b:5f:e4:7e:85:62:d8:29:31: 0f:2d:c7:a6:8a:0a:8f:02:35:01:6b:09:62:46:00: 5c:d4:21:16:e5:e0:38:37:b6:01:90:c6:cc:7f:72: 47:5a:be:62:13:f1:7e:0d:d3:54:14:92:d0:86:24: 28:27:2a:ca:20:32:ca:91:a9:cb:34:1f:ef:ab:21: 6e:46:89:c1:18:37:ff:c4:29:50:d0:67:6a:84:f5: f9:81:a5:63:09:8a:74:6c:33:7a:ca:dc:f9:f5:fd: eb:76:55:9a:1c:a6:09:8d:48:e7:39:0c:ca:bd:d0: b6:f9:ad:a9:d3:f5:22:a4:f9:f1:43:d3:9d:43:5f: 35:57:c8:ae:b5:71:5a:cc:04:40:36:5b:43:3b:2c: 4b:e6:47:4f:16:80:db:48:a5:f6:7a:7a:e5:00:15: bb:ba:e6:38:4e:89:48:be:30:60:8c:80:aa:5b:62: 83:39:67:40:5b:70:15:96:7d:b1:98:fb:b0:85:c3: 98:3a:ad:e4:18:83:5c:7a:7f:11:cb:b0:50:b3:25: f1:2a:38:0c:09:87:cc:5d:45:db:87:8d:8e:61:a8: 79:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:44:43:F6:1C:17:2F:81:CD:69:EA:BA:B6:0E:C1:25:D4:F7:09:BB X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:2e:0e:57:f2:35:d1:41:9c:57:be:ae:7a:e0:dc:fa:db:ae: 04:a0:06:16:86:e1:6f:54:8b:9c:35:af:a9:70:76:2d:37:f7: 9f:2b:91:01:65:3f:14:35:a0:da:50:80:f9:f0:08:f9:ce:63: ab:65:25:3c:ea:5b:3d:a7:56:a3:ba:41:48:ce:43:bc:3b:d6: 8b:cf:18:0b:a4:19:06:b0:b3:42:f9:33:d2:a7:48:1b:ed:85: b9:be:08:23:b5:5a:99:8e:72:d7:95:bd:8a:3d:53:02:12:36: 52:60:c3:03:3e:4f:3e:a7:33:e1:95:22:f3:70:82:53:e7:14: ea:83:0e:1e:d6:aa:f2:05:bb:c5:61:18:3a:ab:23:bc:47:d4: d9:7c:5e:17:a1:c0:80:c3:e5:45:b0:a0:f8:21:ba:5b:00:84: b6:57:18:31:1d:c3:62:90:ae:00:47:2c:fc:48:ea:21:b2:5e: 41:1b:98:d2:d6:60:06:4a:7a:b0:79:54:87:2b:c8:5d:6f:db: ca:68:c7:a6:41:3a:ab:24:c5:75:81:58:2f:5b:5b:27:6f:c2: 65:09:07:cd:a9:61:0a:17:41:c5:a4:b3:30:d4:60:f5:bf:5e: 96:fe:1c:07:37:8f:9d:f5:2e:cd:e3:ba:22:8c:5b:3d:44:00: 69:d2:fd:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUxMTA0MTQyNzEwWhcNMjUxMTExMTQyNzEwWjAYMRYwFAYD VQQDEw02OTBhMGQzZS1lOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiq0fuWpzQzh2JAgmRyb+r8NJRMzu1ezAVoJ0hf0b9T7/c4bX+R+hWLYKTEP LcemigqPAjUBawliRgBc1CEW5eA4N7YBkMbMf3JHWr5iE/F+DdNUFJLQhiQoJyrK IDLKkanLNB/vqyFuRonBGDf/xClQ0GdqhPX5gaVjCYp0bDN6ytz59f3rdlWaHKYJ jUjnOQzKvdC2+a2p0/UipPnxQ9OdQ181V8iutXFazARANltDOyxL5kdPFoDbSKX2 enrlABW7uuY4TolIvjBgjICqW2KDOWdAW3AVln2xmPuwhcOYOq3kGINcen8Ry7BQ syXxKjgMCYfMXUXbh42OYah5YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1EQ/Yc Fy+BzWnqurYOwSXU9wm7MB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZLg5X8jXRQZxXvq564Nz6264EoAYWhuFvVIucNa+pcHYtN/efK5EB ZT8UNaDaUID58Aj5zmOrZSU86ls9p1ajukFIzkO8O9aLzxgLpBkGsLNC+TPSp0gb 7YW5vggjtVqZjnLXlb2KPVMCEjZSYMMDPk8+pzPhlSLzcIJT5xTqgw4e1qryBbvF YRg6qyO8R9TZfF4XocCAw+VFsKD4IbpbAIS2VxgxHcNikK4ARyz8SOohsl5BG5jS 1mAGSnqweVSHK8hdb9vKaMemQTqrJMV1gVgvW1snb8JlCQfNqWEKF0HFpLMw1GD1 v16W/hwHN4+d9S7N47oijFs9RABp0v30 -----END CERTIFICATE-----Generated at Wed Nov 5 13:28:08 2025 by rpki-client