$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft File: oaOkEem3sQig0u6lKRHrNHEHOj4.mft (raw, json) Hash identifier: X5PK0mlPTFnK3HnMjoiO3p4qePRIVK/H2QEmT6S/bcc= Subject key identifier: D0:23:15:01:E2:79:91:F8:F2:78:5A:44:CD:38:B7:3C:8B:B9:36:CD Authority key identifier: A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E Certificate issuer: /CN=A9158D68/serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft Manifest number: 03 Signing time: Wed 19 Aug 2026 10:00:55 +0000 Manifest this update: Wed 19 Aug 2026 10:00:54 +0000 Manifest next update: Wed 26 Aug 2026 10:00:54 +0000 Files and hashes: 1: oaOkEem3sQig0u6lKRHrNHEHOj4.crl (hash: ncSTrqAwgKiFzIsd7nyX3STpeGRu9OroRq5GENWNbiE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.crl rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D68, serialNumber=A1A3A411E9B7B108A0D2EEA52911EB3471073A3E Validity Not Before: Aug 19 10:00:54 2026 GMT Not After : Aug 26 10:00:54 2026 GMT Subject: CN=6a857ed6-34ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:a3:be:d5:1b:a9:bb:c6:03:ef:d9:02:65: 0d:f2:fe:78:78:bd:fb:dd:00:6b:11:5c:7a:ad:a2: b9:cb:26:e2:13:16:35:14:7c:ae:0d:e2:74:3a:9c: 50:89:1a:91:75:fa:d2:2d:0b:a4:3f:e2:c8:0a:af: 37:14:ed:d2:95:16:5b:02:cb:f5:77:d7:37:53:5e: 8f:82:fd:58:f8:72:d5:7f:0d:61:53:e2:17:1c:08: ab:b1:2e:7d:f9:20:ea:81:19:ff:36:aa:93:d0:1a: db:b5:f4:40:c6:4a:d7:0e:86:5a:d4:15:e6:82:27: 50:ca:ab:56:41:57:7a:60:4d:a6:62:f3:ee:c9:a8: 11:cb:a1:63:57:56:a9:99:8d:30:54:66:78:c3:78: 40:9d:ad:8a:b8:fd:c0:66:41:af:60:c2:20:d6:31: 89:c6:42:e6:a4:0f:3c:6a:3a:43:15:20:4e:e8:b0: 76:61:c2:a2:5e:8d:fb:70:0c:05:61:fe:43:67:c1: 8c:5f:3e:b8:7a:e0:eb:ac:66:77:81:a0:2c:b1:d4: 26:f1:85:1b:68:e2:db:86:49:63:25:a1:b0:24:49: 97:24:96:2b:b6:9c:19:ec:6b:2c:b7:8b:1b:dc:0f: e1:4b:48:32:7a:e4:9d:da:f8:7e:1f:e6:01:af:de: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:15:01:E2:79:91:F8:F2:78:5A:44:CD:38:B7:3C:8B:B9:36:CD X509v3 Authority Key Identifier: keyid:A1:A3:A4:11:E9:B7:B1:08:A0:D2:EE:A5:29:11:EB:34:71:07:3A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oaOkEem3sQig0u6lKRHrNHEHOj4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D68/7A437CC09AD111F1892BEF524C11F970/oaOkEem3sQig0u6lKRHrNHEHOj4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:34:49:aa:db:4d:cc:11:dd:f0:8d:b7:ed:19:e0:90:07:0c: 1f:58:8d:dc:28:0c:36:c4:4e:96:fa:2c:e3:6d:15:15:fa:a3: bc:ff:af:94:92:26:51:ad:3f:15:76:6f:c6:6f:06:80:81:f6: 73:eb:7b:24:90:4b:ab:14:b6:49:05:0a:53:e1:8a:59:f1:7e: 07:d2:12:07:b9:17:bd:0e:87:c6:83:db:00:3c:c5:33:07:d9: f4:64:86:fc:ba:ef:a1:11:66:cd:94:73:66:b2:e9:7a:b6:63: 42:77:0a:84:13:0d:25:17:1b:d9:80:d3:2a:13:86:67:3b:74: 73:d8:0b:05:b2:ad:d3:30:9f:05:ef:7e:38:ba:b2:a8:d1:ac: a1:eb:bf:37:3b:4c:8c:14:30:68:75:3e:3c:b2:f0:06:9c:66: 0b:06:99:be:96:50:ce:fa:17:7b:03:af:00:7b:5c:97:d4:de: b4:b2:ca:0c:5b:11:f0:9d:e2:51:24:94:5c:7d:57:bb:28:52: c5:7d:08:7f:5d:1d:8d:3f:31:39:14:3e:5d:f3:4e:05:9d:09: 41:a9:f4:ba:45:8d:40:16:b8:fe:fb:1d:e5:4c:7a:20:90:7a: ed:c8:7b:bc:54:44:86:89:63:46:bd:c3:87:fc:75:32:5b:31: 81:a0:05:ad -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 OEQ2ODExMC8GA1UEBRMoQTFBM0E0MTFFOUI3QjEwOEEwRDJFRUE1MjkxMUVCMzQ3 MTA3M0EzRTAeFw0yNjA4MTkxMDAwNTRaFw0yNjA4MjYxMDAwNTRaMBgxFjAUBgNV BAMTDTZhODU3ZWQ2LTM0YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYHKO+1Rupu8YD79kCZQ3y/nh4vfvdAGsRXHqtornLJuITFjUUfK4N4nQ6nFCJ GpF1+tItC6Q/4sgKrzcU7dKVFlsCy/V31zdTXo+C/Vj4ctV/DWFT4hccCKuxLn35 IOqBGf82qpPQGtu19EDGStcOhlrUFeaCJ1DKq1ZBV3pgTaZi8+7JqBHLoWNXVqmZ jTBUZnjDeECdrYq4/cBmQa9gwiDWMYnGQuakDzxqOkMVIE7osHZhwqJejftwDAVh /kNnwYxfPrh64OusZneBoCyx1CbxhRto4tuGSWMlobAkSZckliu2nBnsayy3ixvc D+FLSDJ65J3a+H4f5gGv3qi/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0CMVAeJ5 kfjyeFpEzTi3PIu5Ns0wHwYDVR0jBBgwFoAUoaOkEem3sQig0u6lKRHrNHEHOj4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RDY4LzdBNDM3Q0MwOUFE MTExRjE4OTJCRUY1MjRDMTFGOTcwL29hT2tFZW0zc1FpZzB1NmxLUkhyTkhFSE9q NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvb2FPa0VlbTNzUWlnMHU2bEtSSHJOSEVIT2o0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 RDY4LzdBNDM3Q0MwOUFEMTExRjE4OTJCRUY1MjRDMTFGOTcwL29hT2tFZW0zc1Fp ZzB1NmxLUkhyTkhFSE9qNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCONEmq203MEd3wjbftGeCQBwwfWI3cKAw2xE6W+izjbRUV+qO8/6+UkiZRrT8V dm/GbwaAgfZz63skkEurFLZJBQpT4YpZ8X4H0hIHuRe9DofGg9sAPMUzB9n0ZIb8 uu+hEWbNlHNmsul6tmNCdwqEEw0lFxvZgNMqE4ZnO3Rz2AsFsq3TMJ8F7344urKo 0ayh6783O0yMFDBodT48svAGnGYLBpm+llDO+hd7A68Ae1yX1N60ssoMWxHwneJR JJRcfVe7KFLFfQh/XR2NPzE5FD5d804FnQlBqfS6RY1AFrj++x3lTHogkHrtyHu8 VESGiWNGvcOH/HUyWzGBoAWt -----END CERTIFICATE-----Generated at Wed Aug 19 11:42:00 2026 by rpki-client