$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft File: ok2WODNZy0lmoVuakGkT61RWZXs.mft (raw, json) Hash identifier: YZi5cM7EhkltEMtpcV3ERwY80XfJyxnTcVGMAtYKj5Q= Subject key identifier: 95:62:D0:D2:54:EF:0B:3C:05:EB:09:4D:FC:0C:20:6B:F2:9D:87:82 Authority key identifier: A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B Certificate issuer: /CN=A91C9C03/serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft Manifest number: AA Signing time: Sun 05 Apr 2026 06:39:39 +0000 Manifest this update: Sun 05 Apr 2026 06:39:39 +0000 Manifest next update: Sun 12 Apr 2026 06:39:39 +0000 Files and hashes: 1: ok2WODNZy0lmoVuakGkT61RWZXs.crl (hash: XLjFtQ0J389rhD/FupdMMeffTGlkeRJwyNkbNF/NohU=) 2: 19088D04716211F0A531A51FC4F9AE02.roa (hash: oHwH6kQQYXdRLzAcniMfc3jPRXLCLgsiuxhNwFmn1Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9C03, serialNumber=A24D96383359CB4966A15B9A906913EB5456657B Validity Not Before: Apr 5 06:39:39 2026 GMT Not After : Apr 12 06:39:39 2026 GMT Subject: CN=69d203ab-c334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:74:9f:6f:d7:13:c9:85:d1:c1:11:cb:d3: d6:13:eb:42:61:71:38:26:26:16:89:4c:ea:42:ac: be:2c:0d:b3:16:e2:a1:54:78:0f:aa:da:b1:22:13: c6:1d:76:47:1c:74:ca:55:47:a8:c5:32:47:34:c9: 5c:08:49:91:ae:6e:7a:44:c6:30:b6:04:f4:e3:ab: 83:7c:20:c8:59:4c:c5:0c:02:1a:f4:b4:29:fa:a7: e0:86:52:79:98:c1:5b:39:a8:96:dd:f1:43:d8:97: 2a:56:3f:5c:a4:53:9e:2a:db:71:18:7b:3f:bc:d1: 63:ad:9f:6d:2c:62:99:11:1b:a3:9b:98:75:c9:33: 5a:9a:65:d8:d1:8c:3f:37:7b:4c:c0:46:1b:a9:7b: f2:61:48:7a:55:a2:5b:36:bf:63:bc:30:b6:68:b8: 33:2a:fa:2b:89:62:45:40:d1:e2:08:ef:4f:8c:a8: ae:03:71:3f:5d:94:c2:6a:f2:a6:6b:94:05:0f:47: 57:54:a5:4c:d3:21:c0:f7:0b:9f:c5:be:bc:bf:02: cf:70:8f:4a:7a:9f:e9:cb:de:96:72:10:64:ee:b1: 90:ed:bb:ea:27:12:29:94:06:1f:e6:af:34:03:65: 6b:90:93:e6:18:5d:93:4f:82:25:13:52:a6:62:2f: 48:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:62:D0:D2:54:EF:0B:3C:05:EB:09:4D:FC:0C:20:6B:F2:9D:87:82 X509v3 Authority Key Identifier: keyid:A2:4D:96:38:33:59:CB:49:66:A1:5B:9A:90:69:13:EB:54:56:65:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ok2WODNZy0lmoVuakGkT61RWZXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9C03/37D18A1639A311F0BAD72C3CC4F9AE02/ok2WODNZy0lmoVuakGkT61RWZXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d7:c9:53:1a:af:d1:eb:ac:f2:60:22:71:aa:2d:4a:2d:a3: e4:6d:6a:70:45:e3:61:f5:a4:66:3d:dd:42:d4:6a:05:a6:39: 90:64:9d:2b:3d:f2:d1:c5:64:b8:bf:2e:a8:ba:28:b9:c4:02: 91:c2:65:41:77:db:11:cf:2d:60:ee:01:c4:d2:7e:75:b2:48: cf:5b:e0:b6:60:2a:50:c1:1e:6e:7b:5d:ca:ce:8b:a3:95:0f: 8e:16:ba:df:18:f0:56:9e:c6:25:19:b2:67:46:36:08:14:b3: 2b:45:64:6e:ac:50:a8:f6:1a:4d:b1:c4:28:cc:a5:95:fc:ce: 5c:de:5b:26:25:0f:1a:4e:b9:e0:4c:71:12:88:06:49:5c:2c: 13:35:10:93:da:4a:79:67:db:9d:69:0c:68:63:7b:b0:2c:1d: fd:4a:73:51:5b:92:1e:1a:e3:5d:fa:8d:81:e9:b6:3b:b8:f3: ff:6f:50:6d:47:1f:ed:30:7f:b2:da:19:e2:8f:6f:0b:23:2a: 19:9f:af:14:14:11:4d:87:bb:0b:39:30:d2:10:d7:31:ea:c8: 3a:bb:1a:ee:e6:c0:43:90:87:eb:c4:45:60:50:a5:13:2c:e7: 09:e2:29:58:7a:66:a4:30:be:01:60:11:53:17:b4:31:d3:2a: 89:5f:65:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlDMDMxMTAvBgNVBAUTKEEyNEQ5NjM4MzM1OUNCNDk2NkExNUI5QTkwNjkxM0VC NTQ1NjY1N0IwHhcNMjYwNDA1MDYzOTM5WhcNMjYwNDEyMDYzOTM5WjAYMRYwFAYD VQQDEw02OWQyMDNhYi1jMzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvrR0n2/XE8mF0cERy9PWE+tCYXE4JiYWiUzqQqy+LA2zFuKhVHgPqtqxIhPG HXZHHHTKVUeoxTJHNMlcCEmRrm56RMYwtgT046uDfCDIWUzFDAIa9LQp+qfghlJ5 mMFbOaiW3fFD2JcqVj9cpFOeKttxGHs/vNFjrZ9tLGKZERujm5h1yTNammXY0Yw/ N3tMwEYbqXvyYUh6VaJbNr9jvDC2aLgzKvoriWJFQNHiCO9PjKiuA3E/XZTCavKm a5QFD0dXVKVM0yHA9wufxb68vwLPcI9Kep/py96WchBk7rGQ7bvqJxIplAYf5q80 A2VrkJPmGF2TT4IlE1KmYi9I6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVi0NJU 7ws8BesJTfwMIGvynYeCMB8GA1UdIwQYMBaAFKJNljgzWctJZqFbmpBpE+tUVmV7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUMwMy8zN0QxOEExNjM5 QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkwbG1vVnVha0drVDYxUlda WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29rMldPRE5aeTBsbW9WdWFrR2tUNjFSV1pYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUMwMy8zN0QxOEExNjM5QTMxMUYwQkFENzJDM0NDNEY5QUUwMi9vazJXT0ROWnkw bG1vVnVha0drVDYxUldaWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAONfJUxqv0eus8mAicaotSi2j5G1qcEXjYfWkZj3dQtRqBaY5kGSdKz3y0cVk uL8uqLooucQCkcJlQXfbEc8tYO4BxNJ+dbJIz1vgtmAqUMEebntdys6Lo5UPjha6 3xjwVp7GJRmyZ0Y2CBSzK0VkbqxQqPYaTbHEKMyllfzOXN5bJiUPGk654ExxEogG SVwsEzUQk9pKeWfbnWkMaGN7sCwd/UpzUVuSHhrjXfqNgem2O7jz/29QbUcf7TB/ stoZ4o9vCyMqGZ+vFBQRTYe7Czkw0hDXMerIOrsa7ubAQ5CH68RFYFClEyznCeIp WHpmpDC+AWARUxe0MdMqiV9lMQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:13 2026 by rpki-client