$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: dfbQILnINGLCanOO00q4qK9k9/n0EuKTeeV/fvQZgtg= Subject key identifier: A8:F7:75:77:7A:C0:EB:EB:84:56:27:36:1E:DF:19:CA:92:85:8E:2B Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 362B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 35A3 Signing time: Sat 04 Apr 2026 14:25:55 +0000 Manifest this update: Sat 04 Apr 2026 14:25:54 +0000 Manifest next update: Sat 11 Apr 2026 14:25:54 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: W5GnDKPyn3soRFBoA/p/I26ki54dLdfXUC0zU5UppC4=) 2: 6C1B853CB93811F09BBA425FC4F9AE02.roa (hash: 0zazze3bx11N53QYC29gvswb8iXwUt0H+vCU2B2AtJw=) 3: 72378020EE2A11F0BE1A1CA2486F56BC.roa (hash: F533zLdXfqsdCW7ceEEa1GEWGavXYNK88VyQBzpq5/E=) 4: 02C97520985011F083EA2077C4F9AE02.roa (hash: yaT3E5Jwb6SOPRE/zc1jGw25lKy2464cuUmJv/l28Bs=) 5: CC23ED70990811F08BF0CB55C4F9AE02.roa (hash: YESGPScKdeqm6JUMvHI6MDffPNS9ojoSYCUIFN6JUNQ=) 6: DFC15BFCEE2A11F08F37AFA2486F56BC.roa (hash: thg12ZzEBgMuI/QMazCIjvAj3z0Vs1wd8yWbe5birCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13867 (0x362b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Apr 4 14:25:54 2026 GMT Not After : Apr 11 14:25:54 2026 GMT Subject: CN=69d11f73-77c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:41:5f:25:ed:d3:bd:10:90:7e:9c:f5:03: 0d:b2:9d:5d:f8:d3:98:51:f4:07:e1:79:1d:47:b2: 2d:06:81:b8:8b:0a:94:59:58:6a:08:00:5e:31:8d: 0e:2f:96:2f:54:a5:60:e4:f5:93:14:ec:aa:9b:00: 9c:1a:33:3a:6d:51:09:cb:39:06:00:e5:94:4f:4d: 10:8f:44:ad:ed:8c:68:b3:0b:d4:a7:80:7a:aa:5b: e8:4d:c2:f2:3d:d6:01:a3:67:12:a5:79:5e:19:22: e5:84:e5:4d:85:18:92:a6:cb:94:63:00:4d:ae:de: 80:b3:bf:86:c5:9d:8c:54:1a:7b:11:76:bd:4f:71: 0b:de:27:30:83:d0:e0:f6:ab:66:d7:e4:58:97:a5: 9a:60:86:e1:b8:90:ff:d7:43:a3:94:3e:cc:ec:28: 6c:28:e4:5e:31:ab:3c:c5:b9:ef:78:e7:84:49:20: 0f:8d:6e:78:88:ed:f8:d9:15:6a:2a:ef:76:c5:0a: 06:12:12:04:a1:48:ae:98:7b:80:88:79:6e:42:31: 6f:b0:db:c0:bd:87:75:c2:29:e3:5d:0f:4b:6f:f2: 26:aa:f7:ef:86:27:1f:f1:17:6c:0d:54:c6:8c:6d: 4e:3f:a4:a1:50:38:db:54:70:82:b8:9b:e2:85:5e: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F7:75:77:7A:C0:EB:EB:84:56:27:36:1E:DF:19:CA:92:85:8E:2B X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ea:a5:5b:b8:6a:77:3a:f4:61:a9:f7:9c:13:db:bd:2f:90: 3c:64:11:0b:27:e0:e0:bc:b3:f0:73:e0:a2:f2:c7:c7:c4:b9: ed:6c:5f:cd:74:90:86:03:28:b0:a5:fe:5b:be:4e:21:5c:b0: dc:e2:1b:f0:5a:d4:04:5e:2b:80:c3:07:c2:86:e1:48:48:82: 6d:1b:a1:f0:72:0e:da:aa:85:7e:bc:9d:67:33:f0:77:7d:1c: 41:c5:12:02:e4:79:05:a3:fe:f6:a8:09:0e:20:78:d0:05:b6: ca:59:53:5a:63:e3:cc:bb:48:d1:b2:94:cb:8f:fb:af:35:2f: e1:99:80:51:c6:0a:2c:f9:de:17:7a:47:de:19:bc:b6:fe:9c: cb:8d:f9:1f:a4:f8:20:ea:8c:75:57:57:73:0c:bd:1e:da:04: 9d:8b:7a:46:85:be:15:72:11:e5:ef:45:6e:9a:76:36:5d:c4: c7:71:a0:42:3d:0a:eb:fc:14:33:65:cb:21:30:35:3a:54:87: d0:2d:2b:0b:79:a1:1b:08:47:d7:01:83:9a:d1:2a:ac:52:52: 93:a3:27:ca:29:40:aa:64:8b:4c:ae:60:d5:7b:4b:e0:b6:54: 65:f5:de:70:ce:9b:b7:9c:cc:79:8b:0e:d0:2f:f0:bc:fb:9d: 7c:5b:94:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjYwNDA0MTQyNTU0WhcNMjYwNDExMTQyNTU0WjAYMRYwFAYD VQQDEw02OWQxMWY3My03N2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkz9BXyXt070QkH6c9QMNsp1d+NOYUfQH4XkdR7ItBoG4iwqUWVhqCABeMY0O L5YvVKVg5PWTFOyqmwCcGjM6bVEJyzkGAOWUT00Qj0St7YxoswvUp4B6qlvoTcLy PdYBo2cSpXleGSLlhOVNhRiSpsuUYwBNrt6As7+GxZ2MVBp7EXa9T3EL3icwg9Dg 9qtm1+RYl6WaYIbhuJD/10OjlD7M7ChsKOReMas8xbnveOeESSAPjW54iO342RVq Ku92xQoGEhIEoUiumHuAiHluQjFvsNvAvYd1winjXQ9Lb/Imqvfvhicf8RdsDVTG jG1OP6ShUDjbVHCCuJvihV6InQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKj3dXd6 wOvrhFYnNh7fGcqShY4rMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAveqlW7hqdzr0Yan3nBPbvS+QPGQRCyfg4Lyz8HPgovLHx8S57WxfzXSQhgMo sKX+W75OIVyw3OIb8FrUBF4rgMMHwobhSEiCbRuh8HIO2qqFfrydZzPwd30cQcUS AuR5BaP+9qgJDiB40AW2yllTWmPjzLtI0bKUy4/7rzUv4ZmAUcYKLPneF3pH3hm8 tv6cy435H6T4IOqMdVdXcwy9HtoEnYt6RoW+FXIR5e9Fbpp2Nl3Ex3GgQj0K6/wU M2XLITA1OlSH0C0rC3mhGwhH1wGDmtEqrFJSk6MnyilAqmSLTK5g1XtL4LZUZfXe cM6bt5zMeYsO0C/wvPudfFuUDg== -----END CERTIFICATE-----Generated at Mon Apr 6 15:14:35 2026 by rpki-client