$ rpki-client -vvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json) Hash identifier: 22NNwyaGBkSk0Vu3iylMBsP3XWIBbbxEpMkAfhiGH30= Subject key identifier: 2E:97:05:89:58:34:92:71:A9:6A:E0:71:F5:CE:10:2E:2A:CB:96:25 Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Certificate serial: 0B2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft Manifest number: 0B26 Signing time: Wed 22 Jul 2026 19:38:38 +0000 Manifest this update: Wed 22 Jul 2026 19:38:37 +0000 Manifest next update: Wed 29 Jul 2026 19:38:37 +0000 Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: wlaAnlLemvFnCDC+B9rJGRFEvWeEOBXYyAI/C8gc7vg=) 2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2862 (0xb2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Validity Not Before: Jul 22 19:38:37 2026 GMT Not After : Jul 29 19:38:37 2026 GMT Subject: CN=6a611c3e-40ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:d2:df:43:fa:4b:4a:10:8a:69:d1:ab:a3:df: 4d:7a:23:55:b5:0b:e0:50:94:d4:a7:fe:e2:3a:6f: f9:7f:48:1a:62:54:b6:c9:b8:08:c5:d9:c0:18:50: 26:71:ca:bc:39:39:d1:1a:4a:5d:11:2f:7d:c8:4f: d1:0a:83:4a:04:50:7b:8a:65:8b:94:0e:0d:5e:d8: 1d:d0:a8:48:48:d1:4d:83:a8:f0:94:32:00:73:30: 52:52:a8:5c:e8:a8:ac:95:23:66:c1:bc:cf:5f:16: 5c:af:d5:7f:8e:67:29:89:31:f7:a4:8e:d9:96:99: da:6f:25:bb:2d:4f:77:56:e5:dc:af:ed:27:0c:8f: 98:c1:d0:fb:4e:4c:e8:4e:4c:fe:b7:32:1e:bb:0a: 07:0d:a4:26:eb:23:5e:33:33:55:94:1e:f3:d6:a8: 1d:73:77:53:be:cf:96:31:11:4e:e1:00:9a:00:e7: 15:94:34:81:ec:ec:7c:b7:86:e4:6b:f7:71:ed:9d: 67:35:3d:c6:9d:88:17:22:1a:d3:7c:e9:70:14:1a: 06:03:b1:12:51:a2:a9:a2:1a:2e:f7:28:a0:80:13: 42:02:a4:a2:47:3e:ff:82:96:67:a4:c9:b5:e2:3f: ab:b0:3c:25:84:a2:f0:30:9e:8f:8f:43:33:8e:c2: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:97:05:89:58:34:92:71:A9:6A:E0:71:F5:CE:10:2E:2A:CB:96:25 X509v3 Authority Key Identifier: keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:47:77:c9:78:84:89:a3:44:bc:4b:07:a3:bb:b1:de:18:ac: c1:ab:ba:05:11:d6:92:1c:f3:0d:e9:c9:f6:ab:95:ad:0d:23: 8d:6f:1a:79:99:27:bb:c3:d4:87:04:b3:91:8c:12:75:4c:48: bb:07:7a:57:5b:96:53:5d:90:64:cf:98:8d:51:04:32:c4:1b: c7:0e:25:2c:04:69:d8:0b:25:a2:cd:af:ae:1f:fb:53:e3:2c: cc:dd:13:e7:51:db:eb:78:a8:a9:73:cf:2e:98:c7:d6:8b:7f: 72:b2:60:77:8a:6f:ac:84:2e:b1:55:e0:12:dc:5e:38:57:f6: bd:f5:e8:bd:bb:cc:e1:4a:6f:89:51:97:55:c9:08:c4:60:b8: 65:00:ed:3e:41:cf:8f:19:0e:68:32:2b:eb:b8:cc:89:f8:6d: af:6b:1b:47:c4:8c:3d:9c:f9:92:93:dc:eb:d2:35:f9:12:40: b5:f2:eb:24:bf:b6:16:05:ef:e8:10:0c:c8:0a:1d:64:85:70: d9:88:9f:4a:67:f0:04:d3:cc:75:4d:6d:66:ad:4b:cb:2c:f2: 26:86:ef:e4:33:70:18:df:b1:c6:ba:b0:97:e7:3e:3f:93:20: e0:f6:72:47:d4:a5:0d:8e:65:40:3c:ee:f9:71:07:2f:d4:39: 23:2c:f6:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx RTBBQThBQ0EwHhcNMjYwNzIyMTkzODM3WhcNMjYwNzI5MTkzODM3WjAYMRYwFAYD VQQDEw02YTYxMWMzZS00MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+NLfQ/pLShCKadGro99NeiNVtQvgUJTUp/7iOm/5f0gaYlS2ybgIxdnAGFAm ccq8OTnRGkpdES99yE/RCoNKBFB7imWLlA4NXtgd0KhISNFNg6jwlDIAczBSUqhc 6KislSNmwbzPXxZcr9V/jmcpiTH3pI7ZlpnabyW7LU93VuXcr+0nDI+YwdD7Tkzo Tkz+tzIeuwoHDaQm6yNeMzNVlB7z1qgdc3dTvs+WMRFO4QCaAOcVlDSB7Ox8t4bk a/dx7Z1nNT3GnYgXIhrTfOlwFBoGA7ESUaKpohou9yiggBNCAqSiRz7/gpZnpMm1 4j+rsDwlhKLwMJ6Pj0MzjsIl/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6XBYlY NJJxqWrgcfXOEC4qy5YlMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3 M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzE1OC9BRTUxRDgwMjY3M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NO dURCUmJWR2tvdDhlQ3Fpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGkd3yXiEiaNEvEsHo7ux3hiswau6BRHWkhzzDenJ9quVrQ0jjW8aeZknu8PU hwSzkYwSdUxIuwd6V1uWU12QZM+YjVEEMsQbxw4lLARp2Aslos2vrh/7U+MszN0T 51Hb63ioqXPPLpjH1ot/crJgd4pvrIQusVXgEtxeOFf2vfXovbvM4UpviVGXVckI xGC4ZQDtPkHPjxkOaDIr67jMifhtr2sbR8SMPZz5kpPc69I1+RJAtfLrJL+2FgXv 6BAMyAodZIVw2YifSmfwBNPMdU1tZq1LyyzyJobv5DNwGN+xxrqwl+c+P5Mg4PZy R9SlDY5lQDzu+XEHL9Q5Iyz2Uw== -----END CERTIFICATE-----Generated at Fri Jul 24 08:59:15 2026 by rpki-client