$ rpki-client -vvvf rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft File: bOklSpy_oHBCJDc13OT79-VGEWY.mft (raw, json) Hash identifier: FHTyMVr4aWCxYADvhfeqGGHkODsEERFFT/Q2jgYHZKM= Subject key identifier: 53:79:17:BC:BE:C7:69:CF:97:AD:6D:55:F7:57:4E:69:67:EB:F9:82 Authority key identifier: 6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 Certificate issuer: /CN=A91454F3/serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Certificate serial: 0D46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft Manifest number: 0D3D Signing time: Tue 06 Oct 2026 18:16:22 +0000 Manifest this update: Tue 06 Oct 2026 18:16:22 +0000 Manifest next update: Tue 13 Oct 2026 18:16:22 +0000 Files and hashes: 1: bOklSpy_oHBCJDc13OT79-VGEWY.crl (hash: 9Lw2cNiM7cYOiDpWBDTpmWXJCQfhxbrQpO5D3iZfJCg=) 2: 9DDA09EC05DC11EA9B6B0560C4F9AE02.roa (hash: jOASJy08cQtiHT2anaDk0d4CR9FN0kGkmWrO2dstaFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 18:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3398 (0xd46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454F3, serialNumber=6CE9254A9CBFA07042243735DCE4FBF7E5461166 Validity Not Before: Oct 6 18:16:22 2026 GMT Not After : Oct 13 18:16:22 2026 GMT Subject: CN=6ac53af6-d54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:0c:20:f6:5f:17:8e:91:ce:1c:d5:46:d8: 24:42:1a:11:37:bd:f8:96:e2:5e:2e:f3:a8:89:c5: 96:03:05:ab:e7:7b:11:1c:16:70:d2:93:0c:01:f1: 9d:8d:39:e6:78:f9:97:2c:40:55:a0:76:70:a4:3c: c4:00:24:3c:b3:ca:d0:1c:b3:69:14:bd:91:28:9b: e7:2e:1c:ab:17:1d:be:03:a1:2c:88:65:51:b0:ea: 22:eb:d4:e7:4b:5c:20:20:31:de:a9:b5:7c:02:60: d9:3d:75:10:9c:26:f2:87:4c:b9:f5:d9:e4:76:5f: b0:36:d4:da:cd:0a:5d:fb:88:96:67:79:bb:1d:cd: f8:7c:e6:e5:ed:d4:c7:9c:02:55:4e:2c:c2:59:1f: 80:27:d7:14:00:71:6e:3f:a5:84:6c:17:8b:c9:09: f1:db:99:12:4d:6c:4b:01:6e:e3:02:10:47:9f:1f: 3d:0e:4d:da:59:b8:f8:1f:d5:42:88:cf:a4:7a:33: b1:ed:ba:ca:13:4f:c0:52:70:0f:35:cd:22:15:df: 9b:97:4d:01:8a:7e:c8:90:2a:95:ea:0f:ad:86:92: ac:69:c8:34:2a:11:f9:50:89:f3:70:2d:81:75:a6: 55:ba:04:d0:e5:eb:ac:ec:98:ab:4c:a1:00:8f:b7: 48:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:79:17:BC:BE:C7:69:CF:97:AD:6D:55:F7:57:4E:69:67:EB:F9:82 X509v3 Authority Key Identifier: keyid:6C:E9:25:4A:9C:BF:A0:70:42:24:37:35:DC:E4:FB:F7:E5:46:11:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOklSpy_oHBCJDc13OT79-VGEWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454F3/1EF7866805DC11EA9743BA5FC4F9AE02/bOklSpy_oHBCJDc13OT79-VGEWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ab:c4:70:dd:57:69:44:ca:c0:12:eb:d4:9f:83:6f:13:40: a3:ee:73:c7:d2:cf:b1:3c:ac:07:86:03:7e:19:6a:2a:54:9b: 97:5d:50:ba:ad:3a:d0:a8:87:cd:b7:2c:b9:53:59:f8:e6:d9: dd:8b:30:0b:58:44:2b:8a:f3:ce:67:2c:3d:ae:7d:d7:f6:52: 19:7e:63:b7:fd:35:3b:3c:3c:bb:d0:b9:fb:ec:3d:c6:9a:96: 80:9d:45:04:05:46:0b:d7:23:5e:89:20:8b:f4:1e:12:b4:25: 31:67:ed:9b:53:bb:f5:a5:54:35:98:a7:d9:22:d6:de:d6:cf: 3f:09:8a:cb:8d:f7:2d:66:77:4d:81:2e:23:26:7a:b3:17:f2: 96:5a:51:7b:95:f9:9d:89:d7:f5:9c:18:c8:bd:38:ae:ac:17: be:45:17:15:7b:16:79:52:3d:b5:7d:54:53:1f:9a:5e:6d:15: 29:14:2e:b2:b5:a8:ae:15:dd:15:97:ef:14:95:80:32:0f:dc: 84:aa:18:08:9e:94:88:9d:76:3f:1c:35:2f:f7:a8:ae:b1:8b: 64:e7:84:a6:da:17:b9:c6:da:dd:29:0f:18:b4:4a:17:84:99: b4:39:d1:23:81:f3:d6:30:30:d5:6b:15:f6:f1:f7:c8:65:d4: 59:f4:78:8d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0RjMxMTAvBgNVBAUTKDZDRTkyNTRBOUNCRkEwNzA0MjI0MzczNURDRTRGQkY3 RTU0NjExNjYwHhcNMjYxMDA2MTgxNjIyWhcNMjYxMDEzMTgxNjIyWjAYMRYwFAYD VQQDEw02YWM1M2FmNi1kNTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5NgMIPZfF46RzhzVRtgkQhoRN734luJeLvOoicWWAwWr53sRHBZw0pMMAfGd jTnmePmXLEBVoHZwpDzEACQ8s8rQHLNpFL2RKJvnLhyrFx2+A6EsiGVRsOoi69Tn S1wgIDHeqbV8AmDZPXUQnCbyh0y59dnkdl+wNtTazQpd+4iWZ3m7Hc34fObl7dTH nAJVTizCWR+AJ9cUAHFuP6WEbBeLyQnx25kSTWxLAW7jAhBHnx89Dk3aWbj4H9VC iM+kejOx7brKE0/AUnAPNc0iFd+bl00Bin7IkCqV6g+thpKsacg0KhH5UInzcC2B daZVugTQ5eus7JirTKEAj7dIlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFN5F7y+ x2nPl61tVfdXTmln6/mCMB8GA1UdIwQYMBaAFGzpJUqcv6BwQiQ3Ndzk+/flRhFm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRGMy8xRUY3ODY2ODA1 REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29IQkNKRGMxM09UNzktVkdF V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPa2xTcHlfb0hCQ0pEYzEzT1Q3OS1WR0VXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRGMy8xRUY3ODY2ODA1REMxMUVBOTc0M0JBNUZDNEY5QUUwMi9iT2tsU3B5X29I QkNKRGMxM09UNzktVkdFV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGKvEcN1XaUTKwBLr1J+DbxNAo+5zx9LPsTysB4YDfhlqKlSbl11Quq060KiH zbcsuVNZ+ObZ3YswC1hEK4rzzmcsPa591/ZSGX5jt/01Ozw8u9C5++w9xpqWgJ1F BAVGC9cjXokgi/QeErQlMWftm1O79aVUNZin2SLW3tbPPwmKy433LWZ3TYEuIyZ6 sxfyllpRe5X5nYnX9ZwYyL04rqwXvkUXFXsWeVI9tX1UUx+aXm0VKRQusrWorhXd FZfvFJWAMg/chKoYCJ6UiJ12Pxw1L/eorrGLZOeEptoXucba3SkPGLRKF4SZtDnR I4Hz1jAw1WsV9vH3yGXUWfR4jQ== -----END CERTIFICATE-----Generated at Thu Oct 8 10:58:06 2026 by rpki-client