$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft File: ok2WODNZy0lmoVuakGkT61RWZXs.mft (raw, json) Hash identifier: VGc0ncCPlkXC9xjXF122V7PrHQln6DN0fi1Jz0Yw+84= Subject key identifier: 21:F5:51:49:DD:D6:22:01:D6:49:4A:D1:51:8C:92:A1:C2:61:4D:79 Authority key identifier: A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B Certificate issuer: /CN=A91C9C03/serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft Manifest number: E2 Signing time: Thu 23 Jul 2026 08:23:35 +0000 Manifest this update: Thu 23 Jul 2026 08:23:35 +0000 Manifest next update: Thu 30 Jul 2026 08:23:35 +0000 Files and hashes: 1: ok2WODNZy0lmoVuakGkT61RWZXs.crl (hash: Hr6UQWqBtNO5CeuYemc4lX/rnCEoSIM3E5wnvmy+RRM=) 2: 19088D04716211F0A531A51FC4F9AE02.roa (hash: YQ9P3hZSVyByvwWvHjcvm6ovGJgl+C3bbNJ0X0PJR6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C03, serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Validity Not Before: Jul 23 08:23:35 2026 GMT Not After : Jul 30 08:23:35 2026 GMT Subject: CN=6a61cf87-d072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:2b:db:a1:da:04:4b:e1:b9:3b:a2:c0:8e: e4:29:96:ac:4f:5b:5f:2a:f3:ee:bc:9c:a7:0b:93: bd:45:b4:6e:a4:8b:a8:9a:9c:b1:99:14:ff:9e:cc: e7:b5:b1:41:04:a4:59:8f:22:b0:fe:e4:2d:a5:fe: fe:cb:b6:85:7e:0f:3e:d6:87:b2:b8:94:ed:af:0e: 72:94:5d:8f:00:59:d2:96:b5:2d:6f:7e:6f:0a:c5: e6:a4:40:77:50:40:13:e1:1f:cd:8a:24:5d:86:c3: fb:db:4d:63:6d:b7:b4:c8:82:a7:de:f0:30:d3:bf: 18:23:29:d8:94:fc:90:aa:29:62:e0:3e:b4:e6:e8: d5:0e:56:fe:a9:99:d1:2f:91:6d:d6:51:d7:e7:8d: 19:1d:36:e3:fc:65:de:58:c6:50:8e:82:50:68:2a: ce:9c:4e:7a:a4:b7:89:ca:fb:07:44:6b:83:b9:83: ac:b9:c8:59:dd:03:9c:50:6a:09:d1:7a:f5:c3:80: 70:81:b1:70:7b:ff:3c:5b:7c:2b:86:51:d5:f9:b1: 31:84:fb:1f:0c:3a:24:eb:ab:26:d6:d3:94:a0:78: 69:74:1f:d4:d9:d2:d0:da:c1:50:6d:d3:8b:29:ae: 34:33:e8:d1:12:69:ec:94:7b:dd:0d:da:86:dc:ec: dc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F5:51:49:DD:D6:22:01:D6:49:4A:D1:51:8C:92:A1:C2:61:4D:79 X509v3 Authority Key Identifier: keyid:A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:65:11:ad:eb:4b:ec:82:f4:14:89:48:3b:44:ce:04:ed:6a: 03:d6:8f:ba:84:f9:92:92:9f:df:db:c8:70:ab:7a:07:f6:fa: 7d:42:93:2c:c1:3e:6a:b7:c2:8a:7b:cf:ca:68:06:cd:3f:3c: d4:1b:cf:b3:73:6b:f6:0f:8c:7c:c7:89:3a:c1:fb:00:71:54: 3b:99:08:e0:ae:2f:68:05:49:3d:cc:75:16:44:32:cb:4f:d6: c0:9f:54:96:4d:e4:29:52:63:47:82:93:84:ee:53:33:7d:8c: 37:e2:8a:ad:a8:23:5d:01:c6:b0:40:a1:44:a3:78:81:d6:e3: 56:7a:9b:da:45:72:51:73:e3:2f:31:c5:f1:2c:e0:0f:3c:88: a9:2e:ec:a8:79:62:21:cd:99:cf:42:8c:5e:14:c5:01:cb:08: 6f:2a:7c:6b:94:96:ca:b5:3f:51:4c:39:3c:f6:5d:c5:78:7d: 2c:49:7c:de:4c:c6:8d:9c:ca:2e:e1:15:a7:98:dc:ab:b1:06: 4d:2d:56:3e:56:b9:be:61:9d:40:9e:eb:c0:77:90:2b:ec:f9: ea:22:70:06:b9:36:98:e4:ae:b0:29:fe:89:b3:a3:58:ce:63: 9b:55:f2:4f:83:22:d2:91:2c:ac:89:30:6d:e1:2b:a2:2b:aa: 14:6f:1d:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDMxMTAvBgNVBAUTKEEyNEQ5NjM4MzM1OUNCNDk2NkExNUI5QTkwNjkxM0VC NTQ1NjY1N0IwHhcNMjYwNzIzMDgyMzM1WhcNMjYwNzMwMDgyMzM1WjAYMRYwFAYD VQQDEw02YTYxY2Y4Ny1kMDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3sr26HaBEvhuTuiwI7kKZasT1tfKvPuvJynC5O9RbRupIuompyxmRT/nszn tbFBBKRZjyKw/uQtpf7+y7aFfg8+1oeyuJTtrw5ylF2PAFnSlrUtb35vCsXmpEB3 UEAT4R/NiiRdhsP7201jbbe0yIKn3vAw078YIynYlPyQqili4D605ujVDlb+qZnR L5Ft1lHX540ZHTbj/GXeWMZQjoJQaCrOnE56pLeJyvsHRGuDuYOsuchZ3QOcUGoJ 0Xr1w4BwgbFwe/88W3wrhlHV+bExhPsfDDok66sm1tOUoHhpdB/U2dLQ2sFQbdOL Ka40M+jREmnslHvdDdqG3OzcdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH1UUnd 1iIB1klK0VGMkqHCYU15MB8GA1UdIwQYMBaAFKJNljgzWctJZqFbmpBpE+tUVmV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwMy8zN0QxOEExNjM5 QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkwbG1vVnVha0drVDYxUlda WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rMldPRE5aeTBsbW9WdWFrR2tUNjFSV1pYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwMy8zN0QxOEExNjM5QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkw bG1vVnVha0drVDYxUldaWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhGURretL7IL0FIlIO0TOBO1qA9aPuoT5kpKf39vIcKt6B/b6fUKTLME+arfC invPymgGzT881BvPs3Nr9g+MfMeJOsH7AHFUO5kI4K4vaAVJPcx1FkQyy0/WwJ9U lk3kKVJjR4KThO5TM32MN+KKragjXQHGsEChRKN4gdbjVnqb2kVyUXPjLzHF8Szg DzyIqS7sqHliIc2Zz0KMXhTFAcsIbyp8a5SWyrU/UUw5PPZdxXh9LEl83kzGjZzK LuEVp5jcq7EGTS1WPla5vmGdQJ7rwHeQK+z56iJwBrk2mOSusCn+ibOjWM5jm1Xy T4Mi0pEsrIkwbeEroiuqFG8dHw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:43:50 2026 by rpki-client