$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: onUxy1nfLsAYG7uLPxoBUW7/0kq7RsEGPS6GNQaQ+ak= Subject key identifier: 3A:BC:2C:32:AE:43:F4:6E:2A:44:15:07:62:5B:1A:BB:7F:41:19:0C Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 35BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 353E Signing time: Fri 24 Oct 2025 14:26:55 +0000 Manifest this update: Fri 24 Oct 2025 14:26:54 +0000 Manifest next update: Fri 31 Oct 2025 14:26:54 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: uLPxC2OZmOx4ovFGltnIP7ANGdfSXCKIbNmbZF68lkI=) 2: 8E365CA0944E11F0A6427E3BC4F9AE02.roa (hash: BVmvuALPllC1jzIx9+A+tVDNjUTBbdR2FSfLiny9wOU=) 3: 8A7456C47CBE11EFB9BF7074C4F9AE02.roa (hash: LJfUuUVRgUX70ra1tO0sOwws9DELyOzPbOL09Rc8QEE=) 4: D169AD50985511F09A18185EC4F9AE02.roa (hash: gqjEr96Yck7DcthvfK2CSUidOZKPUY9JGM9VjopIO6s=) 5: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: hM8AXKx49dN7/4ZLUJiGhpG6j45HmvqjnSWYe9j6v4g=) 6: 02C97520985011F083EA2077C4F9AE02.roa (hash: iDndSBoFAc9uhUgvXQuDJ/5b7tXkUPKhNkfuD+XgWIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 14:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13755 (0x35bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Oct 24 14:26:54 2025 GMT Not After : Oct 31 14:26:54 2025 GMT Subject: CN=68fb8cae-0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:cb:16:bc:4f:d7:40:e2:0d:e8:dd:34:68: 22:15:0b:da:8e:ff:8d:73:3b:58:64:33:66:4d:e3: cd:98:09:82:52:0b:91:5d:f4:cc:ae:7b:23:a8:b4: 19:93:8c:4e:95:df:10:0c:08:16:b8:11:eb:38:98: a6:22:6c:64:e1:80:06:5e:13:ca:96:ec:b9:a9:d1: d5:c8:8d:03:73:d7:a0:b3:65:37:bd:a1:f9:ce:3b: d5:29:de:c6:20:94:fe:97:61:e8:68:fb:88:fb:5a: d1:14:ee:5a:78:f4:5e:15:ce:2f:2a:67:c0:27:dd: 65:32:cc:da:bb:9b:54:20:6d:21:03:20:a1:14:75: 25:12:9b:ac:d7:de:90:16:4a:00:85:0b:0a:4a:e2: eb:a0:04:c2:ab:54:54:70:86:10:ea:24:bc:4e:b9: 63:47:97:9b:47:38:7b:37:30:9a:01:6d:55:43:c5: 65:1c:93:66:f4:01:80:50:0a:83:a6:f1:28:0f:9b: 04:4e:84:0e:ef:99:6b:38:53:98:4c:7d:1f:86:64: cc:88:e9:10:87:1f:4c:ac:44:e9:f5:fb:51:67:54: c8:ea:99:50:07:8a:7a:03:41:3f:3c:1d:83:91:23: 59:0b:21:ea:e2:d1:28:a5:62:4b:4a:48:98:a2:66: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BC:2C:32:AE:43:F4:6E:2A:44:15:07:62:5B:1A:BB:7F:41:19:0C X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:27:09:a1:cc:5e:15:1e:e1:73:fa:78:ef:5b:aa:86:d2:a5: 5b:0f:59:98:6b:59:9a:5c:9a:e1:8b:dc:7b:c4:a5:ed:9d:51: 16:70:a7:59:4d:8b:06:e5:a4:23:4f:1b:4d:49:7b:96:6c:df: ce:3b:cf:db:79:35:a8:a2:77:d4:56:7f:40:0a:d5:ea:2e:82: 04:b6:2b:a1:bd:c4:f4:b9:30:59:0b:fe:ad:18:9a:60:b0:28: a1:0c:06:6f:25:9f:00:b9:0f:0f:8a:a8:fe:5f:21:c0:0c:51: 6b:df:81:e5:bb:38:8c:8f:ab:0d:e2:59:81:49:30:26:28:8c: 88:05:c0:0a:41:6b:0f:36:55:41:fe:b9:03:1b:a0:71:77:e5: 4f:2c:be:b2:07:3f:02:49:b1:32:f7:75:f2:07:1b:0e:30:7d: 36:28:62:73:15:24:90:9c:ae:38:1d:8c:80:03:7c:58:b6:9a: 01:fb:19:53:eb:03:c3:a1:42:a5:9a:97:c2:d9:9b:91:fa:2f: 10:d8:31:69:89:0c:e2:f1:2e:a9:7c:82:f6:e1:c9:b6:f0:5f: 49:67:84:80:b2:47:ce:0d:4e:31:88:d3:bd:9d:20:67:50:4f: 86:50:27:ca:f3:99:47:f8:18:80:6f:93:29:5d:84:a8:35:de: df:dd:e2:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUxMDI0MTQyNjU0WhcNMjUxMDMxMTQyNjU0WjAYMRYwFAYD VQQDEw02OGZiOGNhZS0wZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4K3LFrxP10DiDejdNGgiFQvajv+NcztYZDNmTePNmAmCUguRXfTMrnsjqLQZ k4xOld8QDAgWuBHrOJimImxk4YAGXhPKluy5qdHVyI0Dc9egs2U3vaH5zjvVKd7G IJT+l2HoaPuI+1rRFO5aePReFc4vKmfAJ91lMszau5tUIG0hAyChFHUlEpus196Q FkoAhQsKSuLroATCq1RUcIYQ6iS8TrljR5ebRzh7NzCaAW1VQ8VlHJNm9AGAUAqD pvEoD5sEToQO75lrOFOYTH0fhmTMiOkQhx9MrETp9ftRZ1TI6plQB4p6A0E/PB2D kSNZCyHq4tEopWJLSkiYomY8FwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDq8LDKu Q/RuKkQVB2JbGrt/QRkMMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZJwmhzF4VHuFz+njvW6qG0qVbD1mYa1maXJrhi9x7xKXtnVEWcKdZ TYsG5aQjTxtNSXuWbN/OO8/beTWoonfUVn9ACtXqLoIEtiuhvcT0uTBZC/6tGJpg sCihDAZvJZ8AuQ8Piqj+XyHADFFr34HluziMj6sN4lmBSTAmKIyIBcAKQWsPNlVB /rkDG6Bxd+VPLL6yBz8CSbEy93XyBxsOMH02KGJzFSSQnK44HYyAA3xYtpoB+xlT 6wPDoUKlmpfC2ZuR+i8Q2DFpiQzi8S6pfIL24cm28F9JZ4SAskfODU4xiNO9nSBn UE+GUCfK85lH+BiAb5MpXYSoNd7f3eIk -----END CERTIFICATE-----Generated at Fri Oct 24 18:52:59 2025 by rpki-client