$ rpki-client -vvf rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft File: bOklSpy_oHBCJDc13OT79-VGEWY.mft (raw, json) Hash identifier: mzB0c9JnsJCYN3g6wTdxVx2lc03HIY+oLUY/stTquKU= Subject key identifier: 89:39:76:B9:45:22:F5:F1:BD:52:C9:B8:25:DB:5E:4E:92:17:B0:0A Authority key identifier: 6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 Certificate issuer: /CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Certificate serial: 0D1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft Manifest number: 0D16 Signing time: Wed 22 Jul 2026 18:27:15 +0000 Manifest this update: Wed 22 Jul 2026 18:27:15 +0000 Manifest next update: Wed 29 Jul 2026 18:27:15 +0000 Files and hashes: 1: bOklSpy_oHBCJDc13OT79-VGEWY.crl (hash: b+mnZc/eoljnZEFc++f7pkZQF/D5xJJCa4sFdrreVq0=) 2: 9DDA09EC05DC11EA9B6B0560C4F9AE02.roa (hash: jOASJy08cQtiHT2anaDk0d4CR9FN0kGkmWrO2dstaFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3359 (0xd1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454F3, serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Validity Not Before: Jul 22 18:27:15 2026 GMT Not After : Jul 29 18:27:15 2026 GMT Subject: CN=6a610b83-5047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:38:47:87:0e:09:b9:3f:11:a1:65:25:84:59: dc:52:7e:71:32:97:f0:95:3e:1e:78:31:47:8a:b9: 6d:9d:6a:2c:17:f9:1f:45:05:b3:29:90:e2:47:13: 14:ff:f5:ae:f8:09:8b:2b:49:56:4e:15:77:a8:8d: 18:04:66:0d:68:bd:62:b7:62:c2:e2:c0:69:2c:5c: 49:7a:75:10:83:5b:61:43:f1:c0:bc:f4:13:28:9d: e6:ad:95:cd:08:17:13:46:d7:00:15:58:4b:5e:fe: ee:7f:d4:81:d3:32:38:e1:cc:de:7c:06:dd:ee:c2: 49:5f:3f:8c:ef:48:42:10:17:1e:d0:9e:d7:00:df: ad:85:d1:a9:da:49:75:fa:a0:56:9a:a1:82:7b:20: 3e:b7:5c:fd:45:2a:ca:0b:13:87:f5:45:52:b7:7f: 75:76:08:b8:4b:a5:ac:f9:bd:6d:46:66:4e:d7:9e: 89:ee:aa:07:ea:6d:1c:a2:23:d5:a6:7a:20:d5:bc: b5:47:e2:4e:c3:6c:95:f9:73:02:c3:10:a5:c9:f3: 22:31:12:ef:41:b2:8c:f8:6a:7f:39:86:64:ef:cc: 5d:26:4e:49:b5:57:4b:68:eb:84:d0:f0:a8:69:bc: 25:d2:7b:06:f4:74:ff:27:4f:54:69:46:6a:f1:85: 47:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:39:76:B9:45:22:F5:F1:BD:52:C9:B8:25:DB:5E:4E:92:17:B0:0A X509v3 Authority Key Identifier: keyid:6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:76:d7:74:16:fb:0b:71:44:99:f5:25:7e:6d:2b:f9:31:9f: 62:15:59:f2:79:66:97:a4:42:6d:68:a5:05:85:1c:09:63:14: 35:b8:d1:44:54:a9:ab:18:bc:ac:81:67:10:8b:9c:f7:6e:04: bd:52:c1:a0:43:d9:8a:52:ca:e0:ef:f2:f4:e8:10:c2:8b:eb: d3:a7:0a:ca:d6:56:fe:99:09:91:b1:7d:63:10:98:6a:64:1a: c9:d0:05:5d:0a:e4:06:0a:af:7d:6e:b6:83:de:e0:78:21:4d: 5e:4c:7e:0e:0d:9b:28:95:ac:b6:59:fe:eb:a4:76:e8:6b:ab: 1e:b8:63:75:84:5c:54:cd:ea:89:cc:55:0d:7b:f9:4a:34:bb: f9:9e:d8:cb:e9:c7:09:9e:9f:40:d9:88:ef:06:7f:e4:38:5b: 62:f9:de:fd:1c:0a:7b:06:4e:10:ae:65:04:4d:e6:2d:d9:91: a9:ae:c6:e5:65:93:76:a3:7b:1a:52:ae:77:cf:b5:24:ca:23: be:ee:bd:08:01:ed:da:f9:24:2b:e6:2b:41:e8:64:99:12:f1: 5e:61:4b:dd:82:ab:4d:83:62:6b:27:bc:28:50:a2:8b:4b:c3: 41:84:80:5f:b6:88:48:10:4d:79:ad:20:03:15:de:28:ea:0a: 05:b1:13:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RjMxMTAvBgNVBAUTKDZDRTkyNTRBOUNCRkEwNzA0MjI0MzczNURDRTRGQkY3 RTU0NjExNjYwHhcNMjYwNzIyMTgyNzE1WhcNMjYwNzI5MTgyNzE1WjAYMRYwFAYD VQQDEw02YTYxMGI4My01MDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDhHhw4JuT8RoWUlhFncUn5xMpfwlT4eeDFHirltnWosF/kfRQWzKZDiRxMU //Wu+AmLK0lWThV3qI0YBGYNaL1it2LC4sBpLFxJenUQg1thQ/HAvPQTKJ3mrZXN CBcTRtcAFVhLXv7uf9SB0zI44czefAbd7sJJXz+M70hCEBce0J7XAN+thdGp2kl1 +qBWmqGCeyA+t1z9RSrKCxOH9UVSt391dgi4S6Ws+b1tRmZO156J7qoH6m0coiPV pnog1by1R+JOw2yV+XMCwxClyfMiMRLvQbKM+Gp/OYZk78xdJk5JtVdLaOuE0PCo abwl0nsG9HT/J09UaUZq8YVHJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIk5drlF IvXxvVLJuCXbXk6SF7AKMB8GA1UdIwQYMBaAFGzpJUqcv6BwQiQ3Ndzk+/flRhFm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRGMy8xRUY3ODY2ODA1 REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29IQkNKRGMxM09UNzktVkdF V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPa2xTcHlfb0hCQ0pEYzEzT1Q3OS1WR0VXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRGMy8xRUY3ODY2ODA1REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29I QkNKRGMxM09UNzktVkdFV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMnbXdBb7C3FEmfUlfm0r+TGfYhVZ8nlml6RCbWilBYUcCWMUNbjRRFSpqxi8 rIFnEIuc924EvVLBoEPZilLK4O/y9OgQwovr06cKytZW/pkJkbF9YxCYamQaydAF XQrkBgqvfW62g97geCFNXkx+Dg2bKJWstln+66R26GurHrhjdYRcVM3qicxVDXv5 SjS7+Z7Yy+nHCZ6fQNmI7wZ/5DhbYvne/RwKewZOEK5lBE3mLdmRqa7G5WWTdqN7 GlKud8+1JMojvu69CAHt2vkkK+YrQehkmRLxXmFL3YKrTYNiaye8KFCii0vDQYSA X7aISBBNea0gAxXeKOoKBbETtA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:19 2026 by rpki-client