$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft File: Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft (raw, json) Hash identifier: IzptYpJUonDmjdEL82kjNDb7IPTJLdMWOMVWf5yk46Q= Subject key identifier: EC:C3:08:0A:C2:FA:29:C9:47:C5:9C:77:BD:1A:EB:84:53:45:C0:A1 Authority key identifier: 3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C Certificate issuer: /CN=A91ACD4D/serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Certificate serial: 1712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft Manifest number: 16FC Signing time: Wed 22 Jul 2026 16:43:53 +0000 Manifest this update: Wed 22 Jul 2026 16:43:53 +0000 Manifest next update: Wed 29 Jul 2026 16:43:53 +0000 Files and hashes: 1: Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl (hash: DhmvSkEwrlFwWM43Rv88X/Uodh6cFV4AVckGi/owKIQ=) 2: 268ECB3ED5BD11E894FFC250C4F9AE02.roa (hash: Z38B7rPVhqG6tcWO8r6+i/l0vZbjlq448NkG06qknRg=) 3: 3DE1DBC4D81011EC892E8A79C4F9AE02.roa (hash: axiKuwLSfY8matk7uBsk8eo5tXOq+cX6OWML8EZD+cQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5906 (0x1712) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD4D, serialNumber=3A46FB0F40F69D5E1DB75D2851F040C19F66F22C Validity Not Before: Jul 22 16:43:53 2026 GMT Not After : Jul 29 16:43:53 2026 GMT Subject: CN=6a60f349-4e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:67:e7:f7:dc:4b:60:87:1b:4d:0c:52:c8: 06:92:ef:38:a3:61:41:60:37:d0:08:7b:f0:b8:05: 0b:f0:2f:d8:b6:d0:c6:25:4d:e7:68:a3:14:ac:68: bb:33:c1:63:19:60:5c:a7:c7:83:5c:75:8d:e3:4e: c0:49:ab:2b:61:db:93:fc:be:5b:b8:71:bf:bd:7f: 90:61:35:77:d7:12:fe:7a:81:e8:96:3e:40:34:a6: e7:ad:21:b6:50:9e:49:f8:1d:56:26:0f:b9:9e:72: e0:d9:df:5d:70:2a:3f:2e:2c:d8:3a:78:df:0d:ff: ae:d1:41:c6:c2:c8:4e:d1:fd:84:78:10:f5:e7:31: 61:0d:ac:f9:ae:96:a0:4b:e1:06:34:e5:bc:37:9c: 7b:21:8b:03:b5:0f:91:05:48:55:95:f2:9a:ec:23: 13:65:c1:1f:1b:0a:e3:c3:58:9b:3f:75:67:96:ea: ea:bc:16:f1:c8:35:df:e9:78:ce:ef:2d:9d:4d:50: 07:2d:c7:38:9a:52:75:32:07:4d:96:ef:ff:63:93: ee:4e:dc:73:ca:37:62:57:1f:43:56:0c:12:4a:f6: c1:d9:2e:6a:e3:50:9a:dd:4a:dc:10:4d:28:d7:34: 76:6b:a6:27:60:21:63:a6:96:8b:94:2b:77:fb:4c: 68:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:C3:08:0A:C2:FA:29:C9:47:C5:9C:77:BD:1A:EB:84:53:45:C0:A1 X509v3 Authority Key Identifier: keyid:3A:46:FB:0F:40:F6:9D:5E:1D:B7:5D:28:51:F0:40:C1:9F:66:F2:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Okb7D0D2nV4dt10oUfBAwZ9m8iw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD4D/137D00D4160E11E8852C437EC4F9AE02/Okb7D0D2nV4dt10oUfBAwZ9m8iw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:c6:69:52:94:71:68:55:0e:e1:4d:2d:c1:f4:98:2b:31:88: 76:57:c3:cd:f6:e5:84:d7:de:5c:69:fc:f9:45:6c:22:9f:aa: ee:1b:36:92:5c:4e:f5:32:78:45:bc:f1:ea:ee:f8:15:0c:a6: c9:c4:eb:cd:d4:20:a2:7e:40:d5:5b:83:0d:bc:f2:12:0d:81: 71:fd:3c:0a:7a:84:7c:65:37:51:3f:cb:97:5d:ef:4a:5b:e9: e2:9d:aa:37:14:c7:1b:1e:6e:d9:1d:6f:89:36:49:95:d8:98: 05:9b:67:50:56:ea:ef:6e:43:32:b5:3b:85:85:b8:87:d2:ad: a2:4d:7c:c5:76:83:7b:e2:d5:93:e8:73:95:5d:7c:45:93:d9: b5:dc:24:a8:b7:0c:0d:9c:f7:94:84:0d:2a:6f:e5:56:81:70: d7:67:3c:0e:db:c5:f4:e9:42:4b:7b:31:cb:e5:ec:d7:12:cb: fc:03:38:ea:ee:a0:df:91:68:4f:32:2a:96:c7:b9:45:69:4e: 2e:a5:c4:59:40:f0:d6:19:1a:25:eb:62:56:44:c3:b7:06:6b: 8c:2d:46:d2:95:5a:0b:79:7f:09:8e:b5:80:63:7b:f1:7d:e1: 81:a6:a6:5d:78:b0:f9:9a:fb:59:1a:59:75:0f:29:6a:d2:14: 66:dc:f4:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENEQxMTAvBgNVBAUTKDNBNDZGQjBGNDBGNjlENUUxREI3NUQyODUxRjA0MEMx OUY2NkYyMkMwHhcNMjYwNzIyMTY0MzUzWhcNMjYwNzI5MTY0MzUzWjAYMRYwFAYD VQQDEw02YTYwZjM0OS00ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmhtn5/fcS2CHG00MUsgGku84o2FBYDfQCHvwuAUL8C/YttDGJU3naKMUrGi7 M8FjGWBcp8eDXHWN407ASasrYduT/L5buHG/vX+QYTV31xL+eoHolj5ANKbnrSG2 UJ5J+B1WJg+5nnLg2d9dcCo/LizYOnjfDf+u0UHGwshO0f2EeBD15zFhDaz5rpag S+EGNOW8N5x7IYsDtQ+RBUhVlfKa7CMTZcEfGwrjw1ibP3VnlurqvBbxyDXf6XjO 7y2dTVAHLcc4mlJ1MgdNlu//Y5PuTtxzyjdiVx9DVgwSSvbB2S5q41Ca3UrcEE0o 1zR2a6YnYCFjppaLlCt3+0xoxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzDCArC +inJR8Wcd70a64RTRcChMB8GA1UdIwQYMBaAFDpG+w9A9p1eHbddKFHwQMGfZvIs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q0RC8xMzdEMDBENDE2 MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5WNGR0MTBvVWZCQXdaOW04 aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rYjdEMEQyblY0ZHQxMG9VZkJBd1o5bThpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0Q0RC8xMzdEMDBENDE2MEUxMUU4ODUyQzQzN0VDNEY5QUUwMi9Pa2I3RDBEMm5W NGR0MTBvVWZCQXdaOW04aXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApcZpUpRxaFUO4U0twfSYKzGIdlfDzfblhNfeXGn8+UVsIp+q7hs2klxO9TJ4 Rbzx6u74FQymycTrzdQgon5A1VuDDbzyEg2Bcf08CnqEfGU3UT/Ll13vSlvp4p2q NxTHGx5u2R1viTZJldiYBZtnUFbq725DMrU7hYW4h9Ktok18xXaDe+LVk+hzlV18 RZPZtdwkqLcMDZz3lIQNKm/lVoFw12c8DtvF9OlCS3sxy+Xs1xLL/AM46u6g35Fo TzIqlse5RWlOLqXEWUDw1hkaJetiVkTDtwZrjC1G0pVaC3l/CY61gGN78X3hgaam XXiw+Zr7WRpZdQ8patIUZtz0Kw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:46:27 2026 by rpki-client