$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft File: oKMiStDIKz-aYvNHrKP5RdsI8rA.mft (raw, json) Hash identifier: 2jTm4lm6oEvdHWBFZN3Qt+MFNtJ8sxRD0VqEargxjp8= Subject key identifier: E5:50:0B:D7:94:D1:B0:7C:B0:DD:88:E0:E4:76:59:75:34:BC:2A:E9 Authority key identifier: A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 Certificate issuer: /CN=A91B80BD/serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Certificate serial: 3198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft Manifest number: 313A Signing time: Mon 02 Nov 2026 15:28:25 +0000 Manifest this update: Mon 02 Nov 2026 15:28:25 +0000 Manifest next update: Mon 09 Nov 2026 15:28:25 +0000 Files and hashes: 1: oKMiStDIKz-aYvNHrKP5RdsI8rA.crl (hash: nlV0DRkYn77evstxP///GcqBUcvGJCnDJph5aJ3nc8o=) 2: 915E51B8F3BE11ED8B9B1450C4F9AE02.roa (hash: vT+TgUmgODqZCcEcsB93R+wccx/Yl+5U/tfDsp7/ZFI=) 3: 4C72E61CB0EC11E5A6934B42C4F9AE02.roa (hash: 5gzyMm8E3RtBL5u+p29X/7YWyO/vj5NHozUgRoKZ84M=) 4: 583C1F6854F611E79DF7E643C4F9AE02.roa (hash: +rkvcv94NMaYampI+fYTUB0c8pEWY+GEMSJjHTOiOXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Nov 2026 15:28:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12696 (0x3198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80BD, serialNumber=A0A3224AD0C82B3F9A62F347ACA3F945DB08F2B0 Validity Not Before: Nov 2 15:28:25 2026 GMT Not After : Nov 9 15:28:25 2026 GMT Subject: CN=6ae8ac19-0444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:04:76:65:5a:7a:b7:1a:4a:b8:b9:1f:b0:7d: 29:59:45:6a:b6:a6:f3:2a:ad:cc:ed:36:61:4c:60: e1:74:c6:18:49:27:56:41:85:6c:72:23:49:3e:7c: 67:28:05:75:63:5b:dc:db:fb:24:51:cf:f3:16:6c: e4:bc:2f:10:f3:18:2a:ee:cf:a2:42:41:12:d9:16: ba:ef:09:4b:16:25:28:34:85:32:d1:0a:8b:b6:4f: 48:be:d9:9b:7f:dc:1f:62:9d:65:55:5d:09:f7:3a: 5e:28:44:23:4d:6c:c5:4a:f4:ce:46:a5:a4:31:0c: fc:0a:13:1b:e5:b4:51:9c:4c:53:da:be:60:c9:b8: 7c:da:44:bf:ec:2e:40:18:09:86:52:eb:1b:19:5c: b8:26:03:f9:08:0b:13:5a:80:59:1d:cd:5a:27:8f: 33:fd:25:da:46:e6:3a:0f:25:f7:a7:da:56:e7:1b: ec:19:ad:b9:48:31:a9:ec:06:66:fa:6a:a5:0b:6d: e9:d3:ad:2c:1e:42:45:48:99:95:93:2c:03:eb:7f: 34:9b:18:12:81:a5:70:2c:57:7a:88:01:77:a9:8a: f0:c1:6f:e3:e0:56:18:6e:d4:b3:b3:7b:e4:be:d7: 5f:71:1a:8f:fc:4f:a3:2e:67:98:69:d1:a4:46:37: f0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:50:0B:D7:94:D1:B0:7C:B0:DD:88:E0:E4:76:59:75:34:BC:2A:E9 X509v3 Authority Key Identifier: keyid:A0:A3:22:4A:D0:C8:2B:3F:9A:62:F3:47:AC:A3:F9:45:DB:08:F2:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oKMiStDIKz-aYvNHrKP5RdsI8rA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80BD/B5A636D8FE5C11E2AEC042505911EA32/oKMiStDIKz-aYvNHrKP5RdsI8rA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3d:27:d3:94:2f:c7:62:ed:37:66:94:7e:99:0a:ed:24:0b: 28:0a:bb:ec:61:7b:51:a7:92:4c:3a:40:71:14:fd:52:b8:8a: e9:b8:5c:e1:c3:a6:1a:71:75:3a:70:f6:24:90:e1:d0:9e:30: 66:2b:1a:ab:3d:48:25:82:bd:44:74:3f:f7:90:9f:3d:d1:85: 5d:a6:87:e6:71:4c:73:25:e6:02:a2:be:bb:e1:4c:d2:fa:67: d8:f3:4c:4a:ed:e6:e1:e9:53:a7:89:54:c1:66:15:e2:3d:d3: a3:d7:05:01:f3:c3:b0:a0:7b:d9:24:c2:cf:3a:3a:e1:e8:fe: b5:88:d6:e0:a7:d6:61:07:f5:60:40:39:14:6d:af:61:6d:7e: c6:76:4d:59:54:84:50:42:73:3e:5d:8f:7d:cc:82:15:ad:bd: ea:0b:63:bd:8a:f4:71:2e:9e:9c:af:37:c7:ab:83:08:17:37: 6a:57:f1:ac:af:e9:19:1c:2d:d6:86:49:a8:f5:35:a3:8c:e3: 86:3f:93:fe:f9:e3:24:4c:25:9b:59:30:fc:88:b8:f4:e0:12: 32:29:3f:b5:0b:17:e1:1d:8f:cf:cc:4a:13:30:92:85:34:25: 71:2f:95:42:6f:fe:05:40:66:c7:ef:22:2b:21:31:71:29:3d: df:86:3e:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQkQxMTAvBgNVBAUTKEEwQTMyMjRBRDBDODJCM0Y5QTYyRjM0N0FDQTNGOTQ1 REIwOEYyQjAwHhcNMjYxMTAyMTUyODI1WhcNMjYxMTA5MTUyODI1WjAYMRYwFAYD VQQDEw02YWU4YWMxOS0wNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvAR2ZVp6txpKuLkfsH0pWUVqtqbzKq3M7TZhTGDhdMYYSSdWQYVsciNJPnxn KAV1Y1vc2/skUc/zFmzkvC8Q8xgq7s+iQkES2Ra67wlLFiUoNIUy0QqLtk9Ivtmb f9wfYp1lVV0J9zpeKEQjTWzFSvTORqWkMQz8ChMb5bRRnExT2r5gybh82kS/7C5A GAmGUusbGVy4JgP5CAsTWoBZHc1aJ48z/SXaRuY6DyX3p9pW5xvsGa25SDGp7AZm +mqlC23p060sHkJFSJmVkywD6380mxgSgaVwLFd6iAF3qYrwwW/j4FYYbtSzs3vk vtdfcRqP/E+jLmeYadGkRjfwqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOVQC9eU 0bB8sN2I4OR2WXU0vCrpMB8GA1UdIwQYMBaAFKCjIkrQyCs/mmLzR6yj+UXbCPKw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBCRC9CNUE2MzZEOEZF NUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6LWFZdk5IcktQNVJkc0k4 ckEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29LTWlTdERJS3otYVl2TkhyS1A1UmRzSThyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBCRC9CNUE2MzZEOEZFNUMxMUUyQUVDMDQyNTA1OTExRUEzMi9vS01pU3RESUt6 LWFZdk5IcktQNVJkc0k4ckEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfj0n05Qvx2LtN2aUfpkK7SQLKAq77GF7UaeSTDpAcRT9UriK6bhc4cOmGnF1 OnD2JJDh0J4wZisaqz1IJYK9RHQ/95CfPdGFXaaH5nFMcyXmAqK+u+FM0vpn2PNM Su3m4elTp4lUwWYV4j3To9cFAfPDsKB72STCzzo64ej+tYjW4KfWYQf1YEA5FG2v YW1+xnZNWVSEUEJzPl2PfcyCFa296gtjvYr0cS6enK83x6uDCBc3alfxrK/pGRwt 1oZJqPU1o4zjhj+T/vnjJEwlm1kw/Ii49OASMik/tQsX4R2Pz8xKEzCShTQlcS+V Qm/+BUBmx+8iKyExcSk934Y+ug== -----END CERTIFICATE-----Generated at Tue Nov 3 01:41:47 2026 by rpki-client