$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft File: bOklSpy_oHBCJDc13OT79-VGEWY.mft (raw, json) Hash identifier: JAqtWG7RMpfFuV0ifAB6RmrmjxscuV9ZvonJ6BQe6qQ= Subject key identifier: A9:19:72:6E:69:05:72:6B:12:2C:3B:AA:D1:A9:C8:11:48:6C:8F:1F Authority key identifier: 6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 Certificate issuer: /CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Certificate serial: 0D40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft Manifest number: 0D37 Signing time: Thu 24 Sep 2026 18:07:41 +0000 Manifest this update: Thu 24 Sep 2026 18:07:40 +0000 Manifest next update: Thu 01 Oct 2026 18:07:40 +0000 Files and hashes: 1: bOklSpy_oHBCJDc13OT79-VGEWY.crl (hash: 4YVJNiV4zIDvpsbRPnHQqE+RZIEC3nWJ4bV1y9ivjgk=) 2: 9DDA09EC05DC11EA9B6B0560C4F9AE02.roa (hash: jOASJy08cQtiHT2anaDk0d4CR9FN0kGkmWrO2dstaFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 18:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3392 (0xd40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454F3, serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Validity Not Before: Sep 24 18:07:40 2026 GMT Not After : Oct 1 18:07:40 2026 GMT Subject: CN=6ab566ed-91b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:af:79:6b:06:93:55:e5:53:af:38:da:91: 8a:9a:a7:6a:75:63:e7:7c:35:6e:e1:40:62:8a:39: d7:36:6e:bf:c7:86:e8:39:7a:be:41:72:5a:49:22: 23:2c:66:46:d0:46:d7:51:55:67:3b:71:b5:31:9d: 57:e7:64:97:38:35:ed:92:00:22:11:c3:92:66:d6: 89:8e:d5:4a:71:95:6c:21:97:aa:a5:90:a6:05:ca: ba:a7:36:ad:63:21:2d:f6:1a:95:cc:db:37:99:71: d8:13:7f:4a:31:6b:58:a9:5c:a7:bf:d0:51:42:73: 24:d0:21:c4:0e:a6:fc:fd:26:40:1e:11:d2:8c:9e: 2c:88:49:ac:53:e6:fb:6e:8b:76:10:97:cc:5b:10: 9f:a7:2d:1e:82:d7:6b:c2:c2:55:e8:da:8e:94:34: 95:42:1c:9b:0e:a0:16:0a:89:e0:0b:ce:b3:80:79: c5:95:5c:80:4b:a5:95:d4:b6:4a:24:a6:0a:a7:2e: ac:97:1c:15:7c:ab:44:42:08:8a:70:3a:b0:d9:cd: 98:e6:b3:23:e1:14:89:eb:1d:8c:2c:34:63:00:ef: 4d:19:00:02:21:70:5d:7e:5b:a8:d9:29:ba:ef:c3: a9:7c:93:b2:36:9a:52:80:7c:a7:6c:91:09:6f:7d: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:72:6E:69:05:72:6B:12:2C:3B:AA:D1:A9:C8:11:48:6C:8F:1F X509v3 Authority Key Identifier: keyid:6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:a0:51:f9:28:ca:2d:2d:21:76:2e:f3:c6:40:ba:a1:17:0d: 08:77:c4:cf:88:2b:f8:9d:e4:02:d4:2e:eb:ce:62:1f:c2:a2: bd:64:27:34:45:a8:2f:0f:2f:e4:b7:c6:03:1f:a1:d0:08:08: 97:08:8e:27:eb:e6:a2:b5:51:0d:c2:86:69:36:b6:38:e1:0f: 40:66:b2:34:12:35:ac:ce:80:b9:6c:e8:de:26:2f:13:21:5a: 49:ba:7f:80:8e:ef:57:3d:c5:e2:91:5a:57:24:88:6b:66:ad: 1e:ef:c8:50:2c:68:54:3f:23:4d:73:26:44:f4:fe:65:0f:55: a0:02:4e:8b:bb:9e:69:30:22:8f:63:b0:2e:cf:69:00:d3:47: b0:b0:e7:ca:25:c1:e7:29:33:ee:be:f0:52:65:a5:2a:0b:54: d0:40:4d:ae:27:00:7e:50:02:92:14:93:5f:c3:e5:44:27:af: ef:5b:19:9a:c2:9b:b0:2c:66:f6:d1:5e:e5:b1:7f:e4:e5:08: de:9b:ec:e5:40:9c:5a:fb:f2:6f:90:fd:e2:ff:a7:55:4f:61: 54:9b:3e:22:04:65:29:6a:92:d7:67:97:dc:7c:e7:02:4f:d1: 3a:c5:a4:36:2a:ea:af:17:9f:26:3a:85:de:fa:b5:fe:27:91: 6a:2c:1a:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RjMxMTAvBgNVBAUTKDZDRTkyNTRBOUNCRkEwNzA0MjI0MzczNURDRTRGQkY3 RTU0NjExNjYwHhcNMjYwOTI0MTgwNzQwWhcNMjYxMDAxMTgwNzQwWjAYMRYwFAYD VQQDEw02YWI1NjZlZC05MWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzJ2veWsGk1XlU6842pGKmqdqdWPnfDVu4UBiijnXNm6/x4boOXq+QXJaSSIj LGZG0EbXUVVnO3G1MZ1X52SXODXtkgAiEcOSZtaJjtVKcZVsIZeqpZCmBcq6pzat YyEt9hqVzNs3mXHYE39KMWtYqVynv9BRQnMk0CHEDqb8/SZAHhHSjJ4siEmsU+b7 bot2EJfMWxCfpy0egtdrwsJV6NqOlDSVQhybDqAWCongC86zgHnFlVyAS6WV1LZK JKYKpy6slxwVfKtEQgiKcDqw2c2Y5rMj4RSJ6x2MLDRjAO9NGQACIXBdfluo2Sm6 78OpfJOyNppSgHynbJEJb3205QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkZcm5p BXJrEiw7qtGpyBFIbI8fMB8GA1UdIwQYMBaAFGzpJUqcv6BwQiQ3Ndzk+/flRhFm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRGMy8xRUY3ODY2ODA1 REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29IQkNKRGMxM09UNzktVkdF V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPa2xTcHlfb0hCQ0pEYzEzT1Q3OS1WR0VXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRGMy8xRUY3ODY2ODA1REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29I QkNKRGMxM09UNzktVkdFV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIKBR+SjKLS0hdi7zxkC6oRcNCHfEz4gr+J3kAtQu685iH8KivWQnNEWoLw8v 5LfGAx+h0AgIlwiOJ+vmorVRDcKGaTa2OOEPQGayNBI1rM6AuWzo3iYvEyFaSbp/ gI7vVz3F4pFaVySIa2atHu/IUCxoVD8jTXMmRPT+ZQ9VoAJOi7ueaTAij2OwLs9p ANNHsLDnyiXB5ykz7r7wUmWlKgtU0EBNricAflACkhSTX8PlRCev71sZmsKbsCxm 9tFe5bF/5OUI3pvs5UCcWvvyb5D94v+nVU9hVJs+IgRlKWqS12eX3HznAk/ROsWk NirqrxefJjqF3vq1/ieRaiwaAA== -----END CERTIFICATE-----Generated at Fri Sep 25 12:42:20 2026 by rpki-client