$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft File: ok2WODNZy0lmoVuakGkT61RWZXs.mft (raw, json) Hash identifier: PsJC9EdH6AbaWXbnHOzjuGtzGuXS+N/yk3FToL/Bo7A= Subject key identifier: CF:16:6E:F3:38:F3:91:C4:D9:8F:5B:FF:9A:78:61:2A:FE:7D:9B:4D Authority key identifier: A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B Certificate issuer: /CN=A91C9C03/serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft Manifest number: 0102 Signing time: Wed 23 Sep 2026 06:02:44 +0000 Manifest this update: Wed 23 Sep 2026 06:02:44 +0000 Manifest next update: Wed 30 Sep 2026 06:02:44 +0000 Files and hashes: 1: ok2WODNZy0lmoVuakGkT61RWZXs.crl (hash: H5Lup+zYInTja4Bs9EEgEe/LLmlEFYUA/GY1YxMlC98=) 2: 19088D04716211F0A531A51FC4F9AE02.roa (hash: YQ9P3hZSVyByvwWvHjcvm6ovGJgl+C3bbNJ0X0PJR6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C03, serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Validity Not Before: Sep 23 06:02:44 2026 GMT Not After : Sep 30 06:02:44 2026 GMT Subject: CN=6ab36b84-01e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:2b:d5:3a:cb:38:e7:ea:ce:bf:2e:df:0a: 32:f5:81:d9:97:2c:ab:68:9b:cd:c5:c0:34:4f:39: 21:0e:1e:67:da:81:c2:65:a4:6e:00:1c:5f:3c:17: 11:c7:77:5d:71:e1:db:0d:4f:b6:13:a7:85:30:a2: 29:cb:8e:92:e9:fb:39:2c:c5:bc:e4:38:7b:b2:15: f3:8d:e0:c4:43:ff:1e:3d:36:5e:0f:db:9d:c7:ac: 49:23:15:8f:1a:13:0b:6c:bf:3d:d0:a1:8d:c5:83: 94:ee:56:57:28:50:65:fb:15:69:44:be:13:f6:a6: 1c:e3:b7:59:1d:9a:23:49:71:53:9d:67:3d:53:fb: 72:84:3d:6b:bb:43:d5:99:08:b0:bf:a3:96:38:62: 3b:a1:41:98:90:5c:fb:43:d9:25:7a:00:97:c4:de: a6:13:f7:6a:77:b1:f7:04:58:4b:43:6f:bc:bb:df: 55:13:5d:8e:af:54:b4:0f:58:d4:31:e4:d0:5f:ab: 75:08:c4:09:af:d3:df:b5:aa:1b:ea:0c:cc:90:a6: d0:58:e1:d3:98:3a:c8:56:48:6a:e0:90:19:fd:d4: 81:a8:ef:c5:7f:d0:09:9d:fc:cb:0f:09:fb:29:65: af:1c:49:47:fa:ab:dd:8c:39:28:b0:7a:45:55:73: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:6E:F3:38:F3:91:C4:D9:8F:5B:FF:9A:78:61:2A:FE:7D:9B:4D X509v3 Authority Key Identifier: keyid:A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:4e:c5:6e:96:87:c1:0f:4f:f5:e7:58:21:16:25:65:28:fd: f0:9b:a3:86:34:84:21:d7:f2:b0:df:02:52:7d:c9:b9:4a:42: 13:df:db:bc:da:b2:da:d5:e5:7a:f0:10:fb:45:1d:66:17:7e: 6d:8f:64:73:1b:a9:d5:2e:bd:43:58:c9:25:88:72:76:8a:9d: 3c:e1:fe:54:4c:80:95:46:1f:14:4d:ff:0a:0a:1b:0f:e0:a2: ac:66:ee:d6:dd:80:76:3a:f5:2f:81:9d:34:9f:77:f4:93:27: 09:98:27:f7:f5:5a:75:e3:51:78:14:b4:a7:0b:a8:6a:81:89: dc:4d:29:c6:d2:ac:6c:8e:72:b5:83:ab:34:c5:36:32:77:2f: 96:17:a8:59:0e:93:6e:58:25:7a:6f:9e:09:da:6b:ad:35:4b: 74:bc:a3:c0:5c:cf:9c:89:53:39:97:b7:41:2f:bf:8e:d8:a8: be:78:32:97:74:88:d1:56:43:2f:c9:c3:d0:ee:ef:87:cb:88: be:79:f0:69:d2:9a:78:ec:6e:36:6f:63:3d:cb:43:50:74:7d: 29:fd:d6:88:45:f3:02:8e:57:48:1e:85:f9:b3:85:b8:76:d3: 1a:94:92:60:ff:83:ce:7c:76:8b:c9:50:57:7e:6a:e3:2b:b3: 48:19:a8:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDMxMTAvBgNVBAUTKEEyNEQ5NjM4MzM1OUNCNDk2NkExNUI5QTkwNjkxM0VC NTQ1NjY1N0IwHhcNMjYwOTIzMDYwMjQ0WhcNMjYwOTMwMDYwMjQ0WjAYMRYwFAYD VQQDEw02YWIzNmI4NC0wMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuisr1TrLOOfqzr8u3woy9YHZlyyraJvNxcA0TzkhDh5n2oHCZaRuABxfPBcR x3ddceHbDU+2E6eFMKIpy46S6fs5LMW85Dh7shXzjeDEQ/8ePTZeD9udx6xJIxWP GhMLbL890KGNxYOU7lZXKFBl+xVpRL4T9qYc47dZHZojSXFTnWc9U/tyhD1ru0PV mQiwv6OWOGI7oUGYkFz7Q9klegCXxN6mE/dqd7H3BFhLQ2+8u99VE12Or1S0D1jU MeTQX6t1CMQJr9Pftaob6gzMkKbQWOHTmDrIVkhq4JAZ/dSBqO/Ff9AJnfzLDwn7 KWWvHElH+qvdjDkosHpFVXMyhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8WbvM4 85HE2Y9b/5p4YSr+fZtNMB8GA1UdIwQYMBaAFKJNljgzWctJZqFbmpBpE+tUVmV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwMy8zN0QxOEExNjM5 QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkwbG1vVnVha0drVDYxUlda WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rMldPRE5aeTBsbW9WdWFrR2tUNjFSV1pYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwMy8zN0QxOEExNjM5QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkw bG1vVnVha0drVDYxUldaWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEE7FbpaHwQ9P9edYIRYlZSj98JujhjSEIdfysN8CUn3JuUpCE9/bvNqy2tXl evAQ+0UdZhd+bY9kcxup1S69Q1jJJYhydoqdPOH+VEyAlUYfFE3/CgobD+CirGbu 1t2Adjr1L4GdNJ939JMnCZgn9/VadeNReBS0pwuoaoGJ3E0pxtKsbI5ytYOrNMU2 MncvlheoWQ6Tblglem+eCdprrTVLdLyjwFzPnIlTOZe3QS+/jtiovngyl3SI0VZD L8nD0O7vh8uIvnnwadKaeOxuNm9jPctDUHR9Kf3WiEXzAo5XSB6F+bOFuHbTGpSS YP+Dznx2i8lQV35q4yuzSBmohA== -----END CERTIFICATE-----Generated at Thu Sep 24 03:58:10 2026 by rpki-client