$ rpki-client -vvvf rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft File: Ok9ILhJcCNuDBRbVGkot8eCqiso.mft (raw, json) Hash identifier: 37cHY0nK3JbWRbU7sAWrUJKlkuXg3J1azVaBSwpM3IU= Subject key identifier: 52:DA:E7:96:AB:05:65:76:9D:E3:6B:F0:3E:53:7E:65:11:55:A9:25 Authority key identifier: 3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA Certificate issuer: /CN=A918C158/serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Certificate serial: 0B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft Manifest number: 0B4C Signing time: Sun 04 Oct 2026 19:16:55 +0000 Manifest this update: Sun 04 Oct 2026 19:16:54 +0000 Manifest next update: Sun 11 Oct 2026 19:16:54 +0000 Files and hashes: 1: Ok9ILhJcCNuDBRbVGkot8eCqiso.crl (hash: FylbicnPvAHcxpPr8Bmu7QrEFztLb72zy6eLKwr6YXw=) 2: F25A6266796A11EB82E0EE24C4F9AE02.roa (hash: gg5YRxm/OG8ParGdDVWKapchKMYooC3n6Om94oqfGGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 19:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2900 (0xb54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C158, serialNumber=3A4F482E125C08DB830516D51A4A2DF1E0AA8ACA Validity Not Before: Oct 4 19:16:54 2026 GMT Not After : Oct 11 19:16:54 2026 GMT Subject: CN=6ac2a627-579d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:4d:6f:3e:70:c7:ea:be:52:ce:2f:3f:fc: 89:fe:df:f2:2e:05:98:0e:9b:93:1e:36:da:30:49: 1b:4b:5c:7f:c4:7b:0c:52:df:31:4f:49:87:2a:67: e9:21:26:17:26:01:c7:60:95:a5:c2:28:02:30:5c: 85:d1:3a:82:f1:d6:00:b9:44:2a:22:51:fc:6c:97: 26:d0:08:78:20:da:48:2c:52:01:da:0b:46:8a:ed: 90:f1:89:2b:02:0f:30:d8:24:f3:6e:2f:f7:a2:fd: 65:a3:f4:f5:6f:96:5d:91:3e:d4:56:a9:dd:2c:95: 42:59:df:45:2e:5d:7d:b0:d3:4a:90:5b:64:41:d1: 5a:0c:38:ac:57:dc:bd:70:b3:91:45:df:15:12:b8: 5b:76:f2:e5:55:f7:bf:8d:7a:22:86:3a:67:65:b4: 9c:70:5f:78:6f:c5:37:af:3d:aa:b6:af:77:79:30: ff:3b:83:12:48:74:de:2d:25:de:61:82:01:ac:37: fd:31:b9:1b:a5:97:8a:2d:fa:75:4a:14:91:c6:05: 1c:78:01:7b:71:88:1d:c6:d1:77:7d:eb:f3:1d:ad: c3:bc:82:f1:26:dd:38:62:bc:ad:96:cc:eb:fe:09: 62:e9:2a:1b:a9:74:80:7c:80:3c:47:ae:4f:22:ec: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DA:E7:96:AB:05:65:76:9D:E3:6B:F0:3E:53:7E:65:11:55:A9:25 X509v3 Authority Key Identifier: keyid:3A:4F:48:2E:12:5C:08:DB:83:05:16:D5:1A:4A:2D:F1:E0:AA:8A:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ok9ILhJcCNuDBRbVGkot8eCqiso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C158/AE51D802673B11EA99B2E556C4F9AE02/Ok9ILhJcCNuDBRbVGkot8eCqiso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:df:26:cf:df:6c:09:82:3a:4c:79:23:c7:1d:f6:c4:59:8c: da:81:f4:79:8e:09:93:cc:fa:8c:2a:03:e7:20:51:80:4b:9d: ba:41:e8:81:bd:17:f2:4c:03:5f:98:ea:ee:0d:16:17:d9:1b: ab:40:2f:dc:fa:a6:9b:26:39:f0:ab:39:55:29:d7:ad:62:f8: 7c:53:ee:ef:3b:02:93:df:8a:b6:ab:e6:e6:89:48:39:89:32: ad:b1:9b:ad:d8:a6:7b:33:58:0d:0d:55:de:9a:ff:66:8c:47: 0d:90:8d:d2:fa:ff:58:1b:dd:2c:9e:77:17:b7:7c:07:bc:db: 8d:10:32:f5:b0:db:3c:6b:61:55:5d:90:82:4f:69:4c:2b:b2: 3a:e4:88:76:d4:ae:eb:72:9b:a6:99:7b:60:c0:59:45:e1:e9: 96:7f:12:26:01:56:95:32:b1:85:cd:0f:3f:b4:56:3f:8e:5e: 2b:0e:5f:f1:d5:76:da:a4:6a:e5:66:df:17:2e:02:a4:ab:56: d2:c7:09:db:56:03:5f:11:79:52:86:57:7d:32:58:50:ce:c7: 9a:ee:b0:18:03:bc:0d:74:45:a1:44:9d:b4:2f:e2:49:6d:69: 85:ea:4e:64:6b:27:09:21:e1:d8:28:1c:a4:82:ff:92:8a:c9: 6d:aa:6b:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMxNTgxMTAvBgNVBAUTKDNBNEY0ODJFMTI1QzA4REI4MzA1MTZENTFBNEEyREYx RTBBQThBQ0EwHhcNMjYxMDA0MTkxNjU0WhcNMjYxMDExMTkxNjU0WjAYMRYwFAYD VQQDEw02YWMyYTYyNy01NzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIhNbz5wx+q+Us4vP/yJ/t/yLgWYDpuTHjbaMEkbS1x/xHsMUt8xT0mHKmfp ISYXJgHHYJWlwigCMFyF0TqC8dYAuUQqIlH8bJcm0Ah4INpILFIB2gtGiu2Q8Ykr Ag8w2CTzbi/3ov1lo/T1b5ZdkT7UVqndLJVCWd9FLl19sNNKkFtkQdFaDDisV9y9 cLORRd8VErhbdvLlVfe/jXoihjpnZbSccF94b8U3rz2qtq93eTD/O4MSSHTeLSXe YYIBrDf9MbkbpZeKLfp1ShSRxgUceAF7cYgdxtF3fevzHa3DvILxJt04Yrytlszr /gli6SobqXSAfIA8R65PIuyDwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFLa55ar BWV2neNr8D5TfmURVaklMB8GA1UdIwQYMBaAFDpPSC4SXAjbgwUW1RpKLfHgqorK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzE1OC9BRTUxRDgwMjY3 M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NOdURCUmJWR2tvdDhlQ3Fp c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09rOUlMaEpjQ051REJSYlZHa290OGVDcWlzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzE1OC9BRTUxRDgwMjY3M0IxMUVBOTlCMkU1NTZDNEY5QUUwMi9PazlJTGhKY0NO dURCUmJWR2tvdDhlQ3Fpc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE98mz99sCYI6THkjxx32xFmM2oH0eY4Jk8z6jCoD5yBRgEudukHogb0X8kwD X5jq7g0WF9kbq0Av3PqmmyY58Ks5VSnXrWL4fFPu7zsCk9+Ktqvm5olIOYkyrbGb rdimezNYDQ1V3pr/ZoxHDZCN0vr/WBvdLJ53F7d8B7zbjRAy9bDbPGthVV2Qgk9p TCuyOuSIdtSu63Kbppl7YMBZReHpln8SJgFWlTKxhc0PP7RWP45eKw5f8dV22qRq 5WbfFy4CpKtW0scJ21YDXxF5UoZXfTJYUM7Hmu6wGAO8DXRFoUSdtC/iSW1phepO ZGsnCSHh2CgcpIL/korJbapr3A== -----END CERTIFICATE-----Generated at Tue Oct 6 12:57:20 2026 by rpki-client