$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: RVJ1Bd5KSeGz4SiBRTcDHEXAbjpfmOZM6v5PXLYpz3c= Subject key identifier: E3:60:2A:C7:B1:4A:BB:D3:21:E0:6B:51:84:F0:A2:5E:77:40:F8:B9 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 1720 Signing time: Sat 26 Sep 2026 16:40:10 +0000 Manifest this update: Sat 26 Sep 2026 16:40:09 +0000 Manifest next update: Sat 03 Oct 2026 16:40:09 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: T5GC+Oc+B5kR9q5V25+GsvDCv8G3bP64QcEmHsujqPQ=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: +S9KMUljfxQJFwqoopUe9aDl8dajJPyPJ+b4JFYvIxM=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: tVo9Z2FSMOetrp2j2EYJddOd8LH6HrgTtdxpl4sMUKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 16:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5944 (0x1738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Sep 26 16:40:09 2026 GMT Not After : Oct 3 16:40:09 2026 GMT Subject: CN=6ab7f56a-7e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:cd:86:d5:c6:d7:48:b8:8a:dd:c2:89:18: f1:10:5d:a8:c8:d4:21:03:da:a8:bd:64:42:6b:38: 6f:c4:40:a0:06:47:ae:62:22:8e:b1:da:a0:d6:48: 3e:84:e4:d8:bd:34:29:93:69:8b:63:c3:b1:73:37: 33:82:c0:41:ae:0d:10:32:f9:e7:b2:35:e1:b1:ce: c8:7d:be:d2:55:5a:41:6c:18:be:6e:8d:01:12:5d: e0:5c:52:6a:9c:70:01:e2:2a:b1:85:7b:7a:c0:24: 40:2e:c3:90:e2:fd:01:c6:02:ec:fa:f0:ca:d3:da: 0b:14:23:92:2a:9c:33:11:c9:c1:44:cb:85:1a:90: a7:02:7e:af:65:05:d4:26:a5:53:eb:46:14:88:dc: d1:7f:cf:ae:b8:82:1f:80:04:9e:d7:d4:6b:ff:6d: 65:e8:6d:28:09:cc:2f:05:05:62:62:2b:3b:69:ff: 6f:a1:98:fe:a7:1a:a3:6a:cd:3d:5f:4f:5f:20:fb: 12:e6:9d:24:e7:da:da:b5:27:b4:11:a8:b5:6a:ca: fb:9b:a0:a0:00:3f:10:76:90:db:ca:e0:ed:29:b5: 4e:08:94:73:42:1e:7c:d7:15:02:a9:4d:ab:f0:71: 96:c5:6c:4b:03:96:25:ad:cd:ce:d2:27:72:42:dc: 48:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:60:2A:C7:B1:4A:BB:D3:21:E0:6B:51:84:F0:A2:5E:77:40:F8:B9 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:6b:63:d3:a7:3c:e0:da:f0:0b:0a:e8:3d:df:80:69:06:11: 47:65:10:3a:03:1b:23:e6:b6:88:0b:9c:f5:1d:f7:7c:5b:5c: b8:bf:be:e8:78:9e:7e:93:ba:40:ef:7c:24:97:7d:64:0c:d1: 66:3f:63:70:23:e5:70:61:9d:97:ad:8d:b1:99:20:b5:22:24: 7d:65:04:88:54:7a:dd:f3:51:e1:17:9c:64:63:c3:4d:95:00: c6:fe:c0:29:18:bc:41:50:53:ae:6a:17:22:7c:b8:6e:5b:fd: 74:03:ef:b1:9e:1b:fe:c6:cc:62:6e:05:c3:fd:b1:6c:f5:15: f4:aa:a3:ad:95:1d:f7:ee:8a:7b:d1:e6:e3:7c:12:b4:20:ff: 17:4c:97:95:05:c0:93:a6:0c:25:24:83:ce:f5:20:8b:f6:23: b9:44:87:d1:42:6b:29:db:dc:a1:ef:57:61:2f:74:1a:c6:96: 99:64:bc:9c:1f:cd:8e:6e:ae:bb:e8:86:c7:c2:2e:f6:84:ec: 43:0b:c8:97:f5:b1:d5:68:fa:e3:3b:d4:da:cd:7d:43:ff:ee: ba:4c:04:db:6b:1e:f2:9a:bf:c1:a9:34:7f:56:51:6f:5c:9a: 5b:d0:80:2e:60:9a:f0:87:6b:b6:0f:c1:9b:eb:6a:7a:29:9e: ab:e6:32:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwOTI2MTY0MDA5WhcNMjYxMDAzMTY0MDA5WjAYMRYwFAYD VQQDEw02YWI3ZjU2YS03ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs07NhtXG10i4it3CiRjxEF2oyNQhA9qovWRCazhvxECgBkeuYiKOsdqg1kg+ hOTYvTQpk2mLY8OxczczgsBBrg0QMvnnsjXhsc7Ifb7SVVpBbBi+bo0BEl3gXFJq nHAB4iqxhXt6wCRALsOQ4v0BxgLs+vDK09oLFCOSKpwzEcnBRMuFGpCnAn6vZQXU JqVT60YUiNzRf8+uuIIfgASe19Rr/21l6G0oCcwvBQViYis7af9voZj+pxqjas09 X09fIPsS5p0k59ratSe0Eai1asr7m6CgAD8QdpDbyuDtKbVOCJRzQh581xUCqU2r 8HGWxWxLA5Ylrc3O0idyQtxILwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFONgKsex SrvTIeBrUYTwol53QPi5MB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANWtj06c84NrwCwroPd+AaQYRR2UQOgMbI+a2iAuc9R33fFtcuL++6HiefpO6 QO98JJd9ZAzRZj9jcCPlcGGdl62NsZkgtSIkfWUEiFR63fNR4RecZGPDTZUAxv7A KRi8QVBTrmoXIny4blv9dAPvsZ4b/sbMYm4Fw/2xbPUV9KqjrZUd9+6Ke9Hm43wS tCD/F0yXlQXAk6YMJSSDzvUgi/YjuUSH0UJrKdvcoe9XYS90GsaWmWS8nB/Njm6u u+iGx8Iu9oTsQwvIl/Wx1Wj64zvU2s19Q//uukwE22se8pq/wak0f1ZRb1yaW9CA LmCa8Idrtg/Bm+tqeimeq+Yysw== -----END CERTIFICATE-----Generated at Sun Sep 27 12:52:16 2026 by rpki-client