$ rpki-client -vvf rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft File: oktqYgRLcAZfBQY4hGDkry8X8_8.mft (raw, json) Hash identifier: rGwmRMhGFzsqMSN5RJQu4IGViXb6EzBLdXcN+XFj6Vg= Subject key identifier: 86:D6:68:76:CA:39:DE:46:D6:48:13:93:C5:7E:D7:2E:53:35:E8:E8 Authority key identifier: A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF Certificate issuer: /CN=A918F550/serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Certificate serial: 3545 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft Manifest number: 34E1 Signing time: Fri 06 Jun 2025 14:25:35 +0000 Manifest this update: Fri 06 Jun 2025 14:25:35 +0000 Manifest next update: Fri 13 Jun 2025 14:25:35 +0000 Files and hashes: 1: oktqYgRLcAZfBQY4hGDkry8X8_8.crl (hash: hcV50rzo0rOF6badjyPIuNietMGgCf/zJohhGyQTkuQ=) 2: 92BBD4741F2F11F082D2AB82C4F9AE02.roa (hash: YV/B6jqKt8I2g2TebPLm9+0AgyH5G6psFP7Pfncdwmw=) 3: 8A7456C47CBE11EFB9BF7074C4F9AE02.roa (hash: HcKEOonzAu+z0GPSseUC7go/+PDERZEFfa5gQQU6r04=) 4: 203B2B7A1C9811EE995E057EC4F9AE02.roa (hash: 4zPuCRb6jQp/WONx/+B920AnQZg5YD/rNNquB0manEQ=) 5: E52789DCE39E11EAAAE0622CC4F9AE02.roa (hash: QHmNlvHkZ1UVpicdTwIncttCEG27hNKbZKwKjK3XZ7Y=) 6: 53594CBC1F2F11F09C3D4582C4F9AE02.roa (hash: 11c0RSip9HmRdb+yAiVYr0mJn+7VBpqYNBSW86dakQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13637 (0x3545) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F550, serialNumber=A24B6A62044B70065F0506388460E4AF2F17F3FF Validity Not Before: Jun 6 14:25:35 2025 GMT Not After : Jun 13 14:25:35 2025 GMT Subject: CN=6842fa5f-fcfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:e4:f1:67:03:df:51:eb:02:07:63:da:b0: 1f:cf:ff:24:89:eb:e5:de:cc:d3:bb:43:93:d3:78: bd:6f:71:56:d5:ca:cf:77:d9:33:fb:84:41:8a:42: 4a:8d:86:89:70:1c:2c:20:9e:c9:45:4c:41:48:79: 36:a8:d3:cb:25:d7:ae:41:e3:0a:7b:47:63:a4:a5: 23:e0:8d:e8:9a:f3:6d:25:ed:34:06:bc:95:e7:93: a6:21:a6:46:51:6d:64:de:e3:f6:4c:43:e7:ca:a7: 58:76:22:f9:33:c7:32:c4:2d:fa:cc:17:ae:7d:d5: d9:70:7d:9e:cf:3f:10:5d:6d:87:fe:60:11:17:91: 9e:a2:25:65:81:e7:3e:24:52:0a:e6:ed:fe:fa:ee: a2:74:58:8b:76:00:28:8e:34:d0:b3:61:57:45:0d: b5:8b:cd:84:a3:48:63:14:76:b2:8b:97:3f:6f:88: c4:6b:56:d4:b3:bf:ad:ee:75:87:71:0d:b8:5a:d0: 1e:45:40:ec:cc:2d:bb:49:87:6b:be:ed:b2:ae:85: 67:7d:cb:60:a6:fe:9f:8a:93:37:95:78:94:c0:7a: ae:17:0d:b6:a9:78:d8:ac:1a:c2:c1:d2:f4:fc:89: c5:45:97:5c:cd:ac:b2:80:60:f4:49:1d:f8:ed:75: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D6:68:76:CA:39:DE:46:D6:48:13:93:C5:7E:D7:2E:53:35:E8:E8 X509v3 Authority Key Identifier: keyid:A2:4B:6A:62:04:4B:70:06:5F:05:06:38:84:60:E4:AF:2F:17:F3:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oktqYgRLcAZfBQY4hGDkry8X8_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F550/8B9BD2021D8511E2B41230DC08B02CD2/oktqYgRLcAZfBQY4hGDkry8X8_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:23:19:d2:c3:01:b2:4f:07:7d:89:b1:0e:78:98:bf:ba:f9: f5:40:22:0d:2a:17:85:6b:05:20:63:e4:10:73:d1:45:d1:94: 50:ab:03:65:0b:53:ff:7a:d3:5b:a3:2e:22:54:c4:9c:7c:d4: 9f:ca:2e:24:d5:23:33:11:18:12:04:ce:53:33:8e:c8:4b:f1: ad:7f:d9:bc:bf:96:85:43:0f:2d:55:19:71:01:1f:f9:b4:39: 3a:89:a9:18:b1:67:8d:74:2f:05:c1:ec:35:95:a1:7d:96:ea: 7a:7d:22:1a:5c:bc:92:40:9d:c2:97:39:c2:1b:45:f3:b2:6d: 80:51:16:92:68:6c:da:e2:41:82:ae:93:4e:b8:ce:52:01:8d: 2f:26:8a:87:0f:94:fa:3e:1a:25:49:43:97:9b:95:17:a8:47: 88:93:92:4a:be:d8:33:be:68:78:18:3c:4d:fb:6a:02:16:ec: 68:73:73:74:66:25:12:f2:6a:85:6e:25:34:b6:23:d2:76:22: ca:d1:8e:0a:d9:d8:ac:5a:53:6f:31:e1:7d:70:4b:1e:ee:2f: ee:e0:c5:b4:e7:0b:2e:97:9f:75:ad:b9:0b:14:39:8f:5b:c6: 72:12:88:95:76:ae:6a:d4:fe:43:5a:7b:9f:43:c7:49:55:db: db:02:2e:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY1NTAxMTAvBgNVBAUTKEEyNEI2QTYyMDQ0QjcwMDY1RjA1MDYzODg0NjBFNEFG MkYxN0YzRkYwHhcNMjUwNjA2MTQyNTM1WhcNMjUwNjEzMTQyNTM1WjAYMRYwFAYD VQQDEw02ODQyZmE1Zi1mY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw73k8WcD31HrAgdj2rAfz/8kievl3szTu0OT03i9b3FW1crPd9kz+4RBikJK jYaJcBwsIJ7JRUxBSHk2qNPLJdeuQeMKe0djpKUj4I3omvNtJe00BryV55OmIaZG UW1k3uP2TEPnyqdYdiL5M8cyxC36zBeufdXZcH2ezz8QXW2H/mARF5GeoiVlgec+ JFIK5u3++u6idFiLdgAojjTQs2FXRQ21i82Eo0hjFHayi5c/b4jEa1bUs7+t7nWH cQ24WtAeRUDszC27SYdrvu2yroVnfctgpv6fipM3lXiUwHquFw22qXjYrBrCwdL0 /InFRZdczayygGD0SR347XX4twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbWaHbK Od5G1kgTk8V+1y5TNejoMB8GA1UdIwQYMBaAFKJLamIES3AGXwUGOIRg5K8vF/P/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjU1MC84QjlCRDIwMjFE ODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNBWmZCUVk0aEdEa3J5OFg4 XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rdHFZZ1JMY0FaZkJRWTRoR0Rrcnk4WDhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjU1MC84QjlCRDIwMjFEODUxMUUyQjQxMjMwREMwOEIwMkNEMi9va3RxWWdSTGNB WmZCUVk0aEdEa3J5OFg4XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3IxnSwwGyTwd9ibEOeJi/uvn1QCINKheFawUgY+QQc9FF0ZRQqwNl C1P/etNboy4iVMScfNSfyi4k1SMzERgSBM5TM47IS/Gtf9m8v5aFQw8tVRlxAR/5 tDk6iakYsWeNdC8Fwew1laF9lup6fSIaXLySQJ3ClznCG0Xzsm2AURaSaGza4kGC rpNOuM5SAY0vJoqHD5T6PholSUOXm5UXqEeIk5JKvtgzvmh4GDxN+2oCFuxoc3N0 ZiUS8mqFbiU0tiPSdiLK0Y4K2disWlNvMeF9cEse7i/u4MW05wsul591rbkLFDmP W8ZyEoiVdq5q1P5DWnufQ8dJVdvbAi7H -----END CERTIFICATE-----Generated at Sat Jun 7 12:27:58 2025 by rpki-client